last executing test programs: 3m45.198709305s ago: executing program 1 (id=1464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x200, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14900}, 0x4000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000007300000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4818}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 3m44.858800703s ago: executing program 1 (id=1466): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1}, 0x60) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) 3m44.53170136s ago: executing program 1 (id=1470): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a}, 0x20) (async, rerun: 64) r0 = socket(0x26, 0x3, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x6a, 0x1, 0x0, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m44.003822426s ago: executing program 1 (id=1475): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r5], 0x50}}, 0xc0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000000480)=0x4c, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20000045, &(0x7f00000004c0)={0xa, 0x4e20, 0xfffc, @loopback, 0xeffffffd}, 0x1c) epoll_pwait(r6, &(0x7f0000000040)=[{}], 0x1, 0xdeb, 0x0, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg1\x00', 0x1}) 3m43.48670848s ago: executing program 1 (id=1480): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='R'], 0x8) close(0x3) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000500)={0x10, 0x17, 0x8, 0x70bd2c, 0x25dfdbff}, 0x10}], 0x0, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x4040010}, 0x8c0) 3m43.066727412s ago: executing program 1 (id=1486): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) 3m27.944836205s ago: executing program 32 (id=1486): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) 2m1.736852787s ago: executing program 0 (id=2252): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x1}, 0x28) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x9, 0x4, 0x200, 0x3, 0x6, 0x32e35e75, 0x7, 0x80000001}, &(0x7f00000000c0)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000200)={0x3, 0x4}, 0x2) 2m1.165953754s ago: executing program 0 (id=2257): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="8724", 0x2}], 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="580000001800050401000000000000000a800000fe040001000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b0008008100020000000800040041000000", 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000540)={0x281, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x4, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x2}}, 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000380)) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)=@bridge_getlink={0x28, 0x12, 0x0, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x50e00}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) syz_emit_ethernet(0xce, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x0, 0x0]}, @rr={0x7, 0x3, 0xd7}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000100)={'syztnl0\x00', 0x0}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c080}, 0x4048000) 1m59.847297456s ago: executing program 0 (id=2267): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0x42, 0x4, 0x450, 0xffffffff, 0x3b8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1f0, 0x218, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0x7ff, 0x298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000007300000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x4818}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c040000f403"], 0x43c}, 0x1, 0x0, 0x0, 0x4000088}, 0x8804) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000cc0)={0x7fffffff}, 0x10) sendmsg$kcm(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80)="1c0000004a008104e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000dc0)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x44004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f00000009c0)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="7b1a040000000000850000000500000079a1f8ff000000009500"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001451cced3f65a52000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000300"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket(0x15, 0x5, 0x0) r8 = socket(0x2b, 0x1, 0x0) listen(r8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x0, 0x2}]}, @ptr]}}, 0x0, 0x3a}, 0x20) r10 = openat$cgroup_int(r9, &(0x7f0000000940)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000980)=0x9, 0x12) sendfile(r10, r10, 0x0, 0x7ff) r11 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r11, 0x110, 0x1, &(0x7f0000000e00)='\x00e\xa9f\x9e\xbbT}\x15\x91H\x93sW\x94\b\xa2\xf0Es&\xc7\xf8\x8c\xc8\xb1&\x12\xebS\x98\xf3C]A\xf5$\x1e\xf5g|a\xc0\r\x00\x00', 0xff1e) sendmmsg$inet6(r8, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x805) 1m59.398195963s ago: executing program 0 (id=2271): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="850000009e000000620a00ff000000007900d81800000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000000400000004"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@RTM_DELMDB={0x18, 0x55, 0x701}, 0x18}}, 0x0) (async) close(0x3) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x11) 1m58.510598364s ago: executing program 0 (id=2279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x26, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xcd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf57}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x6, 0xb6, &(0x7f00000002c0)=""/182, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, &(0x7f00000003c0), 0x10}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff50000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1m58.199810588s ago: executing program 0 (id=2280): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f00000017c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001780)={&(0x7f00000005c0)={0x11ac, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x12c, 0x111, 0x0, 0x1, {0x128, 0x5, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x157}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x15}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9a}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x6c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x59}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7c}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x21}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x106c, 0x111, 0x0, 0x1, {0x1068, 0x5, 0x0, 0x1, [{0x1b0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x178, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x99}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x238, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x27c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbea6}]}]}, {0x99c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xda1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa11a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x340}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x330, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9c}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x65}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x27c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x43}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfb5f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}]}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcc01}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x385}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x261}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}]}, 0x11ac}}, 0x40081) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@arena={0x21, 0x0, 0x0, 0xb, 0x20400, 0x1, 0xc92, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) ioctl$FITHAW(r5, 0xc0045878) shutdown(r1, 0x1) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1m43.065105809s ago: executing program 33 (id=2280): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f00000017c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001780)={&(0x7f00000005c0)={0x11ac, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x12c, 0x111, 0x0, 0x1, {0x128, 0x5, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x157}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x15}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9a}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x6c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x59}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7c}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x21}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x106c, 0x111, 0x0, 0x1, {0x1068, 0x5, 0x0, 0x1, [{0x1b0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x178, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x99}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x238, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x27c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbea6}]}]}, {0x99c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xda1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa11a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x340}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x330, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9c}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x65}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x27c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x43}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfb5f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}]}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcc01}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x385}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x261}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}]}, 0x11ac}}, 0x40081) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@arena={0x21, 0x0, 0x0, 0xb, 0x20400, 0x1, 0xc92, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) ioctl$FITHAW(r5, 0xc0045878) shutdown(r1, 0x1) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 16.983864798s ago: executing program 3 (id=2973): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000711063000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="2c00003b40001001beffffff00000000017c0499155046c44faab7000600800a000008000280040010800000"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc050) 16.6392449s ago: executing program 3 (id=2975): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0xff) socket$packet(0x11, 0x2, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="040100001000010000000000000000000a0101010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000002b00000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d78f299a000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000a000200000000000000000014000e"], 0x104}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xff}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0xa, @in6=@empty, 0x0, 0x2}}, 0xe8) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0xa, 0x1234, 0x0, @remote, 0x11}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 16.247774109s ago: executing program 3 (id=2978): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215e8000) shutdown(0xffffffffffffffff, 0x1) socket(0x8, 0x1, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 5.203255779s ago: executing program 4 (id=3035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0xd1, &(0x7f0000000200), 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000440)={@broadcast, @initdev, 0x0}, &(0x7f0000000480)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001340)={{r0, &(0x7f0000000c40)='ethtool\x00', 0x2100, &(0x7f0000001000)={@_ha_fsid={[0x0, 0x80]}, {0x3, 0x6, 0x2, 0x3c17}}, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x1}, 0x3, &(0x7f00000012c0)=[{0x2, 0x400, &(0x7f00000010c0)='\x00', &(0x7f0000001100)="53d5e8a965534868406e5f598de7bf814816fa9b4c02a530889749d008211acaf57dc202f65c4dd6ea69d6bd725da0aa2e6644376d9696ef6d6ee7a732725873f15358593e914065beb1c4f4cefffe02b0a80263b22063efef7883a7b9beeb1877ed3dc48a88f694b20f89624f59e26fd89c11dd18c7d8e580de30e4ccbd96", 0x7f, 0x10}, {0x1, 0xc8a7, &(0x7f0000001180)='\x00', &(0x7f00000011c0)="ce91f3e2384370fa8b4cc0673311eacc67bf91a8a08368584c3a2cb183ba19d19037345b0a7b82cea1eb92fdc4a5b508d3151a392b573493e7f496f763fdc527f32d97d742dedd50842c6c0a1f4849f11d2bfb890fdfdba1a9cf7e58a92c085569d21733434cb4f1989b8a4d15fc2111bbd5fc731f26bd01", 0x78, 0x32}, {0x2, 0x1, &(0x7f0000001240)=':-*,\\+:\'-!$&]/\x00', &(0x7f0000001280), 0x0, 0x28}]}) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001640)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001400)=ANY=[@ANYBLOB="e0010000120004002abd7000ffdbdf251d4a08004e214e24090000000000000005000000000000000400000001000000b008000004000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000500)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'tunl0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000580)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f00000005c0)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x4, 0xfa, 0xff, 0x8, 0x2, @private1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x700, 0x20, 0x85, 0xc}}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000780)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000007c0)={r11, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x10) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000001740)={0x0, @in6={{0xa, 0x4e24, 0x848, @remote, 0x5}}}, 0x84) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000800)={r11, 0x1, 0x6}, 0x10) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000900)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000940)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa4, &(0x7f00000009c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) (async) r15 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r15, 0x107, 0xf, &(0x7f0000000c80)=0xb, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000cc0)={'ip6gretap0\x00', 0x0}) sendto$packet(r15, &(0x7f0000000d00)="0b031260feffffff02005400f6a13bb1000000086086dd480300", 0x100a6, 0x0, &(0x7f0000000d40)={0x11, 0x86dd, r16}, 0x50) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf251100000028000180080003000100000008000100", @ANYRES32=r13, @ANYBLOB="00000100", @ANYRES32=0x0, @ANYBLOB="3000018008000100", @ANYRES32=r3, @ANYBLOB="08000300000000001400020076657468305f746f5f626174616476001400020076657468315f746f5f6873720000000008000100", @ANYRES32=r4, @ANYBLOB="30000180080003000100000008000300010000001400020076657468305f746f5f6261746164760008000100", @ANYRES32=r7, @ANYBLOB="1c000180280001800800030002000000080003000200000014000200766972745f77696669300000000000002c00018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r9, @ANYBLOB="08000300030000005c000180080003000200000008000100", @ANYRES32=r11, @ANYBLOB="1400020064766d727031000000000000000000001400020070696d3672656731000000000000000008000300020000005bff0100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000300000000003c0001800800030002000000140002006970365f76746930000000000000000008000100", @ANYRES32=r16, @ANYBLOB="1400020076657468315f766972745f7769666900"], 0x1b8}, 0x1, 0x0, 0x0, 0x18}, 0x20000094) (async) r17 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c0000000000000700000000"], 0x1c}}, 0x40000) 4.399526074s ago: executing program 4 (id=3041): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async, rerun: 64) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}]}, 0x2c}}, 0x8010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "3c35d3e540a62e06e3ddd236b8f3e41c"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c8d1) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) (async, rerun: 32) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000340)={0x4a8, r0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x62}}}}, [@NL80211_ATTR_TX_RATES={0x1ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0x8}, {0x6}, {0x7, 0x7}, {0x6, 0x3}, {0x5, 0x8}, {0x6}, {0x0, 0x2}, {0x7, 0x5}, {0x0, 0x5}, {0x3, 0x7}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x8}, {0x3, 0x5}, {0x4, 0x4}, {0x1, 0x5}, {0x4, 0x5}, {0x4, 0x7}, {0x5, 0x1}, {0x4, 0x9}, {}, {0x2, 0x8}, {0x1}, {0x7, 0x6}, {0x3, 0x3}, {0x1, 0x7}, {0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x3, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x3}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x9}, {0x1, 0x5}, {0x4}, {0x4, 0x4}, {0x5, 0x7}, {0x6, 0x3}, {0x0, 0x2}, {0x6, 0x2}, {0x3}, {0x0, 0x8}, {0x5, 0x3}, {0x4, 0x3}, {0x3, 0xa}, {0x3}, {0x5, 0xa}, {0x2, 0x4}, {0x2, 0xa}, {0x2, 0x8}, {0x2}, {0x6, 0x3}, {0x3, 0x9}, {0x7, 0x7}, {0x6, 0x4}, {}, {0x7, 0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x3, 0x7}, {0x3, 0x5}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0xa}, {0x5, 0x5}, {0x4, 0x1}, {0x5, 0x5}, {0x7, 0x5}, {0x3, 0x5}, {0x6, 0x4}, {0x0, 0x9}, {0x2, 0x4}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x6, 0x8}, {0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x98b3, 0x6, 0x50, 0xa3, 0xb299, 0xddd7, 0x3ff]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x5}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x8}, {0x5}, {0x3, 0x8}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x2, 0x8}, {0x6, 0x3}, {0x7, 0x5}, {0x7, 0x6}, {0x5, 0x4}, {0x0, 0x1}, {0x6}, {0x3, 0x2}, {0x5, 0x1}, {0x1}, {0x4, 0x8}, {0x6, 0x2}, {0x4, 0x5}, {0x7}, {0x3, 0x8}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x6, 0x6}, {0x3}, {0x6, 0x9}, {0x3, 0x1}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x8}, {0x3, 0xa}, {0x0, 0x5}, {0x3, 0x1}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x5}, {0x2, 0x7}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0xa}, {0x6, 0x3}, {0x7, 0x4}, {0x5, 0x9}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x1}, {0x6, 0x6}, {0x1, 0x1}, {0x6, 0x4}, {0x4, 0x6}, {0x0, 0xa}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfffc, 0x8, 0x6, 0x6, 0x0, 0x3, 0x8aee]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x3}, {0x5, 0x4}, {0x7, 0x7}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x4}, {0x6, 0x3}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0xa}, {0x3, 0x7}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0x4}, {0x4}, {0x2, 0x4}, {0x2, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x0, 0x3}, {0x7, 0x6}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x1}, {0x2, 0x5}, {0x5, 0x4}, {0x6, 0x6}, {0x3, 0x2}, {0x7, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x4, 0x1}, {0x4}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x2}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x5}, {0x5, 0xa}, {0x1, 0x3}, {0x1}, {0x5, 0xa}, {0x1, 0xa}, {0x1, 0x8}, {0x3, 0x6}, {0x3, 0x8}, {0x4, 0xa}, {0x0, 0x9}, {0x4}, {0x3, 0x4}, {0x6, 0x5}, {0x7, 0x7}, {0x4, 0x6}, {0x3, 0x5}, {0x3, 0xa}, {0x1}, {0x0, 0x7}, {0x0, 0x1}, {0x2, 0x5}, {0x7, 0x3}, {0x4, 0x6}, {0x1}, {0x6, 0x9}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x40, 0x13, 0x58, 0x0, 0x7ff, 0x80, 0x9]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0xc, 0x24, 0x6, 0x30, 0x12, 0x9, 0x1, 0xb, 0x30, 0xc]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0xa}, {0x5, 0x4}, {0x6, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {}, {0x4, 0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x1}, {0x3, 0x2}, {0x2, 0x8}, {}, {0x3, 0x4}, {0x0, 0x4}, {0x5}, {0x0, 0x6}, {0x4, 0x7}, {0x1, 0x9}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0x5}, {0x5, 0x9}, {0x2, 0xa}, {0x4, 0x5}, {0x2, 0x6}, {0x5, 0x1}, {0x1, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x6, 0x7}, {0x0, 0x4}, {0x7, 0x8}, {0x6, 0x6}, {0x2, 0x7}, {0x4, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x2, 0x2}, {0x3, 0xa}, {0x1, 0x3}, {0x3, 0x1}, {0x3, 0x7}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x6}, {0x7, 0x7}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x6}, {0x2, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x60, 0x48, 0x24, 0x3, 0x24, 0x6c, 0xc, 0x30, 0x16, 0x3, 0x60, 0x2]}]}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x36, 0x16, 0x30, 0x4, 0x2, 0x24, 0x9]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x6}, {0x2, 0x4}, {0x6, 0x2}, {0x6, 0x5}, {}, {0x0, 0x9}, {0x2, 0x1}, {0x7, 0x2}, {0x0, 0x2}, {0x7, 0x5}, {0x5, 0x4}, {0x3, 0x3}, {0x7, 0x9}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0x1}, {0x4, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0xa}, {0x6, 0x9}, {0x5, 0x1}, {0x7, 0x9}, {0x0, 0x6}, {0x2, 0x3}, {0x5, 0x7}, {0x4, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x4, 0x1}, {0x1, 0x7}, {0x0, 0x5}, {0x5, 0x5}, {0x1, 0xa}, {0x2}, {0x6, 0x3}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x8}, {0x2, 0x3}, {0x0, 0x7}, {0x4, 0x9}, {0x2, 0x7}, {0x5, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {0x6, 0x5}, {0x7, 0x1}, {0x6, 0x3}, {0x3, 0x4}, {0x7, 0x6}, {0x5}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x7}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x9}, {0x6, 0x1}, {0x0, 0x4}, {0x3, 0x4}, {0x4, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x4, 0x2}, {0x2, 0x9}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x80, 0x1, 0x1, 0x10, 0x5, 0xbcf1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xf530, 0x69c, 0xa2b9, 0xf0d1, 0x6, 0xf, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x9}, {0x5, 0x3}, {0x6, 0x6}, {0x0, 0x5}, {0x5, 0x9}, {0x2, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0x6}, {0x0, 0x5}, {0x6, 0x7}, {0x7, 0x9}, {0x7, 0x2}, {0x1, 0x8}, {0x3, 0x8}, {0x0, 0x3}, {0x5, 0x3}, {0x5, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x2}, {0x5, 0x6}, {0x5, 0x8}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x5}, {0x0, 0x3}, {0x5}, {0x1, 0x5}, {0x0, 0x3}, {0x7, 0x9}, {0x5, 0x3}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x2}, {0x0, 0x5}, {0x5, 0x8}, {0x6, 0x2}, {0x1, 0xa}, {0x2, 0x9}, {0x6, 0x7}, {0x7, 0x3}, {0x0, 0x14}, {0x2, 0x9}, {0x4, 0x5}, {0x6, 0x5}, {0x6, 0x7}, {0x7, 0x3}, {0x6, 0x9}, {0x4, 0x4}, {0x7, 0x3}, {0x2, 0x9}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x1, 0x5}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0x8}, {0x7, 0x5}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x9}, {0x0, 0x4}, {0x4, 0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x9}, {0x4, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x3, 0x7}, {0x3, 0x9}, {0x4}, {0x4, 0x9}, {0x7}, {0x7, 0x8}, {0x6}, {0x1, 0x1}, {0x3, 0x6}, {0x1, 0x2}, {0x6, 0x9}, {0x6, 0x2}, {0x6, 0x3}, {0x5}, {0x6, 0x7}, {0x5, 0x5}, {0x2, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x7, 0x6}, {0x2, 0x4}, {0x7, 0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x5}, {0x5, 0x1}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x5, 0x6}, {0x4, 0x7}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x6}, {0x1, 0xa}, {0x6, 0x3}, {0x2, 0x9}, {0x1}, {0x2, 0xa}, {0x0, 0x9}, {0x7, 0x5}, {0x4, 0x8}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x8, 0x2, 0x0, 0x375d, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x800, 0xfffa, 0x6, 0x8, 0x75, 0xfff, 0x7333]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x6c, 0x1, 0x3, 0x0, 0x30, 0x6c, 0x5, 0x2, 0x5, 0x6c, 0x4, 0x48, 0xb, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xb0b, 0x8f, 0x9, 0x9, 0x7fff, 0xda, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x9, 0x5, 0x36, 0x12, 0x24, 0x6, 0xb, 0x0, 0x3, 0x12, 0x18, 0x1e, 0x6c, 0x6c, 0x36, 0x37, 0x9, 0x2, 0x2, 0x16, 0x1b, 0x16, 0x3, 0x2, 0xb]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x9, 0x7, 0x9, 0x3, 0xfff9, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x48, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x4, 0xff01, 0x611, 0x9, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x60, 0x60, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x4, 0xfc6e, 0x0, 0xdc, 0x4, 0x6, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x4800}, 0x40840) (async, rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt(r4, 0x0, 0x401, &(0x7f0000000880)="86c9469dd3c5f9acfc50fd10ea666e3113aedf58fb2f2882865f65bda819e21deea22d8672d85ed4731cfbeaac5130f9a55957eff03ab15defa26c5cba1d0b29c1c191f7a72f711fa27903f4a1df7fb145794710dba2fce4ab9e42cf93229fa79a476a2d8630ff7dcf070e9bee2fc0851a6480b4365035f00c46040d50ed45558340f7a41b6db1f3efcfc0d0f6f084b2a44271d1f851d51fc2c521c9a72f67e1fcba2faec1e5045985abedbf2bab", 0xae) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x7fff}, {0x5}}]}, 0x50}}, 0x4000000) (async, rerun: 64) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000021) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@getstats={0x1c, 0x5e, 0x0, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x4008001) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000cc0)={0x2, 0x0, 0x9e, 0x8, 0x6, 0x2, 0x3, 0x7, {0x0, @in6={{0xa, 0x4e21, 0x505644d9, @empty}}, 0x5349, 0x2, 0x47, 0x4, 0x1}}, &(0x7f0000000d80)=0xb0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000dc0)={r9, 0x64e}, &(0x7f0000000e00)=0x8) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80), r5) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, r11, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000f80)={r9, 0x14, "7d1ffccd92d3365eb264c1a5641b958d8d5c2d19"}, &(0x7f0000000fc0)=0x1c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f0000001000)=@assoc_value={r13, 0x7}, &(0x7f0000001040)=0x8) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000001a40)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000010c0)=@newchain={0x920, 0x64, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x3, 0xf}, {0x6, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @filter_kind_options=@f_u32={{0x8}, {0x468, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffff03, 0x5, 0x14a6f8d6, 0x2, 0x7, 0x7fffffff, 0x0, 0x2, 0x7e, 0x1, 0x1, 0x6, 0x6, 0x0, 0x1, 0x2, 0x7, 0x2, 0x3, 0x4, 0xf, 0x9, 0xfffffff7, 0x40, 0xa, 0x100, 0xd9, 0x1c000000, 0x1, 0xffc00000, 0x3, 0x8d, 0x2, 0x6, 0x7fffffff, 0x6, 0x1, 0x7518, 0x0, 0x0, 0x1, 0x7, 0x1000, 0x1ff, 0x6, 0xfd2, 0x10, 0xc6ab, 0xffff, 0x9, 0x0, 0xff, 0x800, 0xf25, 0x4, 0xb20, 0x8, 0x1, 0xfff, 0xd, 0x9, 0x5, 0x9, 0xd, 0x7, 0xd32, 0x2d, 0x6, 0x3, 0x4, 0xe, 0x5a7, 0x9, 0x8, 0x6876, 0xfffffffd, 0x7, 0x6, 0x4, 0x5, 0x8, 0x8, 0x6, 0x4, 0x4, 0x8000, 0x8, 0xfffffffb, 0x0, 0x6, 0x5, 0x7, 0xee, 0x5, 0x0, 0xffffffff, 0x5, 0x3ff, 0x0, 0x200, 0x9add, 0x0, 0xe, 0x3ac4ce57, 0x6, 0xfffffbd1, 0xa, 0xff, 0x3ff, 0x3f, 0xffff, 0xd80, 0x1, 0x10001, 0x0, 0xf, 0x5, 0xa, 0x6, 0x14, 0x4, 0x9, 0xc, 0x1, 0x32dc, 0x8, 0x70, 0xffffffff, 0x1, 0xfffffffd, 0xe, 0x3, 0x80bc, 0x6, 0x5, 0x7, 0x9, 0x1000, 0x8, 0x7, 0xfffffffe, 0x0, 0x5, 0x2, 0x533, 0x7, 0x9, 0x3, 0x42ed, 0x9, 0x4, 0x5, 0x0, 0xffff, 0x2, 0x5, 0x5, 0x4, 0x3ff, 0x0, 0x4, 0x80000000, 0x2, 0x0, 0xffffffff, 0x0, 0xfff, 0x3ff, 0xfffffff8, 0x9, 0x10001, 0x8812, 0x5, 0x1, 0xfffffc01, 0x0, 0xfff, 0xd, 0x9, 0x7f, 0x81, 0x2, 0x9, 0x6, 0x8, 0x7, 0xdbe, 0x9, 0x0, 0x2, 0x8a, 0x6, 0x7ff, 0x9, 0x9, 0xa, 0x4, 0x8, 0x852a, 0x4010bb5b, 0x2, 0x3, 0xd43, 0xb200, 0xe1c, 0x5, 0x8, 0x5, 0x7, 0x9, 0x4, 0xfffffffc, 0x8, 0x2, 0x7fff, 0x75, 0x7ff, 0x8, 0x5, 0x10, 0x8, 0x1, 0x3, 0xffffff99, 0x6ed, 0x10001, 0x6, 0x8000, 0xfffffff9, 0x8bd3c42, 0x8, 0x7f, 0xb4, 0x7fff, 0xb, 0x5, 0x471ad074, 0xfffffffa, 0x6, 0xfffffffb, 0x5, 0x5, 0x5, 0x3, 0xd, 0xfffff2a0, 0x2, 0x80000001, 0x7, 0x3, 0x9, 0x5, 0xb5c, 0x4, 0x9, 0xe19]}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_DIVISOR={0x8, 0x4, 0x68}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_MARK={0x10, 0xa, {0xc, 0x9}}, @TCA_U32_HASH={0x8, 0x2, 0x29d6}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x418, 0x2, [@TCA_FW_POLICE={0x414, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0x4, 0x2, 0x2, 0xfffffff8, 0x4, 0x3, 0x5, 0x6e, 0x6, 0x5, 0x7, 0x90000, 0xff, 0x5, 0x4, 0xe49f, 0x10001, 0x3, 0xfffffff3, 0xd2c0, 0x800, 0x1, 0x8, 0x6, 0x41c4, 0x6, 0x10000, 0x2, 0x0, 0x8, 0x5, 0x5, 0x5, 0x1000, 0x101, 0x5, 0x80000001, 0x2, 0x4a, 0x0, 0x8, 0x8, 0x333, 0x6b5, 0x1, 0xffff, 0xf7, 0x7, 0x1, 0xcac9, 0x9, 0x4, 0x80000001, 0x4, 0x8000, 0x4, 0x5, 0x0, 0x4, 0x3f800000, 0x5a, 0x1, 0xffffffbf, 0x2, 0x1, 0x6, 0x7, 0x401, 0x880a, 0x8000, 0x0, 0x10001, 0xe4a6, 0xa, 0x1, 0x2, 0x630e, 0x1, 0xffff8001, 0xfffffc00, 0x0, 0xb, 0x401, 0x6fe, 0x9, 0x1, 0x4, 0x10000, 0x7, 0x34, 0x1ff, 0xfffffffc, 0x7, 0x9, 0x2, 0x7, 0x10000, 0xaf4, 0x5, 0x9, 0xee7, 0x6, 0x6, 0xfffffff9, 0x401, 0x200, 0x9, 0x2, 0x1, 0x7f, 0xffffffff, 0x7ff, 0x4, 0x0, 0x6b, 0x6, 0x9, 0x5, 0x581, 0x8, 0x0, 0x2, 0x8, 0x5, 0x200, 0x1, 0x2, 0x0, 0xffff, 0x9fbbff3b, 0x7, 0xfffffff8, 0x5, 0x81, 0x8, 0x7, 0x1, 0x5, 0x8001, 0xe983, 0x219, 0x9, 0xe2b, 0x4, 0x0, 0x4, 0x5, 0x0, 0x9, 0x4, 0x5, 0xd, 0xfffffffa, 0xdca, 0x1000000, 0x1, 0x1, 0x5, 0x8001, 0x7, 0xe37, 0x9, 0x6, 0x4, 0x5c8b, 0x1, 0x2, 0x1, 0x32, 0xd391, 0xfffffffc, 0x80000001, 0x7, 0x6, 0xff, 0xa, 0x3, 0x5, 0x80000000, 0xffffffff, 0x7f, 0xdd, 0x3, 0xff, 0x8001, 0xd5, 0x79, 0x9, 0x0, 0x5, 0x7, 0x4, 0x5, 0x8, 0x3, 0x2, 0xffffff01, 0x6, 0x4, 0x6, 0x8, 0x2, 0x800, 0xf, 0xcb, 0xfff, 0x9, 0x8000, 0x7f, 0x2, 0x5, 0x5, 0x9, 0x6, 0x400, 0x5, 0xac4a, 0x3c, 0x2ed1, 0x3, 0x5, 0x8818, 0x8, 0x1, 0x10001, 0x4, 0x10001, 0x3, 0x401, 0x0, 0x8, 0x800, 0xf, 0x7, 0x5, 0x8000, 0xd316, 0xd4, 0x5, 0x9, 0x7, 0x19b, 0x100, 0xfff, 0x10, 0xff, 0x6, 0x7, 0x9, 0x7, 0x77a9, 0x3, 0xc5, 0x80, 0x9]}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xc7}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xa}}]}}]}, 0x920}, 0x1, 0x0, 0x0, 0x50}, 0x8008) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f0000001a80)={r10, 0x3}, &(0x7f0000001ac0)=0x8) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001b00)={'wlan1\x00'}) (async, rerun: 64) bind$pptp(0xffffffffffffffff, &(0x7f0000001b40)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000001b80)=0xc21, 0x4) 3.535272278s ago: executing program 4 (id=3044): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @remote}}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002f0007012cbd7000ffdbdf25077c0000080001800400dc800c00038008000200", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x34000005}, 0x4008030) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @broadcast}}) 3.290322669s ago: executing program 5 (id=3046): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000340)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "e8"}], 0x30}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 3.263843731s ago: executing program 6 (id=3047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@multicast, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x38, 0x24, 0x66, 0x0, 0xa, 0x21, 0x0, @multicast2, @local}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1, 0x6, "8dc878", 0x9, "0ed80d"}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@broadcast, @random="8bcacd371da6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d12033618bafeb3926975d1b201ba9ebaf9fbe96171f710c6816f8a922913313", "817ff05ca00092003daf5a835778b7d83fa94c0efbb5874251b68892848995c46f8b736ecde1e6709962e4b4600a8f9a", "7d8f4da9806440cb89f2939c57545847262620ead257b1d79ea45e63", {"5c22878c87f7d790e5d5963195b3172a", "db5701ffac0e726159a1af1eb26adef8"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x88}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 3.002007292s ago: executing program 4 (id=3049): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000440)=0x100000001, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000880)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x3c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x4e24, 0x202, @loopback, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000740)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x2, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000007c0)=0x3, 0x4) writev(r1, &(0x7f0000000800)=[{&(0x7f0000000840)="ec", 0xfdef}], 0x1) shutdown(r1, 0x1) r3 = openat$cgroup_devices(r0, &(0x7f0000000600)='devices.deny\x00', 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f00000003c0)={'veth1_to_batadv\x00', {0x2, 0x4e23, @multicast2}}) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x114, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000fcf142525f0000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) r6 = openat$cgroup_pressure(r5, &(0x7f0000000ac0)='memory.pressure\x00', 0x2, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000580)={r3, &(0x7f0000000480)='./cgroup/syz1\x00', 0x2000, &(0x7f00000004c0)={@align=0x8000000000000001, {0x1000, 0x8, 0x1}}, 0x4, &(0x7f0000000500), &(0x7f0000000540)=0xa}) setsockopt$inet_sctp6_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f00000005c0)=0x1000, 0x4) 2.853303901s ago: executing program 5 (id=3051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x28, r6, 0x1, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xec0}, 0x20000800) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x6}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x1c}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$tipc(r2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000000000034001a0006000000020000002800048024000a80"], 0x54}}, 0x0) 2.606404235s ago: executing program 6 (id=3052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'veth0_to_batadv\x00', &(0x7f0000000240)=@ethtool_sfeatures}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000380)=""/56, 0x38}], 0x1, 0x8, 0x0) pread64(r3, &(0x7f00000003c0)=""/5, 0x5, 0xcd32) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x1852, r1, 0xffffe000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000005000000060a01040000000000000000020000000900010073797a30000000000900020073797a300000000048000480440001800a0001006d61746368000000340002800d00010064657667726f757000000000080002400000000018000300000000000000000000000000000000000000000014000000110001", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0xfc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'veth0_to_batadv\x00', &(0x7f0000000240)=@ethtool_sfeatures}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000300)='cpu.stat\x00', 0x275a, 0x0) (async) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000380)=""/56, 0x38}], 0x1, 0x8, 0x0) (async) pread64(r3, &(0x7f00000003c0)=""/5, 0x5, 0xcd32) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x1852, r1, 0xffffe000) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt(r4, 0x84, 0x4, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000005000000060a01040000000000000000020000000900010073797a30000000000900020073797a300000000048000480440001800a0001006d61746368000000340002800d00010064657667726f757000000000080002400000000018000300000000000000000000000000000000000000000014000000110001", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0xfc}}, 0x0) (async) 2.492217328s ago: executing program 4 (id=3053): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x15, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x87, &(0x7f0000000180)=""/135, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0xf, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x0, 0x5, 0xf, 0x2}, {0x5, 0x3, 0x8, 0xa}, {0x5, 0x5, 0x8, 0x5}, {0x4, 0x2, 0x2, 0x8}, {0x1, 0x4, 0xd, 0x5}], 0x10, 0x4}, 0x94) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000640)="2ac765b5ac00ae1a3544e1ab6b59d7d4e93fe31122a94067994556fc48d1ceddca48a1e141a96117233621526fe3dcf5a5d60ea469ebe3f6fb5e04a7a09d30ecdc932205eb4b796bc73ef23c28ed24eab1236cc1783b3a6062df0e7f5134eecf75d93a89c082deb99b0ddc09bb2011f35194c6861419545eaf1e988728c278e9d590addea16fc5d3533e67c8dfd04593b795963dab30b7c23ea3d3aff2b594f839e5c77b24e10ab1d03719aa141991b3a9e7e86a75ac9d1a8ec90ab7b4c7d827583ea180bad959300f77c2") r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000004c0)={r1, 0x0, 0x80000001, 0x4, 0xfffffffffffffff6, 0xf, [0xb6, 0x7, 0x20004000000000, 0xc, 0x6, 0x101]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000000b01020000000000000000000000060d0001007468726561646564000000003a4b7176d8d03de7cb6637f9ebe4ccc6e8d6ef66c2eb2a64fe90caf719d9ef16dc7dcb3f70eef917b832beaaa8c75e284a6ed277d18e4e26268822"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x15, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x87, &(0x7f0000000180)=""/135, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0xf, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x0, 0x5, 0xf, 0x2}, {0x5, 0x3, 0x8, 0xa}, {0x5, 0x5, 0x8, 0x5}, {0x4, 0x2, 0x2, 0x8}, {0x1, 0x4, 0xd, 0x5}], 0x10, 0x4}, 0x94) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000640)="2ac765b5ac00ae1a3544e1ab6b59d7d4e93fe31122a94067994556fc48d1ceddca48a1e141a96117233621526fe3dcf5a5d60ea469ebe3f6fb5e04a7a09d30ecdc932205eb4b796bc73ef23c28ed24eab1236cc1783b3a6062df0e7f5134eecf75d93a89c082deb99b0ddc09bb2011f35194c6861419545eaf1e988728c278e9d590addea16fc5d3533e67c8dfd04593b795963dab30b7c23ea3d3aff2b594f839e5c77b24e10ab1d03719aa141991b3a9e7e86a75ac9d1a8ec90ab7b4c7d827583ea180bad959300f77c2") (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) (async) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000004c0)={r1, 0x0, 0x80000001, 0x4, 0xfffffffffffffff6, 0xf, [0xb6, 0x7, 0x20004000000000, 0xc, 0x6, 0x101]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000000b01020000000000000000000000060d0001007468726561646564000000003a4b7176d8d03de7cb6637f9ebe4ccc6e8d6ef66c2eb2a64fe90caf719d9ef16dc7dcb3f70eef917b832beaaa8c75e284a6ed277d18e4e26268822"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) (async) 2.321889854s ago: executing program 2 (id=3054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x8ad1aaebcee9d719, 0x84) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002cc0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000002d00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="b5d72dbd7000fcdbdf250a00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4044811}, 0x400c8d4) 2.018552195s ago: executing program 5 (id=3055): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) write(r1, &(0x7f00000000c0)="2b0000000600aabbccddeec0", 0xc) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4}]}}}]}, 0x64}}, 0x0) 2.017243263s ago: executing program 4 (id=3056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000c40)={0x80}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000c40)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000200)={0x38, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x38}}, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) syz_emit_ethernet(0x46, &(0x7f0000000bc0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@fragment={0x6, 0x0, 0x3, 0x0, 0x0, 0x3, 0x67}], {0x0, 0x0, 0x8}}}}}}, 0x0) socket(0x200000000000011, 0x2, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)}, {&(0x7f0000000240)="ec8b8c4bf16ef994f0ac9e0413268a17fed4c782b831dc2fcb0a7a2eca608cceba537951dedbebcf1fd8e079f738197f0e302c13177f9568437476361dd492b7cc12db7f7b4eab907882f9b8017361", 0x4f}], 0x3, &(0x7f00000002c0)=[@ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x5}]}, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x2, 0x3, '\''}]}, @ra={0x94, 0x4, 0x1}, @end]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp_prespec={0x44, 0x4, 0x22, 0x3, 0x4}, @rr={0x7, 0x17, 0x34, [@empty, @remote, @broadcast, @local, @loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0xc0}}, {{&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000440)="1c70af8ea587ac75af7c552d37fbbdf3580d79093a6a9a07e8f255dc1996fef8b6106d55cae77722820bb28636ae8ad0f1b365dbf65946f991f633aa5020ab643fc7b3b6dae8d7db71c67dbbceace89023fe90d2da62d773bf773a5fb085843994f7638664579c4093fdb914c5542d776593d453a696ff4891f065eb3f8a50e25fcf1e", 0x83}, {&(0x7f0000000500)="7916e4e290ae3246a91b6d85f22f5043e59c207ee88e8b3dc4e80b7eaeb74d3de65ffa0ee7127ab1db5bcf0b0fe35abf8a0a0d2e91a46970051f97205d29e812595c4c6548cb38452942f5767dd2871c0216e2317703106b1e34559be5c183421321b8f4d862c2afd13b9ad86a28b7a86ed6f6d1ff5d81d152cd8806985e3f4b3a8e045f87", 0x85}, {&(0x7f00000005c0)="11322fc47dd828aac9b3752fb5406c537fdda01beafdc61237aa0e3fc67bab40b12ba9c221d0426f5f1efe20bb341b92aebc2049d4de0b0f52e6bbe6df4ba6c60ceeffb7eda5fa0c23ddfa8229e6c1f5f21a8ab1ea4fdd69c8d0109a1d6fed8b00f09b1260a35d63953981de14b2c26bdd85d754c772cd0ec50dcecd7191ec2fd9adf4f9f8427f63d3469f0713950b344fa9", 0x92}, {&(0x7f0000000680)="cf4b0458ebd6b9b4b5be86ebd6378e6796e03b609898c61515bcdac76dcb3b55bc80fd8d4aadfaa35d76d0c673d563c645d880c6e7e1e0ccd5551718266c7dde4d572b700b2c", 0x46}, {&(0x7f0000000700)="1e95366ba7d19164728701b1cb401dd88209467af076a91f07be1fd530f2e3280f011105d5f1193549ac67c35acc7d1dbd142ed7074eb66053db5d9266c49ceaff105b8e8899cf357b18dbaf5919aabf2b9265a020dc8664105edfe33f0889cb447eaa0168c180d14109482366f633017c2249295faf46932ca681d35a4faf60e17fe94a2804bb24ba7871b0c365763706ec83b70108682b8ad486174434644a614c3bcf393c2fbdcb130756040178c2b198931975a8afd32a573e440d1cc2e141f3c572a8d36f2131237717631018653a43bf80cd9b15cced7d7bf39652dbdb", 0xe0}, {&(0x7f0000000800)="2d01a08efc5280451e3b13e5e2e7c7b32543f335b2ca5297aaca728fff1bff3285ab5ead2f913dc8908a1519701de37e42e95688dea259e7fbc0b352978a5e641585005a04de91c82c03c2974d981520a925", 0x52}, {&(0x7f0000000880)="47a3", 0x2}, {&(0x7f00000008c0)="a298b563e756234d85213e7d56f13fc3ddc8ad561d44b1296e5a52788f3a94a3317b6d6efcce00788b", 0x29}], 0x8}}, {{&(0x7f0000000900)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000a00)="011fbf1c7c984d82", 0x8}, {&(0x7f0000000a40)="938d5579eddc876f3ef559f6030f901bb3605c896612028137f1227fef89e12277b8172d7923d8aa9aeaf38437ff6880dc0f095c180e1a3bcc1dfac23de34c1f88bd8793d1624ea9df4e3439c6360283d7330d502492224c8bfaf488b2808006f03b345a932d3f723082b6fdd2aa049d46476f2981c8125c0a188e13ebada4d1", 0x80}, {&(0x7f0000000ac0)="a81e3b36b5169e9936b1de089a336ba97522f22df933e9289e4a3fcad8f709b9b6d051ec691a02f17fc2d5c90f7151cb3050dbbdda016bdc7626a71f0d1d5f88f60cec78f3820e8beb94f578eecc7b0dc2a12cd27869ed621dcaa9bee7438d88ec82bad2cdda794006d4c10afe76b577be7721aa0c", 0x75}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="34eac430e52ea78f9b83775420f653c38bca2fab48de97884b441de213e8c0a91ede42bccbfe2d7b24c298c834ea67a9cd1bb4607323775e204e2c72c45391212dc0e86c27912b490e86a76b626dfa915c6c202b328f8cd8894b48e5786d304496ecf705414199b12ce46b55915e2dad4f05d632598d50c2f736089305636af20b080bdec35fa5b11b39c9b5a91d8fa8be355226254d718201f2e612109623c0389294224b8c4fa8dc6ad9baed843d9af178d795285f01ce1f02811e01f4b2fef97758ecea4cae0309b0668462e69559e464a96a165d146e5d6ed5", 0xdb}, {&(0x7f0000002680)="ec3156d8faa0224aa93ab040430bddbc337e59651833dc3e97a1076f1fa5334de813b33cf34e1646810ca69523569f87152b", 0x32}, {&(0x7f00000026c0)="7b9812d77e9ad3431f62e2e29b0b0ea68d6c93f5d318a70287e0d27c6e8a61a83246", 0x22}, {0x0}, {&(0x7f0000002700)="1ff83b54edd38dd3a2b76c", 0xb}], 0x9, &(0x7f0000002740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@rr={0x7, 0x7, 0xf3, [@broadcast]}, @ra={0x94, 0x4}, @generic={0x94, 0x7, "38424ea2b5"}, @ssrr={0x89, 0xf, 0x65, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_addr={0x44, 0x34, 0x68, 0x1, 0x3, [{@broadcast, 0xa}, {@rand_addr=0x64010102, 0x6}, {@loopback, 0x20}, {@empty, 0x1000}, {@broadcast, 0x3}, {@broadcast, 0x5ed}]}, @timestamp_prespec={0x44, 0x4, 0x62, 0x3, 0x3}, @timestamp_addr={0x44, 0x54, 0x4a, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x391e}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x5}, {@broadcast, 0x8001}, {@empty, 0x940}, {@empty, 0x4}, {@remote, 0x7}, {@multicast2, 0xed4}, {@local, 0x2}]}]}}}], 0x108}}], 0x3, 0x804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)={0x40, r2, 0x1, 0x72bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ef, 0x1, 0x1, 0xffff, 0x5, 0x2, 0x7, 0xb2a5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.904597194s ago: executing program 6 (id=3057): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000100)={0x101}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r0}, {@void, @actul_num={@val=0x2b, 0x81, 0x67}}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="040100001000000200"/20, @ANYRES32=0x0, @ANYBLOB="0000000095280500400012800c0001006d6163766c616e003000028008000100020000001c0005800a000400aaaaaaaaaa3b00000a000400aaaaec4daaccd1e08071030003000000a4001a805c000a8014000700fe8000000000000000000000000000bb1400070000000000000000000000000000000001050008000500000014000700ff01000000c85f03a5a74c72000000000000000000000114000700fe800000000000000000000000b03dad472664055812119400003b2c000a80140007002001000000000000000000000000000014000700fc020000000000000000000000000600000000000000018008001b0000"], 0x104}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000100)={0x101}) (async) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r0}, {@void, @actul_num={@val=0x2b, 0x81, 0x67}}}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="040100001000000200"/20, @ANYRES32=0x0, @ANYBLOB="0000000095280500400012800c0001006d6163766c616e003000028008000100020000001c0005800a000400aaaaaaaaaa3b00000a000400aaaaec4daaccd1e08071030003000000a4001a805c000a8014000700fe8000000000000000000000000000bb1400070000000000000000000000000000000001050008000500000014000700ff01000000c85f03a5a74c72000000000000000000000114000700fe800000000000000000000000b03dad472664055812119400003b2c000a80140007002001000000000000000000000000000014000700fc020000000000000000000000000600000000000000018008001b0000"], 0x104}}, 0x0) (async) 1.866213549s ago: executing program 2 (id=3058): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0022b1dee0000012f400e6ff0e400058"}}}]}, 0x48}}, 0x20008080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 1.77686019s ago: executing program 3 (id=2986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01080000000000000000050000000900010073797a30000000000900030073797a310000000054000000060a010400000000000000000500000008000b40000000002c0004802800018008000100667764001c0002800800034000000001080001400000000d080002400000000d0900010073797a30"], 0xc8}}, 0x0) socket$inet6(0xa, 0x5, 0x7ff) 1.589974254s ago: executing program 2 (id=3059): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz0\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}], {0x14}}, 0x74}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup=r2, 0xffffffffffffffff, 0x33, 0x0, 0x4000}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x3c0, 0xffffff80, 0x178, 0x3c0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {0x34, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0xfd}, {}, {}, {}, {0x20}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {0x0, 0x0, 0xff}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x3, 0x3}, {0x200}, {0x0, 0xa}, {}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {0x0, 0x8a}, {}, {}, {0x6, 0x0, 0xfc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x6}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) socket$inet6_udp(0xa, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz0\x00', 0x1ff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}], {0x14}}, 0x74}}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0), 0x200002, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup=r2, 0xffffffffffffffff, 0x33, 0x0, 0x4000}, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x3c0, 0xffffff80, 0x178, 0x3c0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {0x34, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0xfd}, {}, {}, {}, {0x20}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {0x0, 0x0, 0xff}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x3, 0x3}, {0x200}, {0x0, 0xa}, {}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {0x0, 0x8a}, {}, {}, {0x6, 0x0, 0xfc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x6}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) (async) 1.585064175s ago: executing program 5 (id=3060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000090600010015"], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000140)={0x2, 0xffffffffffffffff}, &(0x7f0000001200)=0xc) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000001240)={'filter\x00', 0x92, "dcc31a5f77728052ad3ab51b710c8911db5ad70226b66aed6e690fae88c30da9496cee1e45632dcbaedfe138049cd80111e19ad2880251dcda77d46cd39466278ec7e3be73219038c3ceb3742384a4fc5f9da4cb328dc209eeac19b4a8dcbcb883e290bd212c5f9a74b0929344c55d731a2778b60dfcbb94de37f7bb8fd394491492d6e0a56f0d56735152261640b7518846"}, &(0x7f0000001300)=0xb6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000079110000ffffffff9500d9c0d5f10bbb5ad4000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x21, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.579334145s ago: executing program 6 (id=3061): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r2, 0xe, 0x11, 0x0, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) ioctl$OCFS2_IOC_RESVSP64(r2, 0x4030582a, &(0x7f0000000040)={0x1, 0x2, 0x7, 0x3, 0x0, 0x8}) sendmsg$inet6(r1, &(0x7f00000007c0)={&(0x7f0000000800)={0xa, 0xa, 0x81, @local, 0x7}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000880)="671723c2020033", 0x7}, {&(0x7f00000008c0)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f00000000c0)="0000c877e825b11483e52ba148f85000b8", 0x11}], 0x3}, 0x20004000) 1.437996941s ago: executing program 3 (id=3063): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rthdr={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2}}}], 0x18}}], 0x1, 0x0) r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000200), &(0x7f0000000240)=@tcp6=r0}, 0x20) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x400, 0x4, 0x204, 0x1, 0x200, 0xfff, 0x5, 0x0, r2}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x6}, 0x94) 1.321275513s ago: executing program 5 (id=3064): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2a, &(0x7f0000000040)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x1c, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2a, &(0x7f0000000040)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x1c, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}}, 0x0) (async) 1.042416489s ago: executing program 3 (id=3065): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x4f, 0x1, 0x0, 0x25dfdbfc, {}, [@typed={0x32, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001e1401"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000240)={0x0, 0x9, 0x10000}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000640)={0x1f, 0x0, {0x800, @struct={0x80000000, 0x6}, 0x0, 0x40000, 0x200, 0x7fffffff, 0x53, 0x1, 0x75, @usage=0xffa, 0x9, 0x7, [0x8, 0x8, 0xf420, 0xfffffffffffffff7, 0x7f, 0x1]}, {0x7, @usage=0x2, 0x0, 0x4, 0xea48, 0x8, 0x7ff, 0x7, 0x90, @usage=0x100000001, 0x3, 0x800, [0x8000000000000000, 0xfadb, 0x6cd2, 0x4, 0xa4, 0x1]}, {0x101, @struct={0x6, 0x2}, 0x0, 0x0, 0x9, 0x5, 0x5, 0x7fffffffffffffff, 0x44, @struct={0x3, 0xce3}, 0x2, 0x0, [0xdbc, 0x2, 0x7, 0x8, 0x9, 0x7]}, {0x40, 0x3, 0x8000000000000001}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000640)={0x1f, 0x0, {0x800, @struct={0x80000000, 0x6}, 0x0, 0x40000, 0x200, 0x7fffffff, 0x53, 0x1, 0x75, @usage=0xffa, 0x9, 0x7, [0x8, 0x8, 0xf420, 0xfffffffffffffff7, 0x7f, 0x1]}, {0x7, @usage=0x2, 0x0, 0x4, 0xea48, 0x8, 0x7ff, 0x7, 0x90, @usage=0x100000001, 0x3, 0x800, [0x8000000000000000, 0xfadb, 0x6cd2, 0x4, 0xa4, 0x1]}, {0x101, @struct={0x6, 0x2}, 0x0, 0x0, 0x9, 0x5, 0x5, 0x7fffffffffffffff, 0x44, @struct={0x3, 0xce3}, 0x2, 0x0, [0xdbc, 0x2, 0x7, 0x8, 0x9, 0x7]}, {0x40, 0x3, 0x8000000000000001}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000a40)={0x19, 0x1, {0x789e, @struct={0x400, 0x964b}, 0x0, 0x3, 0xfff, 0x1, 0xa3, 0x6, 0x94, @usage=0x2, 0x9f, 0x0, [0x4, 0x4, 0x5, 0x80, 0x4, 0x7d000000]}, {0x9, @struct={0x6, 0x7}, r3, 0x1, 0x7, 0x163f, 0x4, 0x0, 0x44, @struct={0x1, 0x7803}, 0x5, 0xda9, [0x3, 0x10000, 0x2, 0x4800000000000000, 0x3, 0x9]}, {0x68, @usage=0xfffffffffffffffb, r4, 0xb14a, 0x40, 0x7, 0xfffffffffffffffd, 0xffff, 0x5a, @usage=0xff, 0x2, 0x0, [0x101, 0x9, 0x7ff, 0xffffffffffffff6c, 0x0, 0x3]}, {0xffffffffffffd816, 0x7, 0x4}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000a40)={0x19, 0x1, {0x789e, @struct={0x400, 0x964b}, 0x0, 0x3, 0xfff, 0x1, 0xa3, 0x6, 0x94, @usage=0x2, 0x9f, 0x0, [0x4, 0x4, 0x5, 0x80, 0x4, 0x7d000000]}, {0x9, @struct={0x6, 0x7}, r3, 0x1, 0x7, 0x163f, 0x4, 0x0, 0x44, @struct={0x1, 0x7803}, 0x5, 0xda9, [0x3, 0x10000, 0x2, 0x4800000000000000, 0x3, 0x9]}, {0x68, @usage=0xfffffffffffffffb, r4, 0xb14a, 0x40, 0x7, 0xfffffffffffffffd, 0xffff, 0x5a, @usage=0xff, 0x2, 0x0, [0x101, 0x9, 0x7ff, 0xffffffffffffff6c, 0x0, 0x3]}, {0xffffffffffffd816, 0x7, 0x4}}) 1.042041612s ago: executing program 6 (id=3066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e50800124000000009050005000a0000000500010006"], 0x58}}, 0x4c8d0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa800000b7736ad7004500001c0000000000119878000000000000000000004e2000089078"], 0x0) (async, rerun: 32) syz_emit_ethernet(0x32, &(0x7f0000000100)={@random="3f0cb265933b", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x24, 0x62, 0x0, 0x5, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x4e1b, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x8, 0x100, @val=0x80}}}}}}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="68000000100001040000000000000000000000000000000001000000000000000f00030073797a6b616c6c6572300000340012800a00010076786c616e00000024000280080001000100000008000200e0010101080006"], 0x68}, 0x1, 0x0, 0x0, 0x8110}, 0x0) (rerun: 64) 953.385764ms ago: executing program 2 (id=3067): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x2b, 0x80801, 0x1) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000440)={0x0, 0x3, 0xf}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x7ffffffe, 0x0, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000300)=0x3ff, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000340)={'wlan1\x00', 0x8000}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000140)=ANY=[@ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711003000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9}, 0x94) 817.578548ms ago: executing program 5 (id=3068): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x3040, 0xc, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x300c, 0x3, 0x0, 0x1, [{0x1a80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x65, 0x1, "4f4d5c92933d0c486323bced540e5b428693d6ed61cb18c01e45058add306cfc1522ff7e92b2635211b11c1a7b7d9f099095bc786a67ae8e72cfc4547e878f03625f0dc4f3d57b38e546b8abe77cfc65b142fa9a6f20905f476741371e42ee770f"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xf0, 0x1, "a56376d0208a625e2d16c3f5c801383c3460ca28628d28af06935021e2b589023cd06ef775d65207eae7d5881b495eb648a7aa570181681e3ba23de1810c7bd72fb374ebdc3d6d6bb36425f481c33a482b81e57a89b6cb91b2c8f56311551e67fdbba48fc68932e377a6357915bd89c945658e1bd8c388a74cc31f275a7a0fbc209c5a8098b12c31584558de6323feb64d06d05d7ffeb73c753892257767f0480b477adbcd1c0e20752e17a0dd111c1a80bde580551ef9670cce17958bb2b2279192af2ad2220f4c639b3906aaf55db100ae02cff0429685f6bd58de86159d89d63cfd59c1284e705128c550"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "50d37208bfe52d63ef309dd05007e949981c3fcd421394b502e7700cc3fbd1844d6bd52bd6fe72b56aafd71ef99474f34215053d2cd4c95da476526a2622d47bd78f682c9e51b33f54fa21f3c5c92a55ce00be02d4d4744e66ed7c96824725137af9b0c921ce622544c0f84d164e7ce96915cf21ecb3e79b93c8324b7375"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x2b0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd6, 0x1, "d9812852f92c979820c77515119664ceba5d89654f0630af2195118ae0e60322ded31e4d63a1442efd14b411eadc05a5871d9f46c84dbbcbc4b30dc3ead6a69b56f5d7d3cbff5dc416aee0c5a9350dc6f79747020a282a9c0f57c56a345fbfeb6a2c579ae67ecaf50f5a2e5279cc7a5684fb574151cc503d9fee407688a6501fe071e288162d946793f309bff07562ad185d4624ddc2d8c3aa74bad497154c186ead93e4a73f0f8a98a59c61f1c65ab415a90756325d27259452b75c286d08682495301c767ed253b51c89504bb8b308a3ea"}, @NFTA_DATA_VALUE={0xc1, 0x1, "f8d4eaeb7eed5c8ff1c81d9f43097b26eacddbe73a60f72494580f7f3d683cd4aa24d20cbce79fe2fef1090688e4ee881e07091930b01147075296e6dcc271fd273ca0389db9e228eee2b703740c27cd09a12ec3b7113f487abc37414b19ee4bfe5a93b3c927513e38ac950736115803469f812ad20b4cd4b3f7d2e9f0e67f1ba99603febe1042dcde8d22f9b431babc4b3929e87a80c25b2470d74df7987e79f7de4a70e8fec338af62826cdfdba28c3bf8af68c5f8f878e430ee46fb"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "f94ff3d008e8780e6ab0ab871804daa5268264106e2c6ff7296b809c1d267da0293a79a4d703885e7b22b626bd0d9a18ab18430ab13be9f028abc226ec953f700a6a2b4fa1c15c4314d8b2ab64e95231720232662a7824900f91bb133065de869d0a2c149c9801bae3527e736c4c138f33f210ede690516f5a8a6dcac482aae94fe88108cbb36f23067780a3d636bf57529edf9894544bea9fe22fdf36e91612f9048bd147d59e4ec472dd2555dc49cb15887ea0e31fab"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY_END={0x14d4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5d, 0x1, "cc14a262992a7a200a61ce467f1fbfc7fcf6019ad984274dcd584d21dbc736c444022a363bf2dae50730826f462c7177c003feaea3f89e798a610effaf93cebea20d98e1c278d4ded0cf84043277da84dced7e6c0f810574c3"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xf4, 0x1, "f76cd83d6e9e28f8cb5a7a3739b0ab38a509bb21e893849b61a021b331383f885b177ddb8d693eff81f565660f5cce387e20e2587cacb7a82f1167b99db8571237d0c040ff76db59047edf495286de997d39de819476528df44a5b45e86e782578c0601263694ebb062edf366ea251640b6b0e011e64d93b05eab10780c17d95f79dfdbd11ca521c6c80cd120b41a51df7c7fcd659cbc4faece9b3bec5dbf7303d94992c700566efd98030491c0e29d2d8fd7fb3aa7156f2c95753e7e5ff0e50098352518848c39187c1d06102632bb6b9266ab369f0b710823a62c7909d5e72645c1161efd9e5b4c856cf9d368420fe"}, @NFTA_DATA_VALUE={0xda, 0x1, "833faa9add2a5b178bc7cf1729058a691e6eac58ee89c633ee00f3da13582092fe5285cfa58e524039ff64f581694d1ea97bc8e46e6d31a81bfc4f58463030197168ae7f6e9a9a73e4f4c87570effcb3f6afd168da70cfde0298793b0e89d78933987243131e7afab98888d4c2151e8f916cdf49c39e59641a0f3becd0fb2e662f7d5c69f8354e58a6776b493be563f0210fa1e9377a0345e0cc5899969d51b02214bbf5fc03e8180837ba0ecbc1aae0a74cffd7d36a4910f124840a9209fafbe980fe237312e95e3221f890f17f921d4f97d0c7f929"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "94aedf6a118abd69d87a771d8e89c771e1a4945ad24a276e66f3ff8d0cf0512ca7f2f0644627cac84300ccfe13c3f598b5271cc54d5266347b5b7a23234bb5751cf9c18aa2ae1e4a09c125df34ce979f74ed915f821571a6553d7ad82bf6dabd73ac3740ab713f84f8c70d1a1ed0cef90452797d27ff82fef2ec7a4cce26335f9144f5aaa9a32af20c01fdf5d699ed7626b9c75d656d66b072c2cf08911d9025984ea1b8921a99502008a2d5335b57179d18d995142c0926939a3e4e89c7b28571998f5f38fd6d9b975b1cbcd8c1366ae4e41df67349b7f0aede5ae1b53ac33e8d069110e36c59558282ce7aea781aae112b9a462fd967"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "293df0c6badbe48c1b405bb0f94378ad09b851891462cf613f7aafbe1fda85b60463e86fdd220bc081bd1ad12d5ab1648763e7a0d85e5b6355cc3164eb19963506541b403368d6f0b7bdaad49db2c2aac9e0ecdde651d34e0dd0c2d317ab990f265107cd987acc8d0825975513ad43c9521ef3d67a6e2f9df2963dce6de9f876d6d5142fe15d697b7511599a083e9e6b89ca6ab9fa7872b335f3d153aba2b11f47c57b69a6b9b94942503b5933aeaeefc9694de55bf97521f3d17256b5e04c5ca2c71359a613a83a5cb22f87"}, @NFTA_DATA_VALUE={0x7f, 0x1, "fa3ebafdd1bfcb447247a7c9ebf751ee22997d93a2c8bfe9bdd33589e70acac548ec7ca353b06b5e1f0f1e36d54b59f778ba5e1baef35ed9533061e0eb5c1bc10eb7c0e3d669438f6f38e55ecac3e5097af82d8a6eb42fe146158f778fd4e0c3e933497b6476887951c9b1976c3b21f13c6118f6ece52bc7aed6f8"}]}]}, {0x1588, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa3}, @NFTA_SET_ELEM_KEY={0x370, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe8, 0x1, "649743a686e9f0ddf9eb765acd6248bb9e17427d4290169e4ff2e89c28b4fb59a2fd34920a2a60cc6b0de87c2b52a9b9895f55338406d249e90fab0dc332c6159742822ff724cc28c9b0a145b868e3f288df7ca2e27f4fde585119bb754ee350d00f0f6af82b1e1246b9c25239d628aea4c5ca814a7d29807e1099569c02e18f302d17e2e18b213ddd18017781bdd8cb1c6a7a455a566394c2e478665da308387c15e6d542032d14aa1f0249a556143fd0e8b69c665ac271c357b5714490863acd4e83f1a09bd22c8da42a898a0bb2dc4120b7f44a0e51ba9a081df56c223de9f59d118d"}, @NFTA_DATA_VALUE={0xe7, 0x1, "b5b8dc4526ac22a441cb360f2e3712151e4d3b75eb234c90079d935ee03daf01a2c61c384e7945a312f365a6c47694fd4e5ec9aa85537c20d55d4f6febc802d755cf3d001356bdf8ca66f6f644f602716203bd5ebb7fa9401d000822b894f3b3ef98eaa9839a63a41244030fcf6538ef02a91350e3b080900413f7f52d93a8aa700d91f0bd12eec2a54c39651416891c8fd7821a33922a1ad7241c52bbc7ec07db040f977a53436520e9358d2dd25c24de7ce1287691155fbab59f8e0511838b4dc64cb89c7e5a6fe6592cf7e479714ce616a24c69bd792d9ae5232e46b871c9d3b0af"}, @NFTA_DATA_VALUE={0x97, 0x1, "f5394864be23df934c23079e54a4000974c8809838c564cd65e2e8c6909a61fb309d23b67a4c60db2d723a60d49f807e94fb97ef1a942ed72c04fb58c18c901f76d579bdab00950b1dbf49c2bd2e75845908f41d534a74c137911326e9ca059a26260007570323c9923156f7003be8bf783def3d30d75fe61d13fc1e3046ec24819dcd24b07e68461484948de832a74a992ef3"}, @NFTA_DATA_VALUE={0xd3, 0x1, "0c5b0c81c7c20e46a40e947d85914798c28c4a5f102254b077993280237199ba2a2cd4bdf17f4d5b2aef9ba5d798149e37d6ad1195c695180d02b6f782fe6a96e5c51bfe7091019d35ef6d5d639d46c31530086c8e69dadf844a0a2a33349e20edcbfb0e8344afe5634cafc5c80b1f70b2918dbe85117b75815a8541d724571409fbd3babe1f4664cb2b145a1d3dcb2a08eb2142a581373e34cb3860994eaa8184877a31bd561ce4efbe09b3714a9f1bbc8a3626101082bf11a8a54a502b1f9628712604dde66acf685aafb75b6769"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe0, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2e}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x111c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "d9debd35e408d5054249058a2ea3ce8be83cac0b0a7a38951bf98edb5d25cc34763f621cb265e1890276c5f523a251e5e61ba88d35874d334e73f30d721f15aa6b57763874e005e1ec8ae3412b9aa0b1f80fd48a3ae96cdc7374ee2524a1d974bda05fc7e297cabddac5782c0e3dec1c36446e1cf48fb93502cb5a9cfebe313ef89bfd411bb6fe377aa1b31691f417f75840a56a5f026665591b4fc74234f51b37e412a73d016d52292083d075c33aa74c6f9f125caecbf12c259d18567ee5300791c82fcce8abcc53cebb398660519fc756ad3d397ae4a67c1880429eae539b52b91db34f7ef4171f48209eb506540a0ec339de046015ad371adef24087f755dd73a98bf52f4b6b6fc1020b279ec55a30c1b87754529bb1951868f5a182690870d4a341e3ad038ccc30ecf9fded42f0d70a415abb8d1a745fa41a7ef665dbddfa8dd346be8a3b262798b151ab2d691dd14c5f1d88e04d6bdf1edefcc410c74c291294d96cb71fbaec51c3939cda349448808b93a924decf71193f0fe5cc45a0d5dcf44eec4015b78d80c8d5b815c7069f283c336e49d046238c9998a3fd53c6389bb883b5ff547e2e56e487d480d382dd32239942f2ae4ef93288c50b8f4b513404ae8d9355300963ada98764a2a5449562417a1620bde204b7d3d4ee47a04d9b84354a57d1e6b901e50279f8a6b0c1327db124d2885d316b301ade1d54dd5ce0f73c706757c675804b8902a5208ef5a9f116c5eaab62b98f2bc4582d0309d7bbfee44c0d1997868f3e930599ae5d9c6aa506ff83dde38b006f062deed75edc1e4c516481bdb5a41608d403d2a7e608d390fb2bf2025982afa4848ccfa7a042fb8f8143255ee58fb4e5a90c9f939bb089d61d9f54a44d3ab37a2d20b9680fabd3aa9d3df98aade046370f62b237b12cbb7e692ad63973642b808e3af4cdc0335d1560b013732bbcd106cdc43344af4cd50c26f36d22dcc8f31d7b0829aef591233dfa05300db08913725e9602f7ab8296a321a31c4d8a32d4bd49a84595e19edf92a45c3015583783b7ce65c9063ef88e41ee944cbe3740d550ad45aeeec1e7a54424ee2640da8651ef008fa258fc29cc7f0a991f3249f29a1d64df808b5195867121e3ad9678b5874a654ab87fa2d02e693b1ec6f1bf149f108132b4ec49b0558759567e78f503d4200ebb3342e16da0582b55c4976becbef5fb148bc9fdc37c7d1bf05b3d6ec843b2b0ac2b9402d104b407d596c00f7aa81dda4a8f099c0c842c18014d5831196ba0742a0efb58e7b6150458cb14ff0d8561b606c78d15acba8fc527b412609bfdddd239685eeb927fbd32e99061df0bdbaf0392d4fa90d85e6ae692ab8cdcc81ab6b017e35e423d12aed0a3290fdd21a3538244624898815e8af20de3320518b29c9202be0d9b80c61cc612a6015c7bc31c5072631ccc779447c4a494a13c6596b9d882c582719f19c8dd67e1d58ed3b8d9b50c1eeda9312d7b0d9dee4f3caca044a5c88226cfe7f8c8ec37046a787c6d5b1f539258cc3d5463b393f0adabc1f9a18a7ad964ad7b2e06ac2cdedba96034eeff2b10109fc265ddc893ad8b0ceb3848f7a13419bfa6b59342069cbdf7fdf4080addaf346cbdcfe80015ef2d479fb93c2274f8eca606b28b2c9cde30e4318971ce62026dd877330779861680b81616596489adae96e83cb5bbb72a0d940f408269a1e008a1e7210101584776f193f085bca32570aa1aae7b093a37f8c7904347d76a80f30916e7afecca2ed7f02359b2b6347c14755300c8b5c9475797319941d787d07e41f99527ccda86d1be2e8190e183b61268a283ba3a32c6716a2f8211c10130ba1394dc14ce0e75915ea246176fb804ca703fd44f1e29eb7882106aeaeceb5e63c4af7a9d251d4d5ca1fc343cc0e85ad1515b7e43f8005127ed8011a6e638699b4b53bf53f5d26cb862fa4f347ea1830c3a6c426f76e7c5f67da6099c28782c86af4518d676f09c14737e475a53c35c51049a260b07c706ae41e6af3a6fd661419dfb8d0ce2ab14d433b852972c01a4e4db79cf5f5c3e1d816d770c116def52ab71126558a617f599d6d8c2f02e9536e2daa59c29d6971957f099b0cbcf4bacc27d2f46c67c569268123230b772e665d9dac02bec08b7de2de5768410b87dc291c030e3c5f069dca8f2940e6b7a3fe5bb10c1b7c8105d3b65dc9add8523b67e47ebc70c694de6bea33984e63329a56073f72543adb8f81d52b301f5c85cd1019c4ccecac75c025bf19135adfdecaaf9fae48acb40b0cb1eaad7651985af23052648e5a243e88da18e8c833aea28acbada3b651b9dbbd6a7fa8c1bd305419c8f2d3d68e74f0d643701a21deaae65aa9efc6da80e050e7a5a1591e1d967ade51b298f59feda9ff774b26f3b883ab5483a0ebdcb023a38c086bd3468a651c23d1244a6405697f309c9296ca5bf04b2a208115127a6a75e42d4ec96cae1ccceddc9a2a0a98e9c3ec5c460f6a9d6d23fc73852c830bb73635b87769a9ba4fe1974533e500ec7a5721e389744fbd0e999662b5879fde59e7d1b7770b83217780d5b4886a232c2b82057d32cf9cc1f9a28492729619a4216a484df86337cccbd9da9986989ded53078e6cf0e760db4abfcd8e677f04c978090a45af3222a768484bc293af379b1981a379cdcd859f5fb0866366ec9cb9fdd75aefe0bbe0f95fcec5966ce6f1779e9ab3068059cd23243bd4567ff6d12b70679f8ddba120d07d79ac30e62ace74533225cd7fc12c51e9a4f08b66d840e9df6daf11e613381e26f721fe386617d1ff70ca479e9b8849c24f346494db0e9afcc7fb8ff46d07642e87cdf29b8576afd1d97fb57486ade24348f2a2fce3cc7b5956445740647a6e445a9a009d54e563d9d1e772fbb2fec32d100bd592fb71f6e24e3909fa50f500c3ed9ec119d6bde558cb572b44d497a23450d433e222c3e5b994f39afc4c6a998eee6d50ba558a861bf6d37edf2b863333ea30383722ab5cadde85714b584fb1e6c29be69a6a7d31187e96d4d4c883095f0c46a7739fcab41c2f6569d7977b6de19b186ae2135d535ecc334513890a443bea14ccc5df3b3c531e1c9821b07919b8f15bee1b3ce37da1409d4e96eefc00af48193bef2ed7828f6ff4106ae612b4bcebd542efe52265185847c7fabe46e6b0b1b2dfa1eeb7d1adacdb39f06048c89dec1827387b69839bc31b7baa264bb24a7931bdb9760656f0c98f211e82a4445d219ab54bf273ba1548cd9f8e441d0e09a8de4afc6a15090765da4346423d63ef50e1301006f0db7612dacba0c4ace54bee1e2fe63c51186b4cf8a5e4a182a46f123d6e6deccbadb9a5f149aa66e9c7cd7b61e27d3d6141bc41bf4ae888e5c624db3f741d381f15a3dfc20ee58b054e4b8d35517e3a38d718ea261de057f9fa8a24b0cf11a6cbf636219c983964696500662d9af10bc77ecda71a3ba85b45c62e1683ab6563cc9e33e18b1d7f829bb3d9867fb35d1ff66b86bb963c70b9865458fb0abceb16c9f10422d9b1edf0857265334f4c2f8caf103c73483883eba7a6a586482fb69366567c60a36b93bd937cf47232882e09a6d9fb2b50f71ccb06c92bf6ba17e887ea69992686fef23ae49de95dacf18d8cdc4327c45aa3a2b65244053b9716a1144c0479c1bd78eece9c0fb313b5860b2e91fda371a2df38a828db7d19e0a9a56cec22e1eaf26d3c9293d5ed61c53a423a5814f40dfd41be24c53e12578c0f4762913b1393b4ab0dd74c12d630a0c26f9f3ef153dcd9bc5fda9bc92bda4e4f282c2f819270057af277fa3e4b6e6892f1d59c759b39bc98e493fde8537dc6e7e08b81d3759115e9573e9e89a05e4ebade00b07a6cb952c675bf447286656d1a1dca411eda2d806b04f3c2e5609f928e4ca5dad610799ca159595e671d8dae316f7cd00dec7fc86bb18e2fe380ca431e0ef1cfc9749908c51c1cd74c6e40504dc50187482a8869e7e608dba60145229946b00a69c98d36e1d514ef9179ce909ce6bff1f49b6f9c4551f99d12f5c80b38f568f5e9a1550badd9278729ebdb4aedf164a22db0cefd4d05846a7354aec79a1fbbc3dcfc711c10ffd0e6e0f78827112cc5e47d5db19d7b85db32ded6f0a278796c6ba890fde70afd3b3b3b63c760c0c9606aa5043ea87a810ccfd7b739fa348b89448ade8b15fa2c852c695088dcc68fbd73562b8c8356ffce6bcb63b560341551cd4e1524dc0e623d04b354efd26be2ed26545a2ec838517b0d8fffbbb6eb4456a169f9003b60c30efe5d0a216eb42518ac0107bd11c605b2be6edd3b18af3d26fbada4f6ab60b6f7444dfa0465b871cb8003ab0fb67857b7c0a0c2ddf3bd6dbb6d0df3c0b4eaa17c6d24a10bf20db000b11e9c934f14e25a9754d4c91ac01985c03e77e3981021099042994de7b1dc6bcf625a54b0af6b6ca48bac1e5368f7a84e9d4901c60a180c4d866a0eb6a0120a155d0373600e4be47ed04ea479b49e09090c41a8654031e81f380a7e07439cb570e57a4e66c5d9894afe4f294d7bff6b5e1e26a71de122b9e83ce197e3af9167ac3665d0f8428cb05b09db15b32ef0e7c2675418ce318bb4fc8e22efb4a7a6b68cd0d1c9dfe9d5be4feae405b231fb21de7a3133eb2812ed44296a4e0aef0773e833da0e8b3dd8bd3d39bb72b46089c19e374ab445f65a03ab01dc9423092acefa713ecae002af4570f4ac48cf33b93245fcccfdd62c379c2a57063ff81177beda472b743bb9ee7451cdb4438a4eb38ae6d1882944986e30c1a4d282fa7a4cf983bcae304f59ae50fd210cec6be6b3ac25340b5319dcbc42b902dbfc6c286a7ee07925b2f9ac12e3b25edb9ca80d602c73eeea3a6535233b85e89edf4150649ffda46bddfdb749cf0b14f015b70cbc82af123a75fc3ffd50b326c98a073ee091890edd13f413758d2d3cdba931f35b5544a8a771e1f82363a14281f226efe4e5552028f184540cbe93d37ec5682e14026f2ddeb8d4cd1510e9b3a254d68ba265d6e2b8e9ae6c24d2c50b63647286685bfeb6cef008a7b2f5268dc29839441dfd17b9c3ce1b45b4c5cf0ec73cd8385af80d1f961ac9523fa408d5e48ea4b220ef96a01b852627a7352c2a12cd1b4c782918c35756d4feb8dcc16bef22f7bf575f9bee9e99ef4a5b2c9f9eeffb2237a1489738b359a0f640f2aee73572a4ddb233afc033b1db71848ce37be0dfa9d9e3d77ce439da9dab288008536acd9a680e213b0082294f479fba906aa1b9af5ae624ce658803fe2ec0da11a452d7d783687be4f966fb1557ac91ec5f452ce30ee72f3ed210a32e0c2fb313974b9259540d70b2481c07803dec9233eff70ba6c4e8fde1a6d88e31c64c1be6ae518608f4d384f7d96c358eae56601f38dcefc0c5e6f073fd89c6cad1260d1fb6a3470403fe14926487c73285580e0ef1a375b73a2be0647bc2920f970ab143e1ee8be47efee7d8eee975f4af008f9eecdb96b0afd3ff59c7d406ad3914eb6e96681dac22b0505cf2d1d294bdabf6168cdea3837170e596d6a2e480494df63e7c3302f45cf69bb9d603935c404bc1f75b2ff4b65e1008306cbe09ee031dbed3f9bbd8e12188be1e986865948c1f8a4dcca6f51c5df2f4f2b339c6c1bd78515f62edac23ec5469e17c95c75dac7fbe0b1e80bece8b2f8dafe05c80d7d19a5594b85bb1455d7dc7a854850a4f40efe211ef23e3afb970715fac72814ca369728ad2cf386c0b64d6a25d74c6457b854720d6b40882b5778297324f58757bff1996d8c2e42ea1677fff5"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x89, 0x1, "bf1e431854839d8f6b6c725694aa18175ff4d545d58e0f63cef9ea473bd8ee3814d29112cea17f04f5e0fe3c534fba294c646cdae9f2ea53091259c70cecf4de3a228026c5e8dd17588058b2924fabbd23f22b577c0f8457cbcce5baddaab81d1c5c1c8dc5df9dd3c9c6e934230234c3a6172e5065596eb83be8b8beb216c7c0e2d64b0121"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x30dc}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003980)={0xffffffffffffffff, 0xe0, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000036c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000003700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000003780)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000037c0), &(0x7f0000003800), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000003840)}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000039c0)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000005ac0)={0xffffffffffffffff, 0x20, &(0x7f0000005a80)={&(0x7f0000003a80)=""/4096, 0x1000, 0x0, &(0x7f0000004a80)=""/4096, 0x1000}}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005b00)={0x6, 0x3, &(0x7f0000005bc0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000005c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005c40)={r8, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f0000005cc0)='\x00', 0x0}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000005d00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000005d40)={0x15, 0xf, &(0x7f0000005e00)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000005e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000005f40)={0x0, 0xce7d, 0x10}, 0xc) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005f80)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000006000)={0x13, 0x17, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4}, [@alu={0x4, 0x1, 0xa, 0x0, 0x5, 0xffffffffffffffc0, 0x8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf858}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x70, &(0x7f0000003640)=""/112, 0x0, 0x18, '\x00', r5, @fallback=0x31, r6, 0x8, &(0x7f0000003a00)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000003a40)={0x5, 0x6, 0x9, 0x3}, 0x10, r7, r8, 0x0, &(0x7f0000005fc0)=[r3, r9, r10, 0x1, r11, r1, r12], 0x0, 0x10, 0x6}, 0x94) 327.432416ms ago: executing program 6 (id=3069): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000002000), 0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001040)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000400)={r1, 0xd12c, 0xffffffffffffffff}) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup(r2, 0x0, 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x48004) sendmsg$nl_route_sched(r5, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d050}, 0xc0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000009b40)={@loopback, @multicast1, 0x0, "e0ed43b9008423623755d3d37d95aaf383592ab9a4fedb2f5809a710447f5e02", 0xd8b7d5ea, 0xfffffff7, 0x1, 0x3ff}, 0x3c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x28, r8, 0x1, 0x40000, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x5f0f9218bb91c3e6}, 0x40000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1400000009060300000000000000000005000000e0871314c2677c9d346d00c92bcad2b6be2cebdef9bb67c08b0f56779bcb2b3cad76cdb9a8cf585bb8d67ed9ce7a0fb2762fa284acd1df30664843ebfa85baec62d6c254348540bbde9c3fcf1de432d3cb6fe8286b2414c157a8da40d8b6b2c98a3e83f86c89d6bcc8537507743af87f2b87e9e717dd14876b879db6118f4bccd541d2852c21383d7860afe86709976dc19ca6c39c3edf175902b2b467a93dae7d0cd16d768b562b68ce088ca74707"], 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000000000f3ffff8800000008000300", @ANYRES32=r12], 0x1c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="4800000000000f578d530a994c190780f3de841c6d3371c4c14fd8c7ca2ff12e0ba0895074273918bf38dfe7f1aaab01b56f0487b65e495ddc1952c1de2cae2f9fd6bb28afbb5d43245ba516c3072efa8b32c1fc27", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e001800028008000300000000000a000400bbbbbbbbbbbb0000"], 0x48}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r11, 0x400, 0x78bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="6939f4f407ec"}, @NL80211_ATTR_SSID={0x10, 0x34, @random="9e764fc4d1f72e08dee7f577"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1b}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff5}]]}, 0x48}}, 0x8091) 275.154384ms ago: executing program 2 (id=3070): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000200)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x1fffffff, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xb1}]}, &(0x7f0000000240)='GPL\x00', 0x5, 0xff92, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x684fd82afb0808ba, 0x10, &(0x7f00000003c0)={0x0, 0xffffffff}, 0x26}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 0s ago: executing program 2 (id=3071): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffc18e250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900010000005b00000005005300010000001400040064766d727030000000000000000000000800050004"], 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030427bd7000ffdbdf255100000008000300", @ANYRES32=r6, @ANYBLOB="0a00000005008a00"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r3, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): 8.448761][T10811] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1327'. [ 228.506150][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 228.568200][T10816] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 228.682575][T10819] netlink: 'syz.3.1330': attribute type 9 has an invalid length. [ 228.682601][T10819] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.1330'. [ 228.773152][T10820] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1330'. [ 228.800487][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 228.829593][T10815] xt_NETMAP: bad MAP_IPS. [ 228.862958][T10814] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 229.483152][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1340'. [ 229.634871][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1340'. [ 230.606828][T10900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1346'. [ 230.726866][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1347'. [ 231.047121][T10909] Bluetooth: MGMT ver 1.23 [ 231.077780][T10908] xt_NFQUEUE: number of total queues is 0 [ 231.089306][T10909] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1349'. [ 231.901987][T10928] macsec1: entered promiscuous mode [ 232.235030][T10948] netlink: 'syz.2.1359': attribute type 83 has an invalid length. [ 232.624357][T10959] netlink: 'syz.1.1361': attribute type 62 has an invalid length. [ 232.652921][ T30] audit: type=1804 audit(1794249891.482:7): pid=10957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1360" name="/newroot/299/cgroup.controllers" dev="tmpfs" ino=1533 res=1 errno=0 [ 232.652980][ T30] audit: type=1800 audit(1794249891.482:8): pid=10957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1360" name="cgroup.controllers" dev="tmpfs" ino=1533 res=0 errno=-22 [ 233.346009][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'. [ 233.346036][T10988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'. [ 233.506264][ T1710] block nbd0: Possible stuck request ffff888028c85080: control (read@0,4096B). Runtime 90 seconds [ 233.706669][T10994] __nla_validate_parse: 2 callbacks suppressed [ 233.706690][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1368'. [ 233.808837][T10997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1369'. [ 233.956933][T10994] team0 (unregistering): Port device xfrm0 removed [ 234.059562][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'. [ 234.083810][T10997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1369'. [ 234.086029][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'. [ 234.972351][T11037] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 235.088691][T11047] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 235.088715][T11047] netlink: 'syz.3.1378': attribute type 3 has an invalid length. [ 235.088729][T11047] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1378'. [ 235.451286][T11061] netlink: 'syz.1.1381': attribute type 1 has an invalid length. [ 235.713064][T11065] bridge_slave_0: left allmulticast mode [ 235.713093][T11065] bridge_slave_0: left promiscuous mode [ 235.774599][T11065] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.829622][T11065] bridge_slave_1: left allmulticast mode [ 235.829651][T11065] bridge_slave_1: left promiscuous mode [ 235.829887][T11065] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.883326][T11065] bond2: (slave veth0_to_bond): Releasing backup interface [ 235.962047][T11078] netlink: 'syz.3.1386': attribute type 1 has an invalid length. [ 235.963237][T11079] IPv6: NLM_F_CREATE should be specified when creating new route [ 236.070647][T11082] openvswitch: netlink: Flow key attribute not present in set flow. [ 236.079255][T11065] bond0: (slave bond_slave_0): Releasing backup interface [ 236.217939][T11065] bond0: (slave bond_slave_1): Releasing backup interface [ 236.364348][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1385'. [ 236.434627][T11065] team0: Port device team_slave_0 removed [ 236.543927][T11065] team0: Port device team_slave_1 removed [ 236.563146][T11065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.563361][T11065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.605372][T11065] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 236.801481][T11071] team0: Port device xfrm0 added [ 236.803535][T11078] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 237.107725][T11082] tipc: Enabled bearer , priority 0 [ 237.171786][ T992] syz1: Port: 1 Link DOWN [ 237.190950][T11095] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 237.512373][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1390'. [ 237.619254][T11128] ieee802154 phy1 wpan1: encryption failed: -22 [ 237.643544][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1390'. [ 237.684794][T11138] netlink: get zone limit has 8 unknown bytes [ 238.196892][T11155] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1395'. [ 239.230379][T11178] syz.4.1399 (11178) used greatest stack depth: 19072 bytes left [ 239.364504][T11189] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 239.385615][T11189] __nla_validate_parse: 97 callbacks suppressed [ 239.385642][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 239.385660][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'. [ 239.385688][T11189] netlink: 'syz.0.1400': attribute type 12 has an invalid length. [ 239.385704][T11189] netlink: 'syz.0.1400': attribute type 11 has an invalid length. [ 239.394821][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 239.394845][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'. [ 239.394872][T11191] netlink: 'syz.0.1400': attribute type 12 has an invalid length. [ 239.394887][T11191] netlink: 'syz.0.1400': attribute type 11 has an invalid length. [ 239.861387][T11198] netlink: 'syz.4.1402': attribute type 4 has an invalid length. [ 239.887345][T11197] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1403'. [ 239.893585][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'. [ 239.893637][T11197] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1403'. [ 239.893656][T11197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1403'. [ 240.001450][T11199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1402'. [ 240.343525][T11215] vcan0: tx address claim with broadcast sa [ 241.008221][T11236] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1413'. [ 241.008247][T11236] nbd: illegal input index 65508 [ 241.163331][T11250] netlink: 'syz.0.1414': attribute type 2 has an invalid length. [ 241.261304][T11250] 8021q: VLANs not supported on sit0 [ 242.950459][T11299] bond9: entered promiscuous mode [ 242.951353][T11299] bond9: entered allmulticast mode [ 242.951947][T11299] 8021q: adding VLAN 0 to HW filter on device bond9 [ 243.132652][T11316] openvswitch: netlink: Unknown nsh attribute 0 [ 243.133113][T11315] openvswitch: netlink: Unknown nsh attribute 0 [ 243.328777][T11307] sctp: [Deprecated]: syz.1.1429 (pid 11307) Use of int in maxseg socket option. [ 243.328777][T11307] Use struct sctp_assoc_value instead [ 243.739420][T11328] netlink: 'syz.1.1436': attribute type 15 has an invalid length. [ 244.043085][T11340] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 244.650762][T11362] bridge20: the hash_elasticity option has been deprecated and is always 16 [ 244.732944][T11363] bridge21: the hash_elasticity option has been deprecated and is always 16 [ 245.323356][T11385] netlink: 'syz.0.1449': attribute type 1 has an invalid length. [ 245.488919][T11395] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 245.618277][T11399] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 245.890000][T11409] __nla_validate_parse: 7 callbacks suppressed [ 245.890024][T11409] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1458'. [ 245.890048][T11409] openvswitch: netlink: IP tunnel dst address not specified [ 245.923363][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1458'. [ 246.136427][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1461'. [ 246.177174][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1461'. [ 246.583287][T11440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1464'. [ 247.360803][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 247.409125][T11462] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 247.545349][T11466] syz_tun: entered allmulticast mode [ 247.574504][T11464] syz_tun: left allmulticast mode [ 247.691473][T11468] netlink: 'syz.1.1475': attribute type 1 has an invalid length. [ 247.790580][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'. [ 247.849959][T11469] bond5: (slave geneve2): making interface the new active one [ 247.849965][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'. [ 247.855151][T11469] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 247.856084][T11471] 8021q: VLANs not supported on ip6_vti0 [ 247.917001][ T6866] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 247.917271][ T6866] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 247.917312][ T6866] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 247.917349][ T6866] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 248.193755][T11489] IPVS: set_ctl: invalid protocol: 51 172.30.0.3:20001 [ 248.614490][T11511] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 248.639498][T11508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1485'. [ 248.909454][T11515] xt_hashlimit: size too large, truncated to 1048576 [ 249.199330][T11522] netlink: ct family unspecified [ 249.254509][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1490'. [ 249.624058][T11542] netlink: 'syz.4.1494': attribute type 1 has an invalid length. [ 249.688529][T11544] Bluetooth: MGMT ver 1.23 [ 249.871800][T11558] netlink: 'syz.3.1496': attribute type 15 has an invalid length. [ 249.892720][T11558] netlink: 'syz.3.1496': attribute type 15 has an invalid length. [ 249.908299][ T3192] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 249.910191][ T3192] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 249.910248][ T3192] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 249.910285][ T3192] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 250.087372][T11563] netlink: 'syz.3.1497': attribute type 4 has an invalid length. [ 250.283742][T11563] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 250.483435][T11571] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 250.888992][T11597] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.268024][T11637] __nla_validate_parse: 7 callbacks suppressed [ 252.268047][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1514'. [ 252.269048][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1514'. [ 252.931756][T11661] batman_adv: batadv0: Adding interface: syzkaller0 [ 252.931777][T11661] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.932177][T11661] batman_adv: batadv0: Interface activated: syzkaller0 [ 254.369434][T11660] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 254.464655][T11660] batman_adv: batadv0: Removing interface: syzkaller0 [ 254.591863][T11692] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1523'. [ 254.917215][T11705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1526'. [ 255.023726][T11706] team0: No ports can be present during mode change [ 255.259479][ T53] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 255.262254][T11710] ip_tables: iptables: counters copy to user failed while replacing table [ 255.383303][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1528'. [ 255.520752][T11721] netlink: 'syz.0.1529': attribute type 49 has an invalid length. [ 255.645192][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1528'. [ 255.775825][T11730] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 255.907701][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.053667][T11736] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1531'. [ 256.359248][T11752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1536'. [ 256.726576][T11763] syzkaller1: entered promiscuous mode [ 256.726603][T11763] syzkaller1: entered allmulticast mode [ 256.787220][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1538'. [ 257.115912][T11774] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 257.173873][T11778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1543'. [ 257.222430][T11774] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.225647][T11778] tipc: Resetting bearer [ 257.246435][T11781] netlink: 'syz.0.1543': attribute type 12 has an invalid length. [ 257.379574][T11778] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.384996][T11778] tipc: Resetting bearer [ 257.403304][T11778] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.417725][T11778] bond3: (slave team0): making interface the new active one [ 257.418287][T11778] tipc: Resetting bearer [ 257.418814][T11778] bond3: (slave team0): Enslaving as an active interface with an up link [ 257.449464][T11781] bond3: option primary_reselect: invalid value (255) [ 257.907308][T11799] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1549'. [ 258.112107][T11806] sctp: [Deprecated]: syz.2.1551 (pid 11806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.112107][T11806] Use struct sctp_sack_info instead [ 258.194299][T11811] tipc: Failed to remove unknown binding: 66,1,1/3609741663:3099751591/3099751593 [ 258.802806][T11836] netlink: 'syz.2.1558': attribute type 1 has an invalid length. [ 258.802830][T11836] netlink: 'syz.2.1558': attribute type 4 has an invalid length. [ 258.802843][T11836] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1558'. [ 258.832214][T11837] xt_hashlimit: size too large, truncated to 1048576 [ 259.007857][T11839] xt_hashlimit: size too large, truncated to 1048576 [ 260.163270][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1569'. [ 260.591810][T11887] bond7 (unregistering): Released all slaves [ 260.700279][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1574'. [ 260.700308][T11900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1574'. [ 260.821985][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1574'. [ 260.822020][T11900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1574'. [ 261.172891][T11919] openvswitch: netlink: EtherType 50a is less than min 600 [ 261.181071][T11919] netlink: 'syz.4.1575': attribute type 4 has an invalid length. [ 261.181124][T11919] netlink: 5620 bytes leftover after parsing attributes in process `syz.4.1575'. [ 261.187174][T11919] Bluetooth: hci0: unsupported parameter 5135 [ 261.187193][T11919] Bluetooth: hci0: unsupported parameter 8192 [ 261.187207][T11919] Bluetooth: hci0: unsupported parameter 5135 [ 261.187221][T11919] Bluetooth: hci0: unsupported parameter 8192 [ 261.393507][T11921] bond4: entered allmulticast mode [ 261.394055][T11921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.616612][T11934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1579'. [ 261.806627][T11945] syzkaller1: entered promiscuous mode [ 261.806652][T11945] syzkaller1: entered allmulticast mode [ 261.844581][T11945] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 262.383098][T11958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1586'. [ 263.577240][ T1710] block nbd0: Possible stuck request ffff888028c85080: control (read@0,4096B). Runtime 120 seconds [ 263.730998][T12002] netlink: 'syz.2.1594': attribute type 1 has an invalid length. [ 263.751703][T12002] rxe_eth0 speed is unknown, defaulting to 1000 [ 264.038027][T12010] netlink: 'syz.3.1597': attribute type 4 has an invalid length. [ 264.055592][T12010] netlink: 'syz.3.1597': attribute type 4 has an invalid length. [ 264.098536][T12010] netlink: 'syz.3.1597': attribute type 4 has an invalid length. [ 264.103239][T12013] netlink: 'syz.3.1597': attribute type 4 has an invalid length. [ 264.149080][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.152827][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.155030][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.181911][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.182863][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 264.408305][T12023] __nla_validate_parse: 64 callbacks suppressed [ 264.408330][T12023] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1598'. [ 264.601847][T12021] bond5: entered allmulticast mode [ 264.602407][T12021] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.713888][T12023] bond0 (unregistering): Released all slaves [ 264.808170][ T85] smbdirect: ib_dev[syz1] removed [ 265.039123][T12034] bond10: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 265.150855][T12034] bond10 (unregistering): Released all slaves [ 265.734365][T12063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.758335][T12068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1604'. [ 265.766548][T12068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1604'. [ 265.909724][T12064] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1603'. [ 266.060402][T12017] rxe_eth0 speed is unknown, defaulting to 1000 [ 266.216350][ T53] Bluetooth: hci5: command tx timeout [ 266.244431][T12080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1607'. [ 266.501090][T12088] netlink: 'syz.4.1610': attribute type 4 has an invalid length. [ 266.967503][T12017] virt_wifi0 speed is unknown, defaulting to 1000 [ 266.974854][T12017] lo speed is unknown, defaulting to 1000 [ 266.992842][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 266.992865][T12105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1613'. [ 268.297074][ T53] Bluetooth: hci5: command tx timeout [ 268.523359][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 268.523386][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 268.523412][T12154] netlink: 'syz.0.1624': attribute type 14 has an invalid length. [ 268.523427][T12154] netlink: 'syz.0.1624': attribute type 13 has an invalid length. [ 268.719949][T12165] netlink: 448 bytes leftover after parsing attributes in process `syz.4.1623'. [ 268.897265][T12176] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 268.971576][T12182] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 269.297653][T12017] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.297805][T12017] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.297968][T12017] bridge_slave_0: entered allmulticast mode [ 269.305828][T12017] bridge_slave_0: entered promiscuous mode [ 269.344799][T12017] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.345043][T12017] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.345216][T12017] bridge_slave_1: entered allmulticast mode [ 269.371601][T12017] bridge_slave_1: entered promiscuous mode [ 269.508279][T12192] __nla_validate_parse: 1 callbacks suppressed [ 269.508300][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 269.508328][T12192] netlink: 'syz.0.1629': attribute type 10 has an invalid length. [ 269.508344][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 269.629509][T12017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.718542][T12017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.810854][ T53] Bluetooth: hci3: Malformed Event: 0x2f [ 269.892368][T12208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1635'. [ 269.958203][T12017] team0: Port device team_slave_0 added [ 270.042974][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1635'. [ 270.064199][T12017] team0: Port device team_slave_1 added [ 270.356104][T12228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1637'. [ 270.371026][T12017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.371056][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.371086][T12017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.385882][ T53] Bluetooth: hci5: command tx timeout [ 270.411962][T12017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.411982][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.412013][T12017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.676870][T12232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1639'. [ 270.735131][T12017] hsr_slave_0: entered promiscuous mode [ 270.749932][T12017] hsr_slave_1: entered promiscuous mode [ 270.856594][T12234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1640'. [ 270.856639][T12234] bridge_slave_0: entered promiscuous mode [ 271.055559][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'. [ 271.108117][T12244] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1644'. [ 271.214730][T12247] netlink: 'syz.2.1646': attribute type 7 has an invalid length. [ 271.214754][T12247] netlink: 'syz.2.1646': attribute type 8 has an invalid length. [ 271.280534][T12252] netlink: 'syz.2.1646': attribute type 7 has an invalid length. [ 271.280556][T12252] netlink: 'syz.2.1646': attribute type 8 has an invalid length. [ 271.695368][T12263] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1649'. [ 271.858971][T12266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.242667][T12017] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 272.277632][T12017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 272.381648][T12017] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 272.424496][T12017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 272.425501][T12017] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 272.458606][ T53] Bluetooth: hci5: command tx timeout [ 272.481261][T12017] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 272.495747][T12017] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.537093][T12017] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 272.613840][T12274] syzkaller1: entered allmulticast mode [ 272.977277][T12258] sctp: [Deprecated]: syz.4.1648 (pid 12258) Use of int in max_burst socket option. [ 272.977277][T12258] Use struct sctp_assoc_value instead [ 273.126081][T12293] netlink: ct family unspecified [ 273.190067][T12295] netlink: ct family unspecified [ 273.354665][T12017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.471859][T12017] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.510296][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.510415][ T6876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.563841][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.563957][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.723326][T12338] Bluetooth: hci0: unsupported parameter 5135 [ 274.723352][T12338] Bluetooth: hci0: unsupported parameter 8192 [ 274.723366][T12338] Bluetooth: hci0: unsupported parameter 5135 [ 274.723380][T12338] Bluetooth: hci0: unsupported parameter 8192 [ 275.386968][T12356] netlink: 'syz.0.1670': attribute type 1 has an invalid length. [ 275.480972][T12356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.581016][T12357] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 275.704201][T12356] sch_tbf: peakrate 866609091837313939 is lower than or equals to rate 9362243577416671032 ! [ 275.808433][T12017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.078088][T12372] __nla_validate_parse: 68 callbacks suppressed [ 276.078111][T12372] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1672'. [ 276.607788][ T53] Bluetooth: hci3: ACL packet too small [ 276.613218][T12396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1676'. [ 276.882939][T12408] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1678'. [ 277.024215][T12411] ip6t_rt: address list match requested but addrnr is 0 [ 277.243044][T12017] veth0_vlan: entered promiscuous mode [ 277.308216][T12017] veth1_vlan: entered promiscuous mode [ 277.618681][T12017] veth0_macvtap: entered promiscuous mode [ 277.680381][T12017] veth1_macvtap: entered promiscuous mode [ 277.832485][T12017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.884463][T12017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.988846][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.026490][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.027541][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.027584][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.498590][ T6876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.498615][ T6876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.509254][T12432] ip_tables: iptables: counters copy to user failed while replacing table [ 278.524486][T12432] C: renamed from lo [ 278.573463][T12432] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 278.763605][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.763630][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.165947][T12454] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1687'. [ 279.463977][T12465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1692'. [ 279.464019][T12465] netlink: 'syz.2.1692': attribute type 7 has an invalid length. [ 279.464035][T12465] netlink: 'syz.2.1692': attribute type 8 has an invalid length. [ 279.464049][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1692'. [ 279.528463][T12465] bridge0: entered promiscuous mode [ 279.533791][T12465] syz_tun: entered promiscuous mode [ 279.552148][T12465] tipc: Resetting bearer [ 279.615180][T12465] gretap0: entered promiscuous mode [ 279.623189][T12465] debugfs: 'hsr0' already exists in 'hsr' [ 279.623213][T12465] Cannot create hsr debugfs directory [ 279.623478][T12465] hsr0: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 279.717162][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'. [ 279.771238][T12477] netlink: 'syz.4.1693': attribute type 2 has an invalid length. [ 279.826518][T12479] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1694'. [ 279.866393][T12486] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1694'. [ 280.209337][T12472] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.263107][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'. [ 280.292589][T12477] macvlan2: entered promiscuous mode [ 280.292613][T12477] macvlan2: entered allmulticast mode [ 280.295173][T12477] bond7: entered promiscuous mode [ 280.313051][T12477] bond7: entered allmulticast mode [ 280.320476][T12477] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 280.338858][T12477] bond7: left allmulticast mode [ 280.338929][T12477] bond7: left promiscuous mode [ 281.296525][ T3192] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.297537][ T3192] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.297579][ T3192] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.297618][ T3192] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.390888][T12533] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 282.249215][T12561] bridge0: port 1(veth0) entered blocking state [ 282.250075][T12561] bridge0: port 1(veth0) entered disabled state [ 282.250251][T12561] veth0: entered allmulticast mode [ 282.254393][T12561] veth0: entered promiscuous mode [ 282.644468][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1718'. [ 282.644497][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1718'. [ 282.914282][T12587] veth0: entered promiscuous mode [ 282.922914][T12587] veth1_to_bridge: entered promiscuous mode [ 282.959667][T12586] veth1_to_bridge: left promiscuous mode [ 282.959709][T12586] veth0: left promiscuous mode [ 283.136992][ T3192] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.137050][ T3192] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.137114][ T3192] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.156047][T12599] netlink: 'syz.5.1720': attribute type 13 has an invalid length. [ 283.156071][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1720'. [ 283.245796][T12599] netlink: 'syz.5.1720': attribute type 13 has an invalid length. [ 283.245822][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1720'. [ 283.257322][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.334357][T12631] xt_hashlimit: max too large, truncated to 1048576 [ 284.335147][T12631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.153536][T12733] xt_hashlimit: size too large, truncated to 1048576 [ 288.212028][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 288.212082][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1756'. [ 288.487105][T12745] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1758'. [ 288.716536][T12748] netlink: 'syz.2.1759': attribute type 8 has an invalid length. [ 288.783194][T12748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1759'. [ 288.837810][T12751] netlink: 'syz.4.1760': attribute type 3 has an invalid length. [ 289.379897][T12770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1768'. [ 289.379941][T12770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1768'. [ 289.403398][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1768'. [ 289.560517][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1769'. [ 289.805321][ T53] Bluetooth: hci5: ACL packet too small [ 289.839965][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 289.960188][T12790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1776'. [ 290.120973][T12801] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 290.122574][T12801] Cannot find map_set index 2 as target [ 290.273245][T12799] Set syz1 is full, maxelem 2076 reached [ 290.779349][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.779374][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.361744][T12848] __nla_validate_parse: 1 callbacks suppressed [ 293.361767][T12848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1788'. [ 293.593139][T12848] IPVS: Scheduler module ip_vs_sip not found [ 293.665703][ T1710] block nbd0: Possible stuck request ffff888028c85080: control (read@0,4096B). Runtime 150 seconds [ 294.721441][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 294.841618][T12888] syzkaller0: entered promiscuous mode [ 294.841645][T12888] syzkaller0: entered allmulticast mode [ 294.907972][T12888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1798'. [ 294.979661][T12895] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1801'. [ 295.150968][T12899] syz.0.1801 (12899) used obsolete PPPIOCDETACH ioctl [ 295.318559][T12905] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1801'. [ 295.320083][T12904] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1801'. [ 295.981827][T12933] netlink: zone id is out of range [ 295.981845][T12933] netlink: zone id is out of range [ 295.981854][T12933] netlink: zone id is out of range [ 295.981863][T12933] netlink: zone id is out of range [ 295.981872][T12933] netlink: zone id is out of range [ 295.981881][T12933] netlink: zone id is out of range [ 295.981889][T12933] netlink: zone id is out of range [ 295.981897][T12933] netlink: zone id is out of range [ 295.981905][T12933] netlink: zone id is out of range [ 295.981913][T12933] netlink: zone id is out of range [ 296.177483][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'. [ 296.945135][T12969] wireguard: wg2: Could not create IPv4 socket [ 296.955239][T12969] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1814'. [ 297.332398][T12988] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1819'. [ 297.370596][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1818'. [ 297.482815][T12993] geneve3: entered promiscuous mode [ 297.516301][ T13] netdevsim netdevsim0 : set [1, 1] type 2 family 0 port 35987 - 0 [ 297.516347][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 35987 - 0 [ 297.516381][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 35987 - 0 [ 297.519838][ T85] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 35987 - 0 [ 297.728283][T13001] netlink: 'syz.2.1822': attribute type 1 has an invalid length. [ 298.108391][T13001] netlink: 'syz.2.1822': attribute type 3 has an invalid length. [ 298.108800][T13001] netlink: 'syz.2.1822': attribute type 3 has an invalid length. [ 298.489110][T13015] block nbd2: Unsupported socket: should be TCP or UNIX. [ 298.666969][T13018] __nla_validate_parse: 2 callbacks suppressed [ 298.666992][T13018] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1827'. [ 300.093092][T13056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1838'. [ 300.310879][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1840'. [ 300.310921][T13062] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1840'. [ 301.210283][T13098] netlink: 'syz.5.1851': attribute type 28 has an invalid length. [ 301.210308][T13098] netlink: 'syz.5.1851': attribute type 3 has an invalid length. [ 301.210322][T13098] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1851'. [ 301.638248][ T160] IPVS: starting estimator thread 0... [ 301.670969][T13117] netlink: 'syz.5.1853': attribute type 20 has an invalid length. [ 301.671002][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1853'. [ 301.671253][T13117] netlink: 'syz.5.1853': attribute type 20 has an invalid length. [ 301.671270][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1853'. [ 301.726406][T13120] IPVS: using max 24 ests per chain, 57600 per kthread [ 301.833201][T13111] vlan0: entered allmulticast mode [ 301.833226][T13111] gretap0: entered allmulticast mode [ 302.004065][T13128] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1854'. [ 302.073293][T13116] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1852'. [ 302.211711][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1856'. [ 302.667354][T13155] netlink: 'syz.4.1860': attribute type 21 has an invalid length. [ 302.822806][T13161] pimreg3: entered allmulticast mode [ 302.862254][T13157] 8021q: VLANs not supported on wg1 [ 302.965334][T13155] SET target dimension over the limit! [ 303.297894][T13175] netlink: 'syz.3.1865': attribute type 1 has an invalid length. [ 303.702410][T13202] SET target dimension over the limit! [ 303.764995][T13175] bond9: entered promiscuous mode [ 303.782394][T13175] 8021q: adding VLAN 0 to HW filter on device bond9 [ 303.802240][T13182] tipc: Started in network mode [ 303.802264][T13182] tipc: Node identity 3, cluster identity 4711 [ 303.802276][T13182] tipc: Node number set to 3 [ 303.842018][T13189] __nla_validate_parse: 6 callbacks suppressed [ 303.842040][T13189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1865'. [ 303.842058][T13189] netlink: 54 bytes leftover after parsing attributes in process `syz.3.1865'. [ 303.842076][T13189] netlink: 54 bytes leftover after parsing attributes in process `syz.3.1865'. [ 303.861133][T13189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1865'. [ 303.861198][T13189] netlink: 54 bytes leftover after parsing attributes in process `syz.3.1865'. [ 303.861249][T13189] netlink: 54 bytes leftover after parsing attributes in process `syz.3.1865'. [ 304.015816][T13189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1865'. [ 304.015851][T13189] netlink: 54 bytes leftover after parsing attributes in process `syz.3.1865'. [ 304.015870][T13189] netlink: 54 bytes leftover after parsing attributes in process `syz.3.1865'. [ 304.018570][T13189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1865'. [ 304.435674][T13224] sctp: [Deprecated]: syz.2.1872 (pid 13224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.435674][T13224] Use struct sctp_sack_info instead [ 305.165601][T13238] syzkaller0: entered promiscuous mode [ 305.165627][T13238] syzkaller0: entered allmulticast mode [ 307.004933][T13296] netlink: 'syz.2.1890': attribute type 1 has an invalid length. [ 307.574750][T13320] macvtap1: entered promiscuous mode [ 307.574776][T13320] team0: entered promiscuous mode [ 307.575502][T13320] macvtap1: entered allmulticast mode [ 307.575521][T13320] team0: entered allmulticast mode [ 307.585444][T13320] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 307.808998][T13325] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20001 [ 308.212866][T13340] netlink: 'syz.5.1902': attribute type 2 has an invalid length. [ 308.874264][T13362] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 308.975946][T13366] IPv6: Can't replace route, no match found [ 309.135241][T13366] dvmrp1: entered allmulticast mode [ 309.278763][T13379] ieee802154 phy1 wpan1: encryption failed: -22 [ 309.401723][T13389] xt_REDIRECT: bad rangesize 26624. [ 309.512880][T13389] net_ratelimit: 26 callbacks suppressed [ 309.512903][T13389] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 309.979273][T13419] __nla_validate_parse: 92 callbacks suppressed [ 309.979295][T13419] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1923'. [ 310.256757][T13423] x_tables: unsorted entry at hook 4 [ 310.535751][T13425] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 312.468346][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1925'. [ 312.569053][T13434] netlink: 'syz.4.1927': attribute type 1 has an invalid length. [ 312.569079][T13434] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1927'. [ 314.698424][T13485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1944'. [ 314.769737][T13506] pim6reg527: entered allmulticast mode [ 315.236933][T13514] bond0: Error: Cannot enslave bond to itself. [ 315.361974][T13517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1953'. [ 315.451336][T13521] x_tables: duplicate underflow at hook 2 [ 315.715018][T13527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.022824][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1962'. [ 316.176332][T13554] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1967'. [ 316.235902][T13557] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1967'. [ 316.293708][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1964'. [ 316.293762][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1964'. [ 316.654083][T13557] bond6 (unregistering): Released all slaves [ 317.063186][ T6876] tipc: Subscription rejected, illegal request [ 317.189440][T13574] bond1: entered promiscuous mode [ 317.189490][T13574] bond1: entered allmulticast mode [ 317.189987][T13574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.339153][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.498403][T13585] bond2: entered promiscuous mode [ 317.498686][T13585] bond2: entered allmulticast mode [ 317.501719][T13585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.355406][T13640] IPv4: Oversized IP packet from 127.202.26.0 [ 318.394380][T13625] team0 (unregistering): left allmulticast mode [ 318.395647][T13625] team0 (unregistering): left promiscuous mode [ 318.602765][T13625] team0 (unregistering): Port device bridge2 removed [ 319.142086][T13670] netlink: 'syz.3.1984': attribute type 13 has an invalid length. [ 319.168631][T13670] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 319.168899][T13670] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 319.169150][T13670] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 319.169380][T13670] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 319.169641][T13670] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 319.169908][T13670] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 319.230578][T13670] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 319.230835][T13670] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 319.231096][T13670] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 319.293750][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 319.316955][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 319.725519][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 319.843566][T13696] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.1987'. [ 320.398986][T13703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1989'. [ 320.585346][T13708] rxe_eth0 speed is unknown, defaulting to 1000 [ 320.823258][T13714] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1994'. [ 320.847132][T13715] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1996'. [ 320.883929][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1996'. [ 320.969928][T13717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1997'. [ 320.969962][T13717] gre0: entered promiscuous mode [ 321.338947][T13734] bridge0: port 3(veth1_to_bridge) entered blocking state [ 321.339048][T13734] bridge0: port 3(veth1_to_bridge) entered disabled state [ 321.339209][T13734] veth1_to_bridge: entered allmulticast mode [ 321.369187][T13734] veth1_to_bridge: entered promiscuous mode [ 322.024868][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2010'. [ 322.323442][T13763] bond3: entered promiscuous mode [ 322.326267][T13763] 8021q: adding VLAN 0 to HW filter on device bond3 [ 322.413251][T13766] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 322.413279][T13766] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 322.413297][T13766] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 322.456055][T13680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.662935][T13769] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 322.662964][T13769] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 322.896965][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2016'. [ 323.003684][T13776] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 323.003713][T13776] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 323.036904][T13793] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2016'. [ 323.103014][T13777] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 323.103042][T13777] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 323.747307][ T1710] block nbd0: Possible stuck request ffff888028c85080: control (read@0,4096B). Runtime 180 seconds [ 323.820698][T13821] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2024'. [ 323.820765][T13821] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2024'. [ 324.008949][T13830] bond15: Unable to set up delay as MII monitoring is disabled [ 324.013645][T13830] bond15 (unregistering): Released all slaves [ 324.238762][T13835] bond15: Unable to set up delay as MII monitoring is disabled [ 324.239132][T13843] validate_nla: 27 callbacks suppressed [ 324.239148][T13843] netlink: 'syz.3.2027': attribute type 10 has an invalid length. [ 324.243940][T13835] bond15 (unregistering): Released all slaves [ 324.331644][T13846] netlink: 'syz.3.2027': attribute type 10 has an invalid length. [ 324.353100][T13838] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 324.441135][T13851] netlink: 'syz.5.2028': attribute type 83 has an invalid length. [ 325.433704][T13882] __nla_validate_parse: 3 callbacks suppressed [ 325.433726][T13882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 325.483182][ T5002] udevd[5002]: worker [7745] /devices/virtual/block/nbd0 timeout; kill it [ 325.483337][ T5002] udevd[5002]: seq 11846 '/devices/virtual/block/nbd0' killed [ 325.645292][T13884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2037'. [ 326.040080][T13887] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2038'. [ 326.117670][T13895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2041'. [ 326.166944][T13896] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2038'. [ 326.585325][T13911] bond4: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 326.592686][T13911] bond4 (unregistering): Released all slaves [ 326.678276][T13922] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2048'. [ 326.678307][T13922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.679271][T13916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2047'. [ 326.979487][T13926] syzkaller0: entered promiscuous mode [ 326.979526][T13926] syzkaller0: entered allmulticast mode [ 328.510249][T13985] netlink: 'syz.4.2061': attribute type 21 has an invalid length. [ 328.510277][T13985] IPv6: NLM_F_CREATE should be specified when creating new route [ 328.615668][T13990] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 329.209748][T13999] netlink: 'syz.0.2065': attribute type 11 has an invalid length. [ 329.349568][T14012] netlink: 'syz.0.2065': attribute type 11 has an invalid length. [ 329.551520][T14015] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 329.551803][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2069'. [ 329.553463][T14022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2066'. [ 329.553504][T14022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2066'. [ 329.852227][T14028] xt_esp: unknown flags DD [ 329.939518][T14030] netlink: 'syz.3.2071': attribute type 10 has an invalid length. [ 330.291817][T14039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.595784][T14051] xt_hashlimit: size too large, truncated to 1048576 [ 330.662555][T14054] __nla_validate_parse: 1 callbacks suppressed [ 330.662578][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 330.704396][T14055] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.732316][T14055] bridge_slave_0 (unregistering): left allmulticast mode [ 330.732346][T14055] bridge_slave_0 (unregistering): left promiscuous mode [ 330.732444][T14055] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.926706][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 331.074774][T14035] IPv6: NLM_F_CREATE should be specified when creating new route [ 331.469138][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2078'. [ 332.460407][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 332.541421][T14113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2088'. [ 332.541456][T14113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2088'. [ 332.594114][T14108] rdma_rxe: rxe_newlink: failed to add lo [ 332.673220][ T53] Bluetooth: hci2: ACL packet too small [ 333.106395][T14124] wireguard0: entered promiscuous mode [ 333.771293][T14145] netlink: 344 bytes leftover after parsing attributes in process `syz.5.2099'. [ 334.020668][T14154] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2100'. [ 334.161713][T14158] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2103'. [ 334.355018][T14126] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2093'. [ 334.355051][T14126] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2093'. [ 334.363415][T14126] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 334.718523][T14170] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20002 [ 335.302921][T14191] netlink: 'syz.3.2113': attribute type 58 has an invalid length. [ 335.376179][T14193] macsec1: entered allmulticast mode [ 335.405926][T14193] batman_adv: batadv0: Adding interface: macsec1 [ 335.405947][T14193] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.405978][T14193] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 337.707449][T14283] __nla_validate_parse: 5 callbacks suppressed [ 337.707469][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2141'. [ 337.742143][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2141'. [ 337.918799][T14296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2142'. [ 337.999920][T14290] geneve4: entered promiscuous mode [ 337.999948][T14290] geneve4: entered allmulticast mode [ 338.027548][ T1113] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 338.053866][ T6866] netdevsim netdevsim0 : set [1, 2] type 2 family 0 port 19999 - 0 [ 338.054370][ T6866] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 338.054414][ T6866] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 338.504659][T14304] smbdirect: ib_dev[ÿ] removed [ 338.538585][T14316] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2150'. [ 339.418296][T14336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2155'. [ 339.534747][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 339.568896][T14348] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2158'. [ 339.730910][T14350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2160'. [ 339.730948][T14350] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2160'. [ 339.864779][T14363] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2162'. [ 340.050597][T14368] openvswitch: netlink: IPv6 tunnel dst address is zero [ 340.369073][T14377] syzkaller1: entered promiscuous mode [ 340.369331][T14377] syzkaller1: entered allmulticast mode [ 340.428077][T14377] ip6t_rt: unknown flags 36 [ 341.292533][T14407] netlink: 'syz.4.2177': attribute type 2 has an invalid length. [ 341.364274][T14383] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 341.661525][T14421] netlink: 'syz.2.2180': attribute type 1 has an invalid length. [ 341.898385][T14437] syz_tun: entered allmulticast mode [ 342.282496][T14442] veth6: entered allmulticast mode [ 342.414112][T14448] netlink: 'syz.4.2187': attribute type 29 has an invalid length. [ 343.271398][T14486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.272140][T14481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.645692][T14493] __nla_validate_parse: 10 callbacks suppressed [ 343.645716][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'. [ 343.645734][T14493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2200'. [ 343.681691][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'. [ 343.681715][T14493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2200'. [ 344.198756][ T53] Bluetooth: hci1: Malformed Event: 0x2f [ 346.568449][T14585] netlink: 'syz.2.2226': attribute type 10 has an invalid length. [ 346.593502][T14584] team0: Device gtp0 is up. Set it down before adding it as a team port [ 346.688914][T14585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 346.721116][T14585] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 346.739496][T14585] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 347.238547][T14609] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2228'. [ 348.179687][T14651] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2235'. [ 348.998937][T14682] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 349.024539][T14682] bond8 (unregistering): Released all slaves [ 349.383509][ T5297] veth0_vlan: left promiscuous mode [ 349.489314][T14682] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 349.523336][T14682] bond8 (unregistering): Released all slaves [ 349.623907][ T1227] veth0_vlan: entered promiscuous mode [ 349.778860][T14713] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2249'. [ 350.733762][T14744] netlink: 'syz.0.2257': attribute type 21 has an invalid length. [ 350.733829][T14744] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2257'. [ 350.976679][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2260'. [ 351.288717][T14771] ip6t_srh: unknown srh match flags 4000 [ 351.295654][T14771] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2263'. [ 351.761426][T14777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2264'. [ 351.877065][T14784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2267'. [ 352.275537][T14794] netlink: 'syz.3.2269': attribute type 4 has an invalid length. [ 352.296117][T14794] netlink: 'syz.3.2269': attribute type 4 has an invalid length. [ 352.485926][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2270'. [ 353.090542][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2276'. [ 353.090592][T14826] netlink: 'syz.4.2276': attribute type 5 has an invalid length. [ 353.090608][T14826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2276'. [ 353.193256][T14826] geneve4: entered promiscuous mode [ 353.193283][T14826] geneve4: entered allmulticast mode [ 353.209501][ T12] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 353.209562][ T12] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 353.209599][ T12] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 353.209640][ T12] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 353.266005][T14834] xt_IDLETIMER: label is empty or not nul-terminated [ 353.342180][T14831] netlink: 'syz.2.2278': attribute type 1 has an invalid length. [ 353.593052][T14831] 8021q: adding VLAN 0 to HW filter on device bond15 [ 353.713321][T14838] bond15: (slave veth7): Enslaving as an active interface with a down link [ 353.725989][T14843] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 353.737972][T14843] bond15: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 353.825593][ T1710] block nbd0: Possible stuck request ffff888028c85080: control (read@0,4096B). Runtime 210 seconds [ 353.932868][T14848] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 353.972441][T14847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.273438][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2283'. [ 354.914836][T14874] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 354.918854][T14874] __nla_validate_parse: 2 callbacks suppressed [ 354.918904][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2286'. [ 355.316357][T14884] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 355.440153][T14884] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 355.545069][T14884] syzkaller0: entered promiscuous mode [ 355.545101][T14884] syzkaller0: entered allmulticast mode [ 355.858339][T14906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.934267][T14908] gre0: left promiscuous mode [ 356.115684][T14919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2295'. [ 356.115716][T14919] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2295'. [ 356.222236][T14922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2298'. [ 356.242619][T14920] bond16: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 356.262891][T14920] bond16 (unregistering): Released all slaves [ 356.345445][ T53] Bluetooth: hci5: link tx timeout [ 356.345467][ T53] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 356.760827][T14928] ip_tables: iptables: counters copy to user failed while replacing table [ 356.914591][T14935] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2300'. [ 357.437914][T14944] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 357.483413][T14949] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2303'. [ 357.565541][T14950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'. [ 357.585645][T14950] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2303'. [ 358.225561][T14971] netlink: 'syz.2.2309': attribute type 1 has an invalid length. [ 358.225587][T14971] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2309'. [ 358.376506][ T5634] Bluetooth: hci5: command 0x0406 tx timeout [ 358.385765][T14968] tipc: Enabled bearer , priority 10 [ 359.501287][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2318'. [ 360.010442][T15014] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 360.032335][T15014] batman_adv: batadv0: Adding interface: gretap2 [ 360.032355][T15014] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.032391][T15014] batman_adv: batadv0: Interface activated: gretap2 [ 360.405451][T15029] __nla_validate_parse: 1 callbacks suppressed [ 360.405487][T15029] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2326'. [ 360.717751][ T53] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 360.765859][T15036] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2328'. [ 360.852054][T15030] bridge_slave_1: left allmulticast mode [ 360.852550][T15030] bridge_slave_1: left promiscuous mode [ 360.853747][T15030] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.995171][T15030] bond0: (slave bond_slave_0): Releasing backup interface [ 361.022069][T15030] bond0: (slave bond_slave_1): Releasing backup interface [ 361.063979][T15030] team0: Port device team_slave_0 removed [ 361.097422][T15030] team0: Port device team_slave_1 removed [ 361.103640][T15030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.103669][T15030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.136340][T15030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.136369][T15030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.162390][T15030] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 361.316473][T15045] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2329'. [ 361.322855][T15038] team0: Mode changed to "loadbalance" [ 362.490063][T15067] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2336'. [ 362.616722][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 362.636434][T15068] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2336'. [ 362.638014][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2336'. [ 362.638048][T15074] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2336'. [ 362.665555][T15077] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2336'. [ 362.682127][T15076] openvswitch: netlink: nsh attr 0 has unexpected len 94 expected 0 [ 362.685234][T15077] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2336'. [ 363.185380][T15086] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 364.437364][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2351'. [ 365.696758][T15152] netlink: 'syz.4.2357': attribute type 58 has an invalid length. [ 365.696784][T15152] __nla_validate_parse: 1 callbacks suppressed [ 365.696795][T15152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2357'. [ 366.238210][T15159] team0: Unable to change to the same mode the team is in [ 366.256930][T15163] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2361'. [ 366.397812][T15168] block nbd2: Unsupported socket: should be TCP or UNIX. [ 366.476489][T15163] TC_ACT_REPEAT abuse ? [ 366.786782][T15175] tipc: New replicast peer: 172.20.20.187 [ 366.795550][T15175] tipc: Enabled bearer , priority 10 [ 366.821098][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2363'. [ 368.057351][T15212] netlink: 'syz.4.2369': attribute type 29 has an invalid length. [ 368.565722][T15220] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2371'. [ 368.586117][T15222] syzkaller1: entered promiscuous mode [ 368.587384][T15222] syzkaller1: entered allmulticast mode [ 368.962541][ T5634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 368.977757][ T5634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.985911][ T5634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.006682][ T5634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.014416][ T5634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.401878][T15243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2375'. [ 369.401953][T15243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2375'. [ 369.439010][T15243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2375'. [ 369.439051][T15243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2375'. [ 369.470641][T15243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2375'. [ 369.470688][T15243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2375'. [ 371.015231][T15273] tipc: Enabling of bearer rejected, failed to enable media [ 371.096963][ T53] Bluetooth: hci6: command tx timeout [ 371.368377][T15281] __nla_validate_parse: 56 callbacks suppressed [ 371.368402][T15281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2386'. [ 371.368424][T15281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2386'. [ 371.493226][T15233] rxe_eth0 speed is unknown, defaulting to 1000 [ 371.699270][T15284] netlink: 'syz.3.2387': attribute type 1 has an invalid length. [ 371.899892][T15284] 8021q: adding VLAN 0 to HW filter on device bond12 [ 372.135396][T15291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2388'. [ 372.545057][T15233] lo speed is unknown, defaulting to 1000 [ 372.672408][T15305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.179238][ T53] Bluetooth: hci6: command tx timeout [ 373.333128][T15327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2395'. [ 373.751015][T15336] xt_ecn: cannot match TCP bits for non-tcp packets [ 373.751152][T15336] xt_ecn: cannot match TCP bits for non-tcp packets [ 373.755796][T15336] xt_ecn: cannot match TCP bits for non-tcp packets [ 373.755902][T15336] xt_ecn: cannot match TCP bits for non-tcp packets [ 373.756058][T15336] xt_ecn: cannot match TCP bits for non-tcp packets [ 373.800556][T15336] xt_ecn: cannot match TCP bits for non-tcp packets [ 373.804591][T15336] xt_ecn: cannot match TCP bits for non-tcp packets [ 373.804715][T15336] xt_ecn: cannot match TCP bits for non-tcp packets [ 373.804810][T15336] xt_ecn: cannot match TCP bits for non-tcp packets [ 373.804919][T15336] xt_ecn: cannot match TCP bits for non-tcp packets [ 374.249928][T15338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2399'. [ 374.452097][T15342] netlink: 'syz.2.2400': attribute type 1 has an invalid length. [ 374.452122][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 374.452137][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 374.452151][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 374.452165][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 374.452179][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 374.539254][T15343] netlink: 'syz.2.2400': attribute type 1 has an invalid length. [ 375.257528][ T53] Bluetooth: hci6: command tx timeout [ 375.811252][T15233] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.821892][T15233] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.822081][T15233] bridge_slave_0: entered allmulticast mode [ 375.835037][T15233] bridge_slave_0: entered promiscuous mode [ 375.858468][T15233] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.858584][T15233] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.858736][T15233] bridge_slave_1: entered allmulticast mode [ 375.882251][T15233] bridge_slave_1: entered promiscuous mode [ 376.095003][T15378] netlink: 'syz.5.2406': attribute type 1 has an invalid length. [ 376.138960][T15233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.176931][T15233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.321639][T15233] team0: Port device team_slave_0 added [ 376.351495][T15233] team0: Port device team_slave_1 added [ 376.398881][T15386] netlink: 'syz.4.2407': attribute type 10 has an invalid length. [ 376.609368][T15233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.609388][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.609417][T15233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.655268][T15233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.655319][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.655350][T15233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.040111][T15233] hsr_slave_0: entered promiscuous mode [ 377.047523][T15233] hsr_slave_1: entered promiscuous mode [ 377.063556][T15233] debugfs: 'hsr0' already exists in 'hsr' [ 377.063579][T15233] Cannot create hsr debugfs directory [ 377.073458][T15396] x_tables: duplicate underflow at hook 2 [ 377.337179][ T53] Bluetooth: hci6: command tx timeout [ 377.422282][T15407] __nla_validate_parse: 5 callbacks suppressed [ 377.422306][T15407] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2414'. [ 378.075376][T15420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2418'. [ 378.075409][T15420] block nbd2: Unsupported socket: should be TCP or UNIX. [ 378.780146][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.874348][T15233] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 378.908610][T15233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.929597][T15233] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 378.988761][T15233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.012122][T15233] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 379.059019][T15233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 379.063732][T15233] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 379.095407][T15233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 379.373222][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2422'. [ 379.391045][T15442] xt_bpf: check failed: parse error [ 379.391156][T15443] xt_bpf: check failed: parse error [ 380.019356][T15454] bond0: Error: Cannot enslave bond to itself. [ 380.152578][T15233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.263725][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2428'. [ 380.450064][T15467] veth1_to_team: entered promiscuous mode [ 380.492593][T15467] veth1_to_team: left promiscuous mode [ 380.550887][T15233] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.575438][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.575556][ T6875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.605294][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.605411][ T6875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.687607][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2430'. [ 380.719191][T15472] team0: Unable to change to the same mode the team is in [ 380.819461][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2430'. [ 380.820773][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2430'. [ 380.822025][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2430'. [ 380.836803][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2430'. [ 380.838167][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2430'. [ 381.057673][T15482] IPv6: NLM_F_CREATE should be specified when creating new route [ 381.670947][T15504] SET target dimension over the limit! [ 381.717613][T15508] SET target dimension over the limit! [ 381.819568][T15506] syz_tun: left allmulticast mode [ 381.820433][T15513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.861951][T15513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.454779][T15538] netlink: 'syz.4.2442': attribute type 1 has an invalid length. [ 382.454806][T15538] netlink: 'syz.4.2442': attribute type 2 has an invalid length. [ 382.574296][T15537] ip_tables: iptables: counters copy to user failed while replacing table [ 382.924062][T15556] erspan1: entered promiscuous mode [ 382.942485][T15555] netlink: 'syz.5.2445': attribute type 1 has an invalid length. [ 383.042046][T15560] __nla_validate_parse: 62 callbacks suppressed [ 383.042068][T15560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2447'. [ 383.190344][T15563] netlink: 'syz.5.2448': attribute type 1 has an invalid length. [ 383.190371][T15563] netlink: 'syz.5.2448': attribute type 2 has an invalid length. [ 383.310958][T15233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.650434][T15578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2451'. [ 383.650485][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'. [ 383.760994][T15584] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2453'. [ 383.872366][T15583] Unsupported ieee802154 address type: 0 [ 384.016191][ T1710] block nbd0: Possible stuck request ffff888028c85080: control (read@0,4096B). Runtime 240 seconds [ 384.443187][T15604] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2458'. [ 384.675490][T15610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.878548][T15233] veth0_vlan: entered promiscuous mode [ 384.927175][T15233] veth1_vlan: entered promiscuous mode [ 385.231281][T15233] veth0_macvtap: entered promiscuous mode [ 385.293098][T15233] veth1_macvtap: entered promiscuous mode [ 385.451473][T15233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.541802][T15233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.653795][T15642] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 385.705516][T15645] tipc: Enabling of bearer rejected, media not registered [ 385.711241][ T6866] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.725974][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.726022][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.733871][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.241557][T15655] sctp: [Deprecated]: syz.3.2471 (pid 15655) Use of int in max_burst socket option deprecated. [ 386.241557][T15655] Use struct sctp_assoc_value instead [ 386.335295][T15660] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.427706][ T6875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.427739][ T6875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.469396][T15662] netlink: Unknown conntrack attr (type=28, max=9) [ 386.611365][ T6870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.611392][ T6870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.380339][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2482'. [ 387.932858][T15710] netlink: 'syz.5.2486': attribute type 2 has an invalid length. [ 387.932885][T15710] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2486'. [ 389.091901][T15753] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 389.469939][T15760] 8021q: adding VLAN 0 to HW filter on device bond13 [ 389.498703][T15760] bond0: (slave bond13): Enslaving as an active interface with an up link [ 389.650715][T15771] ip_tables: iptables: counters copy to user failed while replacing table [ 391.852498][T15745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.623096][T15807] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 392.633133][T15807] batman_adv: batadv0: Adding interface: gretap1 [ 392.633187][T15807] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.633278][T15807] batman_adv: batadv0: Interface activated: gretap1 [ 392.723341][T15811] ip_tables: iptables: counters copy to user failed while replacing table [ 392.819655][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2514'. [ 393.112766][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880465b2400: rx timeout, send abort [ 393.192359][T15827] xt_NETMAP: bad rangesize 37. [ 393.194641][ T53] Bluetooth: hci1: unexpected event 0x0e length: 0 < 3 [ 393.594106][T15850] xt_addrtype: ipv6 does not support BROADCAST matching [ 393.612825][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880465b2400: abort rx timeout. Force session deactivation [ 393.775358][T15855] netlink: 972 bytes leftover after parsing attributes in process `syz.3.2524'. [ 394.299544][T15878] syz_tun: MTU not usable for tipc bearer [ 394.299587][T15878] tipc: Disabling bearer [ 394.727403][T15855] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 395.270809][T15923] netlink: 'syz.4.2536': attribute type 4 has an invalid length. [ 395.321898][T15923] netlink: 'syz.4.2536': attribute type 4 has an invalid length. [ 395.919574][T15968] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2539'. [ 395.919601][T15968] netlink: 'syz.5.2539': attribute type 3 has an invalid length. [ 395.919618][T15968] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2539'. [ 395.919869][T15968] netlink: 'syz.5.2539': attribute type 3 has an invalid length. [ 396.062442][T15973] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2539'. [ 396.062473][T15973] netlink: 'syz.5.2539': attribute type 3 has an invalid length. [ 396.062490][T15973] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2539'. [ 396.062642][T15973] netlink: 'syz.5.2539': attribute type 3 has an invalid length. [ 396.584398][T15984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2543'. [ 396.672219][T15985] netlink: 'syz.5.2542': attribute type 12 has an invalid length. [ 396.793929][T15985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2542'. [ 397.099613][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2547'. [ 397.311561][T16005] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2549'. [ 398.338274][T16015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2551'. [ 400.479930][ T6870] IPVS: starting estimator thread 0... [ 400.506625][T16036] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 400.533096][T16033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2553'. [ 400.566383][T16040] IPVS: using max 21 ests per chain, 50400 per kthread [ 400.772280][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 401.082569][T16050] Unsupported ieee802154 address type: 0 [ 401.284374][T16057] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2560'. [ 401.284412][T16057] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2560'. [ 401.285227][T16057] netlink: 'syz.5.2560': attribute type 64 has an invalid length. [ 401.285246][T16057] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2560'. [ 401.385626][T16064] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2563'. [ 401.917742][T16080] netlink: 'syz.5.2567': attribute type 1 has an invalid length. [ 401.974222][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 402.143067][T16088] netlink: 'syz.6.2570': attribute type 10 has an invalid length. [ 402.169308][T16088] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.220555][T16088] bond0: (slave team0): Enslaving as an active interface with an up link [ 402.629325][T16100] x_tables: duplicate underflow at hook 1 [ 402.870678][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2577'. [ 402.877553][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'. [ 403.138484][T16123] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20003 [ 403.563001][T16136] __nla_validate_parse: 2 callbacks suppressed [ 403.563025][T16136] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2586'. [ 403.653083][T16140] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2588'. [ 403.796573][T16137] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 405.676449][T16210] vlan2: entered allmulticast mode [ 405.676560][T16210] veth0_vlan: entered allmulticast mode [ 405.982083][T16225] xt_socket: unknown flags 0x4 [ 405.982239][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2611'. [ 405.983712][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2611'. [ 406.021107][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2611'. [ 406.992616][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2613'. [ 407.073446][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2613'. [ 407.450857][T16259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2615'. [ 407.653840][T16266] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2618'. [ 407.944840][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'. [ 408.047468][T16282] syzkaller0: left promiscuous mode [ 408.047792][T16282] syzkaller0: left allmulticast mode [ 408.601767][T16301] siw: device registration error -23 [ 408.669511][T16302] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 409.077838][T16310] __nla_validate_parse: 6 callbacks suppressed [ 409.077862][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2631'. [ 409.229091][T16322] openvswitch: netlink: IP tunnel dst address not specified [ 409.273383][T16317] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.275364][T16319] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2632'. [ 409.342498][T16319] netlink: 'syz.6.2632': attribute type 2 has an invalid length. [ 409.342527][T16319] netlink: 'syz.6.2632': attribute type 2 has an invalid length. [ 409.483556][T16310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2631'. [ 409.991334][T16343] netlink: 'syz.4.2640': attribute type 1 has an invalid length. [ 410.177654][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2640'. [ 410.305952][T16343] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 410.347285][T16345] 8021q: adding VLAN 0 to HW filter on device bond8 [ 410.424339][T16348] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 410.424975][T16348] team0: Device ipvlan0 is already an upper device of the team interface [ 410.563630][T16367] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2645'. [ 410.600815][T16364] bond6: entered promiscuous mode [ 410.601431][T16364] 8021q: adding VLAN 0 to HW filter on device bond6 [ 410.734706][T16368] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2645'. [ 410.934674][T16385] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 411.102212][T16388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2650'. [ 411.113788][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2650'. [ 411.131316][T16388] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2650'. [ 411.561532][T16404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2656'. [ 411.972307][T16419] Unsupported ieee802154 address type: 0 [ 411.983548][T16419] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 412.413970][T16430] Cannot find set identified by id 0 to match [ 412.949922][T16440] ip_tables: iptables: counters copy to user failed while replacing table [ 413.303972][T16455] syzkaller1: entered promiscuous mode [ 413.304228][T16455] syzkaller1: entered allmulticast mode [ 413.435646][T16465] netlink: 'syz.5.2672': attribute type 12 has an invalid length. [ 413.436044][T16455] netlink: 'syz.5.2672': attribute type 12 has an invalid length. [ 413.552117][T16462] netlink: 'syz.3.2673': attribute type 1 has an invalid length. [ 413.974313][T16462] 8021q: adding VLAN 0 to HW filter on device bond14 [ 414.104904][T16482] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 414.105811][T16482] netlink: 'syz.4.2677': attribute type 21 has an invalid length. [ 414.105836][T16482] IPv6: NLM_F_CREATE should be specified when creating new route [ 414.105943][T16482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 414.105955][T16482] IPv6: NLM_F_CREATE should be set when creating new route [ 414.106003][T16482] IPv6: NLM_F_CREATE should be set when creating new route [ 414.106031][T16482] IPv6: NLM_F_CREATE should be set when creating new route [ 414.618504][ T1710] block nbd0: Possible stuck request ffff888028c85080: control (read@0,4096B). Runtime 270 seconds [ 414.871625][T16506] __nla_validate_parse: 5 callbacks suppressed [ 414.871650][T16506] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2686'. [ 414.911852][T16506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2686'. [ 415.220168][T16513] netlink: 'syz.3.2689': attribute type 24 has an invalid length. [ 415.433280][T16517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'. [ 415.472525][T16528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.629590][T16531] tipc: Started in network mode [ 415.629616][T16531] tipc: Node identity 3, cluster identity 4711 [ 415.629631][T16531] tipc: Node number set to 3 [ 415.780195][T16543] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2694'. [ 415.809083][T16536] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2692'. [ 416.017015][T16543] bond15: Unable to set peer notification delay as MII monitoring is disabled [ 416.042209][T16543] bond15 (unregistering): Released all slaves [ 416.219989][T16555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2696'. [ 416.568569][T16561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2699'. [ 416.660304][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2699'. [ 416.663475][T16568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2700'. [ 417.546680][T16585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2703'. [ 417.843797][T16591] xt_policy: too many policy elements [ 419.509223][T16561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.511198][T16588] netlink: 'syz.2.2704': attribute type 2 has an invalid length. [ 419.912469][T16608] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 419.928776][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2707'. [ 419.984573][T16608] syzkaller1: entered promiscuous mode [ 419.984600][T16608] syzkaller1: entered allmulticast mode [ 420.015912][T16608] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2707'. [ 420.030985][T16614] vlan0: entered promiscuous mode [ 420.031011][T16614] bond3: entered promiscuous mode [ 420.031026][T16614] bridge3: entered promiscuous mode [ 420.058032][T16608] tipc: Enabling of bearer rejected, already enabled [ 420.455637][T16630] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2712'. [ 420.487781][T16625] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2711'. [ 420.585309][T16625] lo speed is unknown, defaulting to 1000 [ 420.585382][T16625] lo speed is unknown, defaulting to 1000 [ 420.586444][T16625] lo speed is unknown, defaulting to 1000 [ 420.603347][T16625] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 420.603468][T16625] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 420.612571][T16625] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 420.685335][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2714'. [ 420.685378][T16637] netlink: 'syz.3.2714': attribute type 30 has an invalid length. [ 420.850775][T16636] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2715'. [ 420.916852][T16638] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2715'. [ 420.920005][T16642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2717'. [ 420.953871][T16625] lo speed is unknown, defaulting to 1000 [ 421.078791][T16625] lo speed is unknown, defaulting to 1000 [ 421.078873][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2715'. [ 421.085379][T16646] bond16: entered promiscuous mode [ 421.085407][T16646] bond16: entered allmulticast mode [ 421.090054][T16625] lo speed is unknown, defaulting to 1000 [ 421.132030][T16625] lo speed is unknown, defaulting to 1000 [ 421.148845][T16625] lo speed is unknown, defaulting to 1000 [ 421.197792][T16625] lo speed is unknown, defaulting to 1000 [ 421.218404][T16625] lo speed is unknown, defaulting to 1000 [ 421.785172][T16669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2723'. [ 421.800388][T16665] gtp0: entered promiscuous mode [ 421.800671][T16665] gtp0: entered allmulticast mode [ 421.951602][T16676] mac80211_hwsim hwsim5 syzkaller1: entered promiscuous mode [ 421.951868][T16676] mac80211_hwsim hwsim5 syzkaller1: entered allmulticast mode [ 422.098374][T16669] batman_adv: batadv0: Adding interface: syzkaller0 [ 422.098691][T16669] batman_adv: batadv0: Interface activated: syzkaller0 [ 422.576509][T16693] block nbd2: server does not support multiple connections per device. [ 422.578632][T16693] block nbd2: shutting down sockets [ 422.872220][T16706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.899099][T16706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.635498][T16716] 0ªX¹¦Dö»: renamed from gretap0 [ 423.779847][T16719] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 424.086966][T16716] 0ªX¹¦Dö»: left promiscuous mode [ 424.115537][T16716] 0ªX¹¦Dö»: entered allmulticast mode [ 424.133370][T16705] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 424.788983][T16749] netlink: 'syz.5.2743': attribute type 29 has an invalid length. [ 425.017201][T16754] netlink: 'syz.2.2748': attribute type 26 has an invalid length. [ 425.203144][T16757] bond9: (slave bond_slave_0): Device is not bonding slave [ 425.203172][T16757] bond9: option active_slave: invalid value (bond_slave_0) [ 425.234732][T16757] bond9 (unregistering): Released all slaves [ 425.401920][ T30] audit: type=1800 audit(1794250084.242:9): pid=16765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2752" name="memory.events" dev="tmpfs" ino=1174 res=0 errno=-22 [ 425.406030][ T30] audit: type=1804 audit(1794250084.242:10): pid=16765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2752" name="/newroot/227/memory.events" dev="tmpfs" ino=1174 res=1 errno=0 [ 425.687939][T16779] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 425.687966][T16779] batman_adv: batadv0: Removing interface: syzkaller0 [ 426.000325][T16783] sctp: [Deprecated]: syz.3.2756 (pid 16783) Use of int in maxseg socket option. [ 426.000325][T16783] Use struct sctp_assoc_value instead [ 426.000410][T16784] sctp: [Deprecated]: syz.3.2756 (pid 16784) Use of int in maxseg socket option. [ 426.000410][T16784] Use struct sctp_assoc_value instead [ 427.698783][T16839] Bluetooth: ISO socket layer initialized [ 428.118809][T16854] syzkaller1: entered promiscuous mode [ 428.119659][T16854] __nla_validate_parse: 6 callbacks suppressed [ 428.119677][T16854] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2774'. [ 428.440508][T16861] syzkaller0: left promiscuous mode [ 428.440533][T16861] syzkaller0: left allmulticast mode [ 428.598237][T16868] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2777'. [ 428.805020][T16868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.929671][T16868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.965487][T16868] bond0 (unregistering): (slave team0): Releasing backup interface [ 428.980621][T16868] bond0 (unregistering): Released all slaves [ 429.633347][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2784'. [ 430.471315][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2789'. [ 430.865700][T16915] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2791'. [ 430.865727][T16915] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2791'. [ 430.865789][T16915] netlink: 'syz.6.2791': attribute type 5 has an invalid length. [ 431.005993][T16915] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2791'. [ 431.229255][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2795'. [ 431.488000][T16936] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2799'. [ 431.691585][T16943] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2803'. [ 431.691627][T16943] netlink: 'syz.6.2803': attribute type 8 has an invalid length. [ 432.170225][T16950] syzkaller0: entered promiscuous mode [ 432.170252][T16950] syzkaller0: entered allmulticast mode [ 432.220692][T16969] xt_MASQUERADE: bad rangesize 2147483646 [ 432.499045][T16980] syzkaller0: MTU not usable for tipc bearer [ 432.499087][T16980] tipc: Enabling of bearer rejected, failed to enable media [ 432.531879][T16982] syzkaller0: MTU not usable for tipc bearer [ 432.531921][T16982] tipc: Enabling of bearer rejected, failed to enable media [ 432.943382][T16994] netlink: 'syz.5.2818': attribute type 1 has an invalid length. [ 433.078389][T16994] 8021q: adding VLAN 0 to HW filter on device bond7 [ 433.167678][T17006] netlink: 'syz.6.2821': attribute type 1 has an invalid length. [ 433.167704][T17006] netlink: 'syz.6.2821': attribute type 2 has an invalid length. [ 433.354362][T16994] bond7: (slave bridge2): making interface the new active one [ 433.366963][T16994] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 433.468054][T17000] gretap2: entered promiscuous mode [ 433.469904][T17000] batman_adv: batadv0: Adding interface: gretap2 [ 433.469923][T17000] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 433.469950][T17000] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 433.603009][T17012] __nla_validate_parse: 5 callbacks suppressed [ 433.603064][T17012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2824'. [ 433.871633][T17030] syzkaller1: entered promiscuous mode [ 433.871661][T17030] syzkaller1: entered allmulticast mode [ 433.911198][T17034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2830'. [ 433.961119][T17028] netlink: 'syz.2.2825': attribute type 11 has an invalid length. [ 433.961141][T17028] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2825'. [ 434.289729][T17044] ip6t_ah: unknown flags 5 [ 434.871343][T17065] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2839'. [ 435.371715][T17085] netlink: 'syz.5.2845': attribute type 29 has an invalid length. [ 435.371759][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2845'. [ 435.684054][T17095] netlink: 'syz.5.2848': attribute type 1 has an invalid length. [ 435.684345][T17095] netlink: 'syz.5.2848': attribute type 1 has an invalid length. [ 435.684609][T17095] netlink: 'syz.5.2848': attribute type 1 has an invalid length. [ 435.684833][T17095] netlink: 'syz.5.2848': attribute type 1 has an invalid length. [ 435.945495][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2850'. [ 435.974927][T17105] validate_nla: 29 callbacks suppressed [ 435.974952][T17105] netlink: 'syz.3.2849': attribute type 21 has an invalid length. [ 435.974968][T17105] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2849'. [ 435.975043][T17105] netlink: 'syz.3.2849': attribute type 4 has an invalid length. [ 435.975058][T17105] netlink: 'syz.3.2849': attribute type 5 has an invalid length. [ 435.975071][T17105] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2849'. [ 436.007461][T17103] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2850'. [ 436.052520][T17107] netlink: 'syz.3.2849': attribute type 21 has an invalid length. [ 436.052546][T17107] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2849'. [ 436.052601][T17107] netlink: 'syz.3.2849': attribute type 4 has an invalid length. [ 436.052616][T17107] netlink: 'syz.3.2849': attribute type 5 has an invalid length. [ 436.261884][T17114] ip_tables: iptables: counters copy to user failed while replacing table [ 436.315045][T17114] syzkaller1: entered promiscuous mode [ 436.315071][T17114] syzkaller1: entered allmulticast mode [ 436.768484][T17132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.798671][T17133] netlink: 'syz.5.2857': attribute type 11 has an invalid length. [ 436.995712][T17141] nicvf0: mtu less than device minimum [ 437.550570][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 437.555048][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 437.571773][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 437.587110][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 437.592237][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 437.889134][T17164] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 437.895532][T17164] bond8 (unregistering): Released all slaves [ 438.443040][T17188] 1ªX¹¦Dö»: entered promiscuous mode [ 438.443068][T17188] 1ªX¹¦Dö»: left allmulticast mode [ 438.860537][ T5639] syz_tun (unregistering): left promiscuous mode [ 439.689501][T17228] netlink: 'syz.5.2881': attribute type 3 has an invalid length. [ 439.739945][ T53] Bluetooth: hci0: command tx timeout [ 439.917698][T17156] rxe_eth0 speed is unknown, defaulting to 1000 [ 440.220969][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.638071][T17254] netlink: 'syz.6.2888': attribute type 20 has an invalid length. [ 440.638097][T17254] __nla_validate_parse: 7 callbacks suppressed [ 440.638110][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2888'. [ 440.735239][T17248] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2886'. [ 440.749551][T17254] netlink: 'syz.6.2888': attribute type 20 has an invalid length. [ 440.749576][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2888'. [ 440.776835][ T1110] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.777462][ T1110] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.780442][ T1110] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.780495][ T1110] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.992242][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2886'. [ 441.198163][T17156] lo speed is unknown, defaulting to 1000 [ 441.817432][ T53] Bluetooth: hci0: command tx timeout [ 441.933521][T17280] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.933884][T17280] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.160082][T17280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.611310][T17280] batman_adv: batadv0: Interface deactivated: gretap1 [ 442.638400][ T5731] lo speed is unknown, defaulting to 1000 [ 442.638465][ T5731] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 442.666370][T16236] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.666409][T16236] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.666454][T16236] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.666522][T16236] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.666562][T16236] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.666589][T16236] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.666628][T16236] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.666655][T16236] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.814937][T17156] lo speed is unknown, defaulting to 1000 [ 443.365963][T17312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2900'. [ 443.452188][T17318] netlink: zone id is out of range [ 443.452227][T17318] netlink: zone id is out of range [ 443.452236][T17318] netlink: zone id is out of range [ 443.452245][T17318] netlink: zone id is out of range [ 443.452253][T17318] netlink: zone id is out of range [ 443.901377][ T53] Bluetooth: hci0: command tx timeout [ 444.427838][T17156] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.427956][T17156] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.428136][T17156] bridge_slave_0: entered allmulticast mode [ 444.436350][T17156] bridge_slave_0: entered promiscuous mode [ 444.474048][T17156] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.474248][T17156] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.474440][T17156] bridge_slave_1: entered allmulticast mode [ 444.503154][T17345] netlink: 'syz.5.2909': attribute type 7 has an invalid length. [ 444.515250][T17156] bridge_slave_1: entered promiscuous mode [ 444.516059][T17349] netlink: 'syz.5.2909': attribute type 7 has an invalid length. [ 444.624827][T17156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.639341][T17156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.686041][T17156] team0: Port device team_slave_0 added [ 444.700334][T17156] team0: Port device team_slave_1 added [ 444.700404][T17352] tc_dump_action: action bad kind [ 444.700764][ T1710] block nbd0: Possible stuck request ffff888028c85080: control (read@0,4096B). Runtime 300 seconds [ 444.750712][T17352] netlink: 'syz.6.2910': attribute type 2 has an invalid length. [ 444.791227][T17156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.791248][T17156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.791346][T17156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.793649][T17156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.793665][T17156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.793696][T17156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.069504][T17156] hsr_slave_0: entered promiscuous mode [ 445.074030][T17156] hsr_slave_1: entered promiscuous mode [ 445.092695][T17156] debugfs: 'hsr0' already exists in 'hsr' [ 445.092718][T17156] Cannot create hsr debugfs directory [ 445.821074][T17156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.821116][T17156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.977805][ T53] Bluetooth: hci0: command tx timeout [ 446.364612][T17156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.364654][T17156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.634222][T17156] bond0: (slave netdevsim1): Releasing backup interface [ 446.651020][T17156] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 446.679798][T17156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.679840][T17156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.040869][T17156] batman_adv: batadv0: Removing interface: macsec1 [ 447.127981][T17156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.128035][T17156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.402414][T17401] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2923'. [ 447.644898][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2925'. [ 448.328364][T17156] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 448.403227][T17156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.418682][T17156] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 448.460992][T17156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.466868][T17431] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 448.514390][T17156] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 448.604317][T17156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.617934][T17156] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 448.652161][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2930'. [ 448.679056][T17156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.818624][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2932'. [ 449.130249][T17459] Bluetooth: MGMT ver 1.23 [ 449.300713][T17156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.446822][T17156] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.503852][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.503974][ T6869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.569569][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.569699][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.857293][T17467] netlink: 'syz.4.2937': attribute type 2 has an invalid length. [ 450.845853][T17497] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2945'. [ 450.894544][T17500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2946'. [ 450.894579][T17500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2946'. [ 451.350823][T17507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2947'. [ 451.405160][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 451.434523][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 451.531434][T17508] netlink: 'syz.4.2947': attribute type 4 has an invalid length. [ 451.572805][T17508] netlink: 'syz.4.2947': attribute type 4 has an invalid length. [ 451.683384][T17508] netlink: 'syz.4.2947': attribute type 4 has an invalid length. [ 451.683528][T17508] netlink: 'syz.4.2947': attribute type 4 has an invalid length. [ 451.683660][T17508] netlink: 'syz.4.2947': attribute type 4 has an invalid length. [ 451.683794][T17508] netlink: 'syz.4.2947': attribute type 4 has an invalid length. [ 451.683966][T17508] netlink: 'syz.4.2947': attribute type 4 has an invalid length. [ 451.684098][T17508] netlink: 'syz.4.2947': attribute type 4 has an invalid length. [ 451.684236][T17508] netlink: 'syz.4.2947': attribute type 4 has an invalid length. [ 451.841839][T17526] mac80211_hwsim hwsim5 syzkaller1: left promiscuous mode [ 451.841872][T17526] mac80211_hwsim hwsim5 syzkaller1: left allmulticast mode [ 452.604751][T17546] x_tables: duplicate underflow at hook 1 [ 452.664791][T17540] __nla_validate_parse: 66 callbacks suppressed [ 452.664813][T17540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2955'. [ 452.664843][T17540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2955'. [ 452.708110][T17156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.795129][T17540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2955'. [ 452.795279][T17540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2955'. [ 452.885363][T17551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2959'. [ 453.006531][T16236] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.006596][T16236] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.006639][T16236] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.044452][ T50] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.411080][T17156] veth0_vlan: entered promiscuous mode [ 453.571995][T17156] veth1_vlan: entered promiscuous mode [ 453.838728][T17156] veth0_macvtap: entered promiscuous mode [ 453.874375][T17156] veth1_macvtap: entered promiscuous mode [ 453.966767][T17156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.049079][T17156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.154128][T17577] syzkaller0: entered promiscuous mode [ 454.154156][T17577] syzkaller0: entered allmulticast mode [ 454.165737][ T160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.186006][ T5946] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.329291][ T5944] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.343465][ T5944] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.361095][T17587] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 454.838221][ T6869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.838247][ T6869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.033986][T17607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2975'. [ 455.034024][T17607] validate_nla: 58 callbacks suppressed [ 455.034038][T17607] netlink: 'syz.3.2975': attribute type 7 has an invalid length. [ 455.034052][T17607] netlink: 'syz.3.2975': attribute type 8 has an invalid length. [ 455.034065][T17607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2975'. [ 455.235308][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.235344][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.937855][T17629] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2980'. [ 455.965868][T17630] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2980'. [ 456.795611][T17623] IPv6: sit2: Disabled Multicast RS [ 456.969110][T17647] netlink: 'syz.6.2983': attribute type 1 has an invalid length. [ 457.066212][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2983'. [ 457.167770][T17647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.178995][T17647] netlink: 'syz.6.2983': attribute type 1 has an invalid length. [ 457.314821][T17647] netlink: 'syz.6.2983': attribute type 1 has an invalid length. [ 457.315020][T17647] netlink: 'syz.6.2983': attribute type 1 has an invalid length. [ 457.315214][T17647] netlink: 'syz.6.2983': attribute type 1 has an invalid length. [ 457.315363][T17647] netlink: 'syz.6.2983': attribute type 1 has an invalid length. [ 457.315782][T17647] netlink: 'syz.6.2983': attribute type 1 has an invalid length. [ 457.315970][T17647] netlink: 'syz.6.2983': attribute type 1 has an invalid length. [ 457.775362][T17662] __nla_validate_parse: 1 callbacks suppressed [ 457.775385][T17662] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2988'. [ 457.863883][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 457.868197][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 457.880361][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 457.885660][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 457.891024][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 459.000405][T17670] rxe_eth0 speed is unknown, defaulting to 1000 [ 459.302052][T17721] IPv6: NLM_F_CREATE should be specified when creating new route [ 459.524513][T17670] lo speed is unknown, defaulting to 1000 [ 459.764809][T17670] lo speed is unknown, defaulting to 1000 [ 459.976862][ T53] Bluetooth: hci1: command tx timeout [ 460.211077][T17670] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.211274][T17670] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.211489][T17670] bridge_slave_0: entered allmulticast mode [ 460.213832][T17670] bridge_slave_0: entered promiscuous mode [ 460.245667][T17670] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.245828][T17670] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.246016][T17670] bridge_slave_1: entered allmulticast mode [ 460.264142][T17670] bridge_slave_1: entered promiscuous mode [ 460.332075][T17670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.339678][T17670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.396784][T17670] team0: Port device team_slave_0 added [ 460.400515][T17670] team0: Port device team_slave_1 added [ 460.445865][T17670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.445885][T17670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.445917][T17670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.462654][T17670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.462698][T17670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.462779][T17670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.591455][T17670] hsr_slave_0: entered promiscuous mode [ 460.592702][T17670] hsr_slave_1: entered promiscuous mode [ 460.593596][T17670] debugfs: 'hsr0' already exists in 'hsr' [ 460.593614][T17670] Cannot create hsr debugfs directory [ 460.678536][T17663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.163028][T17743] validate_nla: 26 callbacks suppressed [ 461.163051][T17743] netlink: 'syz.4.3003': attribute type 2 has an invalid length. [ 461.219088][T17743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3003'. [ 461.219124][T17743] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3003'. [ 461.349233][T17739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.864118][T17767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'. [ 461.864147][T17767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'. [ 462.032913][T17670] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.032953][T17670] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 462.032980][T17670] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.059844][ T53] Bluetooth: hci1: command tx timeout [ 462.230342][T17770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3008'. [ 462.310823][T17778] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3010'. [ 462.370484][T17670] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.370524][T17670] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 462.370555][T17670] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.553821][T17670] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.553864][T17670] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 462.553895][T17670] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.694024][T17670] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.694072][T17670] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 462.694102][T17670] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.771392][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3013'. [ 463.329544][T17670] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 463.354734][T17670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.364358][T17670] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 463.387382][T17670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.392449][T17670] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 463.414077][T17670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.415838][T17670] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 463.459095][T17670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.671690][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3019'. [ 463.718517][T17811] netlink: 'syz.2.3020': attribute type 1 has an invalid length. [ 463.718912][T17801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3018'. [ 464.136652][ T53] Bluetooth: hci1: command tx timeout [ 464.340615][T17670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.441718][T17670] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.495277][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.495397][ T5946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.542395][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.542536][ T5946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.878704][T17829] bond0: entered promiscuous mode [ 466.003756][T17859] netlink: 576 bytes leftover after parsing attributes in process `syz.6.3031'. [ 466.217301][ T53] Bluetooth: hci1: command tx timeout [ 466.523412][T17871] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3037'. [ 466.528343][T17869] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3034'. [ 466.607294][T17877] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3036'. [ 466.660990][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3035'. [ 466.790855][T17883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3035'. [ 466.791493][T17879] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 466.795847][T17875] hsr0: entered allmulticast mode [ 466.795869][T17875] hsr_slave_0: entered allmulticast mode [ 466.795887][T17875] hsr_slave_1: entered allmulticast mode [ 466.796066][T17876] hsr0: entered promiscuous mode [ 466.823919][T17878] hsr_slave_0: left promiscuous mode [ 466.851253][T17878] hsr_slave_1: left promiscuous mode [ 466.938137][T17878] hsr0 (unregistering): left allmulticast mode [ 466.938186][T17878] hsr0 (unregistering): left promiscuous mode [ 467.308227][T17896] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3040'. [ 467.460315][T17670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.537031][T17897] sctp: [Deprecated]: syz.4.3041 (pid 17897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.537031][T17897] Use struct sctp_sack_info instead [ 467.657432][ T53] Bluetooth: hci0: command tx timeout [ 467.851230][T17670] veth0_vlan: entered promiscuous mode [ 467.897211][T17670] veth1_vlan: entered promiscuous mode [ 467.980572][T17910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3042'. [ 468.042253][T17911] unsupported nlmsg_type 40 [ 468.083530][T17670] veth0_macvtap: entered promiscuous mode [ 468.164257][T17670] veth1_macvtap: entered promiscuous mode [ 468.343340][T17670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.388470][T17917] netlink: 'syz.4.3044': attribute type 2 has an invalid length. [ 468.447892][T17670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.505637][T17927] ip_tables: iptables: counters copy to user failed while replacing table [ 468.644283][ T160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.645466][ T6876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.645556][ T6876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.645597][ T6876] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.772743][T17929] netlink: 'syz.4.3049': attribute type 3 has an invalid length. [ 468.772767][T17929] __nla_validate_parse: 1 callbacks suppressed [ 468.772780][T17929] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3049'. [ 468.879215][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3050'. [ 469.194721][T17938] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3051'. [ 469.313930][ T6876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.313984][ T6876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.424502][ T6869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.424528][ T6869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.768940][T17955] sctp: [Deprecated]: syz.5.3055 (pid 17955) Use of int in max_burst socket option. [ 469.768940][T17955] Use struct sctp_assoc_value instead [ 470.224987][T17972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.354883][T17978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.756720][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3065'. [ 470.874345][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 470.884889][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 470.889274][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 470.909753][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 470.911246][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 471.577934][ T33] INFO: task udevd:7745 blocked in I/O wait for more than 143 seconds. [ 471.577992][ T33] Not tainted syzkaller #0 [ 471.578005][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.578016][ T33] task:udevd state:D stack:26344 pid:7745 tgid:7745 ppid:5002 task_flags:0x400040 flags:0x00080002 [ 471.578123][ T33] Call Trace: [ 471.578132][ T33] [ 471.578148][ T33] __schedule+0x17dd/0x5830 [ 471.578334][ T33] ? __lock_acquire+0x747/0x2de0 [ 471.578415][ T33] ? __pfx___schedule+0x10/0x10 [ 471.578454][ T33] ? schedule+0x90/0x2b0 [ 471.578487][ T33] schedule+0x164/0x2b0 [ 471.578518][ T33] io_schedule+0x7f/0xd0 [ 471.578550][ T33] folio_wait_bit_common+0x6d0/0xcf0 [ 471.578619][ T33] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 471.578648][ T33] ? filemap_read_folio+0x234/0x3a0 [ 471.578691][ T33] ? __pfx_wake_page_function+0x10/0x10 [ 471.578729][ T33] ? __filemap_get_folio_mpol+0x7c3/0xff0 [ 471.578773][ T33] do_read_cache_folio+0x1ac/0x590 [ 471.578811][ T33] ? __pfx_blkdev_read_folio+0x10/0x10 [ 471.578920][ T33] read_part_sector+0xb6/0x2b0 [ 471.579026][ T33] adfspart_check_POWERTEC+0x9a/0x7a0 [ 471.579052][ T33] ? rcu_is_watching+0x16/0xb0 [ 471.579106][ T33] ? __pfx_adfspart_check_ICS+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 471.579131][ T33] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 471.579155][ T33] ? __kmalloc_cache_noprof+0x148/0x600 [ 471.579218][ T33] ? bdev_disk_changed+0x56c/0x1680 [ 471.579252][ T33] ? bdev_disk_changed+0x56c/0x1680 [ 471.579296][ T33] bdev_disk_changed+0x851/0x1680 [ 471.579360][ T33] ? __pfx_bdev_disk_changed+0x10/0x10 [ 471.579498][ T33] blkdev_get_whole+0x372/0x510 [ 471.579572][ T33] bdev_open+0x324/0xd70 [ 471.579620][ T33] blkdev_open+0x461/0x600 [ 471.579649][ T33] ? __pfx_blkdev_open+0x10/0x10 [ 471.579681][ T33] do_dentry_open+0x80e/0x1360 [ 471.579770][ T33] vfs_open_consume+0x4a/0x350 [ 471.579794][ T33] ? path_openat+0x16e1/0x20f0 [ 471.579892][ T33] path_openat+0x16fc/0x20f0 [ 471.579951][ T33] do_file_open+0x23e/0x4a0 [ 471.579994][ T33] ? __pfx_do_file_open+0x10/0x10 [ 471.580063][ T33] ? _raw_spin_unlock+0x28/0x50 [ 471.580118][ T33] ? alloc_fd+0x6af/0x760 [ 471.580199][ T33] do_sys_openat2+0x115/0x200 [ 471.580226][ T33] ? __pfx___up_read+0x10/0x10 [ 471.580263][ T33] ? __pfx_do_sys_openat2+0x10/0x10 [ 471.580287][ T33] ? do_user_addr_fault+0xc7c/0x1480 [ 471.580336][ T33] ? do_user_addr_fault+0xd3f/0x1480 [ 471.580371][ T33] __x64_sys_openat+0x138/0x170 [ 471.580405][ T33] do_syscall_64+0x166/0x520 [ 471.580459][ T33] ? trace_irq_disable+0x3b/0x140 [ 471.630256][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.630352][ T33] ? clear_bhb_loop+0x70/0xc0 [ 471.630384][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.630414][ T33] RIP: 0033:0x7ff7d04a7407 [ 471.630436][ T33] RSP: 002b:00007ffc0e6ea4b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 471.630462][ T33] RAX: ffffffffffffffda RBX: 00007ff7d0b55880 RCX: 00007ff7d04a7407 [ 471.630479][ T33] RDX: 00000000000a0800 RSI: 0000559d35a57910 RDI: ffffffffffffff9c [ 471.630496][ T33] RBP: 0000559d35a43910 R08: 0000000000000000 R09: 0000000000000000 [ 471.630511][ T33] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559d35a56e20 [ 471.630526][ T33] R13: 0000559d35a51190 R14: 00007ffc0e6ea578 R15: 0000559d35a56e20 [ 471.630564][ T33] [ 471.630652][ T33] [ 471.630652][ T33] Showing all locks held in the system: [ 471.630666][ T33] locks held by pr/ttyS0/32: 1, last CPU#0: [ 471.630691][ T33] #0: ffffffff90033d58 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 471.630764][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 471.630780][ T33] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 471.630862][ T33] locks held by kworker/u8:3/50: 4, last CPU#0: [ 471.630878][ T33] #0: ffff888069211948 ((wq_completion)krds_cp_wq#3/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 471.630992][ T33] #1: ffffc90000ba7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 471.631058][ T33] #2: ffff888075e5b680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 471.631223][ T33] #3: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 471.631288][ T33] locks held by kworker/u8:5/85: 3, on CPU#0: [ 471.631304][ T33] #0: ffff88801ef93948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 471.631368][ T33] #1: ffffc9000206fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 471.631434][ T33] #2: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 471.631583][ T33] locks held by klogd/4991: 1, last CPU#1: [ 471.631599][ T33] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 471.631662][ T33] locks held by getty/5394: 2, on CPU#0: [ 471.631686][ T33] #0: ffff888034fbb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 ** replaying previous printk message ** [ 471.631686][ T33] #0: ffff888034fbb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 471.631787][ T33] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 471.700429][ T33] locks held by syz-executor/5622: 2, last CPU#0: [ 471.700447][ T33] #0: ffff88803565ccc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 471.700547][ T33] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 471.700609][ T33] locks held by kworker/u8:14/5946: 2, last CPU#0: [ 471.771289][ T33] #0: ffff88802c742148 ((wq_completion)krds_cp_wq#3/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 471.771373][ T33] #1: ffffc9000510fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 471.771443][ T33] locks held by kworker/u8:20/6869: 2, on CPU#0: [ 471.771460][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 471.771532][ T33] #1: ffffc90004e5fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 471.771597][ T33] locks held by kworker/u8:22/6872: 3, last CPU#1: [ 471.771614][ T33] #0: ffff888033589148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 471.771684][ T33] #1: ffffc90003587c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 471.771749][ T33] #2: ffff8880576f8358 (key#17){+...}-{3:3}, at: gate_timer_func+0x2b/0x450 [ 471.771931][ T33] locks held by kworker/u8:24/6876: 2, on CPU#0: [ 471.771948][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 471.772021][ T33] #1: ffffc900050afc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 471.772129][ T33] locks held by udevd/7745: 1, on CPU#1: [ 471.772145][ T33] #0: ffff888028a8f350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 471.772226][ T33] locks held by kworker/u8:28/16236: 3, last CPU#1: [ 471.772243][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 471.772308][ T33] #1: ffffc90002e97c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 471.772374][ T33] #2: ffff888078899258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 471.772527][ T33] locks held by syz.3.3065/18008: 2, last CPU#0: [ 471.772550][ T33] #0: ffff88807fb11bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 471.772605][ T33] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 471.772666][ T33] locks held by syz.5.3068/18006: 1, last CPU#1: [ 471.772688][ T33] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 471.930138][ T33] locks held by syz.6.3069/18014: 2, last CPU#1: [ 471.930163][ T33] #0: ffff88807f6e7180 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 471.930229][ T33] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 471.930283][ T33] locks held by syz.6.3069/18020: 1, on CPU#0: [ 471.930299][ T33] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x137/0x10d0 [ 471.930493][ T33] locks held by syz.6.3069/18022: 3, on CPU#0: [ 471.930508][ T33] #0: ffffffff916f7b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 471.930878][ T33] #1: ffffffff916f7960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 471.930938][ T33] #2: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: wg_set_device_doit+0x170/0x2120 [ 471.931049][ T33] [ 471.931055][ T33] ============================================= [ 471.931055][ T33] [ 471.931071][ T33] NMI backtrace for cpu 1 [ 471.931114][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 471.931191][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 471.931233][ T33] Call Trace: [ 471.931261][ T33] [ 471.931290][ T33] dump_stack_lvl+0xe8/0x150 [ 471.931396][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 471.931520][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 471.931616][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 471.931688][ T33] sys_info+0x135/0x170 [ 471.931738][ T33] watchdog+0x1073/0x10f0 [ 471.931858][ T33] ? watchdog+0x209/0x10f0 [ 471.931951][ T33] kthread+0x38b/0x480 [ 471.932083][ T33] ? __pfx_watchdog+0x10/0x10 [ 471.932156][ T33] ? __pfx_kthread+0x10/0x10 [ 471.932226][ T33] ret_from_fork+0x514/0xb70 [ 471.932317][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 471.932379][ T33] ? __switch_to+0xc78/0x1410 [ 471.932477][ T33] ? __pfx_kthread+0x10/0x10 [ 471.932561][ T33] ret_from_fork_asm+0x1a/0x30 [ 471.932676][ T33] [ 471.932894][ T33] Sending NMI from CPU 1 to CPUs 0: [ 471.932958][ C0] NMI backtrace for cpu 0 [ 471.932972][ C0] CPU: 0 UID: 0 PID: 32 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 471.932992][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 471.933004][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 471.933123][ C0] Code: e8 9e 97 43 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 20 bb fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a ff 82 06 cc 44 89 f9 80 e1 07 [ 471.933139][ C0] RSP: 0018:ffffc90000a878b8 EFLAGS: 00000002 [ 471.933155][ C0] RAX: 1ffffffff3840900 RBX: 00000000000003fd RCX: 0000000000000000 [ 471.933168][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 471.933179][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 471.933191][ C0] R10: dffffc0000000000 R11: ffffffff85857980 R12: dffffc0000000000 [ 471.933205][ C0] R13: 0000000000000000 R14: ffffffff9c204ec0 R15: 0000000000000000 [ 471.933217][ C0] FS: 0000000000000000(0000) GS:ffff88812340a000(0000) knlGS:0000000000000000 [ 471.933232][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.933245][ C0] CR2: 00007ffc87f21e9c CR3: 0000000035cc8000 CR4: 00000000003526f0 [ 471.933261][ C0] Call Trace: [ 471.933268][ C0] [ 471.933277][ C0] wait_for_lsr+0x184/0x2f0 [ 471.933306][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 471.933355][ C0] serial8250_console_write+0xa7e/0x1200 [ 471.933382][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 471.933434][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 471.933460][ C0] ? __schedule+0x17f3/0x5830 [ 471.933491][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 471.933532][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 471.933561][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 471.933600][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 471.933625][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 471.933654][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 471.933676][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 471.933704][ C0] ? __kthread_parkme+0x71/0x1f0 [ 471.933723][ C0] ? __kthread_parkme+0x199/0x1f0 [ 471.933743][ C0] kthread+0x38b/0x480 [ 471.933763][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 471.933786][ C0] ? __pfx_kthread+0x10/0x10 [ 471.933807][ C0] ret_from_fork+0x514/0xb70 [ 471.933829][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 471.933849][ C0] ? __switch_to+0xc78/0x1410 [ 471.933879][ C0] ? __pfx_kthread+0x10/0x10 [ 471.933900][ C0] ret_from_fork_asm+0x1a/0x30 [ 471.933929][ C0] [ 472.152275][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 472.876794][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 472.885927][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 472.895996][ T33] Call Trace: [ 472.899304][ T33] [ 472.902276][ T33] vpanic+0x26f/0x710 [ 472.906288][ T33] panic+0xc5/0xd0 [ 472.910025][ T33] ? __pfx_panic+0x10/0x10 [ 472.914459][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 472.919939][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 472.925340][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 472.931526][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 472.937711][ T33] watchdog+0x10e7/0x10f0 [ 472.942094][ T33] ? watchdog+0x209/0x10f0 [ 472.946556][ T33] kthread+0x38b/0x480 [ 472.950654][ T33] ? __pfx_watchdog+0x10/0x10 [ 472.955364][ T33] ? __pfx_kthread+0x10/0x10 [ 472.959993][ T33] ret_from_fork+0x514/0xb70 [ 472.964723][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 472.969887][ T33] ? __switch_to+0xc78/0x1410 [ 472.974609][ T33] ? __pfx_kthread+0x10/0x10 [ 472.979242][ T33] ret_from_fork_asm+0x1a/0x30 [ 472.984050][ T33] [ 472.987710][ T33] Kernel Offset: disabled [ 472.992064][ T33] Rebooting in 86400 seconds..