last executing test programs: 4.90667901s ago: executing program 3 (id=1996): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000900)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048880}, 0x14) write$cgroup_int(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_tracing={0x1a, 0x2f, &(0x7f0000001180)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff20ce}}, @generic={0x37, 0x8, 0xd, 0x1ff, 0x3}], &(0x7f0000000000)='GPL\x00', 0x3, 0xb, &(0x7f0000001000)=""/11, 0x41000, 0x15, '\x00', 0x0, 0x18, r4, 0x8, &(0x7f0000001080)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000010c0)={0x2, 0x9, 0x6, 0xf71e}, 0x10, 0xd1b, r3, 0x6, &(0x7f0000001100)=[r3], &(0x7f0000001300)=[{0x4, 0x3, 0x6, 0x8}, {0x5, 0x1, 0x4, 0x3}, {0x3, 0x2, 0xf, 0x2}, {0x5, 0x4, 0x4, 0xb}, {0x2, 0x1, 0xa, 0x90416513873035b3}, {0x4, 0x1, 0x3, 0x3}], 0x10, 0x9}, 0x94) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4091, 0xffb}], 0x1}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) readv(r0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) (async) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000900)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000) (async) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048880}, 0x14) (async) write$cgroup_int(r4, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_tracing={0x1a, 0x2f, &(0x7f0000001180)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff20ce}}, @generic={0x37, 0x8, 0xd, 0x1ff, 0x3}], &(0x7f0000000000)='GPL\x00', 0x3, 0xb, &(0x7f0000001000)=""/11, 0x41000, 0x15, '\x00', 0x0, 0x18, r4, 0x8, &(0x7f0000001080)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000010c0)={0x2, 0x9, 0x6, 0xf71e}, 0x10, 0xd1b, r3, 0x6, &(0x7f0000001100)=[r3], &(0x7f0000001300)=[{0x4, 0x3, 0x6, 0x8}, {0x5, 0x1, 0x4, 0x3}, {0x3, 0x2, 0xf, 0x2}, {0x5, 0x4, 0x4, 0xb}, {0x2, 0x1, 0xa, 0x90416513873035b3}, {0x4, 0x1, 0x3, 0x3}], 0x10, 0x9}, 0x94) (async) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4091, 0xffb}], 0x1}, 0x40000100) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) 3.386480935s ago: executing program 0 (id=2008): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) (async) close(r1) 3.208761226s ago: executing program 0 (id=2010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x20008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r9, &(0x7f0000000100), 0xa, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r10 = socket$netlink(0x10, 0x3, 0x6) writev(r10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x13, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0xb}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007100000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.664875715s ago: executing program 3 (id=2014): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x90, 0x10, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x1000}, [@IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_vlan\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x61cdb5639dc2441c}, 0x10) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$isdn(0x22, 0x3, 0x10) bind$isdn(r3, &(0x7f0000000200)={0x22, 0x3, 0x5, 0x3, 0xe0}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x41858150e87440cb, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r4, 0x264b1000) (async) socket$isdn(0x22, 0x3, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x5, 0x9, 0x9}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000003c0)={r6, 0x4, 0x6}, 0x8) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_getrule={0x1c, 0x22, 0x100, 0x70bd26, 0x25dfdbfd, {0x2, 0x80, 0x14, 0x1, 0xc0, 0x0, 0x0, 0x0, 0x10003}, ["", "", "", "", "", ""]}, 0x1c}}, 0x1) close(r5) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x640, 0x0) write$tun(r7, &(0x7f0000000540)={@void, @void, @ipv4=@udp={{0x27, 0x4, 0x2, 0x11, 0xac, 0x65, 0x0, 0x81, 0x11, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x3c, 0x9c, 0x3, 0xa, [{@broadcast, 0x7f}, {@local, 0x80}, {@multicast2, 0x7}, {@multicast1, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6}, {@loopback, 0x9}, {@broadcast, 0x9}]}, @rr={0x7, 0x1f, 0xf7, [@broadcast, @rand_addr=0x64010102, @multicast2, @multicast2, @remote, @empty, @multicast1]}, @lsrr={0x83, 0xf, 0xc9, [@broadcast, @multicast2, @empty]}, @noop, @end, @rr={0x7, 0xb, 0xb2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @end, @lsrr={0x83, 0xf, 0x4c, [@rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}]}}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, "8af870f9"}}}}, 0xac) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa4, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9815}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0xa4}}, 0x8001) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r8) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r9, 0x84, 0x78, &(0x7f00000007c0)=r6, 0x4) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$inet6(r9, &(0x7f0000000d40)={&(0x7f0000000800)={0xa, 0x4e20, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000840)="02272efc55564ca2b9656c85d44569961303088b14be6303a99292987808b12bd24e49c0c7c8c9c4d20c38130c0db632a00ed5bb4734995849743f543093eb2672ab5035091bd1034f22f2144914bd713c92e5063b1b626a4b6f1a9094408e96210fbd5205262326e783f35b7ef5758d23b89d884f7d3fac3ffadfee5f913f94ea4a503b9e316d000604469d0d0500f49ab25ee5d1e211dc715b131368868ae3028f", 0xa2}, {&(0x7f0000000900)="1a8a9452c3ba1c6c144f7c25830d690eb384ee9b7d871667dfb25a0277d7842d5726cdd06259bc9a4250a1b323749e5ae18b3f7d3ff3ea65da4ec9fc3b9cfcf0efae12105f941c6e38262c9ffd53da83de5a30fc4276f933dfd49eac072cbb426ea5442f09a307707120267228f6a0f6cdf323ef10e8db8a5f3dda8fcb6af3b73fba3978e43309405e017f5271cc86bcc91724e33680a16aacb86dbb919f245821e92ef2a7ca409db6879b78664665816ca9e9f43110b7c40fe82066e36803bf2e4a144df4c20b0dc2d0007483c2fe66c465", 0xd2}, {&(0x7f0000000a00)="8c6670a1f1a111e73019fd38b2b16dfc1f9a61634535d7240bb4ed299bb478b49fe7199be44f7272748a0bf11590cc2f581f5f5252b7c24791694d36165a08d32fb86b76c3092da0687278aae7cd9772a919473fdcfec44ffeb4fbc151cb714a6cf3a2dfd5664bcaaaa3b5357951cf9654f1adf903f3fded090d93d4efccca68fa6fec96e445d402cc7654fb81947f8746b8dba64e468b242a533006e94226212467485df003a2e40b156f87b0005b8c6080f386e8f5a2516f3f6786df409d62953772f8b37e7e8407664c93fdcf58a916cc859dd5ba", 0xd6}, {&(0x7f0000000b00)="373d53ffdcf1e092fc95c05989c2a7629cbccd0e634f61b7e5fd2ea6fc236f6f7dc22332f3a6e08d3b14beeda24fbd4389c62f8838d97dea997426d391b0e6a2784d9791fc26ad514f2e4c8ab8e0285a14cfbe2debd66bc8e8fbd60c21e15779b0a66e5b60ffe6bfed60eee973c67f999790715cfedefb2eaeade004e6c1cb28b8efb75626c8776109ab86d4c649158a9ce668c257d0b8e77af8a3d46f18a9b07c86c611eaace2aabd7838dd058265b6db281e68418f858566833c130ac9e16cda29d9ea1d11069eae978e0051be63a858aa57d4b9a57fdebfa998fea427168365f7fac62d3f4e76c65a414fe5303f4d5f2f1599f09f327f04", 0xf9}], 0x4, &(0x7f0000000c40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7fffffff}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x21, 0x10, 0x0, 0xdd, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, @dev={0xfe, 0x80, '\x00', 0x12}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @local, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @dstopts_2292={{0x40, 0x29, 0x4, {0xff, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x81, 0x3, [0x7f0a9038]}}]}}}], 0xf0}, 0x40) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000dc0)={'sit0\x00', &(0x7f0000000d80)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, 0x1b, 0x9}}) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x1, &(0x7f0000000e00)={0x2, {{0xa, 0x4e23, 0x3, @mcast1, 0x5}}, {{0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}}, 0x108) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000fc0)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10) 2.663300057s ago: executing program 4 (id=2015): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000240)=0xffffff7b, 0x4) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}}}, 0x10) unshare(0x6a040000) unshare(0x44000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000003800010326cc7002fadbdf25e1542c47"], 0x14}}, 0x40800) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4) listen(r4, 0x7fff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4) r6 = accept(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xffffffffffffff86, 0x4100, 0x0, 0x0) 2.518839121s ago: executing program 3 (id=2017): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0007023f3201"], 0x138) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x8, 0x0, 0x0}}, 0x10) 2.319119333s ago: executing program 0 (id=2020): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) pipe(&(0x7f0000000600)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x0, 0x1000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r6, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) splice(r4, 0x0, r5, 0x0, 0x1100000000f336, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000000c0000001831000001000000000000000000000018190000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185a00000b0000000000000000000000181a0000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000002c0)='GPL\x00', 0xd, 0x83, &(0x7f0000000380)=""/131, 0x40f00, 0x10, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000440)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x2, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r9, r10], &(0x7f0000000600)=[{0x0, 0x5, 0x0, 0xb}, {0x0, 0x1, 0x2, 0x7}], 0x10, 0x8001}, 0x94) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 2.290256235s ago: executing program 3 (id=2021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x4004805) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x2, 0x5, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfe3a) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r1, 0x0) listen(r3, 0x0) 1.91012229s ago: executing program 3 (id=2024): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000ad00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r0, @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f00000004c0)={0x1f, 0xd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x2}, 0xe) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0xa, 0x300) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x82, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x5, "91ec92"}]}]}}}}}}}, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000104830600000000000000000000009906"], 0x1c}}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000300)={'\x00', @link_local}) write$tun(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) socket$nl_route(0x10, 0x3, 0x0) 1.74713097s ago: executing program 4 (id=2028): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200101ae31c5ef6fbff9ef2ed11217f11d5b76bcea7c0429d"], 0x8) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000200)=0x7b8d, 0x4) (async) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x1c) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x3c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4a}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="58f76b8f1d400000975b4916f9edfadf84e76c35", @ANYRES32=r6, @ANYBLOB="00000000000000002000128008000100736974001400028006001000018000000800140008000000"], 0x40}}, 0x0) (async) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0xfe, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) pipe(&(0x7f0000000200)) r10 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r11, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r10], 0x38}}, 0x50) (async) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) 1.649908672s ago: executing program 2 (id=2029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000500)={0x34, r2, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x34}}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000970400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}}, 0x4004) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x5c, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000005) 1.52520961s ago: executing program 1 (id=2030): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0xd, @remote, 0x5}}, 0xb, 0x7, 0x6, 0x3, 0x0, 0x80000001, 0x64}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r1, 0x1000}, &(0x7f0000000240)=0x8) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000000)='wg0\x00') getsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f00000000c0), &(0x7f0000000040)=0x4) 1.523400572s ago: executing program 4 (id=2031): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4048040) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r4}, 0x99) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000600), &(0x7f0000000340)=@udp=r3, 0x1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000600), &(0x7f0000000340)=@udp=r3, 0x1}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080"], 0x24}}, 0x20008040) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080"], 0x24}}, 0x20008040) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x18) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001c0000001800018014000200626f6e645f736c6176655f3100000000"], 0x2c}}, 0x0) 1.418305616s ago: executing program 1 (id=2032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000023c0)=r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) r9 = socket(0x9, 0x807, 0xa) sendmsg$netlink(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000024c0)=ANY=[@ANYBLOB="1800000042000106000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="4aa450bb8869db4daf56830b457889a9512aee48efa55b8b4aca8fef0f82801872019d9d542f93568cf25b805c276512a17a8677a18288d07197420f26a7360fbe836892f054ec66f5e7436976a26860bea57183602342bcd46d3744d0827d7c97f54edecd3bc1cb3a19ab2859ebfc6f571ea6ab6c40cd40daa236f20ff7bcbd90f0bbfdd591651fe3829b7a01685225e147dc863bab4546fc6e35522bbc75d5d100897c1f8025fffa8b61bf2d4b5d67c6046c80ce5b67f9e2f29e4352353333cc"], 0x18}], 0x1}, 0x0) r10 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0) r11 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r11, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r11, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) recvmmsg$unix(r10, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/204, 0xcc}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002100)={0x77359400}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r7, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f00000020c0)={'pim6reg0\x00', {0x2, 0x0, @dev}}) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1.328379536s ago: executing program 0 (id=2033): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000030665000000000000000000000000005dda7b4d39122ff44ed5b6fe28196c2aaa131a9bf72c346f002b6c6e2240fcf0d28767f4523907608174ed7f099e08f870885ea8677ea0e5928b3bdf38f578185cf30db5fd2e96276d10ac1c34b9c7e5fe749470f46b026b553a"], 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x2a, 0x8, 0x4, 0xfffff0b4}, {0x2046, 0x7d, 0x3, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x55, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb810000000806ddd2e0dfe9f9962ed79ce3672fc3351f6f723ee65686a32a7f529f90160a2f371ab9a64c7e4b8f9e3cf21ed82276f8693b06bf9b0ee99caf52bef2572052647a8f91b8"], 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair(0x22, 0xa, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$isdn_base(0x22, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e000000680002800600030006000000060002"], 0xa4}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000180), 0x2b) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@local, @multicast1}, 0x10) unshare(0x6a040000) socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x2, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = socket(0x1, 0x4, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 1.272686212s ago: executing program 4 (id=2034): socket$kcm(0x2, 0x5, 0x84) (async) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0x8000009, 0x1}, {0x2, 0x0, 0x0, 0x1}], 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000dc0)={&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="f9", 0x1}], 0x1}, 0x263171b11b81c78f) (async) sendmsg$inet(r0, &(0x7f0000000dc0)={&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="f9", 0x1}], 0x1}, 0x263171b11b81c78f) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r4, 0x8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x13, r4, 0x91d92000) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x13, r4, 0x91d92000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [@call={0x85, 0x0, 0x0, 0xb5}], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x48}, 0x94) 1.063918929s ago: executing program 2 (id=2035): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7800, 0x0, 0x3, 0x2, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x68, 0x0, 0x66, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@rr={0x7, 0x1b, 0xde, [@remote, @empty, @empty, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0xe}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@deltclass={0x58, 0x29, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff3, 0x7}, {0xa, 0x10}, {0xe, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x10}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @TCA_RATE={0x6, 0x5, {0x0, 0xa}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x3d}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x4c040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', r1, 0x8001, 0x8000, 0x49, 0x1, {{0x10, 0x4, 0x3, 0x2, 0x40, 0x66, 0x0, 0x3, 0x2f, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x29, 0x2, [{0x6, 0x8, "3ed0f73574d1"}, {0x6, 0x10, "ca52d8b2b237a85cff8eaf585a50"}, {0x6, 0xb, "1e8e9b0c98d324a5da"}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x18c, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x2400c800}, 0x20000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000018c0)={&(0x7f0000000600)={0x12b8, r5, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x48}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1284, 0x111, 0x0, 0x1, {0x1280, 0x5, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x7f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x370}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x174, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xaf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x164, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x15c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x300, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xae0}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc0}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x76}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}]}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x42}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x13416c22}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1c8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1b8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x201}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}]}, {0x3b0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x84}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbb22}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x73b5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x28, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x4}, {0x284, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x912}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x12b8}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, r6, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000014) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000001d00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x840800}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b00)={0x19c, r7, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd353}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x76a}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe85}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a6}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffc0000}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4004844}, 0x4000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000001f00)={&(0x7f0000001d40), 0xc, &(0x7f0000001ec0)={&(0x7f0000001d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x98, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x1f, 0x6, "30c8a509b4224afeabd086865a85710fca9ea9af2e90ee22dbbd87"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x58, 0x6, "05a97fbdda4546884683e6a57fc24f6f0cea611d9a0d8e9764286b85b9cac5a6693a9c7a436df6000c197504f5adb8d098669e66d536f07419ee57d7f6c04065ce8d39506e57eeea4af480a6d58c39f8f32e3591"}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x11c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000041) r9 = accept(r2, &(0x7f0000001f40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000001fc0)=0x80) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000002000), &(0x7f0000002040)=0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(r9, &(0x7f0000002080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x3, 0x2, {0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7}}}, 0x3a) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f00000020c0)=0x1, 0x4) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000003240)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003200)={&(0x7f0000002140)={0x1084, r7, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1070, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x24000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "a8be8823809693a2b17971fd6ca9013a71ac61b442b63567fca84f320abf70"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1084}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000032c0), r10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r10, &(0x7f0000003380)={&(0x7f0000003280), 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x1c, r12, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003400), r9) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000003540)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003500)={&(0x7f0000003440)={0xbc, r13, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000003580)={r2, 0xb24a, 0x4305, 0xe5b}) bind$netlink(r14, &(0x7f00000035c0)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) r15 = syz_genetlink_get_family_id$gtp(&(0x7f0000003640), r11) sendmsg$GTP_CMD_NEWPDP(r14, &(0x7f0000003740)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x48, r15, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0xc010}, 0x40041) syz_genetlink_get_family_id$tipc(&(0x7f0000003780), r2) 943.725454ms ago: executing program 1 (id=2036): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001b00010000000000000000006401010100000000d20000000000000000000000000080000000ffff0a010101000000fbffffff7f0a0000b000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000f000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000020000000000000002000000000000000000000000000000020000000800000000000000000000004400080008000000000000000000000000000001000004"], 0xfc}}, 0x0) r2 = socket$kcm(0xa, 0x0, 0x106) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0xffffb3b5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x6}, {0x3, 0x1, 0x8, 0x5}], 0x10, 0xffffffff}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xdc) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) unshare(0x26020480) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180)={0x27, r10, 0x0, 0x6, 0x40, 0x80, "bdb5cdebab4fbc516aa94bb7623e542970cbee0d2bdae052b491fc225aaec996ea2d82dea83946a499406ae5d83c8dc6c5c5fadf2344fc35dcc5e839b267f3", 0x24}, 0x60) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) accept4$phonet_pipe(r0, 0x0, 0x0, 0x80800) 888.493309ms ago: executing program 2 (id=2037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = socket$inet6(0xa, 0x6, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x618, 0x0, 0x478, 0x338, 0x338, 0x338, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xd}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0xc, 0x93, 0x5, 0x9, 0x8, 0x22, 0x1000}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@rand_addr=0x64010101, 0x34, 0x1, 0x8001}}}, {{@ipv6={@mcast2, @private0, [0xffffff00, 0x0, 0xff000000, 0xff], [0xff, 0x0, 0xff, 0xffffffff], 'veth1_to_batadv\x00', 'ip6gretap0\x00', {}, {0xff}, 0x1d, 0x2, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@mcast1, @mcast1, [0x498b0bc77128997f, 0xffffffff, 0xff, 0xffffff00], [0xffffffff, 0x0, 0xff000000, 0xff], 'hsr0\x00', 'wg1\x00', {0xff}, {0xff}, 0x33, 0x9, 0x3, 0x79}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@mh={{0x28}, {"4995", 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@private1, 0x2d, 0x29, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x81, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000008f0000f5df3a672dfd8f6e49e5000000e6ffda41000018110000106e16ac2b06080b767441a79a461af05f0b962c3adc0b4c58f2ecc194b45b2e1ad1c70edb1446267f961b3f9d9e765f7c5cad6d13de", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000bc0)={0x0, 0x101, 0x7}, 0x8) r8 = openat$cgroup_ro(r7, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f00000000c0)=0x101, 0x12) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xffffffffffffff5a, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="67867834928b6de6af210b81fa615d1918000000000000000000000000000001850000004f00000080ffffffffffff00c8a55c1b93eec7b62303005a525f34cc"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r9, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 551.893966ms ago: executing program 1 (id=2038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000140)={0xe, @multicast2, 0x4e21, 0x0, 'sh\x00', 0x10, 0x0, 0x27}, 0x2c) r3 = socket$kcm(0x29, 0x2, 0x0) sendfile(r3, r1, &(0x7f0000000000)=0x2, 0x8e) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x10) 504.451108ms ago: executing program 2 (id=2039): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'syzkaller1\x00', {0x2, 0x4e22, @remote}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0xe4ab5e73dc0e3141) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 389.022255ms ago: executing program 1 (id=2040): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mm_page_alloc\x00', r0, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000500)='wlan1\x00', &(0x7f0000000100)=@random="6762d2020058448d", 0x8, 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115e000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mm_page_alloc\x00', r0, 0x0, 0x6}, 0x18) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000500)='wlan1\x00', &(0x7f0000000100)=@random="6762d2020058448d", 0x8, 0x2) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115e000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1}, 0x20) (async) 365.686289ms ago: executing program 3 (id=2041): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000045c0)={0x0, 0x7fff}, &(0x7f0000004600)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x64}}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0xc000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = accept4(r0, 0x0, &(0x7f0000000100), 0xc0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r7, &(0x7f00000055c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x20}}], 0x1, 0x4000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={r3, 0x2c, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x3a, @loopback}]}, &(0x7f0000000240)=0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000240001032dbd7000fcffffff0100000004004a"], 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x4008004) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x51}}) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@map=r9, 0xffffffffffffffff, 0x2f}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 322.333704ms ago: executing program 4 (id=2042): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x6, &(0x7f0000000bc0)=@framed={{}, [@exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x4, 0x8001}, &(0x7f0000000080)=0x8) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x5, 0xff, 0x0, 0x6, 0x3, 0x80000000, 0x3ff, 0x3, r3}, 0x20) 233.122472ms ago: executing program 0 (id=2043): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/35], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 222.811535ms ago: executing program 2 (id=2044): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000580)="6187558fb31c4e22464701173cfcce55c8da6f3fda4d4c4d037283c7d069a84e1e96db", 0x23}, {&(0x7f0000000700)="2f08e651257bed6b7d148d548f15453f6ee1aba13f854f2dd3c068451549a4c660df225f120aaff32d2fa7e0ee87be14d0adf37f15cd6620139a8b72e2658b6aadfc0a1d9560c98ece1a0dfdde5671a5941a3f2fb795fbcae6b587e1e33d8b3f6ed65852790e799b04965d9ee6162c6cd9a6ccee3b87512142ddcdfc2bdb219cc158f2f3232afeddd1d938d4bf61be671f767ca9fb33e80fa5beb4a2dadcaadcfbd66a8d6b21cffb48ad", 0xaa}, {&(0x7f0000001b00)="821c6f7ffb3748aaac03c0d28c4824db819b5acf161a63bd9594ac3d2072bf108550d1e67e5c2e370d2e0c3e1625afcaf86c0f68eb48991a42eb3dcd1bf73d8b0cc1bfa6cff9f61aafe2af8d678baa1f1d87137d987b630af4ad09603a2fec84e87f82535f6d0862c3", 0x69}, {&(0x7f0000000600)="d0b55726f1a5d0009117c86a35223302d1d91f9d1ad7e428bbffcff4e6d8168b4dec8d8cb2e18fdf85093b6dc0455fde301beab8b8806b18c0d49032d763f40b369fcff5c6c461ba7282cd5813c719c2fc19f78f081316d7a047b0fe9795", 0x5e}, {&(0x7f0000001bc0)="10b76c5bb34c55e7a42aa5f395fae187cd982d4174064c5915a125c73aae709f2f79b6aa87f6ded691ea565ec6c959dba3d7e423ad8f711f554352cf4fd221104768f1ccaec6642122203dbbcc482a78746aab84978102b469eb07", 0x5b}], 0x5}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003580)="167f45a1ecaffdfb1bdc23bebec6b187998ccddc3f665d823d6bb2af8e", 0x1d}], 0x1}}], 0x2, 0xc004) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x1d, 0x4) 182.111838ms ago: executing program 1 (id=2045): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000104000000000000003dc269e1b7", @ANYRES32=0x0, @ANYBLOB="00020700400400001c0012800900010069706970000000000c0002800500090089000000"], 0x3c}}, 0x0) close(r7) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x58c2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 66.347189ms ago: executing program 2 (id=2046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40040001}, 0x4000004) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711002000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000001280)=""/247, &(0x7f0000000200)=0xf7) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)={'b', ' *:* ', 'r\x00'}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x42}}, {{0x0, 0x4, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x40, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) pwrite64(r8, &(0x7f0000000380)='k', 0x1, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000180001022cbd7000000000000a001400fe04ff06"], 0x1c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xb0, 0x1403, 0x300, 0x70bd26, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvtap0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x30008090) 4.923219ms ago: executing program 0 (id=2047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x3a, 0x3, 0x4) connect$rose(r5, &(0x7f0000000240)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x814) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf2d350000000800030036078f4f7806a80a0545fcfc285b41ee02382413df2c01d469a79b787179cd7ac87d46c51666b3df42501d5105a098c4f09ff7bcaecc39e452abd112961bd07b022ab9b28e359a39aa642443247e04173d83f1c8be017ff9c5", @ANYRES32=r10, @ANYBLOB="140055007d7348704503aa14c2b79fc6c421355f1400fe003faf5338171799b9766775e5606ecc9d0a00340001010101010100000600fd00010000000a00340002020202020200001400550020910d22a2434c320dd6dcf6b63013580a0034000202020202020000"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004045}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0xffe0, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4aa}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r12) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 4 (id=2048): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040), 0x4) r1 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r1, 0x29, 0x7, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 52732][ T6212] syzkaller0: entered promiscuous mode [ 110.475764][ T6212] syzkaller0: entered allmulticast mode [ 110.791824][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.800576][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.173340][ T6236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.233100][ T6236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.451131][ T1571] tipc: Node number set to 627292032 [ 111.646288][ T6210] tipc: Resetting bearer [ 111.667111][ T6210] tipc: Disabling bearer [ 111.688780][ T1336] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.746256][ T1336] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.780202][ T1336] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.831805][ T1336] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.190077][ T6280] IPv6: Can't replace route, no match found [ 112.238808][ T6280] bridge_slave_0: left allmulticast mode [ 112.247829][ T6280] bridge_slave_0: left promiscuous mode [ 112.254608][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.273959][ T6280] bridge_slave_1: left allmulticast mode [ 112.301415][ T6280] bridge_slave_1: left promiscuous mode [ 112.307298][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.361773][ T6280] bond0: (slave bond_slave_0): Releasing backup interface [ 112.381237][ T6280] bond0: (slave bond_slave_1): Releasing backup interface [ 112.406288][ T6280] team0: Port device team_slave_0 removed [ 112.422145][ T6280] team0: Port device team_slave_1 removed [ 112.430325][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.437866][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.456689][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.466409][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.477040][ T6280] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.515550][ T6290] macvtap1: entered allmulticast mode [ 112.522034][ T6290] veth0_macvtap: entered allmulticast mode [ 112.941581][ T6316] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.495275][ T6372] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.587390][ T6385] __nla_validate_parse: 148 callbacks suppressed [ 114.587409][ T6385] netlink: 48 bytes leftover after parsing attributes in process `syz.3.94'. [ 114.645414][ T6372] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.714094][ T6387] tipc: Enabled bearer , priority 0 [ 114.728510][ T6387] syzkaller0: entered promiscuous mode [ 114.738479][ T6387] syzkaller0: entered allmulticast mode [ 114.751546][ T6390] syz.4.97 uses obsolete (PF_INET,SOCK_PACKET) [ 114.764950][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'. [ 114.796074][ T6372] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.020578][ T6372] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.106881][ T6388] batadv_slave_0: mtu less than device minimum [ 115.292610][ T6386] tipc: Resetting bearer [ 115.337056][ T6386] tipc: Disabling bearer [ 115.478392][ T6398] pim6reg: entered allmulticast mode [ 115.649962][ T1336] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.691409][ T1336] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.707597][ T1336] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.758133][ T1336] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.091774][ T6411] netlink: 40 bytes leftover after parsing attributes in process `syz.0.103'. [ 116.220907][ T6420] netlink: 'syz.1.106': attribute type 4 has an invalid length. [ 116.271365][ T6424] netlink: 'syz.1.106': attribute type 4 has an invalid length. [ 116.305371][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 116.330205][ T6420] netlink: 'syz.1.106': attribute type 30 has an invalid length. [ 116.404388][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.418286][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.439715][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.461811][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.541361][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.109'. [ 116.580873][ T6429] bond1: option tlb_dynamic_lb: invalid value (71) [ 116.590138][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.109'. [ 116.629861][ T6429] bond1 (unregistering): Released all slaves [ 117.007387][ T6450] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_rx_wq": -EINTR [ 117.538372][ T6489] netlink: 'syz.0.120': attribute type 3 has an invalid length. [ 118.117631][ T6508] netlink: 68 bytes leftover after parsing attributes in process `syz.3.125'. [ 119.812464][ T6573] syzkaller1: entered promiscuous mode [ 119.830255][ T6573] syzkaller1: entered allmulticast mode [ 120.056318][ T6343] Set syz1 is full, maxelem 65536 reached [ 120.463401][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 120.533360][ T6593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.144'. [ 120.738807][ T6600] netlink: 'syz.4.147': attribute type 3 has an invalid length. [ 120.770651][ T6605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.148'. [ 120.809011][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 120.821691][ T6606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.148'. [ 120.899353][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 120.908515][ T6618] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.151'. [ 121.145602][ T6627] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 121.185395][ T6627] bond1 (unregistering): Released all slaves [ 121.237577][ T6631] dvmrp0: entered allmulticast mode [ 121.253920][ T6634] rdma_op ffff8880242dc1f0 conn xmit_rdma 0000000000000000 [ 121.488376][ T6654] netlink: 'syz.3.160': attribute type 1 has an invalid length. [ 121.498190][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 121.499408][ T6654] netlink: 204 bytes leftover after parsing attributes in process `syz.3.160'. [ 121.681831][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 122.004548][ T6676] bridge: RTM_NEWNEIGH with invalid ether address [ 122.467566][ T6704] tipc: Started in network mode [ 122.477397][ T6704] tipc: Node identity 8695e4745f64, cluster identity 4711 [ 122.504978][ T6704] tipc: Enabled bearer , priority 0 [ 122.522143][ T6704] syzkaller0: entered promiscuous mode [ 122.527735][ T6704] syzkaller0: entered allmulticast mode [ 122.625562][ T6704] tipc: Resetting bearer [ 122.664789][ T6703] tipc: Resetting bearer [ 122.827903][ T6703] tipc: Disabling bearer [ 123.473641][ T6738] --map-set only usable from mangle table [ 123.594988][ T6738] tipc: Enabled bearer , priority 10 [ 124.517672][ T6798] netlink: 'syz.0.195': attribute type 13 has an invalid length. [ 124.567106][ T6798] netlink: 'syz.0.195': attribute type 17 has an invalid length. [ 124.633004][ T6805] netlink: 'syz.3.199': attribute type 1 has an invalid length. [ 124.671889][ T6798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.709608][ T44] tipc: Node number set to 3656508532 [ 124.735349][ T6805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.982754][ T6830] Bluetooth: MGMT ver 1.23 [ 125.100157][ T6839] ip6t_rpfilter: unknown options [ 125.111269][ T6839] netlink: 'syz.2.208': attribute type 1 has an invalid length. [ 125.305792][ T6843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.331234][ T6848] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 125.463311][ T6850] syzkaller1: entered promiscuous mode [ 125.468949][ T6850] syzkaller1: entered allmulticast mode [ 126.100075][ T6892] xt_CONNSECMARK: invalid mode: 66 [ 126.155902][ T6894] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 126.190316][ T6894] nbd: error processing sock list [ 126.506967][ T6912] xt_TCPMSS: Only works on TCP SYN packets [ 126.676439][ T6917] __nla_validate_parse: 19 callbacks suppressed [ 126.676461][ T6917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.232'. [ 126.862333][ T6925] netlink: 'syz.0.234': attribute type 6 has an invalid length. [ 127.137880][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.238'. [ 127.169166][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 127.212425][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 127.493971][ T6950] dvmrp8: entered allmulticast mode [ 127.527926][ T6946] dvmrp8: left allmulticast mode [ 127.570058][ T5837] Bluetooth: hci4: command 0x0401 tx timeout [ 127.691285][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 127.702331][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 127.949998][ T6963] bridge_slave_1: left allmulticast mode [ 127.956926][ T6963] bridge_slave_1: left promiscuous mode [ 127.966142][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.981759][ T6963] bridge_slave_0: left allmulticast mode [ 127.987634][ T6963] bridge_slave_0: left promiscuous mode [ 127.994086][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.417233][ T6987] IPVS: set_ctl: invalid protocol: 58 172.30.1.4:20000 [ 128.495388][ T6995] hsr0: entered promiscuous mode [ 128.508724][ T6995] macsec1: entered allmulticast mode [ 128.533203][ T44] IPVS: starting estimator thread 0... [ 128.549190][ T6995] hsr0: entered allmulticast mode [ 128.572970][ T6995] hsr_slave_0: entered allmulticast mode [ 128.609767][ T6995] hsr_slave_1: entered allmulticast mode [ 128.654888][ T6997] IPVS: using max 25 ests per chain, 60000 per kthread [ 128.729039][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 128.769337][ T7006] syz.2.255 uses old SIOCAX25GETINFO [ 129.250252][ T7015] "syz.3.258" (7015) uses obsolete ecb(arc4) skcipher [ 129.776800][ T7038] netlink: 'syz.3.262': attribute type 1 has an invalid length. [ 129.836447][ T7038] bond2: entered promiscuous mode [ 129.843531][ T7038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.198338][ T7050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.265'. [ 130.244095][ T7055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.266'. [ 130.611545][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'. [ 131.037553][ T7098] netlink: 'syz.3.283': attribute type 9 has an invalid length. [ 131.400420][ T7105] can: request_module (can-proto-0) failed. [ 131.742338][ T7124] __nla_validate_parse: 4 callbacks suppressed [ 131.742359][ T7124] netlink: 200 bytes leftover after parsing attributes in process `syz.1.288'. [ 131.878169][ T7127] bond3: Unable to set up delay as MII monitoring is disabled [ 131.918982][ T7127] bond3 (unregistering): Released all slaves [ 132.218695][ T7155] ipt_rpfilter: unknown options [ 132.295518][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.298'. [ 132.304873][ T7159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.298'. [ 132.405240][ T7165] netlink: 'syz.1.301': attribute type 3 has an invalid length. [ 132.417956][ T7165] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.301'. [ 133.193156][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 133.295122][ T7192] hsr_slave_0: left promiscuous mode [ 133.311073][ T7192] hsr_slave_1: left promiscuous mode [ 133.361716][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 133.407324][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 133.704093][ T7215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.314'. [ 133.857620][ T7225] dvmrp8: entered allmulticast mode [ 134.308384][ T7224] dvmrp8: left allmulticast mode [ 134.532477][ T7254] tipc: Enabled bearer , priority 0 [ 134.540221][ T7254] syzkaller0: entered promiscuous mode [ 134.545829][ T7254] syzkaller0: entered allmulticast mode [ 134.692698][ T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.730636][ T7264] tipc: Resetting bearer [ 135.678183][ T7253] tipc: Resetting bearer [ 135.708760][ T7253] tipc: Disabling bearer [ 135.984131][ T7302] tipc: Enabled bearer , priority 0 [ 135.992083][ T7302] syzkaller0: entered promiscuous mode [ 135.997804][ T7302] syzkaller0: entered allmulticast mode [ 136.022927][ T7302] tipc: Resetting bearer [ 136.072327][ T7299] tipc: Resetting bearer [ 136.116285][ T7299] tipc: Disabling bearer [ 136.187915][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 136.241109][ T7311] netlink: 'syz.0.340': attribute type 12 has an invalid length. [ 136.307010][ T7311] syzkaller1: entered promiscuous mode [ 136.394281][ T7311] syzkaller1: entered allmulticast mode [ 136.567326][ T7316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.341'. [ 136.678850][ T7321] IPv6: addrconf: prefix option has invalid lifetime [ 136.696964][ T7322] wg1: entered allmulticast mode [ 136.788415][ T7330] dvmrp0: entered allmulticast mode [ 136.921661][ T7337] __nla_validate_parse: 1 callbacks suppressed [ 136.921682][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 136.980259][ T7340] netlink: 'syz.2.347': attribute type 1 has an invalid length. [ 137.051310][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.350'. [ 137.151068][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.350'. [ 137.167287][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 137.197061][ T7357] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 137.203178][ T7344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.536002][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 137.564218][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.355'. [ 137.812667][ T7386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'. [ 138.288064][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.297061][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'. [ 138.302355][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.574699][ T7411] netlink: 116 bytes leftover after parsing attributes in process `syz.1.366'. [ 138.608349][ T5896] IPVS: starting estimator thread 0... [ 138.619632][ T7409] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 138.709864][ T7415] IPVS: using max 26 ests per chain, 62400 per kthread [ 138.711153][ T7409] netlink: 308 bytes leftover after parsing attributes in process `syz.0.364'. [ 138.811729][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 138.897317][ T7417] bridge_slave_0: left allmulticast mode [ 138.919314][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.926513][ T7417] bridge_slave_0: left promiscuous mode [ 138.934263][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.964657][ T7417] bridge_slave_1: left allmulticast mode [ 138.979678][ T7417] bridge_slave_1: left promiscuous mode [ 138.985667][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.016756][ T7417] bond0: (slave bond_slave_0): Releasing backup interface [ 139.053054][ T7417] bond0: (slave bond_slave_1): Releasing backup interface [ 139.095281][ T7417] team0: Port device team_slave_0 removed [ 139.141839][ T7417] team0: Port device team_slave_1 removed [ 139.156898][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.171712][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.198087][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.209699][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.220344][ T7417] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.128097][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.159212][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.210077][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.243097][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.292760][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.314494][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.354699][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.403079][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.454450][ T7456] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 140.514608][ T7466] syzkaller1: entered promiscuous mode [ 140.521669][ T7466] syzkaller1: entered allmulticast mode [ 140.601790][ T7473] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 140.627492][ T7473] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 140.648699][ T7478] netlink: 'syz.3.384': attribute type 4 has an invalid length. [ 140.807420][ T7482] bridge0: port 3(syz_tun) entered blocking state [ 140.868026][ T7482] bridge0: port 3(syz_tun) entered disabled state [ 140.880491][ T7482] syz_tun: entered allmulticast mode [ 140.888223][ T7482] syz_tun: entered promiscuous mode [ 141.138712][ T1165] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.171153][ T1165] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.211622][ T1165] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.239473][ T1165] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.461869][ T7529] xt_hashlimit: size too large, truncated to 1048576 [ 141.498780][ T7527] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 142.526916][ T7568] syzkaller1: entered promiscuous mode [ 142.555660][ T7568] syzkaller1: entered allmulticast mode [ 142.663294][ T7576] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.691782][ T7573] netlink: 'syz.3.410': attribute type 30 has an invalid length. [ 142.737564][ T7579] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.839332][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.846161][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 142.865188][ T7582] tipc: Enabled bearer , priority 0 [ 142.900549][ T7577] syzkaller0: entered promiscuous mode [ 142.906187][ T7577] syzkaller0: entered allmulticast mode [ 142.957161][ T7575] tipc: Resetting bearer [ 143.051772][ T7575] tipc: Disabling bearer [ 143.177693][ T7601] syzkaller0: entered promiscuous mode [ 143.190005][ T7601] syzkaller0: entered allmulticast mode [ 143.290985][ T7619] netlink: 'syz.2.422': attribute type 2 has an invalid length. [ 143.305483][ T7619] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 143.314391][ T7620] netlink: 'syz.2.422': attribute type 2 has an invalid length. [ 143.326395][ T7620] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 144.213843][ T7664] __nla_validate_parse: 10 callbacks suppressed [ 144.213862][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.431'. [ 144.729649][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'. [ 145.147156][ T7706] syzkaller0: entered promiscuous mode [ 145.159373][ T7706] syzkaller0: entered allmulticast mode [ 145.200260][ T7710] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 145.254500][ T7721] x_tables: duplicate underflow at hook 2 [ 145.328549][ T7718] rdma_op ffff8880555de9f0 conn xmit_rdma 0000000000000000 [ 145.649651][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 145.659012][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 146.736325][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 146.828179][ T5837] Bluetooth: hci4: link tx timeout [ 146.846438][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.895426][ T7736] netlink: 120 bytes leftover after parsing attributes in process `syz.4.452'. [ 146.940548][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.452'. [ 147.018497][ T7736] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.131039][ T7754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.456'. [ 147.166976][ T7760] netlink: 'syz.1.458': attribute type 21 has an invalid length. [ 147.644264][ T7781] syzkaller0: entered promiscuous mode [ 147.651278][ T7781] syzkaller0: entered allmulticast mode [ 147.970911][ T7793] netlink: 156 bytes leftover after parsing attributes in process `syz.0.465'. [ 148.015003][ T30] audit: type=1107 audit(1760301051.617:2): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 148.034501][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 148.534134][ T7821] dvmrp8: entered allmulticast mode [ 148.929215][ T5849] Bluetooth: hci4: command 0x0401 tx timeout [ 149.185897][ T7860] delete_channel: no stack [ 149.586398][ T7821] dvmrp8: left allmulticast mode [ 149.934049][ T7886] batman_adv: batadv0: Adding interface: dummy0 [ 149.945556][ T7886] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.972626][ T7886] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 150.060129][ T7884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.305264][ T7908] __nla_validate_parse: 2 callbacks suppressed [ 150.305286][ T7908] netlink: 80 bytes leftover after parsing attributes in process `syz.2.495'. [ 150.322117][ T7908] netlink: 32 bytes leftover after parsing attributes in process `syz.2.495'. [ 150.346654][ T6261] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 150.413405][ T6261] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 150.475578][ T6261] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 183.582605][ T7937] netlink: 'syz.4.502': attribute type 1 has an invalid length. [ 183.591119][ T7937] netlink: 232 bytes leftover after parsing attributes in process `syz.4.502'. [ 183.593332][ T7939] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 184.348845][ T7931] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 184.367712][ T7935] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 184.801036][ T7961] netlink: 'syz.4.508': attribute type 1 has an invalid length. [ 184.824895][ T7966] netlink: 'syz.2.509': attribute type 83 has an invalid length. [ 184.916730][ T7973] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 184.963742][ T7976] bridge3: entered promiscuous mode [ 184.971447][ T7976] bridge3: entered allmulticast mode [ 184.989363][ T7973] netlink: 'syz.4.508': attribute type 27 has an invalid length. [ 185.044411][ T7961] veth3: entered promiscuous mode [ 185.058328][ T7961] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 185.108843][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 185.149257][ T30] audit: type=1107 audit(1760301088.737:3): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 185.348002][ T7996] tap0: tun_chr_ioctl cmd 1074025680 [ 185.363169][ T7991] tipc: Enabled bearer , priority 0 [ 185.373507][ T7991] D: renamed from syzkaller0 [ 185.381124][ T7991] tipc: Disabling bearer [ 185.544878][ T7998] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 185.555493][ T7998] netlink: 224 bytes leftover after parsing attributes in process `syz.3.517'. [ 185.569223][ T5837] Bluetooth: hci4: command 0x0401 tx timeout [ 186.083160][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 186.123582][ T8030] Bluetooth: MGMT ver 1.23 [ 186.658442][ T8062] tipc: Enabled bearer , priority 0 [ 186.675907][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 186.683085][ T8059] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20003 [ 186.705505][ T8062] syzkaller0: entered promiscuous mode [ 186.711725][ T8062] syzkaller0: entered allmulticast mode [ 186.722781][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.538'. [ 186.733365][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'. [ 186.743689][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.538'. [ 186.753398][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'. [ 186.763072][ T8064] netlink: 'syz.0.538': attribute type 6 has an invalid length. [ 186.818235][ T8062] tipc: Resetting bearer [ 186.843079][ T8060] tipc: Resetting bearer [ 186.858510][ T8060] tipc: Disabling bearer [ 186.865070][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 186.899524][ T8072] pim6reg: entered allmulticast mode [ 186.954773][ T8074] netlink: 'syz.0.540': attribute type 15 has an invalid length. [ 187.160594][ T8089] raw_sendmsg: syz.4.542 forgot to set AF_INET. Fix it! [ 187.410921][ T8101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.471533][ T8101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.506382][ T8101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.524684][ T8101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.559860][ T8101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.581106][ T8101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.637280][ T8105] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 187.645172][ T8101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.672327][ T8101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.738670][ T8101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.767693][ T8101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.661146][ T8151] veth3: entered promiscuous mode [ 188.672339][ T8140] tipc: Started in network mode [ 188.692837][ T8140] tipc: Node identity aeff9443915f, cluster identity 4711 [ 188.715538][ T8140] tipc: Enabled bearer , priority 0 [ 189.349637][ T8152] syzkaller0: entered promiscuous mode [ 189.355867][ T8152] syzkaller0: entered allmulticast mode [ 189.510688][ T8148] tipc: Resetting bearer [ 189.562629][ T8148] tipc: Disabling bearer [ 190.050500][ T8175] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 190.057122][ T8178] __nla_validate_parse: 133 callbacks suppressed [ 190.057149][ T8178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.567'. [ 190.185212][ T8175] netlink: 'syz.0.566': attribute type 10 has an invalid length. [ 190.197295][ T8175] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 190.219754][ T8175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.241845][ T8175] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 190.322849][ T8189] netlink: 60 bytes leftover after parsing attributes in process `syz.3.569'. [ 190.906526][ T8206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.923059][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 191.434682][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 191.481362][ T1006] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.500167][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 191.540637][ T1006] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.593079][ T1006] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.610408][ T1006] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.744594][ T8232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.578'. [ 191.771694][ T8232] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.578'. [ 191.812009][ T8234] netlink: 'syz.1.580': attribute type 10 has an invalid length. [ 191.829521][ T8234] batman_adv: batadv0: Removing interface: dummy0 [ 191.847152][ T8234] team0: Port device dummy0 added [ 191.870784][ T8234] netlink: 'syz.1.580': attribute type 10 has an invalid length. [ 191.892472][ T8234] team0: Port device dummy0 removed [ 191.902409][ T8234] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 191.997902][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 192.009597][ T8242] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 192.086577][ T8245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.584'. [ 192.255215][ T8252] netlink: 36 bytes leftover after parsing attributes in process `syz.4.586'. [ 192.337259][ T8252] nbd: couldn't find device at index 536870912 [ 192.970373][ T8267] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 193.009001][ T8267] netlink: 'syz.2.591': attribute type 10 has an invalid length. [ 193.017231][ T8267] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 193.127760][ T8273] netlink: 'syz.2.593': attribute type 10 has an invalid length. [ 193.177488][ T8274] xt_CT: No such helper "netbios-ns" [ 193.188292][ T8273] team0: Port device dummy0 added [ 193.192113][ T8276] netlink: 'syz.2.593': attribute type 10 has an invalid length. [ 193.259561][ T8276] team0: Port device dummy0 removed [ 193.288094][ T8276] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 193.292940][ T8280] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 193.310781][ T8282] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 193.487546][ T8291] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 193.553637][ T8291] bond5: entered promiscuous mode [ 193.562416][ T8291] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.610570][ T8294] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.618118][ T8294] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 193.637089][ T8294] bond5: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 193.651432][ T8294] bond5: (slave gre2): making interface the new active one [ 193.660041][ T8294] gre2: entered promiscuous mode [ 193.667780][ T8294] bond5: (slave gre2): Enslaving as an active interface with an up link [ 193.924098][ T8313] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 193.946153][ T8313] netlink: 'syz.1.602': attribute type 2 has an invalid length. [ 194.153041][ T8325] net_ratelimit: 55 callbacks suppressed [ 194.153055][ T8325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.723029][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.729910][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.279837][ T6246] page_pool_release_retry() stalled pool shutdown: id 33, 2 inflight 60 sec [ 217.159991][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 217.160047][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 217.170696][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 237.454323][ T8342] __nla_validate_parse: 8 callbacks suppressed [ 237.454344][ T8342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.611'. [ 237.490113][ T8342] netlink: 32 bytes leftover after parsing attributes in process `syz.3.611'. [ 237.511307][ T8342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.611'. [ 237.542307][ T8342] netlink: 32 bytes leftover after parsing attributes in process `syz.3.611'. [ 237.552125][ T8343] batadv_slave_1: entered promiscuous mode [ 237.558102][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 237.575159][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 237.585977][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 237.808394][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 237.854896][ T8334] batadv_slave_1: left promiscuous mode [ 237.862233][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 237.898930][ T8361] tipc: Enabled bearer , priority 0 [ 237.921734][ T8361] syzkaller0: entered promiscuous mode [ 237.927334][ T8361] syzkaller0: entered allmulticast mode [ 237.948884][ T8361] tipc: Resetting bearer [ 238.012800][ T8367] veth0: entered promiscuous mode [ 238.021649][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 238.090957][ T8369] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.141781][ T8371] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.151170][ T8371] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.496432][ T8395] validate_nla: 2 callbacks suppressed [ 238.496453][ T8395] netlink: 'syz.2.627': attribute type 1 has an invalid length. [ 238.515304][ T8395] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 238.516406][ T8396] netlink: 'syz.3.625': attribute type 1 has an invalid length. [ 238.620415][ T8368] tipc: Resetting bearer [ 238.720491][ T8368] tipc: Disabling bearer [ 238.859462][ T8412] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.936595][ T8414] ip6erspan0: entered promiscuous mode [ 238.992902][ T8414] Bluetooth: MGMT ver 1.23 [ 239.658095][ T5849] Bluetooth: hci4: link tx timeout [ 239.665205][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 239.758333][ T8457] bond1: entered promiscuous mode [ 239.780940][ T8457] bond1: entered allmulticast mode [ 239.787468][ T8457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.947885][ T8457] bond1 (unregistering): Released all slaves [ 240.263177][ T8474] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 240.296399][ T8481] netlink: 'syz.2.650': attribute type 3 has an invalid length. [ 240.434064][ T8489] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 240.453869][ T8488] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 240.768874][ T8515] vxcan1: entered allmulticast mode [ 240.822433][ T8517] team_slave_0: entered promiscuous mode [ 240.828694][ T8517] team_slave_1: entered promiscuous mode [ 240.835204][ T8517] macvtap1: entered promiscuous mode [ 240.841223][ T8517] team0: entered promiscuous mode [ 240.848044][ T8517] macvtap1: entered allmulticast mode [ 240.854294][ T8517] team0: entered allmulticast mode [ 240.861796][ T8517] team_slave_0: entered allmulticast mode [ 240.868350][ T8517] team_slave_1: entered allmulticast mode [ 240.880262][ T8517] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 240.890425][ T8517] team0: left allmulticast mode [ 240.895357][ T8517] team_slave_0: left allmulticast mode [ 240.901663][ T8517] team_slave_1: left allmulticast mode [ 240.907644][ T8517] team0: left promiscuous mode [ 240.930014][ T8517] team_slave_0: left promiscuous mode [ 240.935595][ T8517] team_slave_1: left promiscuous mode [ 241.498056][ T8538] syzkaller0: entered promiscuous mode [ 241.506928][ T8538] syzkaller0: entered allmulticast mode [ 241.721818][ T5837] Bluetooth: hci4: command 0x0401 tx timeout [ 243.266891][ T8570] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20000 [ 243.331312][ T8574] netlink: 'syz.3.677': attribute type 1 has an invalid length. [ 243.360949][ T8574] netlink: 'syz.3.677': attribute type 1 has an invalid length. [ 243.545372][ T8580] veth1_macvtap: left promiscuous mode [ 243.554070][ T8580] macsec0: entered allmulticast mode [ 244.120518][ T8605] netlink: 'syz.0.687': attribute type 11 has an invalid length. [ 244.301867][ T8613] __nla_validate_parse: 9 callbacks suppressed [ 244.301890][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 244.367954][ T8613] bond0: option all_slaves_active: invalid value (7) [ 244.461418][ T8619] vxcan1: entered allmulticast mode [ 245.012994][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 245.339491][ T8661] bond1: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 245.349056][ T8661] bond1: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 245.358420][ T8661] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4) [ 245.372964][ T8661] bond1 (unregistering): Released all slaves [ 245.452679][ T8657] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 245.477352][ T8657] netlink: 208 bytes leftover after parsing attributes in process `syz.0.699'. [ 245.626361][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 245.691570][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.703'. [ 246.089345][ T8691] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 246.668299][ T8721] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.783019][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 246.820576][ T8730] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 247.099541][ T8743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.723'. [ 247.110628][ T8744] netlink: 36 bytes leftover after parsing attributes in process `syz.1.722'. [ 247.627169][ T8773] netlink: 104 bytes leftover after parsing attributes in process `syz.0.728'. [ 247.676077][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 247.877520][ T8791] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 248.074438][ T8799] ipt_rpfilter: unknown options [ 248.276067][ T8812] netlink: 'syz.3.740': attribute type 1 has an invalid length. [ 248.317066][ T8812] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.382833][ T8812] bond7: (slave veth7): Enslaving as an active interface with a down link [ 248.471862][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 248.494649][ T8812] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 248.938793][ T8831] bond0: (slave dummy0): Releasing backup interface [ 249.304987][ T8851] macvtap1: entered allmulticast mode [ 249.319254][ T8851] bridge0: entered allmulticast mode [ 249.331066][ T8851] bridge0: port 1(macvtap1) entered blocking state [ 249.337830][ T8851] bridge0: port 1(macvtap1) entered disabled state [ 249.371054][ T8851] bridge0: left allmulticast mode [ 250.312403][ T8880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.537939][ T8890] __nla_validate_parse: 3 callbacks suppressed [ 250.537960][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'. [ 250.569205][ T8890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.589459][ T8890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.686078][ T8906] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 250.876069][ T8912] netlink: 36 bytes leftover after parsing attributes in process `syz.2.765'. [ 251.208521][ T8921] tipc: Enabled bearer , priority 0 [ 251.247347][ T8921] syzkaller0: entered promiscuous mode [ 251.266919][ T8921] syzkaller0: entered allmulticast mode [ 251.318809][ T8921] tipc: Resetting bearer [ 251.345214][ T8920] tipc: Resetting bearer [ 251.397238][ T8920] tipc: Disabling bearer [ 251.429573][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.772'. [ 251.440067][ T8928] netlink: 'syz.4.771': attribute type 29 has an invalid length. [ 251.512022][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.772'. [ 251.527771][ T8938] netlink: 'syz.2.773': attribute type 25 has an invalid length. [ 251.536567][ T8938] netlink: 248 bytes leftover after parsing attributes in process `syz.2.773'. [ 251.849530][ T8950] pimreg: entered allmulticast mode [ 251.930044][ T8953] dvmrp8: entered allmulticast mode [ 252.375228][ T8953] dvmrp8: left allmulticast mode [ 252.921743][ T30] audit: type=1800 audit(1760301156.527:4): pid=8979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.784" name=CB dev="tmpfs" ino=837 res=0 errno=0 [ 252.957319][ T30] audit: type=1804 audit(1760301156.557:5): pid=8979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.784" name=2F6E6577726F6F742F3135392FCB dev="tmpfs" ino=837 res=1 errno=0 [ 254.551279][ T9020] netlink: 830 bytes leftover after parsing attributes in process `syz.2.793'. [ 254.593828][ T9020] netlink: 830 bytes leftover after parsing attributes in process `syz.2.793'. [ 254.990634][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 255.127765][ T6249] IPVS: starting estimator thread 0... [ 255.219287][ T9041] IPVS: using max 25 ests per chain, 60000 per kthread [ 255.358648][ T9043] tipc: Enabled bearer , priority 0 [ 255.371132][ T9043] syzkaller0: entered promiscuous mode [ 255.376932][ T9043] syzkaller0: entered allmulticast mode [ 255.588460][ T9053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.801'. [ 255.622106][ T9053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.801'. [ 255.672907][ T9059] syzkaller1: entered promiscuous mode [ 255.686667][ T9059] syzkaller1: entered allmulticast mode [ 255.944422][ T9038] tipc: Resetting bearer [ 256.001002][ T9038] tipc: Disabling bearer [ 256.097519][ T9075] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 256.106727][ T9075] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 256.181489][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 256.201688][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.809'. [ 256.528120][ T9084] netlink: 96 bytes leftover after parsing attributes in process `syz.1.810'. [ 256.911587][ T9116] syzkaller0: entered promiscuous mode [ 256.936287][ T9116] syzkaller0: entered allmulticast mode [ 256.971159][ T9110] tipc: Enabled bearer , priority 0 [ 257.007751][ T9126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.820'. [ 257.064141][ T9110] tipc: Resetting bearer [ 257.094080][ T9110] tipc: Disabling bearer [ 257.106419][ T9126] netlink: 'syz.0.820': attribute type 2 has an invalid length. [ 257.117689][ T9126] netlink: 'syz.0.820': attribute type 2 has an invalid length. [ 257.236847][ T9132] nbd: must specify at least one socket [ 257.287826][ T9135] vxcan1: entered allmulticast mode [ 257.315030][ T9138] netlink: 52 bytes leftover after parsing attributes in process `syz.0.825'. [ 257.347077][ T9137] netlink: 'syz.3.824': attribute type 13 has an invalid length. [ 257.356000][ T9137] netlink: 'syz.3.824': attribute type 17 has an invalid length. [ 257.449358][ T9137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.954606][ T9177] wg1 speed is unknown, defaulting to 1000 [ 257.962697][ T9177] wg1 speed is unknown, defaulting to 1000 [ 257.974529][ T9177] wg1 speed is unknown, defaulting to 1000 [ 257.996773][ T9177] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 258.167502][ T9184] wg1 speed is unknown, defaulting to 1000 [ 258.182788][ T9177] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 258.185930][ T9187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.499766][ T9177] wg1 speed is unknown, defaulting to 1000 [ 258.601383][ T9177] wg1 speed is unknown, defaulting to 1000 [ 258.614846][ T9177] wg1 speed is unknown, defaulting to 1000 [ 258.639923][ T9177] wg1 speed is unknown, defaulting to 1000 [ 258.705931][ T9177] wg1 speed is unknown, defaulting to 1000 [ 258.777595][ T9200] ipip0: entered promiscuous mode [ 258.805685][ T9204] netlink: 'syz.3.842': attribute type 21 has an invalid length. [ 259.493433][ T9238] netlink: 36 bytes leftover after parsing attributes in process `syz.2.851'. [ 259.845398][ T9251] netlink: 'syz.3.854': attribute type 1 has an invalid length. [ 259.880872][ T9251] netlink: 224 bytes leftover after parsing attributes in process `syz.3.854'. [ 259.986620][ T9255] ªªªªªª: renamed from wg2 (while UP) [ 260.098008][ T9255] vlan2: entered allmulticast mode [ 260.204201][ T9257] netlink: 132 bytes leftover after parsing attributes in process `syz.1.856'. [ 260.796650][ T9283] netlink: 'syz.1.864': attribute type 1 has an invalid length. [ 260.855625][ T9283] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 260.867482][ T9283] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 260.917015][ T9293] tipc: Enabled bearer , priority 0 [ 260.925722][ T9293] syzkaller0: entered promiscuous mode [ 260.931978][ T9293] syzkaller0: entered allmulticast mode [ 260.965909][ T9293] tipc: Resetting bearer [ 260.997798][ T9292] tipc: Resetting bearer [ 261.056379][ T9292] tipc: Disabling bearer [ 261.166074][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.172750][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.332128][ T9313] bond0: (slave gretap0): Opening slave failed [ 261.395027][ T9315] netlink: 'syz.3.874': attribute type 21 has an invalid length. [ 261.437872][ T9315] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.456473][ T9315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.463917][ T9315] IPv6: NLM_F_CREATE should be set when creating new route [ 261.471551][ T9315] IPv6: NLM_F_CREATE should be set when creating new route [ 261.479359][ T9315] IPv6: NLM_F_CREATE should be set when creating new route [ 261.509750][ T9320] wg1 speed is unknown, defaulting to 1000 [ 261.728677][ T9325] wg1 speed is unknown, defaulting to 1000 [ 262.909804][ T9377] __nla_validate_parse: 3 callbacks suppressed [ 262.909827][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.882'. [ 262.993202][ T9380] netlink: 2 bytes leftover after parsing attributes in process `syz.2.885'. [ 263.033031][ T9382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.886'. [ 263.284873][ T9382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.403960][ T9388] wg1 speed is unknown, defaulting to 1000 [ 263.479390][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 263.493055][ T9405] netlink: 32 bytes leftover after parsing attributes in process `syz.4.890'. [ 263.505978][ T9407] netlink: 7 bytes leftover after parsing attributes in process `syz.3.892'. [ 263.592752][ T9412] netlink: 52 bytes leftover after parsing attributes in process `syz.2.891'. [ 263.681051][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.891'. [ 263.739846][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.895'. [ 264.032564][ T9414] netlink: 766 bytes leftover after parsing attributes in process `syz.0.893'. [ 264.065636][ T9427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.084468][ T9427] bond0: (slave rose0): Enslaving as an active interface with an up link [ 264.701177][ T9468] syz_tun: left allmulticast mode [ 264.716614][ T9468] syz_tun: left promiscuous mode [ 264.726689][ T9468] bridge0: port 3(syz_tun) entered disabled state [ 264.746399][ T9468] bridge_slave_1: left allmulticast mode [ 264.753891][ T9468] bridge_slave_1: left promiscuous mode [ 264.760732][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.781455][ T9468] bridge_slave_0: left allmulticast mode [ 264.787520][ T9468] bridge_slave_0: left promiscuous mode [ 264.795873][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.903646][ T9476] netlink: 'syz.2.907': attribute type 6 has an invalid length. [ 264.944801][ T30] audit: type=1107 audit(1760301168.547:6): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 265.020035][ T9476] vxcan1: entered allmulticast mode [ 265.578169][ T9505] wg1 speed is unknown, defaulting to 1000 [ 265.588945][ T9516] netlink: 'syz.2.919': attribute type 1 has an invalid length. [ 266.684776][ T9556] syzkaller0: entered promiscuous mode [ 266.688237][ T9563] netlink: 'syz.4.929': attribute type 13 has an invalid length. [ 266.692059][ T9556] syzkaller0: entered allmulticast mode [ 266.699915][ T9563] netlink: 'syz.4.929': attribute type 17 has an invalid length. [ 266.796694][ T9563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.807975][ T9563] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.825304][ T9563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.837492][ T9575] wg1 speed is unknown, defaulting to 1000 [ 269.232553][ T9616] syz_tun: entered allmulticast mode [ 269.362758][ T9622] __nla_validate_parse: 7 callbacks suppressed [ 269.362779][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 269.406214][ T9612] syz_tun: left allmulticast mode [ 269.541147][ T9593] syz.0.937 (9593) used greatest stack depth: 17832 bytes left [ 269.656867][ T9630] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.946'. [ 269.667981][ T9630] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 269.685120][ T9630] netlink: 'syz.3.946': attribute type 13 has an invalid length. [ 269.693521][ T9630] netlink: 'syz.3.946': attribute type 17 has an invalid length. [ 269.703145][ T9630] netlink: 'syz.3.946': attribute type 27 has an invalid length. [ 269.850587][ T9636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.947'. [ 269.920901][ T9636] bond0: entered promiscuous mode [ 269.926025][ T9636] bond_slave_0: entered promiscuous mode [ 269.951812][ T9636] bond_slave_1: entered promiscuous mode [ 269.958033][ T9636] dummy0: entered promiscuous mode [ 269.985118][ T9636] bond0: left promiscuous mode [ 269.999259][ T9636] bond_slave_0: left promiscuous mode [ 270.033748][ T9636] bond_slave_1: left promiscuous mode [ 270.064803][ T9636] dummy0: left promiscuous mode [ 270.108472][ T9642] pim6reg1: entered promiscuous mode [ 270.122871][ T9642] pim6reg1: entered allmulticast mode [ 270.344874][ T9663] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 270.883220][ T9689] wg1 speed is unknown, defaulting to 1000 [ 270.988575][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.964'. [ 271.005812][ T9704] netlink: 'syz.4.963': attribute type 83 has an invalid length. [ 271.397946][ T9711] netlink: 'syz.0.968': attribute type 1 has an invalid length. [ 271.517010][ T9715] veth1: entered promiscuous mode [ 271.566730][ T9711] erspan0: entered allmulticast mode [ 272.118770][ T9748] netlink: 'syz.4.978': attribute type 21 has an invalid length. [ 272.134886][ T9748] netlink: 132 bytes leftover after parsing attributes in process `syz.4.978'. [ 272.412794][ T9769] 8021q: VLANs not supported on sit0 [ 272.875328][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 272.924619][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 272.995131][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 273.106420][ T9803] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 273.123051][ T1006] bond0: (slave wlan1): interface is now down [ 273.151634][ T60] bond0: (slave wlan1): interface is now down [ 273.190029][ T60] bond0: (slave wlan1): interface is now down [ 273.219740][ T60] bond0: (slave wlan1): interface is now down [ 273.236429][ T60] bond0: now running without any active interface! [ 273.293345][ T9803] netlink: 'syz.0.990': attribute type 3 has an invalid length. [ 273.303163][ T9803] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 273.312334][ T9803] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.990'. [ 273.648399][ T9829] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1001'. [ 274.259561][ T9857] team0 (unregistering): Port device team_slave_0 removed [ 274.289728][ T9857] team0 (unregistering): Port device team_slave_1 removed [ 274.363629][ T9862] erspan0: left allmulticast mode [ 274.420285][ T9876] __nla_validate_parse: 1 callbacks suppressed [ 274.420304][ T9876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1014'. [ 274.473445][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 274.495618][ T9862] wg1: left allmulticast mode [ 274.630749][ T30] audit: type=1800 audit(1760301178.237:7): pid=9888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1015" name="memory.events" dev="tmpfs" ino=1067 res=0 errno=0 [ 274.718378][ T9862] veth0_macvtap: left allmulticast mode [ 274.724712][ T9862] macvtap1: left allmulticast mode [ 274.738317][ T9862] hsr0: left allmulticast mode [ 274.743595][ T9862] hsr_slave_0: left allmulticast mode [ 274.749636][ T9862] hsr_slave_1: left allmulticast mode [ 274.755870][ T9862] macsec1: left allmulticast mode [ 274.770422][ T9862] bridge3: left promiscuous mode [ 274.775728][ T9862] bridge3: left allmulticast mode [ 274.809702][ T9876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1014'. [ 274.850773][ T3015] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.865510][ T3015] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.880263][ T3015] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.888682][ T3015] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.924126][ T3015] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.953197][ T3015] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.964490][ T9894] sctp: [Deprecated]: syz.3.1018 (pid 9894) Use of int in maxseg socket option. [ 274.964490][ T9894] Use struct sctp_assoc_value instead [ 274.968625][ T3015] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.018933][ T3015] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.174185][ T9908] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 275.308867][ T9919] netlink: 'syz.1.1027': attribute type 13 has an invalid length. [ 275.327614][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 275.339882][ T9922] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1029'. [ 275.349846][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'. [ 275.360066][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 275.374362][ T9922] syz_tun: entered allmulticast mode [ 275.382733][ T9920] syz_tun: left allmulticast mode [ 275.515321][ T9930] atomic_op ffff88807a16b198 conn xmit_atomic 0000000000000000 [ 275.528817][ T9932] netlink: 'syz.2.1032': attribute type 1 has an invalid length. [ 275.541375][ T9932] netlink: 15902 bytes leftover after parsing attributes in process `syz.2.1032'. [ 275.611847][ T9937] x_tables: duplicate underflow at hook 2 [ 275.664569][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 275.679316][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1035'. [ 276.033208][ T9965] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.040552][ T9965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.048306][ T9965] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.055774][ T9965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.084842][ T9971] netlink: 'syz.4.1042': attribute type 10 has an invalid length. [ 276.137631][ T9965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.206725][ T9971] team0: entered promiscuous mode [ 276.212492][ T9971] team_slave_0: entered promiscuous mode [ 276.220022][ T9971] team_slave_1: entered promiscuous mode [ 276.442144][ T9993] syzkaller1: entered promiscuous mode [ 276.470291][ T9993] syzkaller1: entered allmulticast mode [ 276.770499][T10005] netlink: 'syz.3.1053': attribute type 2 has an invalid length. [ 276.818653][ T9982] syzkaller0: entered promiscuous mode [ 276.835319][ T9982] syzkaller0: entered allmulticast mode [ 277.079561][T10013] wg1 speed is unknown, defaulting to 1000 [ 277.527170][T10036] Cannot find set identified by id 3 to match [ 278.045651][T10052] netlink: 'syz.2.1064': attribute type 1 has an invalid length. [ 278.192547][T10052] bond1: (slave bridge4): making interface the new active one [ 278.231371][T10052] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 278.251143][T10062] gretap1: entered promiscuous mode [ 278.256708][T10062] gretap1: entered allmulticast mode [ 278.268457][T10062] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 278.300441][T10067] syzkaller1: entered allmulticast mode [ 278.328688][T10067] wg1 speed is unknown, defaulting to 1000 [ 278.732767][T10085] wg1 speed is unknown, defaulting to 1000 [ 278.757735][T10086] netlink: 'syz.0.1071': attribute type 10 has an invalid length. [ 278.825007][T10090] syzkaller1: entered promiscuous mode [ 278.844995][T10090] syzkaller1: entered allmulticast mode [ 279.129821][T10105] netlink: 'syz.0.1078': attribute type 9 has an invalid length. [ 279.246301][T10095] wg1 speed is unknown, defaulting to 1000 [ 279.323093][T10114] wg1 speed is unknown, defaulting to 1000 [ 279.550276][T10111] syzkaller1: entered promiscuous mode [ 279.555969][T10111] syzkaller1: entered allmulticast mode [ 280.078371][T10153] wg1 speed is unknown, defaulting to 1000 [ 280.366994][T10177] batadv0: entered promiscuous mode [ 280.372945][T10177] macsec1: entered promiscuous mode [ 280.384092][T10177] batadv0: left promiscuous mode [ 280.710480][T10188] __nla_validate_parse: 28 callbacks suppressed [ 280.710515][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 280.727852][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 280.911572][T10194] syzkaller0: entered promiscuous mode [ 280.917384][T10194] syzkaller0: entered allmulticast mode [ 281.322796][T10211] netlink: 'syz.2.1107': attribute type 21 has an invalid length. [ 281.373541][T10212] netlink: zone id is out of range [ 281.378888][T10212] netlink: zone id is out of range [ 281.385089][T10212] netlink: set zone limit has 4 unknown bytes [ 281.396303][T10212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1106'. [ 281.407777][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1106'. [ 281.433429][T10185] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 281.868000][T10231] netlink: 'syz.2.1112': attribute type 13 has an invalid length. [ 281.876814][T10231] netlink: 'syz.2.1112': attribute type 17 has an invalid length. [ 281.996462][T10231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.116424][T10230] wg1 speed is unknown, defaulting to 1000 [ 282.326819][T10241] netlink: 'syz.0.1114': attribute type 10 has an invalid length. [ 282.568664][T10254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1116'. [ 282.588635][T10254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1116'. [ 282.788824][T10269] netlink: 'syz.0.1123': attribute type 4 has an invalid length. [ 282.797403][T10268] netlink: 'syz.0.1123': attribute type 4 has an invalid length. [ 283.279835][T10288] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 283.292746][T10287] sctp: [Deprecated]: syz.3.1129 (pid 10287) Use of int in maxseg socket option. [ 283.292746][T10287] Use struct sctp_assoc_value instead [ 283.522805][T10296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1132'. [ 283.563525][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 283.842703][T10318] netlink: 'syz.3.1136': attribute type 13 has an invalid length. [ 283.869328][T10318] netlink: 'syz.3.1136': attribute type 17 has an invalid length. [ 283.919459][T10318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.072118][T10317] wg1 speed is unknown, defaulting to 1000 [ 284.085537][T10320] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1137'. [ 284.495138][T10329] wg1 speed is unknown, defaulting to 1000 [ 284.988511][T10348] netlink: 'syz.2.1142': attribute type 3 has an invalid length. [ 285.100796][T10352] syz.1.1143: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 285.116862][T10352] CPU: 0 UID: 0 PID: 10352 Comm: syz.1.1143 Not tainted syzkaller #0 PREEMPT(full) [ 285.116895][T10352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.116918][T10352] Call Trace: [ 285.116927][T10352] [ 285.116937][T10352] dump_stack_lvl+0x189/0x250 [ 285.116982][T10352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.117008][T10352] ? __pfx__printk+0x10/0x10 [ 285.117032][T10352] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 285.117070][T10352] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 285.117104][T10352] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 285.117140][T10352] warn_alloc+0x214/0x310 [ 285.117175][T10352] ? stack_depot_save_flags+0x40/0x860 [ 285.117218][T10352] ? __pfx_warn_alloc+0x10/0x10 [ 285.117254][T10352] ? kasan_save_track+0x3e/0x80 [ 285.117283][T10352] ? __kasan_kmalloc+0x93/0xb0 [ 285.117317][T10352] ? xsk_setsockopt+0x4dc/0x8d0 [ 285.117339][T10352] ? do_sock_setsockopt+0x179/0x1b0 [ 285.117363][T10352] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 285.117386][T10352] ? do_syscall_64+0xfa/0xfa0 [ 285.117413][T10352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.117447][T10352] __vmalloc_node_range_noprof+0x125/0x12d0 [ 285.117516][T10352] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 285.117554][T10352] ? __kasan_kmalloc+0x93/0xb0 [ 285.117595][T10352] vmalloc_user_noprof+0xad/0xf0 [ 285.117628][T10352] ? xskq_create+0xbf/0x170 [ 285.117653][T10352] xskq_create+0xbf/0x170 [ 285.117681][T10352] xsk_init_queue+0xb0/0x110 [ 285.117711][T10352] xsk_setsockopt+0x4dc/0x8d0 [ 285.117738][T10352] ? __pfx_xsk_setsockopt+0x10/0x10 [ 285.117772][T10352] ? __pfx_aa_sk_perm+0x10/0x10 [ 285.117804][T10352] ? aa_sock_opt_perm+0xff/0x1b0 [ 285.117837][T10352] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 285.117855][T10352] ? __pfx_xsk_setsockopt+0x10/0x10 [ 285.117878][T10352] do_sock_setsockopt+0x179/0x1b0 [ 285.117906][T10352] __x64_sys_setsockopt+0x13f/0x1b0 [ 285.117937][T10352] do_syscall_64+0xfa/0xfa0 [ 285.117961][T10352] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.117987][T10352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.118007][T10352] ? clear_bhb_loop+0x60/0xb0 [ 285.118034][T10352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.118056][T10352] RIP: 0033:0x7fe45e98eec9 [ 285.118090][T10352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.118109][T10352] RSP: 002b:00007fe45f7ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.118133][T10352] RAX: ffffffffffffffda RBX: 00007fe45ebe6090 RCX: 00007fe45e98eec9 [ 285.118150][T10352] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 285.118163][T10352] RBP: 00007fe45ea11f91 R08: 0000000000000004 R09: 0000000000000000 [ 285.118177][T10352] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.118200][T10352] R13: 00007fe45ebe6128 R14: 00007fe45ebe6090 R15: 00007fff6cb82208 [ 285.118245][T10352] [ 285.118340][T10352] Mem-Info: [ 285.438435][T10352] active_anon:3927 inactive_anon:0 isolated_anon:0 [ 285.438435][T10352] active_file:3204 inactive_file:39937 isolated_file:0 [ 285.438435][T10352] unevictable:768 dirty:146 writeback:0 [ 285.438435][T10352] slab_reclaimable:11605 slab_unreclaimable:168000 [ 285.438435][T10352] mapped:29002 shmem:1364 pagetables:931 [ 285.438435][T10352] sec_pagetables:0 bounce:0 [ 285.438435][T10352] kernel_misc_reclaimable:0 [ 285.438435][T10352] free:1255253 free_pcp:20323 free_cma:0 [ 285.469497][T10355] macsec1: entered promiscuous mode [ 285.511496][T10352] Node 0 active_anon:15708kB inactive_anon:0kB active_file:12816kB inactive_file:159552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120008kB dirty:584kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12868kB pagetables:3568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 285.546612][T10352] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 285.598043][T10352] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.611468][T10355] batadv0: entered promiscuous mode [ 285.630695][T10352] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 285.641365][T10352] Node 0 DMA32 free:1120256kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15608kB inactive_anon:0kB active_file:12816kB inactive_file:159552kB unevictable:1536kB writepending:584kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:60404kB local_pcp:39720kB free_cma:0kB [ 285.676342][T10352] lowmem_reserve[]: 0 0 1 1 1 [ 285.681398][T10352] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.734287][T10352] lowmem_reserve[]: 0 0 0 0 0 [ 285.745924][T10352] Node 1 Normal free:3885656kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20896kB local_pcp:10624kB free_cma:0kB [ 285.780893][T10352] lowmem_reserve[]: 0 0 0 0 0 [ 285.785797][T10352] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 285.803432][T10352] Node 0 DMA32: 1741*4kB (UME) 590*8kB (UM) 252*16kB (UM) 513*32kB (UM) 165*64kB (UME) 66*128kB (UM) 77*256kB (UM) 50*512kB (UME) 22*1024kB (UM) 11*2048kB (UM) 239*4096kB (UM) = 1120452kB [ 285.862064][T10352] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 285.871418][T10366] veth1_to_bond: entered allmulticast mode [ 285.881916][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 285.891517][T10352] Node 1 Normal: 224*4kB (UME) 55*8kB (UME) 44*16kB (UME) 141*32kB (UME) 47*64kB (UME) 10*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 944*4096kB (M) = 3885656kB [ 285.891757][T10352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.891777][T10352] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 285.891797][T10352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.891816][T10352] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.891836][T10352] 44502 total pagecache pages [ 285.891862][T10352] 0 pages in swap cache [ 285.891872][T10352] Free swap = 124996kB [ 285.963393][T10352] Total swap = 124996kB [ 285.964825][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 285.967949][T10352] 2097051 pages RAM [ 285.982672][T10352] 0 pages HighMem/MovableOnly [ 285.987404][T10352] 424543 pages reserved [ 285.992246][T10352] 0 pages cma reserved [ 286.111279][T10366] veth1_to_bond (unregistering): left allmulticast mode [ 286.126148][T10377] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 286.140854][T10377] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.148501][T10377] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.181060][T10385] block nbd0: Unsupported socket: should be TCP or UNIX. [ 286.339944][T10394] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1155'. [ 286.458382][T10400] netlink: 'syz.1.1156': attribute type 64 has an invalid length. [ 286.507773][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 287.037021][T10417] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1160'. [ 287.184062][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.240152][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.488819][T10436] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1163'. [ 287.706535][T10445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1165'. [ 287.935904][T10441] vlan2: entered allmulticast mode [ 287.940579][T10457] trusted_key: syz.3.1168 sent an empty control message without MSG_MORE. [ 288.046551][T10460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1168'. [ 288.098267][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'. [ 289.622163][T10475] wg1 speed is unknown, defaulting to 1000 [ 289.855510][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 290.143150][T10513] 8021q: VLANs not supported on caif0 [ 290.389560][T10519] erspan0: entered promiscuous mode [ 290.394992][T10519] erspan0: entered allmulticast mode [ 290.550415][T10523] x_tables: duplicate underflow at hook 3 [ 290.908128][T10535] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 291.206245][T10545] wg1 speed is unknown, defaulting to 1000 [ 291.671065][T10577] netlink: 'syz.1.1197': attribute type 1 has an invalid length. [ 291.851013][T10583] __nla_validate_parse: 5 callbacks suppressed [ 291.851037][T10583] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1200'. [ 292.197908][T10587] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 292.217197][T10587] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1202'. [ 292.228579][T10587] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1202'. [ 292.598638][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 292.611673][T10610] netlink: 'syz.3.1207': attribute type 13 has an invalid length. [ 292.624014][T10610] netlink: 'syz.3.1207': attribute type 17 has an invalid length. [ 292.638264][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 292.660773][T10610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.787865][T10607] wg1 speed is unknown, defaulting to 1000 [ 292.828658][T10622] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 292.862952][T10622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.042724][T10625] wg1 speed is unknown, defaulting to 1000 [ 293.326268][T10638] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1217'. [ 293.372676][T10638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1217'. [ 293.421346][T10640] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 293.597838][T10649] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1220'. [ 293.706790][T10653] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.1221'. [ 293.773061][ T6246] IPVS: starting estimator thread 0... [ 293.879555][T10657] IPVS: using max 27 ests per chain, 64800 per kthread [ 294.539436][ T6262] IPVS: starting estimator thread 0... [ 294.639444][T10697] IPVS: using max 26 ests per chain, 62400 per kthread [ 294.678159][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 294.788838][T10706] bond2: option broadcast_neighbor: invalid value (5) [ 294.918887][T10706] bond2 (unregistering): Released all slaves [ 295.131592][T10728] netlink: 'syz.1.1240': attribute type 16 has an invalid length. [ 295.614372][T10749] wg1 speed is unknown, defaulting to 1000 [ 295.787185][T10757] wg1 speed is unknown, defaulting to 1000 [ 296.364964][T10773] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 296.734725][T10780] netlink: 'syz.3.1253': attribute type 4 has an invalid length. [ 296.799781][T10783] xt_ecn: cannot match TCP bits for non-tcp packets [ 296.904238][T10781] vlan2: entered promiscuous mode [ 296.923859][T10781] bond0: entered promiscuous mode [ 297.005561][T10779] netlink: 'syz.1.1254': attribute type 14 has an invalid length. [ 297.105130][T10789] ip6gre1: entered allmulticast mode [ 297.132350][T10792] ip6gretap0: entered promiscuous mode [ 297.155275][T10792] macsec0: entered promiscuous mode [ 297.186515][T10792] ip6gretap0: left promiscuous mode [ 297.268871][T10797] __nla_validate_parse: 8 callbacks suppressed [ 297.268892][T10797] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1257'. [ 297.286988][T10796] netdevsim0: mtu less than device minimum [ 297.537766][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 297.728228][T10819] bridge5: entered promiscuous mode [ 297.739560][T10819] bridge5: entered allmulticast mode [ 297.750395][T10819] team0: Port device bridge5 added [ 298.665911][T10840] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1269'. [ 298.677901][T10841] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1269'. [ 299.001104][T10831] netlink: 'syz.1.1267': attribute type 3 has an invalid length. [ 299.009024][T10831] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1267'. [ 299.241659][T10862] wg1 speed is unknown, defaulting to 1000 [ 299.587238][T10876] netlink: 'syz.3.1280': attribute type 10 has an invalid length. [ 299.595570][T10876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1280'. [ 299.606461][T10876] dummy0: entered promiscuous mode [ 299.613674][T10876] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 299.796355][T10882] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1283'. [ 300.179012][T10900] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1286'. [ 301.334403][T10941] wg1 speed is unknown, defaulting to 1000 [ 301.535607][T10944] dvmrp1: entered allmulticast mode [ 301.568264][T10944] dvmrp0: left allmulticast mode [ 301.574875][T10944] dvmrp1: left allmulticast mode [ 302.505490][T10978] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1308'. [ 302.662799][T10986] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.1311'. [ 303.316768][T11015] netlink: 'syz.1.1318': attribute type 1 has an invalid length. [ 303.552104][T11028] IPv6: Can't replace route, no match found [ 303.630410][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1322'. [ 303.679258][T11033] wg1 speed is unknown, defaulting to 1000 [ 303.753365][T11040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1324'. [ 303.867175][T11048] batadv_slave_1: entered promiscuous mode [ 303.943437][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1325'. [ 304.027603][T11053] ip6erspan0: entered allmulticast mode [ 304.107440][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'. [ 304.120272][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'. [ 304.673560][T11047] batadv_slave_1: left promiscuous mode [ 304.855124][T11087] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 304.953560][T11098] netlink: 'syz.4.1336': attribute type 1 has an invalid length. [ 304.979489][T11098] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.1336'. [ 305.007613][T11090] syzkaller1: entered promiscuous mode [ 305.014987][T11090] syzkaller1: entered allmulticast mode [ 305.024121][T11092] wg1 speed is unknown, defaulting to 1000 [ 305.038276][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1336'. [ 305.047548][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1336'. [ 305.069598][T11087] netlink: 'syz.4.1336': attribute type 18 has an invalid length. [ 305.079935][T11087] netlink: 'syz.4.1336': attribute type 20 has an invalid length. [ 305.303847][T11112] netlink: 'syz.3.1344': attribute type 1 has an invalid length. [ 305.516320][T11125] netlink: 'syz.3.1347': attribute type 1 has an invalid length. [ 305.645410][T11133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.691235][T11133] gtp1: entered promiscuous mode [ 305.696486][T11133] gtp1: entered allmulticast mode [ 305.706267][T11133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.028960][T11154] netlink: 'syz.1.1353': attribute type 13 has an invalid length. [ 306.111508][T11164] netlink: 'syz.4.1357': attribute type 16 has an invalid length. [ 306.135657][T11164] netlink: 'syz.4.1357': attribute type 16 has an invalid length. [ 306.254708][T11167] netlink: 'syz.0.1358': attribute type 1 has an invalid length. [ 306.321403][T11175] netlink: 'syz.1.1361': attribute type 11 has an invalid length. [ 307.031560][T11211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.045342][T11210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.119674][T11228] wg1 speed is unknown, defaulting to 1000 [ 307.406843][T11235] bond2: (slave gretap1): making interface the new active one [ 307.421369][T11235] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 307.484234][T11231] vlan2: entered allmulticast mode [ 307.490187][T11231] bond2: entered allmulticast mode [ 307.495658][T11231] gretap1: entered allmulticast mode [ 307.502794][T11231] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 307.513570][T11256] ieee802154 phy1 wpan1: encryption failed: -90 [ 307.695719][T11261] ieee802154 phy1 wpan1: encryption failed: -22 [ 307.776062][T11271] __nla_validate_parse: 16 callbacks suppressed [ 307.776082][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 307.815414][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1385'. [ 308.371182][T11293] wg1 speed is unknown, defaulting to 1000 [ 308.510607][T11310] validate_nla: 2 callbacks suppressed [ 308.510630][T11310] netlink: 'syz.3.1398': attribute type 4 has an invalid length. [ 308.524978][T11299] wg1 speed is unknown, defaulting to 1000 [ 308.579329][T11311] netlink: 'syz.3.1398': attribute type 4 has an invalid length. [ 308.580299][T11291] wg1 speed is unknown, defaulting to 1000 [ 308.658992][T11313] netlink: 'syz.4.1399': attribute type 30 has an invalid length. [ 308.699183][T11295] wg1 speed is unknown, defaulting to 1000 [ 308.779495][T11304] wg1 speed is unknown, defaulting to 1000 [ 309.060962][T11329] batadv_slave_1: entered promiscuous mode [ 309.138953][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 309.271980][T11333] bridge_slave_1: left allmulticast mode [ 309.278738][T11333] bridge_slave_1: left promiscuous mode [ 309.301043][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.315541][T11333] bridge_slave_0: left promiscuous mode [ 309.340893][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.505969][ T2946] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.514869][ T2946] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.528425][T11332] wg1 speed is unknown, defaulting to 1000 [ 309.528451][ T2946] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.554369][T11328] batadv_slave_1: left promiscuous mode [ 309.604177][ T2946] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.708187][T11349] tipc: Started in network mode [ 309.718843][T11349] tipc: Node identity ac14140f, cluster identity 4711 [ 309.730740][T11349] tipc: Enabled bearer , priority 10 [ 310.041077][T11358] macvlan0: mtu less than device minimum [ 310.443248][T11386] sctp: [Deprecated]: syz.2.1420 (pid 11386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.443248][T11386] Use struct sctp_sack_info instead [ 310.538578][T11394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1416'. [ 310.551117][T11394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1416'. [ 310.717545][T11402] netlink: 'syz.0.1421': attribute type 13 has an invalid length. [ 310.726736][T11402] netlink: 'syz.0.1421': attribute type 17 has an invalid length. [ 310.736432][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 310.747098][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 310.796451][T11402] erspan0: left promiscuous mode [ 310.807372][T11402] erspan0: left allmulticast mode [ 310.859245][ T6261] tipc: Node number set to 2886997007 [ 310.936833][T11402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.947600][T11402] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.966604][T11402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.100363][T11413] sctp: [Deprecated]: syz.3.1425 (pid 11413) Use of int in max_burst socket option. [ 311.100363][T11413] Use struct sctp_assoc_value instead [ 311.164662][T11416] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1426'. [ 311.442292][T11440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1431'. [ 311.711942][T11453] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 312.068921][T11456] netlink: 'syz.1.1435': attribute type 1 has an invalid length. [ 312.089686][T11456] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1435'. [ 313.034077][T11491] dvmrp0: entered allmulticast mode [ 313.622754][T11533] __nla_validate_parse: 2 callbacks suppressed [ 313.622778][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1451'. [ 313.928780][T11545] wg1 speed is unknown, defaulting to 1000 [ 314.053908][T11551] netlink: 'syz.3.1457': attribute type 4 has an invalid length. [ 314.072680][T11542] macvtap1: entered allmulticast mode [ 314.079908][T11542] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 314.097788][T11542] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 314.482877][T11574] sctp: [Deprecated]: syz.0.1460 (pid 11574) Use of int in maxseg socket option. [ 314.482877][T11574] Use struct sctp_assoc_value instead [ 314.598117][T11574] syzkaller1: entered promiscuous mode [ 314.603910][T11574] syzkaller1: entered allmulticast mode [ 314.640796][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 314.708798][T11575] wg1 speed is unknown, defaulting to 1000 [ 314.915162][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 315.514966][T11594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.517143][T11624] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1475'. [ 315.534983][T11626] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1474'. [ 315.535652][T11594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.555429][T11623] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1475'. [ 315.744618][T11594] veth3: left promiscuous mode [ 315.762957][T11594] ipip0: left promiscuous mode [ 315.803905][T11594] gretap1: left promiscuous mode [ 315.812978][T11594] gretap1: left allmulticast mode [ 315.827734][T11594] bridge5: left promiscuous mode [ 315.834414][T11594] bridge5: left allmulticast mode [ 315.842157][T11594] ip6erspan0: left allmulticast mode [ 315.894087][T11613] bond1: entered promiscuous mode [ 315.899885][T11613] bond1: entered allmulticast mode [ 315.905726][T11613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 315.920887][ T3015] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.930275][ T3015] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.957542][ T3015] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.968036][ T3015] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.979612][ T3015] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.989369][ T3015] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.998483][ T3015] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.011618][ T3015] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.064787][T11639] wg1 speed is unknown, defaulting to 1000 [ 316.102493][ T30] audit: type=1107 audit(1760301219.707:8): pid=11645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 316.201893][T11648] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1480'. [ 316.298004][T11657] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 316.497120][T11669] delete_channel: no stack [ 316.682415][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1488'. [ 316.841062][T11688] wg1 speed is unknown, defaulting to 1000 [ 316.974351][T11701] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1494'. [ 317.189830][T11722] wg1 speed is unknown, defaulting to 1000 [ 317.228894][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1500'. [ 317.317628][T11728] bond2: option ad_select: invalid value (34) [ 317.325891][T11728] bond2 (unregistering): Released all slaves [ 317.604846][T11739] netlink: 'syz.0.1504': attribute type 10 has an invalid length. [ 317.686851][T11710] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 317.713815][T11710] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 317.731756][T11743] netlink: 'syz.1.1505': attribute type 4 has an invalid length. [ 317.734766][T11710] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 317.760012][T11710] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 317.760142][T11742] netlink: 'syz.1.1505': attribute type 4 has an invalid length. [ 317.784193][T11710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 317.791235][T11710] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 317.816230][T11710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 317.825660][T11710] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 318.369886][ T5837] Bluetooth: hci4: command 0x0401 tx timeout [ 318.377585][T11710] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 318.384284][T11710] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 318.507490][T11771] syzkaller1: entered promiscuous mode [ 318.514423][T11771] syzkaller1: entered allmulticast mode [ 318.582265][T11775] wg1 speed is unknown, defaulting to 1000 [ 318.840554][T11797] netlink: 'syz.0.1519': attribute type 1 has an invalid length. [ 318.916056][T11797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.966757][T11801] __nla_validate_parse: 5 callbacks suppressed [ 318.966777][T11801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1520'. [ 319.000406][T11801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1520'. [ 319.062850][T11803] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1518'. [ 319.556060][T11816] tipc: Enabled bearer , priority 0 [ 319.580448][T11816] syzkaller0: entered promiscuous mode [ 319.593526][T11816] syzkaller0: entered allmulticast mode [ 319.648282][T11816] tipc: Resetting bearer [ 319.699833][T11815] tipc: Resetting bearer [ 319.767380][T11815] tipc: Disabling bearer [ 319.826526][T11821] rdma_rxe: rxe_newlink: failed to add lo [ 319.870601][T11823] dummy0: left promiscuous mode [ 319.887731][T11823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.958005][T11818] lo speed is unknown, defaulting to 1000 [ 319.969112][T11818] lo speed is unknown, defaulting to 1000 [ 319.983049][T11818] lo speed is unknown, defaulting to 1000 [ 320.021453][T11818] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 320.144573][T11818] lo speed is unknown, defaulting to 1000 [ 320.221676][T11818] lo speed is unknown, defaulting to 1000 [ 320.291720][T11818] lo speed is unknown, defaulting to 1000 [ 320.302446][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 320.307418][T11818] lo speed is unknown, defaulting to 1000 [ 320.380120][T11818] lo speed is unknown, defaulting to 1000 [ 320.398547][T11851] tipc: Enabled bearer , priority 0 [ 320.429903][T11851] syzkaller0: entered promiscuous mode [ 320.461469][T11851] syzkaller0: entered allmulticast mode [ 320.503648][T11855] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.1536'. [ 320.591821][T11859] tipc: Resetting bearer [ 320.639530][T11858] netlink: 'syz.0.1537': attribute type 12 has an invalid length. [ 320.763865][T11863] tipc: Enabled bearer , priority 0 [ 320.807295][T11849] tipc: Resetting bearer [ 320.880081][T11849] tipc: Disabling bearer [ 320.922794][T11867] tipc: Disabling bearer [ 321.166736][T11882] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1544'. [ 321.313563][T11890] netlink: 'syz.3.1547': attribute type 83 has an invalid length. [ 321.332484][T11890] netlink: 'syz.3.1547': attribute type 4 has an invalid length. [ 321.359782][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1547'. [ 321.388436][T11890] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1547'. [ 321.957371][T11918] wg1 speed is unknown, defaulting to 1000 [ 321.964896][T11923] tun0: tun_chr_ioctl cmd 2147767521 [ 321.974355][T11918] lo speed is unknown, defaulting to 1000 [ 321.980978][T11923] tun0: tun_chr_ioctl cmd 1074025675 [ 322.000803][T11923] tun0: persist enabled [ 322.006051][T11923] tun0: tun_chr_ioctl cmd 1074025675 [ 322.012376][T11923] tun0: persist disabled [ 322.033930][T11924] netlink: 'syz.4.1555': attribute type 5 has an invalid length. [ 322.113146][T11929] netlink: 'syz.4.1555': attribute type 5 has an invalid length. [ 322.380200][T11936] netlink: 'syz.4.1556': attribute type 2 has an invalid length. [ 322.608107][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.791948][T11952] netlink: 'syz.4.1560': attribute type 5 has an invalid length. [ 323.025273][T11943] wg1 speed is unknown, defaulting to 1000 [ 323.051073][T11943] lo speed is unknown, defaulting to 1000 [ 323.074422][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'. [ 323.235605][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'. [ 325.860651][T11978] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 325.886394][T11978] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 325.928092][T11978] tipc: Enabled bearer , priority 0 [ 325.946371][T11978] syzkaller0: entered promiscuous mode [ 325.960373][T11978] syzkaller0: entered allmulticast mode [ 326.185815][T11978] tipc: Resetting bearer [ 326.232483][T12000] netlink: 'syz.4.1573': attribute type 4 has an invalid length. [ 326.241278][T11976] tipc: Resetting bearer [ 326.245805][T12000] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1573'. [ 326.291813][T11976] tipc: Disabling bearer [ 326.614838][T12026] netlink: 'syz.4.1582': attribute type 21 has an invalid length. [ 326.668130][T12018] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1580'. [ 326.997752][T12042] wg1 speed is unknown, defaulting to 1000 [ 327.017513][T12042] lo speed is unknown, defaulting to 1000 [ 327.717322][T12073] sctp: [Deprecated]: syz.4.1593 (pid 12073) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.717322][T12073] Use struct sctp_sack_info instead [ 328.180339][T12089] netlink: 'syz.0.1596': attribute type 6 has an invalid length. [ 328.556799][T12094] ip6tnl0: Caught tx_queue_len zero misconfig [ 328.606720][T12094] batadv1: entered promiscuous mode [ 328.612447][T12094] batadv1: entered allmulticast mode [ 329.511027][T12157] wg1 speed is unknown, defaulting to 1000 [ 329.530133][T12157] lo speed is unknown, defaulting to 1000 [ 329.877267][T12179] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 329.910414][T12179] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 330.587124][T12209] syzkaller1: entered promiscuous mode [ 330.597394][T12209] syzkaller1: entered allmulticast mode [ 330.610903][T12209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.983522][T12226] sctp: [Deprecated]: syz.4.1633 (pid 12226) Use of int in max_burst socket option deprecated. [ 330.983522][T12226] Use struct sctp_assoc_value instead [ 331.068556][T12236] 8021q: VLANs not supported on ip6tnl0 [ 331.106997][T12234] wg1 speed is unknown, defaulting to 1000 [ 331.125558][T12234] lo speed is unknown, defaulting to 1000 [ 331.421019][T12244] wg1 speed is unknown, defaulting to 1000 [ 331.464603][T12244] lo speed is unknown, defaulting to 1000 [ 332.476492][T12289] tipc: Enabled bearer , priority 0 [ 332.746450][T12295] syzkaller0: entered promiscuous mode [ 332.753343][T12295] syzkaller0: entered allmulticast mode [ 332.763952][T12295] tipc: Resetting bearer [ 332.830530][T12281] tipc: Resetting bearer [ 332.975625][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1650'. [ 333.353850][T12316] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1652'. [ 333.417205][T12315] Can't find ip_set type hash:ip$mec [ 334.901753][T12281] tipc: Disabling bearer [ 334.948804][T12327] wg1 speed is unknown, defaulting to 1000 [ 335.089446][T12327] lo speed is unknown, defaulting to 1000 [ 335.278169][T12343] netlink: 'syz.4.1656': attribute type 5 has an invalid length. [ 335.440134][T12338] wg1 speed is unknown, defaulting to 1000 [ 335.515394][T12348] wg1 speed is unknown, defaulting to 1000 [ 335.523760][T12338] lo speed is unknown, defaulting to 1000 [ 335.545384][T12348] lo speed is unknown, defaulting to 1000 [ 335.570539][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'. [ 336.364642][T12369] wg1 speed is unknown, defaulting to 1000 [ 336.373621][T12369] lo speed is unknown, defaulting to 1000 [ 336.592603][T12379] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 336.763190][T12386] wg1 speed is unknown, defaulting to 1000 [ 336.784431][T12386] lo speed is unknown, defaulting to 1000 [ 336.929847][T12394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1668'. [ 336.940885][T12394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1668'. [ 336.951062][T12394] netlink: 'syz.4.1668': attribute type 4 has an invalid length. [ 336.960818][T12394] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1668'. [ 337.466598][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1674'. [ 337.473028][T12416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1673'. [ 337.556872][T12420] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1676'. [ 337.846954][T12431] wg1 speed is unknown, defaulting to 1000 [ 337.930021][T12441] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1681'. [ 338.153904][T12431] lo speed is unknown, defaulting to 1000 [ 338.407963][T12459] netlink: 'syz.4.1686': attribute type 29 has an invalid length. [ 339.078786][T12487] __nla_validate_parse: 1 callbacks suppressed [ 339.078808][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1694'. [ 339.099690][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1694'. [ 339.184570][T12484] wg1 speed is unknown, defaulting to 1000 [ 339.192479][T12484] lo speed is unknown, defaulting to 1000 [ 339.283928][T12497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1698'. [ 339.632898][T12515] netlink: 'syz.2.1704': attribute type 3 has an invalid length. [ 339.663127][T12515] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1704'. [ 340.943608][T12543] netlink: 'syz.0.1712': attribute type 4 has an invalid length. [ 340.963133][T12543] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1712'. [ 342.904109][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 343.120058][T12566] wg1 speed is unknown, defaulting to 1000 [ 343.139349][T12566] lo speed is unknown, defaulting to 1000 [ 343.166859][T12568] wg1 speed is unknown, defaulting to 1000 [ 343.184166][T12574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1720'. [ 343.279496][T12568] lo speed is unknown, defaulting to 1000 [ 343.288626][T12567] wg1 speed is unknown, defaulting to 1000 [ 343.357239][T12567] lo speed is unknown, defaulting to 1000 [ 343.620025][T12591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1725'. [ 343.886236][T12597] netlink: 'syz.4.1726': attribute type 10 has an invalid length. [ 343.939970][T12600] syzkaller1: entered promiscuous mode [ 343.946594][T12600] syzkaller1: entered allmulticast mode [ 343.977306][T12597] dummy0: entered promiscuous mode [ 343.996083][T12597] team0: Port device dummy0 added [ 344.236970][T12617] wg1 speed is unknown, defaulting to 1000 [ 344.253516][T12621] netlink: 'syz.4.1733': attribute type 10 has an invalid length. [ 344.262220][T12621] team0: left promiscuous mode [ 344.267360][T12621] team_slave_0: left promiscuous mode [ 344.278319][T12621] team_slave_1: left promiscuous mode [ 344.285234][T12621] dummy0: left promiscuous mode [ 344.311264][T12621] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.323064][T12621] bond0: (slave team0): Enslaving as an active interface with an up link [ 344.332758][T12617] lo speed is unknown, defaulting to 1000 [ 345.754868][T12658] 8021q: VLANs not supported on bond0 [ 345.767001][T12664] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 345.772317][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1745'. [ 345.816203][T12663] bridge3: entered allmulticast mode [ 345.842731][T12666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1745'. [ 345.874178][T12663] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 345.919923][T12672] tipc: Enabled bearer , priority 0 [ 345.929821][T12673] syzkaller0: entered promiscuous mode [ 345.938938][T12673] syzkaller0: entered allmulticast mode [ 345.946917][T12674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1748'. [ 346.068867][T12685] tipc: Resetting bearer [ 346.184770][T12685] tipc: Resetting bearer [ 346.225450][T12685] tipc: Disabling bearer [ 346.434384][T12714] netlink: 'syz.4.1756': attribute type 1 has an invalid length. [ 346.514013][T12718] bond4: (slave gretap1): making interface the new active one [ 346.526622][T12718] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 346.545339][T12714] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1756'. [ 346.602443][T12723] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1759'. [ 347.012106][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 347.089102][T12745] gretap0: entered promiscuous mode [ 347.097116][T12740] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 347.212570][T12754] tipc: Enabled bearer , priority 10 [ 347.290604][T12759] lo: Caught tx_queue_len zero misconfig [ 347.359469][T12767] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1772'. [ 347.415784][T12767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 347.467906][ T6262] lo speed is unknown, defaulting to 1000 [ 347.575061][T12783] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1776'. [ 347.626486][T12789] syzkaller1: entered promiscuous mode [ 347.632953][T12789] syzkaller1: entered allmulticast mode [ 347.694834][T12793] syzkaller1: entered allmulticast mode [ 347.717461][T12791] wg1 speed is unknown, defaulting to 1000 [ 347.726321][T12791] lo speed is unknown, defaulting to 1000 [ 347.768877][T12794] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1779'. [ 347.875677][T12798] netlink: 'syz.1.1780': attribute type 1 has an invalid length. [ 347.923265][T12798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 348.454372][T12803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1781'. [ 349.174053][T12835] 8021q: adding VLAN 0 to HW filter on device bond5 [ 349.225686][T12835] bond5: (slave macsec0): Error -34 calling dev_set_mtu [ 349.858649][T12873] wg1 speed is unknown, defaulting to 1000 [ 349.927517][T12873] lo speed is unknown, defaulting to 1000 [ 350.765849][T12915] tipc: Enabled bearer , priority 0 [ 350.779636][T12915] tipc: Resetting bearer [ 350.810663][T12914] tipc: Disabling bearer [ 350.977266][T12919] __nla_validate_parse: 11 callbacks suppressed [ 350.977287][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'. [ 350.993529][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'. [ 351.285156][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1822'. [ 351.341774][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1822'. [ 351.614218][T12957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.627119][T12959] netlink: 'syz.2.1827': attribute type 13 has an invalid length. [ 351.642118][T12959] netlink: 'syz.2.1827': attribute type 17 has an invalid length. [ 351.708137][T12955] wg1 speed is unknown, defaulting to 1000 [ 351.772968][T12961] netlink: 'syz.4.1825': attribute type 1 has an invalid length. [ 351.789989][T12961] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1825'. [ 351.849344][T12961] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1825'. [ 351.960874][T12959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.994582][T12959] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.024584][T12959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.111310][T12955] lo speed is unknown, defaulting to 1000 [ 352.113693][T12960] wg1 speed is unknown, defaulting to 1000 [ 352.164536][T12967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1829'. [ 352.195051][T12967] IPv6: sit2: Disabled Multicast RS [ 352.202560][T12967] sit2: entered allmulticast mode [ 352.208731][T12963] wg1 speed is unknown, defaulting to 1000 [ 352.209402][T12960] lo speed is unknown, defaulting to 1000 [ 352.258079][T12963] lo speed is unknown, defaulting to 1000 [ 352.421463][T12971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1830'. [ 352.754742][T12980] netlink: 'syz.1.1833': attribute type 1 has an invalid length. [ 352.800665][T12980] bond4 (unregistering): Released all slaves [ 353.470460][T12999] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004 [ 353.643621][T13004] wg1 speed is unknown, defaulting to 1000 [ 353.707120][T13004] lo speed is unknown, defaulting to 1000 [ 353.853935][T13018] wg1 speed is unknown, defaulting to 1000 [ 353.879361][T13025] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1840'. [ 353.966405][T13018] lo speed is unknown, defaulting to 1000 [ 354.055789][T13024] netlink: 'syz.1.1841': attribute type 4 has an invalid length. [ 354.078787][T13024] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1841'. [ 354.397960][T13053] bridge4: entered allmulticast mode [ 354.512579][T13052] wg1 speed is unknown, defaulting to 1000 [ 354.523395][T13052] lo speed is unknown, defaulting to 1000 [ 355.082014][T13093] netlink: 'syz.4.1855': attribute type 1 has an invalid length. [ 355.574650][T13119] netlink: 'syz.3.1862': attribute type 8 has an invalid length. [ 355.666564][T13128] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 355.763356][T13133] syzkaller1: entered promiscuous mode [ 355.780440][T13133] syzkaller1: entered allmulticast mode [ 355.860492][T13138] tipc: Enabled bearer , priority 0 [ 355.869777][T13143] syzkaller0: entered promiscuous mode [ 355.876837][T13143] syzkaller0: entered allmulticast mode [ 355.994576][T13138] tipc: Resetting bearer [ 356.032278][T13147] netlink: 'syz.2.1871': attribute type 1 has an invalid length. [ 356.041529][T13137] tipc: Resetting bearer [ 356.051559][T13147] __nla_validate_parse: 5 callbacks suppressed [ 356.051583][T13147] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1871'. [ 356.078176][T13137] tipc: Disabling bearer [ 356.090009][T13149] bond0: (slave gretap0): Error: Device type is different from other slaves [ 356.160884][T13147] wg1 speed is unknown, defaulting to 1000 [ 356.178972][T13147] lo speed is unknown, defaulting to 1000 [ 356.303309][T13163] batadv2: entered promiscuous mode [ 356.387203][T13167] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 356.733827][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 356.760163][T13188] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 356.890504][T13200] bond6: (slave gretap2): making interface the new active one [ 356.900283][T13200] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 356.935556][T13203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1884'. [ 357.076454][T13207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1886'. [ 357.535056][T13228] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1892'. [ 357.555287][T13228] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1892'. [ 357.577330][T13228] netlink: 'syz.1.1892': attribute type 5 has an invalid length. [ 357.587886][T13229] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1892'. [ 357.599265][T13228] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1892'. [ 357.751456][T13243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1894'. [ 357.838207][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 359.391575][T13256] veth0_to_bridge: entered promiscuous mode [ 359.411281][T13256] veth0_to_bridge: entered allmulticast mode [ 359.476145][T13260] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 359.586409][T13262] wg1 speed is unknown, defaulting to 1000 [ 359.596200][T13262] lo speed is unknown, defaulting to 1000 [ 360.010962][T13287] warn_alloc: 2 callbacks suppressed [ 360.010989][T13287] syz.4.1909: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 360.036715][T13287] CPU: 0 UID: 0 PID: 13287 Comm: syz.4.1909 Not tainted syzkaller #0 PREEMPT(full) [ 360.036753][T13287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 360.036768][T13287] Call Trace: [ 360.036777][T13287] [ 360.036788][T13287] dump_stack_lvl+0x189/0x250 [ 360.036821][T13287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.036844][T13287] ? __pfx__printk+0x10/0x10 [ 360.036867][T13287] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 360.036898][T13287] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 360.036931][T13287] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 360.036967][T13287] warn_alloc+0x214/0x310 [ 360.037000][T13287] ? stack_depot_save_flags+0x40/0x860 [ 360.037029][T13287] ? __cgroup_account_cputime+0xe5/0x120 [ 360.037059][T13287] ? __pfx_warn_alloc+0x10/0x10 [ 360.037094][T13287] ? kasan_save_track+0x3e/0x80 [ 360.037124][T13287] ? __kasan_kmalloc+0x93/0xb0 [ 360.037158][T13287] ? xsk_setsockopt+0x4dc/0x8d0 [ 360.037179][T13287] ? do_sock_setsockopt+0x179/0x1b0 [ 360.037201][T13287] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 360.037222][T13287] ? do_syscall_64+0xfa/0xfa0 [ 360.037245][T13287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.037279][T13287] __vmalloc_node_range_noprof+0x125/0x12d0 [ 360.037344][T13287] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 360.037382][T13287] ? __kasan_kmalloc+0x93/0xb0 [ 360.037422][T13287] vmalloc_user_noprof+0xad/0xf0 [ 360.037454][T13287] ? xskq_create+0xbf/0x170 [ 360.037481][T13287] xskq_create+0xbf/0x170 [ 360.037510][T13287] xsk_init_queue+0xb0/0x110 [ 360.037537][T13287] xsk_setsockopt+0x4dc/0x8d0 [ 360.037561][T13287] ? __pfx_xsk_setsockopt+0x10/0x10 [ 360.037585][T13287] ? __pfx_aa_sk_perm+0x10/0x10 [ 360.037613][T13287] ? aa_sock_opt_perm+0xff/0x1b0 [ 360.037643][T13287] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 360.037675][T13287] ? __pfx_xsk_setsockopt+0x10/0x10 [ 360.037700][T13287] do_sock_setsockopt+0x179/0x1b0 [ 360.037731][T13287] __x64_sys_setsockopt+0x13f/0x1b0 [ 360.037763][T13287] do_syscall_64+0xfa/0xfa0 [ 360.037790][T13287] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.037816][T13287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.037836][T13287] ? clear_bhb_loop+0x60/0xb0 [ 360.037864][T13287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.037885][T13287] RIP: 0033:0x7fc818f8eec9 [ 360.037906][T13287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.037925][T13287] RSP: 002b:00007fc819eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 360.037950][T13287] RAX: ffffffffffffffda RBX: 00007fc8191e5fa0 RCX: 00007fc818f8eec9 [ 360.037966][T13287] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 360.037980][T13287] RBP: 00007fc819011f91 R08: 0000000000000004 R09: 0000000000000000 [ 360.037995][T13287] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.038009][T13287] R13: 00007fc8191e6038 R14: 00007fc8191e5fa0 R15: 00007ffcfceca668 [ 360.038047][T13287] [ 360.038057][T13287] Mem-Info: [ 360.373372][T13287] active_anon:3990 inactive_anon:0 isolated_anon:0 [ 360.373372][T13287] active_file:3204 inactive_file:39967 isolated_file:0 [ 360.373372][T13287] unevictable:3814 dirty:153 writeback:0 [ 360.373372][T13287] slab_reclaimable:11938 slab_unreclaimable:170370 [ 360.373372][T13287] mapped:36217 shmem:4407 pagetables:1030 [ 360.373372][T13287] sec_pagetables:0 bounce:0 [ 360.373372][T13287] kernel_misc_reclaimable:0 [ 360.373372][T13287] free:1248844 free_pcp:16829 free_cma:0 [ 360.427740][T13287] Node 0 active_anon:15960kB inactive_anon:0kB active_file:12816kB inactive_file:159672kB unevictable:13920kB isolated(anon):0kB isolated(file):0kB mapped:145168kB dirty:612kB writeback:0kB shmem:16392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13504kB pagetables:4064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 360.469915][T13287] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 360.512877][T13287] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.598858][T13287] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 360.619787][T13287] Node 0 DMA32 free:1092852kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26860kB inactive_anon:0kB active_file:12816kB inactive_file:159672kB unevictable:4020kB writepending:612kB zspages:0kB present:3129332kB managed:2561672kB mlocked:2588kB bounce:0kB free_pcp:47160kB local_pcp:27760kB free_cma:0kB [ 360.655872][T13287] lowmem_reserve[]: 0 0 1 1 1 [ 360.667657][T13287] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.705702][T13287] lowmem_reserve[]: 0 0 0 0 0 [ 360.725577][T13287] Node 1 Normal free:3886964kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19684kB local_pcp:9312kB free_cma:0kB [ 360.812467][T13287] lowmem_reserve[]: 0 0 0 0 0 [ 360.843469][T13287] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 360.893548][T13287] Node 0 DMA32: 2134*4kB (UME) 1233*8kB (UME) 404*16kB (UME) 521*32kB (UME) 187*64kB (UME) 113*128kB (UME) 87*256kB (UME) 44*512kB (UME) 16*1024kB (UM) 7*2048kB (UME) 232*4096kB (M) = 1093760kB [ 360.917215][T13287] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 360.976322][T13287] Node 1 Normal: 223*4kB (UME) 55*8kB (UME) 44*16kB (UME) 172*32kB (UME) 52*64kB (UME) 10*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 944*4096kB (M) = 3886964kB [ 361.008681][T13287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.025982][T13287] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 361.047426][T13287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.062394][T13287] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 361.079295][T13287] 47150 total pagecache pages [ 361.085346][T13287] 0 pages in swap cache [ 361.104248][T13287] Free swap = 124996kB [ 361.111111][T13287] Total swap = 124996kB [ 361.116757][T13287] 2097051 pages RAM [ 361.123844][T13287] 0 pages HighMem/MovableOnly [ 361.125938][T13303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.130004][T13287] 424543 pages reserved [ 361.156437][T13287] 0 pages cma reserved [ 361.249569][T13315] __nla_validate_parse: 6 callbacks suppressed [ 361.249601][T13315] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1915'. [ 361.393972][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1916'. [ 361.633756][T13333] netlink: 'syz.3.1919': attribute type 83 has an invalid length. [ 361.682218][T13334] tipc: Enabling of bearer rejected, failed to enable media [ 361.990829][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 362.052204][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 362.070465][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 362.092773][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 362.118067][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 362.147596][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 362.172426][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 362.194681][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 362.273056][T13347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.012960][T13384] chnl_net:caif_netlink_parms(): no params data found [ 364.009885][T13413] tipc: Enabling of bearer rejected, already enabled [ 365.370099][T13469] bond0: (slave team0): Releasing backup interface [ 366.675151][T13513] __nla_validate_parse: 18 callbacks suppressed [ 366.675175][T13513] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1966'. [ 366.807070][T13522] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1971'. [ 366.827898][T13522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1971'. [ 366.832876][T13517] ip6gre2: entered allmulticast mode [ 366.867999][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1966'. [ 366.944998][T13522] bond7: entered promiscuous mode [ 366.966954][T13522] 8021q: adding VLAN 0 to HW filter on device bond7 [ 366.978828][T13523] syzkaller0: entered promiscuous mode [ 366.985318][T13523] syzkaller0: entered allmulticast mode [ 367.260729][T13545] netlink: 'syz.4.1977': attribute type 1 has an invalid length. [ 367.310570][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 367.330768][T13559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1978'. [ 367.366468][T13559] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1978'. [ 367.366650][T13545] 8021q: adding VLAN 0 to HW filter on device bond8 [ 367.388605][T13549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1979'. [ 367.388719][T13559] netlink: 540 bytes leftover after parsing attributes in process `syz.3.1978'. [ 367.431807][T13549] tc_dump_action: action bad kind [ 367.437478][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1977'. [ 367.530781][T13566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.570373][T13566] bond8: (slave batadv0): making interface the new active one [ 367.606658][T13566] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 367.813476][T13545] bond8 (unregistering): (slave batadv0): Releasing active interface [ 367.837818][T13545] bond8 (unregistering): Released all slaves [ 367.852513][T13585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.896653][T13578] wg1 speed is unknown, defaulting to 1000 [ 367.907095][T13578] lo speed is unknown, defaulting to 1000 [ 368.278939][T13599] tipc: Enabled bearer , priority 0 [ 368.303988][T13599] syzkaller0: entered promiscuous mode [ 368.340262][T13599] syzkaller0: entered allmulticast mode [ 368.437355][T13600] netlink: 'syz.3.1989': attribute type 1 has an invalid length. [ 368.523478][T13612] sctp: [Deprecated]: syz.2.1992 (pid 13612) Use of int in max_burst socket option deprecated. [ 368.523478][T13612] Use struct sctp_assoc_value instead [ 368.559971][T13610] tipc: Resetting bearer [ 368.653652][T13590] tipc: Resetting bearer [ 368.700397][T13590] tipc: Disabling bearer [ 368.728717][T13614] wg1 speed is unknown, defaulting to 1000 [ 368.862497][T13614] lo speed is unknown, defaulting to 1000 [ 369.565055][T13638] netlink: 'syz.1.2000': attribute type 46 has an invalid length. [ 369.601646][T13634] wg1 speed is unknown, defaulting to 1000 [ 369.621967][T13646] netlink: 'syz.2.2002': attribute type 15 has an invalid length. [ 369.662967][T13634] lo speed is unknown, defaulting to 1000 [ 370.744227][T13679] wg1: entered promiscuous mode [ 370.752246][T13679] wg1: entered allmulticast mode [ 370.768983][ T6262] wg1 speed is unknown, defaulting to 1000 [ 370.778008][ T6262] syz0: Port: 1 Link ACTIVE [ 371.166517][T13689] netlink: 'syz.1.2013': attribute type 30 has an invalid length. [ 371.398159][T13692] wg1 speed is unknown, defaulting to 1000 [ 371.471600][T13700] wg1 speed is unknown, defaulting to 1000 [ 371.478817][T13692] lo speed is unknown, defaulting to 1000 [ 371.561430][T13700] lo speed is unknown, defaulting to 1000 [ 372.137109][T13738] __nla_validate_parse: 11 callbacks suppressed [ 372.137131][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2028'. [ 372.168407][T13740] syzkaller0: entered promiscuous mode [ 372.175552][T13740] syzkaller0: entered allmulticast mode [ 372.592306][T13762] sctp: [Deprecated]: syz.4.2034 (pid 13762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.592306][T13762] Use struct sctp_sack_info instead [ 372.712119][T13764] dvmrp8: entered allmulticast mode [ 372.872528][T13771] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2036'. [ 373.004472][T13771] syzkaller1: entered promiscuous mode [ 373.010791][T13771] syzkaller1: entered allmulticast mode [ 373.018483][T13760] wg1 speed is unknown, defaulting to 1000 [ 373.019732][T13774] syz_tun: entered allmulticast mode [ 373.032428][T13760] lo speed is unknown, defaulting to 1000 [ 373.185344][T13773] syz_tun: left allmulticast mode [ 373.690693][T13804] netlink: 'syz.3.2041': attribute type 74 has an invalid length. [ 373.800241][ C1] ------------[ cut here ]------------ [ 373.806382][ C1] ODEBUG: free active (active state 0) object: ffff888064b20490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 373.822072][ C1] WARNING: CPU: 1 PID: 13812 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 373.832012][ C1] Modules linked in: [ 373.836388][ C1] CPU: 1 UID: 0 PID: 13812 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 373.845877][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.851026][T13813] tipc: Enabled bearer , priority 0 [ 373.856388][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 373.856454][ C1] Code: 4c 89 ff e8 37 f9 8b fd 4d 8b 0f 48 c7 c7 80 7e c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 fa 77 e9 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 77 06 05 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 373.889790][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296 [ 373.895924][ C1] RAX: bfbfb8755d2a0900 RBX: dffffc0000000000 RCX: ffff8880287fdac0 [ 373.901105][T13814] tipc: Enabled bearer , priority 0 [ 373.904060][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 373.919271][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 373.927606][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffffffff8a3e0c40 [ 373.935938][ C1] R13: ffffffff8bc08000 R14: ffff888064b20490 R15: ffffffff8b6cf600 [ 373.944355][ C1] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 373.953823][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.960886][ C1] CR2: 00007f89310b2eb8 CR3: 0000000078610000 CR4: 00000000003526f0 [ 373.969129][ C1] Call Trace: [ 373.972720][ C1] [ 373.975494][T13813] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 373.975603][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 373.989447][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 373.994726][ C1] kfree+0x115/0x6d0 [ 373.995117][T13813] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 373.998686][ C1] rose_timer_expiry+0x4cb/0x600 [ 373.998723][ C1] ? call_timer_fn+0x155/0x5f0 [ 374.016960][ C1] call_timer_fn+0x17e/0x5f0 [ 374.021729][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 374.027438][ C1] ? call_timer_fn+0xbe/0x5f0 [ 374.032394][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 374.035212][T13818] syzkaller0: entered promiscuous mode [ 374.037743][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.048840][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.054783][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 374.055543][T13818] syzkaller0: entered allmulticast mode [ 374.060630][ C1] __run_timer_base+0x61a/0x860 [ 374.060707][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 374.060742][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 374.083950][ C1] run_timer_softirq+0xb7/0x180 [ 374.089103][ C1] handle_softirqs+0x283/0x870 [ 374.094106][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 374.098950][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 374.104469][ C1] __irq_exit_rcu+0xca/0x1f0 [ 374.109485][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 374.114960][ C1] irq_exit_rcu+0x9/0x30 [ 374.119306][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 374.125376][ C1] [ 374.128481][ C1] [ 374.131596][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 374.137737][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 374.144218][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 14 22 e1 0b 48 89 de 5b e9 f3 70 5a 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 10 91 92 65 8b 15 18 7c [ 374.164962][ C1] RSP: 0018:ffffc90002ec70d8 EFLAGS: 00000202 [ 374.171599][ C1] RAX: ffffffff8b443f90 RBX: 0000000000000001 RCX: 0000000000000000 [ 374.179868][ C1] RDX: ffff8880287fdac0 RSI: 0000000000000001 RDI: 0000000000000000 [ 374.188090][ C1] RBP: ffffc90002ec72d0 R08: 0000000000000003 R09: 0000000000000004 [ 374.196282][ C1] R10: dffffc0000000000 R11: fffffbfff33e739c R12: ffff888027f1cc00 [ 374.204628][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 000000000000000e [ 374.213075][ C1] ? mt_validate+0x580/0x4390 [ 374.218094][ C1] mt_validate+0x5c6/0x4390 [ 374.222965][ C1] ? __pfx_mt_validate+0x10/0x10 [ 374.228116][ C1] ? uprobe_mmap+0x177/0x1020 [ 374.233238][ C1] validate_mm+0xae/0x4a0 [ 374.237713][ C1] ? __pfx_validate_mm+0x10/0x10 [ 374.242814][ C1] ? vma_complete+0x9e7/0xae0 [ 374.247577][ C1] ? vma_prepare+0x485/0x4b0 [ 374.252412][ C1] ? vma_adjust_trans_huge+0x286/0x370 [ 374.258040][ C1] __split_vma+0x8bd/0xa00 [ 374.262715][ C1] ? __pfx___split_vma+0x10/0x10 [ 374.267745][ C1] ? mas_find+0xb0e/0xd30 [ 374.272233][ C1] vms_gather_munmap_vmas+0x4c6/0x12e0 [ 374.277876][ C1] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 374.284017][ C1] ? mas_find+0xa7d/0xd30 [ 374.288600][ C1] mmap_region+0x722/0x2110 [ 374.293312][ C1] ? __pfx_mmap_region+0x10/0x10 [ 374.298402][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 374.304179][ C1] ? rcu_is_watching+0x15/0xb0 [ 374.309415][ C1] ? process_measurement+0x15c3/0x1a40 [ 374.315189][ C1] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 374.321358][ C1] ? thp_get_unmapped_area_vmflags+0x161/0x310 [ 374.327683][ C1] ? cap_mmap_addr+0xb0/0x100 [ 374.332485][ C1] ? bpf_lsm_mmap_addr+0x9/0x20 [ 374.337421][ C1] ? security_mmap_addr+0x71/0x270 [ 374.342827][ C1] ? shmem_mapping+0xd/0x50 [ 374.347656][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 374.353252][ C1] do_mmap+0xc45/0x10d0 [ 374.357573][ C1] ? __pfx_do_mmap+0x10/0x10 [ 374.362312][ C1] ? down_write_killable+0x178/0x230 [ 374.367679][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 374.373469][ C1] ? common_file_perm+0x1b5/0x230 [ 374.379164][ C1] vm_mmap_pgoff+0x2a6/0x4d0 [ 374.383895][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 374.389314][ C1] ? __fget_files+0x2a/0x420 [ 374.393964][ C1] ? __fget_files+0x2a/0x420 [ 374.398602][ C1] ? __fget_files+0x2a/0x420 [ 374.403422][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 374.408257][ C1] do_syscall_64+0xfa/0xfa0 [ 374.412989][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.418252][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.424538][ C1] ? clear_bhb_loop+0x60/0xb0 [ 374.429336][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.435284][ C1] RIP: 0033:0x7f893139d242 [ 374.439811][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 374.459752][ C1] RSP: 002b:00007ffc0d07ed18 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 374.468247][ C1] RAX: ffffffffffffffda RBX: 00007f893107e000 RCX: 00007f893139d242 [ 374.476357][ C1] RDX: 0000000000000005 RSI: 000000000001c000 RDI: 00007f893107e000 [ 374.484784][ C1] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000008000 [ 374.492947][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffc0d07ed68 [ 374.501086][ C1] R13: 00007f8931372ab0 R14: 00007ffc0d07f190 R15: 00000fff81a0fda6 [ 374.509258][ C1] [ 374.512466][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 374.519858][ C1] CPU: 1 UID: 0 PID: 13812 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 374.529184][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.539981][ C1] Call Trace: [ 374.543282][ C1] [ 374.546309][ C1] dump_stack_lvl+0x99/0x250 [ 374.551006][ C1] ? __asan_memcpy+0x40/0x70 [ 374.555654][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.560956][ C1] ? __pfx__printk+0x10/0x10 [ 374.566205][ C1] vpanic+0x237/0x6d0 [ 374.570267][ C1] ? __pfx_vpanic+0x10/0x10 [ 374.574812][ C1] panic+0xb9/0xc0 [ 374.578604][ C1] ? __pfx_panic+0x10/0x10 [ 374.583059][ C1] __warn+0x31b/0x4b0 [ 374.587239][ C1] ? debug_print_object+0x16b/0x1e0 [ 374.592650][ C1] ? debug_print_object+0x16b/0x1e0 [ 374.598074][ C1] report_bug+0x2be/0x4f0 [ 374.602544][ C1] ? debug_print_object+0x16b/0x1e0 [ 374.607967][ C1] ? debug_print_object+0x16b/0x1e0 [ 374.613359][ C1] ? debug_print_object+0x16d/0x1e0 [ 374.618948][ C1] handle_bug+0x84/0x160 [ 374.623269][ C1] exc_invalid_op+0x1a/0x50 [ 374.627987][ C1] asm_exc_invalid_op+0x1a/0x20 [ 374.633314][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 374.639406][ C1] Code: 4c 89 ff e8 37 f9 8b fd 4d 8b 0f 48 c7 c7 80 7e c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 fa 77 e9 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 77 06 05 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 374.659479][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296 [ 374.665863][ C1] RAX: bfbfb8755d2a0900 RBX: dffffc0000000000 RCX: ffff8880287fdac0 [ 374.673846][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 374.681843][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 374.690034][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffffffff8a3e0c40 [ 374.698106][ C1] R13: ffffffff8bc08000 R14: ffff888064b20490 R15: ffffffff8b6cf600 [ 374.706091][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 374.711940][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 374.717528][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 374.722686][ C1] kfree+0x115/0x6d0 [ 374.726893][ C1] rose_timer_expiry+0x4cb/0x600 [ 374.731869][ C1] ? call_timer_fn+0x155/0x5f0 [ 374.736770][ C1] call_timer_fn+0x17e/0x5f0 [ 374.741397][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 374.746877][ C1] ? call_timer_fn+0xbe/0x5f0 [ 374.751581][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 374.756813][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.762058][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.767657][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 374.773162][ C1] __run_timer_base+0x61a/0x860 [ 374.778325][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 374.783952][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 374.790386][ C1] run_timer_softirq+0xb7/0x180 [ 374.795677][ C1] handle_softirqs+0x283/0x870 [ 374.800747][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 374.805663][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 374.811131][ C1] __irq_exit_rcu+0xca/0x1f0 [ 374.816110][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 374.821387][ C1] irq_exit_rcu+0x9/0x30 [ 374.825874][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 374.831801][ C1] [ 374.834841][ C1] [ 374.837874][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 374.843874][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 374.849995][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 14 22 e1 0b 48 89 de 5b e9 f3 70 5a 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 10 91 92 65 8b 15 18 7c [ 374.870419][ C1] RSP: 0018:ffffc90002ec70d8 EFLAGS: 00000202 [ 374.876829][ C1] RAX: ffffffff8b443f90 RBX: 0000000000000001 RCX: 0000000000000000 [ 374.884929][ C1] RDX: ffff8880287fdac0 RSI: 0000000000000001 RDI: 0000000000000000 [ 374.893327][ C1] RBP: ffffc90002ec72d0 R08: 0000000000000003 R09: 0000000000000004 [ 374.901522][ C1] R10: dffffc0000000000 R11: fffffbfff33e739c R12: ffff888027f1cc00 [ 374.909820][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 000000000000000e [ 374.918089][ C1] ? mt_validate+0x580/0x4390 [ 374.923266][ C1] mt_validate+0x5c6/0x4390 [ 374.928067][ C1] ? __pfx_mt_validate+0x10/0x10 [ 374.933149][ C1] ? uprobe_mmap+0x177/0x1020 [ 374.937850][ C1] validate_mm+0xae/0x4a0 [ 374.942352][ C1] ? __pfx_validate_mm+0x10/0x10 [ 374.947702][ C1] ? vma_complete+0x9e7/0xae0 [ 374.952506][ C1] ? vma_prepare+0x485/0x4b0 [ 374.957108][ C1] ? vma_adjust_trans_huge+0x286/0x370 [ 374.962679][ C1] __split_vma+0x8bd/0xa00 [ 374.967126][ C1] ? __pfx___split_vma+0x10/0x10 [ 374.972186][ C1] ? mas_find+0xb0e/0xd30 [ 374.976623][ C1] vms_gather_munmap_vmas+0x4c6/0x12e0 [ 374.982125][ C1] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 374.988310][ C1] ? mas_find+0xa7d/0xd30 [ 374.992672][ C1] mmap_region+0x722/0x2110 [ 374.997297][ C1] ? __pfx_mmap_region+0x10/0x10 [ 375.002255][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 375.007920][ C1] ? rcu_is_watching+0x15/0xb0 [ 375.012708][ C1] ? process_measurement+0x15c3/0x1a40 [ 375.018590][ C1] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 375.024533][ C1] ? thp_get_unmapped_area_vmflags+0x161/0x310 [ 375.031081][ C1] ? cap_mmap_addr+0xb0/0x100 [ 375.035892][ C1] ? bpf_lsm_mmap_addr+0x9/0x20 [ 375.040855][ C1] ? security_mmap_addr+0x71/0x270 [ 375.046089][ C1] ? shmem_mapping+0xd/0x50 [ 375.050607][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 375.056095][ C1] do_mmap+0xc45/0x10d0 [ 375.060287][ C1] ? __pfx_do_mmap+0x10/0x10 [ 375.064937][ C1] ? down_write_killable+0x178/0x230 [ 375.070254][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 375.075909][ C1] ? common_file_perm+0x1b5/0x230 [ 375.081260][ C1] vm_mmap_pgoff+0x2a6/0x4d0 [ 375.086497][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 375.092034][ C1] ? __fget_files+0x2a/0x420 [ 375.097016][ C1] ? __fget_files+0x2a/0x420 [ 375.101933][ C1] ? __fget_files+0x2a/0x420 [ 375.106667][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 375.111677][ C1] do_syscall_64+0xfa/0xfa0 [ 375.116939][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.122639][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.129653][ C1] ? clear_bhb_loop+0x60/0xb0 [ 375.134553][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.141095][ C1] RIP: 0033:0x7f893139d242 [ 375.145792][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 375.167480][ C1] RSP: 002b:00007ffc0d07ed18 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 375.176120][ C1] RAX: ffffffffffffffda RBX: 00007f893107e000 RCX: 00007f893139d242 [ 375.184806][ C1] RDX: 0000000000000005 RSI: 000000000001c000 RDI: 00007f893107e000 [ 375.193397][ C1] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000008000 [ 375.201438][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffc0d07ed68 [ 375.209628][ C1] R13: 00007f8931372ab0 R14: 00007ffc0d07f190 R15: 00000fff81a0fda6 [ 375.218430][ C1] [ 375.221958][ C1] Kernel Offset: disabled [ 375.226380][ C1] Rebooting in 86400 seconds..