last executing test programs:

2m20.452719621s ago: executing program 0 (id=226):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', <r2=>0x0})
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r4], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', r2, 0x2}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0002000309573c0d3f79da5732f7b4e20e0c4f1416e12f79df4c08c3a7bcc615a385f122172512aa4d0d00"/56, @ANYRES16=r6, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000200000"], 0x64}, 0x1, 0x2}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r10)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x408100, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f00000001c0)={'wlan0\x00', @remote})
r12 = socket$unix(0x1, 0x1, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x4, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r14, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2m20.322825724s ago: executing program 0 (id=233):
r0 = socket(0xf, 0xa, 0x7fff)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001fc0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x22c2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x6, 0x0, 0x15}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0)
getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfffffffffffffd47)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x54, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6erspan0\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x40c4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

2m20.25009796s ago: executing program 0 (id=235):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf250500000008000600", @ANYRES32=r3, @ANYBLOB="08002c0001000000080039000700000008000300", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40040)

2m20.193532234s ago: executing program 0 (id=236):
socket$nl_route(0x10, 0x3, 0x0)

2m20.133641831s ago: executing program 0 (id=237):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400170003000000040150b30000000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

2m20.13347881s ago: executing program 0 (id=238):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
unshare(0x400)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000000)={{r5}, 0x2a, 0x80000007ff, 0x2})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
write$tun(0xffffffffffffffff, 0x0, 0x44)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xffff, 0x15}, {0x1, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4002}, 0x90)

2m4.836504636s ago: executing program 32 (id=238):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
unshare(0x400)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000000)={{r5}, 0x2a, 0x80000007ff, 0x2})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
write$tun(0xffffffffffffffff, 0x0, 0x44)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xffff, 0x15}, {0x1, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4002}, 0x90)

1.331762185s ago: executing program 1 (id=3268):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'netdevsim0\x00', @broadcast})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r13 = socket(0x400000000010, 0x3, 0x0)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0x488, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r15, {0x1, 0xfff1}, {}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @filter_kind_options=@f_cgroup={{0xb}, {0x450, 0x2, [@TCA_CGROUP_POLICE={0x44c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xe1, 0x2, 0x1, 0x4, 0x4, 0x5, 0x769, 0x1, 0x3, 0xa930, 0x3, 0x1, 0xffffffff, 0x7, 0x4, 0x1a9, 0xacd, 0xd51b, 0x80000001, 0xffff, 0x8, 0x4, 0x8, 0xb4, 0x0, 0x3, 0x3, 0x9, 0x1, 0x5, 0x8000, 0x6c, 0x8001, 0x9, 0xf5, 0xd5aa, 0xa, 0x9, 0x1fe0, 0x7, 0x8001, 0x80000000, 0x0, 0x7ff, 0x4, 0x7f, 0x2, 0xfffffffa, 0x2787, 0x9, 0x3, 0x4, 0x9, 0x2, 0xf, 0x7ff, 0x80000000, 0x6, 0x3ff, 0x0, 0x800, 0xfffffff8, 0x7ff, 0x8, 0xfcec, 0x8, 0x1000, 0x5, 0x6, 0x80000000, 0x7, 0x3, 0x300000, 0x93c6, 0x8, 0x8000, 0x3, 0x4, 0x7ff, 0x8, 0x3, 0x9, 0x4, 0x1, 0x3, 0x8, 0x3, 0x1, 0x401, 0xd9, 0x5, 0x5, 0x5, 0x9, 0xfffffffb, 0x8, 0x7, 0x23, 0xcf2c3adc, 0xa, 0x5, 0x40, 0xf94, 0x4, 0x7fff, 0x2, 0xb0, 0x2, 0x1, 0x12e, 0x6, 0x6, 0x3, 0x9, 0x8, 0x908, 0x0, 0x4, 0x17, 0x0, 0xf079, 0x7ff, 0x5, 0x1, 0x6, 0x7f, 0x7558, 0xfffffff0, 0x6, 0x5, 0x583, 0x2, 0x6, 0x80, 0xacd838f8, 0x7, 0x6, 0x44, 0xb3c6, 0xff, 0x5, 0x7, 0x9, 0xca, 0x5, 0x7, 0x6, 0x2, 0x4, 0x800, 0x8, 0x0, 0x9, 0x895, 0x81, 0xfffff515, 0x4, 0x9ae8, 0x4, 0x821, 0x8, 0x80000001, 0x800000, 0x8c1, 0x1fd8, 0x84, 0x8, 0x5, 0x7f, 0x8, 0x0, 0x2, 0x2, 0x5, 0x3, 0x8000, 0x8, 0x8, 0xff, 0x4, 0x5, 0x80, 0x620, 0x8b, 0x9, 0x5, 0x6, 0x8, 0x7, 0x268a, 0xffff, 0xfffffffc, 0x1, 0x8da3, 0x4, 0x0, 0x8, 0x10000, 0x3, 0x4, 0xfffffffb, 0x2, 0x2, 0x1ff, 0x0, 0x9, 0x0, 0x401, 0x80, 0x625d636f, 0x80, 0x32a6, 0x10000, 0x3, 0x10, 0xd8a1, 0x4e4, 0x7, 0x8, 0x4, 0x9, 0x7, 0xaf8, 0x220f, 0x41, 0xc, 0x7, 0x8001, 0x8d52, 0xbd3, 0x11ed, 0x2, 0xdf, 0x7f, 0xfffffffc, 0xff, 0xe, 0x5, 0x8, 0xfffff52d, 0x10, 0x4659, 0x200, 0x61f, 0xfffffffa, 0x7f, 0x1, 0x60a, 0xffff2d02, 0x7, 0xb8d, 0xb, 0x5, 0xa, 0x8, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xaa1, 0x6, 0x0, 0x0, 0x7, {0x8, 0x0, 0x5, 0xc, 0x4, 0x8}, {0x1, 0x2, 0x7, 0x1, 0xb6}, 0x9, 0x0, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}]}}]}, 0x488}}, 0x20040000)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x8000)

1.269498158s ago: executing program 1 (id=3272):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}})
r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000001c0)=0x10, 0x80000)
recvfrom$llc(r2, &(0x7f0000000200)=""/206, 0xce, 0x3, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000340)={0x0, 0x8, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @broadcast, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0)
getpeername$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$xdp(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)="cdb2e7a9bc4014138d326abc146976d50b91136b3bb5f11ced7d821b71369aa71286a9c6e62309131df89e15d399340cf0d40de697913aa944d6df4e4503b3b4e5cf828a0f30a732fec205ededfbab3cd57b4985ee5ce2554b30ffc68477d0c7edebb3a3d195d3460b3666e591e4d68f14fd06b21998b8c58837ae2a6e3a362741d0173e2100c0d2809b7369", 0x8c}, {&(0x7f0000000500)="a4fe9e9f7dad1a2b36454b37e87fc8dff637ae551b18615913507cc3bbbe7ca68f", 0x21}, {&(0x7f0000000540)="084d7a5335bf054a5adf95e93dcadd24b2f0be5fb673ba5f", 0x18}, {&(0x7f0000000580)="916e93edef4b984332993564d4a6b68b7194512cbc4b66c42b6d0246805317c1be275b0d8bda29413bf146656b6af9cb2814490552cd7b9624f9996f37659e7063e908915139f817080c6c46976f138fa6fd5b81121f9c4516db1b3052aa2037af3152bf87f4d321fcc5dd1e06dce6fb123a8a16554861d539bba6dd9618b0ccc1f77edb00fe29ec3577c575a0e59f525e833562", 0x94}, {&(0x7f0000000640)="ea1ef727a574625826ea9120282280086b6d2c2597a64baf81a130dd9ed2b4e0fc6be76dc6539ee1cc643c89315947e04baee544d6846c037c89af06ad858f48304397ff01a3b7bf6ff6beb0be20281cbb33ca13ed581bc25be827caa1c3aabb8bf574abf034f86fa864a6020846552d90314b0dcbfdee0f068204259a2c8c7d118ee9285c6f3b99c2c1", 0x8a}, {&(0x7f0000000700)="cdbc9d571a6783a1794e68b8a32ace432be2d8efa4f082c20dd01fe3f6cbe639902b96c74d8895cd42a791c3a03e3480a980c52f1b19044e0c4ba0b2a59108422e146250e21c15d9d1e7b100204f7bd063057925457ad9b6e43e24fdb6338f683641beb0", 0x64}], 0x6, 0x0, 0x0, 0x40000}, 0x4000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000002080)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002040)={&(0x7f00000008c0)={0x177c, r6, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xe2}, @NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x111, 0x0, 0x1, {0x4}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x53c, 0x111, 0x0, 0x1, {0x538, 0x5, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ba}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x95d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}]}, {0xac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2000}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x12c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x53}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}]}, {0xac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x229}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x121c, 0x111, 0x0, 0x1, {0x1218, 0x5, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdb}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x178, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7b8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x945}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb51a}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5d76}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff402c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4e7}]}]}, {0x26c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x218, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3b2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf78}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x232}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe1a0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19e}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36b}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x394, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x340, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x150, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf53}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe2b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x29}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd199}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x440, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3dc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x72}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x25c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff27}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x99cd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x1c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x128, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8df}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbd13}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]}]}, {0x1d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14d8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x168, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x28}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x39}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}]}, 0x177c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004011)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000020c0)={<r7=>0x0, 0x1}, &(0x7f0000002100)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000021c0)={r7, 0x48, &(0x7f0000002140)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}, @in6={0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}, @in6={0xa, 0x4e21, 0x407, @loopback, 0x2}]}, &(0x7f0000002200)=0x10)
ioctl(r3, 0x6, &(0x7f0000002240)="15efc6cb704a0d6f7734e9b65bbfd50802493ede893bc65ebcff33564f93c6c2997c114a12cdbfc4e0a231f65d45c5e4597385ecab3098bc1acb34e158e6fdea8d30e296cc3902780eda1aa2d0909fefe6ff74755a944c2f843227eeca461ef6bc3cf55df3b246f93853ba5b38e8c694498cc237ee659107c5b58f195093bb698bd781c8e5b411fc6396276fa6e9d8613fbdd9")
getsockname$llc(r3, &(0x7f0000002300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000002340)=0x10)
getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000002380)=@assoc_value={r7, 0xfffffff8}, &(0x7f00000023c0)=0x8)
ioctl$sock_ifreq(r5, 0x8931, &(0x7f0000002400)={'veth0_virt_wifi\x00', @ifru_mtu=0x4})
socket$nl_xfrm(0x10, 0x3, 0x6)
accept4$llc(0xffffffffffffffff, &(0x7f0000002440)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002480)=0x10, 0x0)
setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000002600)={{&(0x7f00000024c0)=""/254, 0xfe}, &(0x7f00000025c0), 0x61}, 0x20)
accept$packet(r4, &(0x7f0000002640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002680)=0x14)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002740)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x34, r8, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000}, 0x80)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000002840)={0x9}, 0x8)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000002880)={{{@in6=@empty, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000002980)=0xe8)

1.210510713s ago: executing program 3 (id=3273):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x27)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e22, @empty}, {0x6, @random="740403282399"}, 0x4, {0x2, 0x4e24, @rand_addr=0x64010100}, 'rose0\x00'})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="f7f9b9684ce61ffeb52f870d77042a53ac3c703f3351d11964c33eb78199a2dd5e77c249bd51f918775925c6fbd365e047dfe859073ef0db096275d904621d0a67e10ce2a0e0354cd1c23106735f8c15f9dbc4c1e7772ce0ba10db57390c143b241824ba0f751792611a1e5aadecb750b492829b8e5c47e55e77b13208d5ef8138e16b4f269f0f823c1f20c33b4bfb1bc557c4c8e909ce780f0666b381206cea17bc545e6b82ba528dafb48efdc8a40845afa8c23999e50e8eb01c2b207f3f6a4f1b95688dd9", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002580)="190c218ae5dbe3f19ed551bc1bd925cdd044e4baee0bd865f1ef13a601a1577ba231315b17b03dca49190a5f807de4ad9e643a3ecba5a3e8f2d837ad75e132cba7e5dea4e87006b42608059d5cd6a865195837482da4cb5dddf45073aa790761a7540460e31ea15a591033acd22a84bd4875c1e5c430d29c3f94c21a983356b70ce106da2623616cc22d6665c79fdead7cb416d3cac4bdf6f3b50085a033f3a5672bf63aa9f79d4738ab34a25706f095ced7e487f962be44672938425778cb42e1d09978c1", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)="0f5f", 0x2}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="2c0000000000000000000000070000000007b27f00000183133dac1414bbac1e010164010102e00000020000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000002ac1414aa000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e0001ac1414360000000014"], 0x88}}], 0x4, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB], 0x70}}, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x40b942b37d0000)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x300, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)

1.142235418s ago: executing program 1 (id=3275):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x21}, {@in=@multicast1, 0x8000000, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080)

1.142022751s ago: executing program 1 (id=3276):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1}}, @CTA_NAT_PROTO={0x4}]}]}, 0x74}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00070400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

1.140574535s ago: executing program 2 (id=3277):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x12}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40)
sendmsg(r1, &(0x7f0000000500)={&(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)="bb9832bf1f8813cf7f0b19856fc65f1b0eeb0f96acf20a1a206a3ef1acbbdc6badd94fd4ef7010d1435a0e13", 0x2c}, {&(0x7f00000003c0)="cc19ab06600e94706b964e4d50e3512cb840f5a16bcd48036c525d927d6551f671430f1b90098bbb34ec5f6e9ec48a7ac61d349fef7fbc242e092ff98dd5f816bcf9cca61ea3b8e5ca88e0ec62c8a9fda5bee04a702d77db254dd4a686aeea124060168db9011d912e1ef31624504d47f5bd5df283bdb297d9c58fbb722aa2983d9733d957b091f30a", 0x89}, {&(0x7f0000000340)="469c2e0b7ebe760e10d55bbd5a6d2014cc11e7bfbe063447205aea25e11d5f959eb6688cebd87d006a52851c2d318d7e0f60fc9eebc02e30597d4102fdc3", 0x3e}, {&(0x7f0000000480)="62779fb686ed6d8f5bab452454107eb7d74f63b312b53445fe66dd54c5580dc3a9782d85572f33ea634c35b766594d0a9d83f960f4adabae6cbefbe3a5c38e82f1992422ce41e7368abe5d326d540186815b5773bef2be468bd005bb8f70d0f29d4c5fce2b1596d49299943de9143394a87d465a30dd51d24114b6ab", 0x7c}, {&(0x7f0000000580)="cdf97de36c90c28f8399cc28e894fae55933b7e49022c15c492e29663771e3f2650261c9bf47d73afbfa2c84421438305d64239830465c44acdb712e3ac70a5964f23f10bf73e90b76a87ef4e77c4c2a25a8d86e1cc5abf1e10aac20b08f7b3afc013fc4a8aa128035421b4fd6eb5d60991d10f66ff6a83a86ce89c3e687a6496042942c15ac23c314cd1a8219c211bdd37077003d75c7493927d4ef537214b5dab812a946d8c991d5348cca046beb8946c346089a0810a5d508cd602fd5b663b09663d48489352a5902d65b9e1f757490c21dff4a9235ecd47858074ed65431", 0xe0}], 0x5}, 0x4040)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x5c}, {0x6}]}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x10, 0x803, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00')
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0)

1.061421843s ago: executing program 1 (id=3278):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0x3}, {0x9, 0xfff1}}}, 0x24}}, 0x40004)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002609000000dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)
write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="71030907040609f34002b72cfef4195e1b02"], 0x12)

972.336829ms ago: executing program 2 (id=3279):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffffff}, 0x20000800)

350.735881ms ago: executing program 3 (id=3280):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000c0000000000000000001d71189a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000c0000000000000000001d71189a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
getsockopt$inet_int(r0, 0x0, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async)
getsockopt$inet_int(r0, 0x0, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0x2, 0x0, &(0x7f0000000340)={0x2, 0x7, @multicast1}, 0x10)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4)

350.344416ms ago: executing program 3 (id=3281):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x8, 0xf, 0x0, 0x0, @pid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd30, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfffffffffffffff0}, 0x84)

350.179284ms ago: executing program 3 (id=3282):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2712, 0x0, &(0x7f0000000040))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="00042cbd7000fddbdf258700000008000300", @ANYRES32=0x0, @ANYRES8=r2, @ANYRESDEC=r1, @ANYRESOCT=r2, @ANYRES64, @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0xe1}, 0x800)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
socket$kcm(0x1e, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r6, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={<r12=>0x0}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r12, 0xa}, 0x8)
write$cgroup_pressure(r8, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r13 = openat$cgroup_pressure(r7, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r13, 0x1200}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r13, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f)
close(r8)
close(r13)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r14, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="3800000004060104000000000000000007000005050001000f000000050001000700000005000100070000000900020073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="070000000000fddbdf250800000008000300", @ANYRES32=r5, @ANYRES32=r11], 0x1c}}, 0x0)

190.450459ms ago: executing program 2 (id=3283):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000100020601000600000600000000000000000e0003006269746d61703a69700000000500040100008000"], 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0xe}}}, 0x24}}, 0x40004)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0x0, 0x0, 0xfffd}, 0x84)

190.142469ms ago: executing program 1 (id=3284):
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010100, @local}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000002470a0d5efbd70000004004a8000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x4008004)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001500000000000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000fd971ddbdd1985b7ae340ee51528cde697ce000000000000000000850000000745fa5ef2595c639b243c8eff439809122e7a55d74f0cfc9985173c4ba4327fb424e34094e31ddfd1626a805cafe5b6a8d0add136ea8b8d7de074a866ec353c1e9883a4385a6e706d7047b25b184f28cf91b19271bc56cf526b9e5de8481efb8bd99059b534b1af3d810c6d4fd9bd37a9415efde53fa60ed4d176a3bac25ea59af1651991aa61691f68c153a9b3bb7df4a2c309998e86d355fa65ed2e49bb2a149e542f0f2494b7465608de2871c999d9433d5ca51dc186d85e31fbc58d95fa009ec4c090a8e5b1e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000fd971ddbdd1985b7ae340ee51528cde697ce000000000000000000850000000745fa5ef2595c639b243c8eff439809122e7a55d74f0cfc9985173c4ba4327fb424e34094e31ddfd1626a805cafe5b6a8d0add136ea8b8d7de074a866ec353c1e9883a4385a6e706d7047b25b184f28cf91b19271bc56cf526b9e5de8481efb8bd99059b534b1af3d810c6d4fd9bd37a9415efde53fa60ed4d176a3bac25ea59af1651991aa61691f68c153a9b3bb7df4a2c309998e86d355fa65ed2e49bb2a149e542f0f2494b7465608de2871c999d9433d5ca51dc186d85e31fbc58d95fa009ec4c090a8e5b1e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8=r4], &(0x7f0000000480)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r8}, 0x94)

122.156881ms ago: executing program 2 (id=3285):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="010000000000000000001700f0000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)

121.98302ms ago: executing program 2 (id=3286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'})
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) (async, rerun: 32)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32)
listen(r1, 0x0) (async)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async, rerun: 32)
r2 = socket(0x2c, 0x2, 0x1) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', <r4=>r3, 0x2f, 0x6, 0x5, 0x9, 0x59, @empty, @local, 0x20, 0x20, 0x8, 0x9673}})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

2.062295ms ago: executing program 3 (id=3287):
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x6)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100"], 0xd8}}, 0x8090)

1.856643ms ago: executing program 2 (id=3288):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07007706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdefeb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e762400"/300], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000280), r0)
getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
bind$rds(r0, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)

0s ago: executing program 3 (id=3289):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xc}, {0x4, 0xd}}}, 0x24}}, 0x40004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003005000040004001c000180180010"], 0x34}}, 0x84)

kernel console output (not intermixed with test programs):

_nla_validate_parse: 27 callbacks suppressed
[   63.684422][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'.
[   63.692399][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'.
[   63.736338][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'.
[   63.739595][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'.
[   63.796806][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'.
[   63.800604][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'.
[   63.846466][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'.
[   63.849619][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'.
[   63.906220][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'.
[   63.909392][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'.
[   64.361846][ T7018] net_ratelimit: 14 callbacks suppressed
[   64.361857][ T7018] openvswitch: netlink: Tunnel attr 260 out of range max 16
[   64.395569][ T7020] bond0: (slave rose0): Error: Device can not be enslaved while up
[   64.519161][ T7033] openvswitch: netlink: Key type 16363 is out of range max 32
[   64.594386][ T7037] openvswitch: netlink: Tunnel attr 260 out of range max 16
[   64.598134][ T7042] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   64.790716][ T7060] netlink: 'syz.1.421': attribute type 1 has an invalid length.
[   64.856219][ T7069] openvswitch: netlink: Tunnel attr 260 out of range max 16
[   64.896893][ T7071] bridge4: entered promiscuous mode
[   64.898888][ T7071] macsec0: entered promiscuous mode
[   64.900630][ T7071] macsec0: entered allmulticast mode
[   64.902386][ T7071] bridge4: entered allmulticast mode
[   64.904938][ T7071] bridge4: port 1(macsec0) entered blocking state
[   64.907823][ T7071] bridge4: port 1(macsec0) entered disabled state
[   64.911668][ T7071] bridge4: left allmulticast mode
[   64.913442][ T7071] bridge4: left promiscuous mode
[   65.601662][ T7087] openvswitch: netlink: Tunnel attr 260 out of range max 16
[   65.806296][ T7107] openvswitch: netlink: Tunnel attr 260 out of range max 16
[   65.930852][ T7125] openvswitch: netlink: Tunnel attr 260 out of range max 16
[   66.016559][ T7137] netlink: 'syz.2.451': attribute type 1 has an invalid length.
[   66.019073][ T7137] netlink: 'syz.2.451': attribute type 3 has an invalid length.
[   66.169256][ T7148] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   66.171754][ T7148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.436630][ T7165] Bluetooth: MGMT ver 1.23
[   66.507582][ T7171] team1: entered promiscuous mode
[   66.509518][ T7171] team1: entered allmulticast mode
[   66.857059][ T7204] netlink: 'syz.2.477': attribute type 1 has an invalid length.
[   66.859576][ T7204] netlink: 'syz.2.477': attribute type 3 has an invalid length.
[   66.954375][ T7217] netlink: 'syz.1.483': attribute type 21 has an invalid length.
[   67.811790][ T7302] netlink: 'syz.2.509': attribute type 9 has an invalid length.
[   67.814592][ T7302] netlink: 'syz.2.509': attribute type 6 has an invalid length.
[   68.122791][ T7306] netlink: 'syz.1.510': attribute type 1 has an invalid length.
[   68.126874][ T7306] netlink: 'syz.1.510': attribute type 3 has an invalid length.
[   68.495342][ T5828] Bluetooth: hci0: command tx timeout
[   69.197249][ T7333] __nla_validate_parse: 93 callbacks suppressed
[   69.197260][ T7333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.521'.
[   69.307276][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.526'.
[   69.363210][ T7344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.526'.
[   69.408287][ T7351] netlink: 3 bytes leftover after parsing attributes in process `syz.2.529'.
[   69.411281][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'.
[   69.414482][ T7351] netlink: 3 bytes leftover after parsing attributes in process `syz.2.529'.
[   69.421310][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'.
[   69.425556][ T7351] netlink: 3 bytes leftover after parsing attributes in process `syz.2.529'.
[   69.521156][ T7361] netlink: 224 bytes leftover after parsing attributes in process `syz.1.532'.
[   69.543798][ T7363] net_ratelimit: 51 callbacks suppressed
[   69.543807][ T7363] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[   69.640847][ T7373] openvswitch: netlink: Multiple metadata blocks provided
[   69.689689][ T7377] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.539'.
[   69.908264][ T7389] openvswitch: netlink: Tunnel attr 260 out of range max 16
[   69.934587][ T7391] gtp0: entered promiscuous mode
[   69.936694][ T7391] gtp0: entered allmulticast mode
[   70.632172][ T7404] validate_nla: 3 callbacks suppressed
[   70.632184][ T7404] netlink: 'syz.2.548': attribute type 1 has an invalid length.
[   70.638280][ T7404] netlink: 'syz.2.548': attribute type 2 has an invalid length.
[   70.641603][ T7404] rdma_op ffff888109d0a9f0 conn xmit_rdma 0000000000000000
[   70.818121][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.850980][ T7421] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[   70.873110][ T7423] openvswitch: netlink: Multiple metadata blocks provided
[   71.076923][ T7443] tun0: tun_chr_ioctl cmd 1074812117
[   71.107571][ T7447] netlink: 'syz.1.565': attribute type 3 has an invalid length.
[   71.155718][ T7453] openvswitch: netlink: Flow actions attr not present in new flow.
[   71.235033][ T7464] openvswitch: netlink: Missing valid actions attribute.
[   71.244733][ T7464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.501677][ T7473] openvswitch: netlink: Missing valid actions attribute.
[   71.504077][ T7473] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.191640][ T7492] team0: No ports can be present during mode change
[   72.274388][ T5212] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   72.277710][ T5212] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   72.280668][ T5212] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   72.283739][ T5212] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   72.286841][ T5212] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   72.383825][ T7511] tipc: Can't bind to reserved service type 0
[   72.389461][ T7511] gretap0: entered promiscuous mode
[   72.393587][ T7499] chnl_net:caif_netlink_parms(): no params data found
[   72.402754][ T7511] 0{X: renamed from gretap0
[   72.405643][ T7511] 0{X: left promiscuous mode
[   72.407412][ T7511] 0{X: entered allmulticast mode
[   72.450703][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.453119][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.457498][ T7499] bridge_slave_0: entered allmulticast mode
[   72.460245][ T7499] bridge_slave_0: entered promiscuous mode
[   72.463278][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.466507][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.468885][ T7499] bridge_slave_1: entered allmulticast mode
[   72.471718][ T7499] bridge_slave_1: entered promiscuous mode
[   72.489928][ T7499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.494373][ T7499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.516029][ T7499] team0: Port device team_slave_0 added
[   72.519187][ T7499] team0: Port device team_slave_1 added
[   72.535677][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.538179][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.546772][ T7499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.551082][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.553293][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.561522][ T7499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.598608][ T7499] hsr_slave_0: entered promiscuous mode
[   72.601382][ T7499] hsr_slave_1: entered promiscuous mode
[   72.604056][ T7499] debugfs: 'hsr0' already exists in 'hsr'
[   72.606402][ T7499] Cannot create hsr debugfs directory
[   72.708361][ T7499] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   72.713175][ T7499] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   72.717832][ T7499] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   72.722418][ T7499] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   72.738513][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.740899][ T7499] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.743336][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.745717][ T7499] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.774009][ T7499] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.782337][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.786454][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.793335][ T7499] 8021q: adding VLAN 0 to HW filter on device team0
[   72.802548][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.804920][ T3585] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.811040][ T3585] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.813425][ T3585] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.912769][ T7499] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.933288][ T7499] veth0_vlan: entered promiscuous mode
[   72.943414][ T7499] veth1_vlan: entered promiscuous mode
[   72.958857][ T7499] veth0_macvtap: entered promiscuous mode
[   72.962949][ T7499] veth1_macvtap: entered promiscuous mode
[   72.971576][ T7499] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.978671][ T7499] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.984518][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.988095][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.992815][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.996288][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.034459][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.037323][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.052271][  T726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.055816][  T726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.492188][ T7569] netlink: 'syz.2.600': attribute type 32 has an invalid length.
[   74.311815][ T7592] __nla_validate_parse: 38 callbacks suppressed
[   74.311825][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'.
[   74.335475][ T5212] Bluetooth: hci3: command tx timeout
[   74.471583][ T7604] netlink: 'syz.1.613': attribute type 2 has an invalid length.
[   74.474116][ T7604] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.613'.
[   74.574273][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'.
[   74.578116][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'.
[   74.739817][ T7610] net_ratelimit: 6 callbacks suppressed
[   74.739826][ T7610] sock: sock_set_timeout: `syz.2.615' (pid 7610) tries to set negative timeout
[   75.026262][ T7613] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   75.035658][ T7614] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   75.067683][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'.
[   75.109305][ T7618] openvswitch: netlink: Missing valid actions attribute.
[   75.111702][ T7618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.225275][ T7623] netlink: 32 bytes leftover after parsing attributes in process `syz.3.620'.
[   75.253171][ T7623] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4
[   75.296647][ T7627] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.621'.
[   75.301800][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'.
[   75.305018][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'.
[   75.347250][ T7629] openvswitch: netlink: Tunnel attr 260 out of range max 16
[   75.426061][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'.
[   75.429017][ T7633] openvswitch: netlink: Flow actions attr not present in new flow.
[   75.485655][ T7641] tipc: Started in network mode
[   75.487542][ T7641] tipc: Node identity 080211000001, cluster identity 4711
[   75.493881][ T7641] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.502227][ T7641] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[   75.504705][ T7641] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[   75.512739][ T7641] bond0: Unable to set up delay as MII monitoring is disabled
[   75.524021][ T7641] tipc: Resetting bearer <eth:syzkaller0>
[   75.607010][ T7654] openvswitch: netlink: Multiple metadata blocks provided
[   76.357092][ T7660] netlink: 'syz.2.635': attribute type 1 has an invalid length.
[   76.359685][ T7660] netlink: 'syz.2.635': attribute type 3 has an invalid length.
[   76.415784][ T5212] Bluetooth: hci3: command tx timeout
[   76.452102][ T7669] openvswitch: netlink: Tunnel attr 260 out of range max 16
[   76.506207][ T1271] tipc: Node number set to 134418688
[   76.511321][ T7665] sock: sock_set_timeout: `syz.1.632' (pid 7665) tries to set negative timeout
[   77.304127][ T5886] IPVS: starting estimator thread 0...
[   77.379956][ T7693] netlink: 'syz.2.646': attribute type 1 has an invalid length.
[   77.404972][ T7693] bond3: entered promiscuous mode
[   77.411695][ T7693] bond3: entered allmulticast mode
[   77.425791][ T7687] IPVS: using max 79 ests per chain, 189600 per kthread
[   77.433147][ T7693] bridge1: the hash_elasticity option has been deprecated and is always 16
[   77.443038][ T7693] bond3: (slave bridge1): making interface the new active one
[   77.449002][ T7693] bridge1: entered promiscuous mode
[   77.451160][ T7693] bridge1: entered allmulticast mode
[   77.453378][ T7693] bond3: (slave bridge1): Enslaving as an active interface with an up link
[   77.626915][ T7708] veth0: entered promiscuous mode
[   78.507096][ T5212] Bluetooth: hci3: command tx timeout
[   79.299289][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.302665][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.401674][ T7794] __nla_validate_parse: 26 callbacks suppressed
[   79.401685][ T7794] netlink: 56 bytes leftover after parsing attributes in process `syz.1.681'.
[   79.504889][ T7799] netlink: 52 bytes leftover after parsing attributes in process `syz.1.682'.
[   79.508727][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'.
[   79.820985][ T7790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.840482][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'.
[   80.082545][ T7811] net_ratelimit: 9 callbacks suppressed
[   80.082557][ T7811] sock: sock_set_timeout: `syz.2.686' (pid 7811) tries to set negative timeout
[   80.305069][ T7817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.688'.
[   80.488201][ T7820] openvswitch: netlink: Tunnel attr 260 out of range max 16
[   80.540141][ T7822] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   80.575250][ T5212] Bluetooth: hci3: command tx timeout
[   80.631684][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'.
[   80.635042][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'.
[   80.639696][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'.
[   80.688976][ T7835] openvswitch: netlink: Key type 16363 is out of range max 32
[   80.738071][ T7839] openvswitch: netlink: Multiple metadata blocks provided
[   81.004698][ T7858] netlink: 'syz.2.703': attribute type 3 has an invalid length.
[   81.007624][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'.
[   81.035702][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'.
[   81.038685][ T7863] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   81.041133][ T7863] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.060373][   T47] cfg80211: failed to load regulatory.db
[   81.098277][ T7870] openvswitch: netlink: Flow actions attr not present in new flow.
[   81.343008][ T7873] bond0: (slave rose0): Error: Device can not be enslaved while up
[   81.518465][ T7883] sock: sock_set_timeout: `syz.1.710' (pid 7883) tries to set negative timeout
[   82.787159][ T7947] openvswitch: netlink: Multiple metadata blocks provided
[   82.830092][ T7949] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   83.674428][ T7968] 8021q: VLANs not supported on ipvlan1
[   83.980043][ T7990] 8021q: VLANs not supported on ipvlan1
[   84.219971][ T8007] syz_tun: entered promiscuous mode
[   84.857359][ T8036] __nla_validate_parse: 22 callbacks suppressed
[   84.857391][ T8036] netlink: 5 bytes leftover after parsing attributes in process `syz.1.767'.
[   85.182598][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.772'.
[   85.185709][ T8050] net_ratelimit: 7 callbacks suppressed
[   85.185716][ T8050] openvswitch: netlink: Flow actions attr not present in new flow.
[   85.209293][ T8052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.211802][ T8052] IPv6: NLM_F_CREATE should be set when creating new route
[   85.277205][ T8061] openvswitch: netlink: Multiple metadata blocks provided
[   85.567562][ T8066] sock: sock_set_timeout: `syz.2.778' (pid 8066) tries to set negative timeout
[   85.660545][ T8071] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.780'.
[   85.692909][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'.
[   85.796322][ T8081] 8021q: VLANs not supported on ipvlan1
[   85.905748][ T8087] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.908408][ T8087] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.913624][ T8087] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.917063][ T8087] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.978600][ T8095] openvswitch: netlink: Missing valid actions attribute.
[   85.980815][ T8095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.009561][ T8097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.792'.
[   86.013535][ T8097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.792'.
[   86.018406][ T8097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.792'.
[   86.056648][ T8101] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.793'.
[   86.090226][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'.
[   86.177108][ T8114] netlink: 232 bytes leftover after parsing attributes in process `syz.3.797'.
[   86.408940][ T8139] openvswitch: netlink: Key type 16363 is out of range max 32
[   86.452746][ T8145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   86.579762][ T8163] batadv_slave_1: entered promiscuous mode
[   86.590891][ T8162] batadv_slave_1: left promiscuous mode
[   86.618539][ T8153] sock: sock_set_timeout: `syz.3.807' (pid 8153) tries to set negative timeout
[   86.738802][ T8177] ip6gretap2: entered promiscuous mode
[   86.938490][ T8198] openvswitch: netlink: Missing valid actions attribute.
[   86.940973][ T8198] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.003296][ T8205] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   87.070581][ T8212] bond0: Unable to set up delay as MII monitoring is disabled
[   87.343271][ T8232] 8021q: VLANs not supported on ipvlan1
[   87.383841][ T8236] netlink: 'syz.1.837': attribute type 9 has an invalid length.
[   87.504740][ T8250] dummy0: entered promiscuous mode
[   87.511195][ T8250] dummy0: left promiscuous mode
[   87.681907][ T8263] 8021q: VLANs not supported on ipvlan1
[   87.909917][ T8276] vlan2: entered promiscuous mode
[   87.911608][ T8276] bridge0: entered promiscuous mode
[   88.385270][ T8319] syz.2.866 (8319) used greatest stack depth: 19528 bytes left
[   88.421983][ T8326] IPVS: set_ctl: invalid protocol: 42 224.0.0.2:20001
[   88.463036][ T8326] syzkaller1: entered promiscuous mode
[   88.465575][ T8326] syzkaller1: entered allmulticast mode
[   88.669361][ T8358] dummy0: entered promiscuous mode
[   88.675222][ T8358] dummy0: entered allmulticast mode
[   88.793666][ T8375] netlink: 'syz.2.884': attribute type 6 has an invalid length.
[   89.210371][ T8411] syzkaller0: entered allmulticast mode
[   89.222005][ T8401] syzkaller0: left allmulticast mode
[   89.384547][ T8432] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.444858][ T8432] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.501215][ T8432] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.547369][ T8432] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.624667][ T5851] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.632594][ T5851] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.642177][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.650315][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.382224][ T8476] net_ratelimit: 24 callbacks suppressed
[   90.382235][ T8476] openvswitch: netlink: Key type 16363 is out of range max 32
[   90.452821][ T8481] syzkaller0: entered allmulticast mode
[   90.456952][ T8483] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[   90.487495][ T8488] __nla_validate_parse: 40 callbacks suppressed
[   90.487505][ T8488] netlink: 48 bytes leftover after parsing attributes in process `syz.3.919'.
[   90.497520][ T8488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.919'.
[   90.530532][ T8490] 8021q: VLANs not supported on ipvlan1
[   90.584136][ T8497] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.923'.
[   90.592929][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'.
[   90.668434][ T8501] netlink: 44 bytes leftover after parsing attributes in process `syz.2.925'.
[   90.671707][ T8501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.679562][ T8504] netlink: 44 bytes leftover after parsing attributes in process `syz.2.925'.
[   90.680444][ T8503] openvswitch: netlink: Multiple metadata blocks provided
[   90.685969][ T8504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.789157][ T8520] smc: net device ip6gre0 applied user defined pnetid SYZ2
[   90.790700][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'.
[   90.792277][ T8520] smc: net device ip6gre0 erased user defined pnetid SYZ2
[   90.829505][ T8524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.935'.
[   90.848929][ T8526] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   90.853572][ T8526] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   90.931081][ T8544] netlink: 43 bytes leftover after parsing attributes in process `syz.1.942'.
[   90.937229][ T8546] netlink: 'syz.2.944': attribute type 1 has an invalid length.
[   90.941109][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'.
[   90.949031][ T8546] vlan0: entered promiscuous mode
[   90.952763][ T8546] bridge0: entered promiscuous mode
[   90.989508][ T8546] netlink: 'syz.2.944': attribute type 1 has an invalid length.
[   91.019466][ T8563] openvswitch: netlink: Key type 16363 is out of range max 32
[   91.058545][ T8572] netlink: 'syz.1.952': attribute type 4 has an invalid length.
[   91.104535][ T8576] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   91.109541][ T8576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.269578][ T8604] 8021q: VLANs not supported on ipvlan1
[   91.287627][ T8606] openvswitch: netlink: Multiple metadata blocks provided
[   91.320256][ T8608] netlink: 'syz.3.965': attribute type 1 has an invalid length.
[   91.451246][ T8629] 8021q: VLANs not supported on ipvlan1
[   91.710945][ T8659] 8021q: VLANs not supported on ipvlan1
[   91.724045][ T8662] netlink: 'syz.1.982': attribute type 13 has an invalid length.
[   91.727759][ T8662] netlink: 'syz.1.982': attribute type 17 has an invalid length.
[   91.767604][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.769979][ T8662] bridge0: port 2(bridge_slave_1) entered listening state
[   91.772488][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.774716][ T8662] bridge0: port 1(bridge_slave_0) entered listening state
[   91.853612][ T8662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.916671][ T8653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.972088][ T8653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.681242][ T8746] netlink: 'syz.2.1011': attribute type 1 has an invalid length.
[   93.706245][ T8745] 8021q: VLANs not supported on ipvlan1
[   94.401908][ T8772] netlink: 'syz.3.1020': attribute type 30 has an invalid length.
[   94.412497][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.413209][ T8772] netlink: 'syz.3.1020': attribute type 30 has an invalid length.
[   94.418582][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.421618][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.428742][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.739580][ T8790] netlink: 'syz.3.1026': attribute type 2 has an invalid length.
[   94.909583][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.912636][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.129551][ T8837] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   95.251273][ T8845] veth0_to_team: entered promiscuous mode
[   95.253185][ T8845] veth0_to_team: entered allmulticast mode
[   95.388409][ T8855] netlink: 'syz.2.1051': attribute type 6 has an invalid length.
[   95.391048][ T8855] netlink: 'syz.2.1051': attribute type 5 has an invalid length.
[   95.543643][ T8865] __nla_validate_parse: 38 callbacks suppressed
[   95.543653][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'.
[   95.559088][ T8865] trusted_key: syz.2.1055 sent an empty control message without MSG_MORE.
[   95.581680][ T8867] net_ratelimit: 14 callbacks suppressed
[   95.581690][ T8867] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[   95.607101][ T8869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1057'.
[   95.662175][ T8871] openvswitch: netlink: Tunnel attr 260 out of range max 16
[   95.687311][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'.
[   95.690335][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'.
[   95.695932][ T8873] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1059'.
[   95.718257][ T8877] tipc: Enabling <ib:lo> not permitted
[   95.720133][ T8877] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   96.078851][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'.
[   96.111096][ T8895] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.1066'.
[   96.111702][ T8897] 8021q: VLANs not supported on ipvlan1
[   96.354878][ T8916] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[   96.422899][ T8921] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1074'.
[   96.506670][ T8928] 8021q: VLANs not supported on ipvlan1
[   96.636811][ T8934] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   96.691849][ T8938] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1079'.
[   96.695726][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'.
[   96.740948][ T8939] sock: sock_set_timeout: `syz.2.1078' (pid 8939) tries to set negative timeout
[   97.070428][ T8943] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[   97.124749][ T8947] 8021q: VLANs not supported on ipvlan1
[   97.219021][ T8949] openvswitch: netlink: Key type 10512 is out of range max 32
[   97.251219][ T8951] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[   97.478383][ T8957] openvswitch: netlink: Key type 16363 is out of range max 32
[   97.728528][ T8965] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   97.731065][ T8965] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.791205][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.794141][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.968569][ T8985] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[   98.256667][ T5886] hid-generic 0005:16C0:5507.0001: item fetching failed at offset 0/1
[   98.259828][ T5886] hid-generic 0005:16C0:5507.0001: probe with driver hid-generic failed with error -22
[   98.368146][ T9008] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   98.404159][ T9012] syzkaller1: entered promiscuous mode
[   98.407566][ T9012] syzkaller1: entered allmulticast mode
[   98.410530][ T9012] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[   98.892052][ T9045] 8021q: VLANs not supported on ipvlan1
[   99.751081][ T9074] pim6reg1: entered promiscuous mode
[   99.753058][ T9074] pim6reg1: entered allmulticast mode
[   99.775452][ T9071] 8021q: VLANs not supported on ipvlan1
[   99.847556][ T9083] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.850160][ T9083] syzkaller0: entered allmulticast mode
[   99.862495][ T9084] tipc: Resetting bearer <eth:syzkaller0>
[   99.874732][   T33] audit: type=1800 audit(1754047301.761:2): pid=9085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1128" name="memory.events" dev="tmpfs" ino=989 res=0 errno=0
[  100.576649][ T9155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.580582][ T9155] syzkaller0: entered promiscuous mode
[  100.582351][ T9155] syzkaller0: entered allmulticast mode
[  100.594635][ T9155] tipc: Resetting bearer <eth:syzkaller0>
[  100.614767][ T9154] tipc: Resetting bearer <eth:syzkaller0>
[  100.628219][ T9154] tipc: Disabling bearer <eth:syzkaller0>
[  100.672782][ T9161] __nla_validate_parse: 12 callbacks suppressed
[  100.672791][ T9161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1147'.
[  100.710858][ T9165] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  100.845868][   T24] tipc: Node number set to 4079364830
[  101.705704][ T9190] netlink: 'syz.3.1157': attribute type 10 has an invalid length.
[  101.712478][ T9190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1157'.
[  101.754283][ T9190] dummy0: left allmulticast mode
[  101.769265][ T9190] bridge0: port 3(dummy0) entered blocking state
[  101.783772][ T9190] bridge0: port 3(dummy0) entered disabled state
[  101.800339][ T9190] dummy0: entered allmulticast mode
[  101.814337][ T9190] bridge0: port 3(dummy0) entered blocking state
[  101.816557][ T9190] bridge0: port 3(dummy0) entered forwarding state
[  102.215343][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'.
[  102.459794][ T9209] net_ratelimit: 12 callbacks suppressed
[  102.459805][ T9209] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  102.724357][ T9250] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  102.797021][ T9256] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  102.848491][ T9262] 8021q: VLANs not supported on ipvlan1
[  102.947394][ T9277] netlink: 'syz.3.1182': attribute type 1 has an invalid length.
[  102.950556][ T9277] netlink: 'syz.3.1182': attribute type 30 has an invalid length.
[  102.953432][ T9277] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  102.958270][ T9277] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  102.963845][ T9279] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1183'.
[  102.997271][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'.
[  103.005713][ T9285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.014119][ T9285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.091144][ T9296] openvswitch: netlink: Multiple metadata blocks provided
[  103.150160][ T9303] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  103.176801][ T9298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.180176][ T9298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.229670][ T9298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.233351][ T9298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.278795][ T9298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.282415][ T9298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.283715][ T9315] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  103.335759][ T9310] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  103.342498][ T9298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.346507][ T9298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.407569][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  103.410194][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.419377][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  103.423757][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.433936][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  103.440971][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.451405][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  103.454746][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.462348][ T9326] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1197'.
[  103.465919][ T9326] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1197'.
[  103.473531][ T9326] pimreg: left allmulticast mode
[  103.487877][ T9330] openvswitch: netlink: Multiple metadata blocks provided
[  103.511259][ T9332] netlink: 'syz.3.1200': attribute type 4 has an invalid length.
[  103.511313][ T9326] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  103.607417][ T9340] 8021q: VLANs not supported on ipvlan1
[  103.858386][ T9361] syzkaller0: entered promiscuous mode
[  103.884387][ T9363] netlink: 'syz.2.1211': attribute type 6 has an invalid length.
[  104.091798][ T9375] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1214'.
[  104.096833][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1214'.
[  104.416474][ T9377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1215'.
[  104.480589][ T9384] nbd: couldn't find a device at index 65546
[  104.793654][ T9408] 8021q: VLANs not supported on ipvlan1
[  104.892454][ T9412] syz.2.1227 (9412) used greatest stack depth: 18664 bytes left
[  105.436434][ T9428] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  105.441274][ T9428] netlink: 'syz.1.1233': attribute type 11 has an invalid length.
[  105.450735][ T9427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.601583][ T9463] __nla_validate_parse: 4 callbacks suppressed
[  106.601593][ T9463] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1246'.
[  106.607587][ T9463] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1246'.
[  106.656842][ T5212] Bluetooth: hci3: command 0x0405 tx timeout
[  107.366483][ T9469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1248'.
[  107.481507][ T9484] sctp: [Deprecated]: syz.2.1253 (pid 9484) Use of int in maxseg socket option.
[  107.481507][ T9484] Use struct sctp_assoc_value instead
[  107.489464][ T9484] sctp: [Deprecated]: syz.2.1253 (pid 9484) Use of int in maxseg socket option.
[  107.489464][ T9484] Use struct sctp_assoc_value instead
[  107.547987][ T9489] net_ratelimit: 10 callbacks suppressed
[  107.547998][ T9489] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  107.593946][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'.
[  107.600199][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1257'.
[  107.603984][ T9498] netlink: 'syz.3.1258': attribute type 6 has an invalid length.
[  107.604033][ T9496] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1257'.
[  107.609068][ T9498] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1258'.
[  107.631631][ T9500] sctp: [Deprecated]: syz.2.1259 (pid 9500) Use of int in max_burst socket option.
[  107.631631][ T9500] Use struct sctp_assoc_value instead
[  107.643229][ T9500] netlink: 'syz.2.1259': attribute type 2 has an invalid length.
[  107.650832][ T9500] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1259'.
[  107.663569][ T9500] IPv6: sit2: Disabled Multicast RS
[  107.692735][ T9502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  107.751457][ T9514] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1260'.
[  107.756269][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'.
[  107.873533][ T9524] gtp0: entered promiscuous mode
[  107.877062][ T9524] gtp0: entered allmulticast mode
[  108.044409][ T9550] sock: sock_set_timeout: `syz.1.1275' (pid 9550) tries to set negative timeout
[  108.143565][ T9560] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  108.172882][ T9564] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  108.178944][ T9564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.228643][ T9570] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  108.252913][ T9572] netlink: 'syz.2.1284': attribute type 6 has an invalid length.
[  108.260347][ T9572] netlink: 'syz.2.1284': attribute type 5 has an invalid length.
[  108.409489][ T9592] 8021q: adding VLAN 0 to HW filter on device bond6
[  108.432756][ T9598] netlink: 'syz.1.1290': attribute type 4 has an invalid length.
[  108.534941][ T9607] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  108.610077][ T9614] sock: sock_set_timeout: `syz.3.1298' (pid 9614) tries to set negative timeout
[  108.720894][ T9625] 8021q: VLANs not supported on ipvlan1
[  108.762124][ T9629] openvswitch: netlink: Multiple metadata blocks provided
[  108.818555][ T9631] macsec0: entered promiscuous mode
[  108.820346][ T9631] macvlan1: entered promiscuous mode
[  108.822289][ T9631] macsec0: entered allmulticast mode
[  108.824048][ T9631] macvlan1: entered allmulticast mode
[  108.829117][ T9631] veth1_vlan: entered allmulticast mode
[  108.842240][ T9631] macvlan1: left allmulticast mode
[  108.844123][ T9631] veth1_vlan: left allmulticast mode
[  108.846737][ T9631] macvlan1: left promiscuous mode
[  108.866857][ T9637] sock: sock_set_timeout: `syz.2.1309' (pid 9637) tries to set negative timeout
[  108.930894][ T9642] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  108.957034][ T9645] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  109.148996][ T9662] netlink: 'syz.3.1318': attribute type 1 has an invalid length.
[  110.061702][ T9690] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  110.278550][ T9718] 8021q: VLANs not supported on ipvlan1
[  110.304096][ T9720] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  110.575966][ T5212] Bluetooth: hci0: command tx timeout
[  110.651644][ T9735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.657598][ T9735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.661713][ T9735] bond0 (unregistering): Released all slaves
[  110.959454][ T9741] netlink: 'syz.3.1345': attribute type 9 has an invalid length.
[  110.962312][ T9741] netlink: 'syz.3.1345': attribute type 9 has an invalid length.
[  110.968132][ T9741] netlink: 'syz.3.1345': attribute type 3 has an invalid length.
[  111.439321][ T9760] netlink: 'syz.1.1352': attribute type 6 has an invalid length.
[  111.570715][ T9779] 8021q: VLANs not supported on lo
[  111.622127][ T9786] __nla_validate_parse: 22 callbacks suppressed
[  111.622161][ T9786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1361'.
[  111.775883][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'.
[  111.832893][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'.
[  111.962211][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'.
[  112.034058][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1379'.
[  112.090838][ T9836] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  112.146022][ T9839] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1380'.
[  112.149826][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'.
[  112.774085][ T9865] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1392'.
[  112.808573][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1392'.
[  112.924944][ T9885] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20002
[  112.948188][ T9887] 8021q: VLANs not supported on ipvlan1
[  112.964960][ T9889] validate_nla: 4 callbacks suppressed
[  112.964969][ T9889] netlink: 'syz.2.1397': attribute type 9 has an invalid length.
[  112.972264][ T9889] netlink: 'syz.2.1397': attribute type 9 has an invalid length.
[  112.986348][ T9889] netlink: 'syz.2.1397': attribute type 3 has an invalid length.
[  112.989723][ T9889] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1397'.
[  113.024310][ T9892] sctp: [Deprecated]: syz.1.1401 (pid 9892) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.024310][ T9892] Use struct sctp_sack_info instead
[  113.084109][ T9902] net_ratelimit: 10 callbacks suppressed
[  113.084205][ T9902] openvswitch: netlink: Multiple metadata blocks provided
[  113.171602][ T9913] 8021q: VLANs not supported on ipvlan1
[  113.390062][ T9922] ip6gretap1: entered promiscuous mode
[  113.485658][ T9924] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  113.488026][ T9924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.581373][ T9931] openvswitch: netlink: Multiple metadata blocks provided
[  113.758469][ T9941] netlink: 'syz.2.1418': attribute type 1 has an invalid length.
[  115.036142][ T9968] netlink: 'syz.1.1424': attribute type 9 has an invalid length.
[  115.039217][ T9968] netlink: 'syz.1.1424': attribute type 9 has an invalid length.
[  115.043295][ T9968] netlink: 'syz.1.1424': attribute type 3 has an invalid length.
[  115.067468][ T9967] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  115.870930][ T9978] openvswitch: netlink: Missing valid actions attribute.
[  115.874071][ T9978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.931080][ T9985] openvswitch: netlink: Multiple metadata blocks provided
[  116.043196][ T9998] netlink: 'syz.1.1438': attribute type 3 has an invalid length.
[  116.251953][T10018] bond0: Unable to set down delay as MII monitoring is disabled
[  116.327274][T10032] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  116.468783][T10046] ipvlan0: entered promiscuous mode
[  116.470662][T10046] ipvlan0: entered allmulticast mode
[  116.472507][T10046] batadv0: entered allmulticast mode
[  116.475064][T10046] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  116.730717][T10055] netlink: 'syz.2.1455': attribute type 4 has an invalid length.
[  117.163036][T10057] __nla_validate_parse: 14 callbacks suppressed
[  117.163046][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'.
[  117.168331][T10057] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  117.170714][T10057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.330398][T10079] ip6gre2: entered promiscuous mode
[  117.357323][T10084] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1466'.
[  117.399891][T10090] vti0: entered promiscuous mode
[  117.414611][T10092] netlink: 'syz.1.1470': attribute type 3 has an invalid length.
[  117.426559][T10092] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1470'.
[  117.429540][T10092] NCSI netlink: No device for ifindex 0
[  117.462887][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'.
[  117.492521][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1473'.
[  117.497524][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1473'.
[  117.759077][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'.
[  117.776596][T10129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1484'.
[  117.782604][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1484'.
[  117.801112][T10134] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.1486'.
[  118.329293][T10199] net_ratelimit: 8 callbacks suppressed
[  118.329310][T10199] openvswitch: netlink: Multiple metadata blocks provided
[  118.399927][T10211] openvswitch: netlink: Missing valid actions attribute.
[  118.402338][T10211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.428578][T10214] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  118.431032][T10214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.431341][T10215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.477519][T10215] C: renamed from team_slave_0 (while UP)
[  118.481285][T10215] validate_nla: 3 callbacks suppressed
[  118.481294][T10215] netlink: 'syz.1.1513': attribute type 2 has an invalid length.
[  118.486321][T10215] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  118.653335][T10224] netlink: 'syz.1.1517': attribute type 4 has an invalid length.
[  122.016535][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  122.020341][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  126.710584][T10236] DL<Y: renamed from lo (while UP)
[  126.748712][T10239] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  126.786714][T10247] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  126.808744][T10251] bridge: RTM_NEWNEIGH with invalid ether address
[  126.811100][T10251] __nla_validate_parse: 7 callbacks suppressed
[  126.811106][T10251] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1524'.
[  126.816688][T10251] openvswitch: netlink: IPv6 tunnel dst address is zero
[  126.926810][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1526'.
[  126.939916][T10275] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1526'.
[  126.971157][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'.
[  126.974423][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'.
[  126.978776][T10280] netlink: 'syz.1.1536': attribute type 12 has an invalid length.
[  126.981587][T10280] netlink: 'syz.1.1536': attribute type 11 has an invalid length.
[  127.034621][T10291] openvswitch: netlink: Multiple metadata blocks provided
[  127.110960][T10301] netlink: 'syz.1.1538': attribute type 10 has an invalid length.
[  127.142377][T10302] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1538'.
[  127.154357][T10301] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1538'.
[  127.180644][T10302] netlink: 'syz.1.1538': attribute type 12 has an invalid length.
[  127.183355][T10302] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1538'.
[  127.189966][T10302] netlink: 'syz.1.1538': attribute type 12 has an invalid length.
[  127.192680][T10302] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1538'.
[  127.196157][T10302] netlink: 'syz.1.1538': attribute type 12 has an invalid length.
[  127.198918][T10302] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1538'.
[  127.202272][T10302] netlink: 'syz.1.1538': attribute type 12 has an invalid length.
[  127.205001][T10302] netlink: 'syz.1.1538': attribute type 12 has an invalid length.
[  127.215483][T10302] netlink: 'syz.1.1538': attribute type 12 has an invalid length.
[  127.219796][T10302] netlink: 'syz.1.1538': attribute type 12 has an invalid length.
[  127.231036][T10300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.499071][T10334] openvswitch: netlink: Missing valid actions attribute.
[  127.501483][T10334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.526591][T10336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.648567][T10345] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  127.708755][T10350] openvswitch: netlink: Multiple metadata blocks provided
[  127.768896][T10355] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  127.814391][T10367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.069019][T10386] 8021q: adding VLAN 0 to HW filter on device bond7
[  128.076984][T10388] ip6gretap1: entered promiscuous mode
[  128.087817][T10386] 8021q: adding VLAN 0 to HW filter on device bond7
[  128.090276][T10386] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  128.094427][T10386] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  128.130584][T10389] erspan0: entered allmulticast mode
[  128.137614][T10389] bond7: (slave erspan0): making interface the new active one
[  128.140961][T10389] bond7: (slave erspan0): Enslaving as an active interface with an up link
[  128.817873][T10417] bridge_slave_0: left allmulticast mode
[  128.819839][T10417] bridge_slave_0: left promiscuous mode
[  128.821759][T10417] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.837724][T10417] bridge_slave_1: left allmulticast mode
[  128.846176][T10417] bridge_slave_1: left promiscuous mode
[  128.850101][T10417] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.867944][T10417] team0: Port device C removed
[  128.882285][T10417] team0: Port device team_slave_1 removed
[  128.884648][T10417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.905978][T10417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.916271][T10417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.925830][T10417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.952229][T10417] bond1: (slave bridge2): Releasing active interface
[  128.963930][T10417] bond1: (slave bridge3): Releasing active interface
[  129.358485][T10445] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  129.364243][T10446] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  129.462694][T10458] 8021q: VLANs not supported on ipvlan1
[  129.563141][T10472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  129.593858][T10476] ksmbd: Unknown IPC event: 3, ignore.
[  129.598805][T10476] GUP no longer grows the stack in syz.1.1595 (10476): 200000006000-20000000a000 (200000005000)
[  129.602489][T10476] CPU: 1 UID: 0 PID: 10476 Comm: syz.1.1595 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  129.602501][T10476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.602505][T10476] Call Trace:
[  129.602510][T10476]  <TASK>
[  129.602513][T10476]  dump_stack_lvl+0x189/0x250
[  129.602527][T10476]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.602535][T10476]  ? __pfx__printk+0x10/0x10
[  129.602543][T10476]  ? find_vma+0xe7/0x160
[  129.602560][T10476]  __get_user_pages+0x2a60/0x30b0
[  129.602584][T10476]  ? __pfx___get_user_pages+0x10/0x10
[  129.602593][T10476]  ? __gup_longterm_locked+0xbf7/0x15b0
[  129.602604][T10476]  ? down_read_killable+0x1d1/0x350
[  129.602611][T10476]  ? try_get_folio+0x633/0x660
[  129.602622][T10476]  __gup_longterm_locked+0xd66/0x15b0
[  129.602634][T10476]  ? try_grab_folio_fast+0x1be/0x4f0
[  129.602648][T10476]  ? gup_fast_fallback+0x1afc/0x2260
[  129.602660][T10476]  gup_fast_fallback+0x1cd4/0x2260
[  129.602684][T10476]  ? __pfx_gup_fast_fallback+0x10/0x10
[  129.602693][T10476]  ? __mutex_lock+0x335/0x1340
[  129.602708][T10476]  ? is_valid_gup_args+0x11f/0x200
[  129.602719][T10476]  ? get_user_pages_fast+0x4d/0xb0
[  129.602730][T10476]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  129.602743][T10476]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  129.602750][T10476]  ? wait_for_space+0x24d/0x2d0
[  129.602762][T10476]  iov_iter_get_pages2+0x5e/0xa0
[  129.602773][T10476]  __se_sys_vmsplice+0x548/0x10d0
[  129.602784][T10476]  ? futex_private_hash_put+0x4b/0x280
[  129.602795][T10476]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  129.602807][T10476]  ? __pfx_futex_wake+0x10/0x10
[  129.602821][T10476]  ? __lock_acquire+0xab9/0xd20
[  129.602845][T10476]  ? do_pipe2+0xf7/0x170
[  129.602853][T10476]  ? rcu_is_watching+0x15/0xb0
[  129.602866][T10476]  ? do_syscall_64+0xbe/0x3b0
[  129.602878][T10476]  do_syscall_64+0xfa/0x3b0
[  129.602888][T10476]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.602898][T10476]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.602905][T10476]  ? exc_page_fault+0x9f/0xf0
[  129.602915][T10476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.602922][T10476] RIP: 0033:0x7ffae9f8eb69
[  129.602930][T10476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.602936][T10476] RSP: 002b:00007ffaeaeba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  129.602945][T10476] RAX: ffffffffffffffda RBX: 00007ffaea1b5fa0 RCX: 00007ffae9f8eb69
[  129.602950][T10476] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c
[  129.602955][T10476] RBP: 00007ffaea011df1 R08: 0000000000000000 R09: 0000000000000000
[  129.602965][T10476] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  129.602969][T10476] R13: 0000000000000000 R14: 00007ffaea1b5fa0 R15: 00007ffe49fcac08
[  129.603005][T10476]  </TASK>
[  130.075326][T10495] delete_channel: no stack
[  130.077742][T10494] delete_channel: no stack
[  130.234059][T10513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.247446][T10513] syzkaller0: entered promiscuous mode
[  130.249283][T10513] syzkaller0: entered allmulticast mode
[  130.263678][T10513] tipc: Resetting bearer <eth:syzkaller0>
[  130.266684][T10512] tipc: Resetting bearer <eth:syzkaller0>
[  130.273289][T10512] tipc: Disabling bearer <eth:syzkaller0>
[  130.468506][T10524] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  130.496739][T10528] veth1: entered promiscuous mode
[  130.691888][   T33] audit: type=1804 audit(1754047332.581:3): pid=10558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1626" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=3336 res=1 errno=0
[  130.708551][   T33] audit: type=1800 audit(1754047332.581:4): pid=10558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1626" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=3336 res=0 errno=0
[  131.741768][T10600] syzkaller0: left promiscuous mode
[  131.744141][T10600] syzkaller0: left allmulticast mode
[  131.754711][T10600] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  132.257355][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.810531][T10647] __nla_validate_parse: 53 callbacks suppressed
[  132.810542][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'.
[  132.830867][T10649] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1655'.
[  132.878802][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'.
[  132.882869][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'.
[  132.886859][T10658] validate_nla: 29 callbacks suppressed
[  132.886867][T10658] netlink: 'syz.1.1659': attribute type 1 has an invalid length.
[  132.888145][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'.
[  132.894585][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'.
[  132.899542][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'.
[  132.902647][T10656] syzkaller1: entered promiscuous mode
[  132.904462][T10656] syzkaller1: entered allmulticast mode
[  132.989480][T10670] netlink: 'syz.1.1664': attribute type 1 has an invalid length.
[  132.992598][T10669] netlink: 'syz.1.1664': attribute type 1 has an invalid length.
[  133.000206][T10667] net_ratelimit: 9 callbacks suppressed
[  133.000215][T10667] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  133.015882][T10670] bond3: entered promiscuous mode
[  133.017977][T10670] 8021q: adding VLAN 0 to HW filter on device bond3
[  133.027508][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'.
[  133.030348][T10673] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  133.032663][T10673] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.041480][T10669] 8021q: adding VLAN 0 to HW filter on device bond3
[  133.043850][T10669] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  133.047229][T10669] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  133.052837][T10669] bond3: (slave wireguard0): making interface the new active one
[  133.059264][T10669] wireguard0: entered promiscuous mode
[  133.061937][T10676] netlink: 'syz.2.1666': attribute type 3 has an invalid length.
[  133.062302][T10669] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[  133.064418][T10676] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1666'.
[  133.071749][T10670] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address
[  133.078534][T10670] bond3: (slave wireguard1): Enslaving as a backup interface with an up link
[  133.086690][T10676] netlink: 'syz.2.1666': attribute type 3 has an invalid length.
[  133.087749][T10669] bond3: (slave wireguard2): The slave device specified does not support setting the MAC address
[  133.089171][T10676] netlink: 152936 bytes leftover after parsing attributes in process `syz.2.1666'.
[  133.098665][T10669] bond3: (slave wireguard2): Enslaving as a backup interface with an up link
[  133.129932][T10685] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000
[  133.140612][T10688] openvswitch: netlink: Multiple metadata blocks provided
[  133.212487][T10704] bond7: (slave erspan0): Releasing active interface
[  133.227538][T10704] bond0: (slave wlan1): Releasing backup interface
[  133.234609][T10704] bond2: (slave batadv2): Releasing active interface
[  133.240611][T10704] bond3: (slave bridge1): Releasing active interface
[  133.242831][T10704] bridge1: left promiscuous mode
[  133.244607][T10704] bridge1: left allmulticast mode
[  133.427806][T10730] 0{X: left allmulticast mode
[  133.430591][T10730] erspan0: left allmulticast mode
[  133.464708][T10730] veth0_to_team: left promiscuous mode
[  133.466979][T10730] veth0_to_team: left allmulticast mode
[  133.488987][T10730] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  133.491789][T10730] ip6erspan0: left promiscuous mode
[  133.494933][T10730] bond1: left promiscuous mode
[  133.497238][T10730] bond1: left allmulticast mode
[  133.499084][T10730] batadv1: left allmulticast mode
[  133.517077][T10730] team1: left promiscuous mode
[  133.518655][T10730] team1: left allmulticast mode
[  133.521988][T10730] bond3: left promiscuous mode
[  133.523519][T10730] bond3: left allmulticast mode
[  133.527529][T10730] veth1: left promiscuous mode
[  133.532925][T10730] ip6gretap2: left promiscuous mode
[  133.539304][T10730] tipc: Resetting bearer <eth:syzkaller0>
[  133.551618][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.557137][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.560696][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.563433][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.628169][T10748] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  133.763062][T10758] can: request_module (can-proto-5) failed.
[  133.961574][T10774] openvswitch: netlink: Multiple metadata blocks provided
[  134.104015][T10788] openvswitch: netlink: Multiple metadata blocks provided
[  134.111734][T10791] netlink: 'syz.3.1701': attribute type 12 has an invalid length.
[  134.151938][T10796] syzkaller1: entered allmulticast mode
[  134.157893][T10796] 8021q: VLANs not supported on ipvlan1
[  134.165785][T10794] syz.2.1702: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  134.172824][T10794] CPU: 1 UID: 0 PID: 10794 Comm: syz.2.1702 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  134.172836][T10794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.172841][T10794] Call Trace:
[  134.172844][T10794]  <TASK>
[  134.172847][T10794]  dump_stack_lvl+0x189/0x250
[  134.172865][T10794]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  134.172876][T10794]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.172884][T10794]  ? __pfx__printk+0x10/0x10
[  134.172893][T10794]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  134.172901][T10794]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  134.172912][T10794]  warn_alloc+0x214/0x310
[  134.172922][T10794]  ? __pfx_warn_alloc+0x10/0x10
[  134.172932][T10794]  ? __get_vm_area_node+0x28f/0x300
[  134.172966][T10794]  ? xskq_create+0xbf/0x170
[  134.172978][T10794]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  134.172997][T10794]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  134.173006][T10794]  ? __kasan_kmalloc+0x93/0xb0
[  134.173035][T10794]  vmalloc_user_noprof+0xad/0xf0
[  134.173042][T10794]  ? xskq_create+0xbf/0x170
[  134.173052][T10794]  xskq_create+0xbf/0x170
[  134.173063][T10794]  xsk_init_queue+0xb0/0x110
[  134.173073][T10794]  xsk_setsockopt+0x57b/0x8d0
[  134.173083][T10794]  ? __pfx_xsk_setsockopt+0x10/0x10
[  134.173092][T10794]  ? __pfx_aa_sk_perm+0x10/0x10
[  134.173103][T10794]  ? __fget_files+0x2a/0x420
[  134.173110][T10794]  ? aa_sock_opt_perm+0x74/0x110
[  134.173120][T10794]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  134.173128][T10794]  ? __pfx_xsk_setsockopt+0x10/0x10
[  134.173137][T10794]  do_sock_setsockopt+0x17c/0x1b0
[  134.173147][T10794]  __x64_sys_setsockopt+0x13f/0x1b0
[  134.173156][T10794]  do_syscall_64+0xfa/0x3b0
[  134.173166][T10794]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.173175][T10794]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.173182][T10794]  ? exc_page_fault+0x9f/0xf0
[  134.173193][T10794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.173199][T10794] RIP: 0033:0x7feb3998eb69
[  134.173206][T10794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.173213][T10794] RSP: 002b:00007feb3a763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  134.173221][T10794] RAX: ffffffffffffffda RBX: 00007feb39bb5fa0 RCX: 00007feb3998eb69
[  134.173227][T10794] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  134.173231][T10794] RBP: 00007feb39a11df1 R08: 0000000000000004 R09: 0000000000000000
[  134.173235][T10794] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  134.173239][T10794] R13: 0000000000000000 R14: 00007feb39bb5fa0 R15: 00007fffe6b3cad8
[  134.173251][T10794]  </TASK>
[  134.173308][T10794] Mem-Info:
[  134.259511][T10794] active_anon:5926 inactive_anon:0 isolated_anon:0
[  134.259511][T10794]  active_file:1228 inactive_file:38245 isolated_file:0
[  134.259511][T10794]  unevictable:1768 dirty:155 writeback:0
[  134.259511][T10794]  slab_reclaimable:10198 slab_unreclaimable:78729
[  134.259511][T10794]  mapped:23424 shmem:2418 pagetables:995
[  134.259511][T10794]  sec_pagetables:0 bounce:0
[  134.259511][T10794]  kernel_misc_reclaimable:0
[  134.259511][T10794]  free:255734 free_pcp:20423 free_cma:0
[  134.276053][T10794] Node 0 active_anon:7912kB inactive_anon:0kB active_file:4056kB inactive_file:20216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:62588kB dirty:468kB writeback:0kB shmem:4768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6528kB pagetables:2064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  134.288189][T10794] Node 1 active_anon:15792kB inactive_anon:0kB active_file:856kB inactive_file:132764kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31108kB dirty:152kB writeback:0kB shmem:4904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5972kB pagetables:1916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  134.298399][T10794] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  134.307466][T10794] lowmem_reserve[]: 0 814 814 814 814
[  134.309214][T10794] Node 0 DMA32 free:264476kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7912kB inactive_anon:0kB active_file:4056kB inactive_file:20216kB unevictable:3536kB writepending:468kB present:1556484kB managed:834028kB mlocked:0kB bounce:0kB free_pcp:46876kB local_pcp:18408kB free_cma:0kB
[  134.322481][T10794] lowmem_reserve[]: 0 0 0 0 0
[  134.324050][T10794] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  134.334405][T10794] lowmem_reserve[]: 0 0 854 854 854
[  134.336502][T10794] Node 1 Normal free:284492kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15836kB inactive_anon:0kB active_file:856kB inactive_file:132764kB unevictable:3536kB writepending:152kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:34848kB local_pcp:18316kB free_cma:0kB
[  134.346916][T10794] lowmem_reserve[]: 0 0 0 0 0
[  134.348649][T10794] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  134.353523][T10794] Node 0 DMA32: 265*4kB (UE) 283*8kB (UE) 76*16kB (UME) 453*32kB (UME) 161*64kB (UME) 37*128kB (UME) 2*256kB (U) 1*512kB (U) 2*1024kB (UE) 3*2048kB (UM) 54*4096kB (UM) = 264476kB
[  134.360088][T10794] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  134.365696][T10794] Node 1 Normal: 225*4kB (UME) 381*8kB (UME) 246*16kB (UME) 226*32kB (UME) 87*64kB (UME) 45*128kB (UME) 32*256kB (UM) 16*512kB (UME) 4*1024kB (UM) 8*2048kB (UME) 54*4096kB (M) = 284492kB
[  134.372122][T10794] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  134.375045][T10794] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  134.378303][T10794] 41893 total pagecache pages
[  134.380312][T10794] 0 pages in swap cache
[  134.381814][T10794] Free swap  = 124996kB
[  134.383188][T10794] Total swap = 124996kB
[  134.384525][T10794] 786301 pages RAM
[  134.387147][T10794] 0 pages HighMem/MovableOnly
[  134.388720][T10794] 240546 pages reserved
[  134.390067][T10794] 0 pages cma reserved
[  134.423006][T10807] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  134.673918][T10829] netlink: 'syz.2.1713': attribute type 10 has an invalid length.
[  134.743626][T10838] pim6reg1: entered promiscuous mode
[  134.746784][T10838] pim6reg1: entered allmulticast mode
[  134.935848][T10849] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  135.123729][T10873] 8021q: VLANs not supported on ipvlan1
[  135.745672][T10893] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  135.991106][T10906] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  136.030077][T10913] openvswitch: netlink: Multiple metadata blocks provided
[  136.432952][T10955] 8021q: VLANs not supported on ipvlan1
[  136.479625][T10967] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  136.572841][T10973] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  137.664967][T11090] netlink: 'syz.2.1771': attribute type 8 has an invalid length.
[  137.741340][T11095] 8021q: VLANs not supported on ipvlan1
[  137.831368][T11105] __nla_validate_parse: 86 callbacks suppressed
[  137.831378][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'.
[  138.252668][T11122] lo: entered allmulticast mode
[  138.254633][T11122] lo: left allmulticast mode
[  138.262389][T11122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1785'.
[  138.470003][T11127] dummy0: left allmulticast mode
[  138.471935][T11127] bridge0: port 3(dummy0) entered disabled state
[  138.540170][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'.
[  138.631268][T11139] netlink: 'syz.3.1791': attribute type 29 has an invalid length.
[  138.636423][T11139] netlink: 'syz.3.1791': attribute type 29 has an invalid length.
[  138.640007][T11139] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1791'.
[  138.882095][T11157] net_ratelimit: 8 callbacks suppressed
[  138.882109][T11157] openvswitch: netlink: Multiple metadata blocks provided
[  138.915290][T11160] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1797'.
[  138.918426][T11160] unsupported nlmsg_type 40
[  138.980582][T11162] 8021q: VLANs not supported on ipvlan1
[  139.031207][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1799'.
[  139.064555][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'.
[  139.074132][T11167] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  139.077826][T11167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.098234][T11169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1801'.
[  139.184142][T11178] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1805'.
[  139.361466][T11199] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  139.550765][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'.
[  139.629372][T11225] openvswitch: netlink: Multiple metadata blocks provided
[  139.704239][T11231] netlink: 'syz.1.1824': attribute type 1 has an invalid length.
[  139.720939][T11231] bond4 (unregistering): Released all slaves
[  139.947050][T11237] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  139.949506][T11237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.168880][T11244] netlink: 'syz.1.1829': attribute type 13 has an invalid length.
[  140.176304][T11244] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  140.496795][T11267] netlink: 'syz.1.1836': attribute type 1 has an invalid length.
[  140.515104][T11267] 8021q: adding VLAN 0 to HW filter on device bond4
[  140.522484][T11266] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  140.529965][T11267] bond4: (slave bridge8): making interface the new active one
[  140.533259][T11267] bond4: (slave bridge8): Enslaving as an active interface with an up link
[  140.543360][T11267] gretap1: entered promiscuous mode
[  140.548392][T11267] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  140.558565][T11267] macvlan3: entered promiscuous mode
[  140.560313][T11267] macvlan3: entered allmulticast mode
[  140.562464][T11267] bond4: entered promiscuous mode
[  140.564306][T11267] bridge8: entered promiscuous mode
[  140.567165][T11267] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  140.569685][T11267] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  140.575979][T11267] bond4: left promiscuous mode
[  140.577641][T11267] bridge8: left promiscuous mode
[  140.722451][T11285] openvswitch: netlink: Multiple metadata blocks provided
[  140.801926][T11293] 8021q: VLANs not supported on ipvlan1
[  141.029136][T11306] netlink: 'syz.1.1851': attribute type 1 has an invalid length.
[  141.130409][T11328] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  142.307783][T11414] netlink: 'syz.3.1884': attribute type 1 has an invalid length.
[  142.327320][T11414] bond2: entered promiscuous mode
[  142.329091][T11414] bond2: entered allmulticast mode
[  142.337095][T11414] bridge2: the hash_elasticity option has been deprecated and is always 16
[  142.344497][T11414] bond2: (slave bridge2): making interface the new active one
[  142.349068][T11414] bridge2: entered promiscuous mode
[  142.350852][T11414] bridge2: entered allmulticast mode
[  142.353108][T11414] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  142.437713][T11430] bridge0: port 3(vxlan2) entered blocking state
[  142.440018][T11430] bridge0: port 3(vxlan2) entered disabled state
[  142.442379][T11430] vxlan2: entered allmulticast mode
[  142.452168][T11430] vxlan2: entered promiscuous mode
[  142.618389][T11451] 8021q: VLANs not supported on ipvlan1
[  142.852009][T11476] __nla_validate_parse: 33 callbacks suppressed
[  142.852018][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1907'.
[  142.859175][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1907'.
[  142.862753][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1907'.
[  142.872458][T11472] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1904'.
[  142.885991][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1904'.
[  143.081963][T11489] IPv6: Can't replace route, no match found
[  143.878985][T11504] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1915'.
[  143.882390][T11504] netlink: 'syz.2.1915': attribute type 29 has an invalid length.
[  143.972228][T11508] bond0: (slave rose0): Error: Device can not be enslaved while up
[  144.011101][T11510] net_ratelimit: 9 callbacks suppressed
[  144.011115][T11510] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  144.238771][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'.
[  144.241746][T11524] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  144.244091][T11524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.292899][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'.
[  144.379490][T11534] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1925'.
[  144.383756][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1925'.
[  144.433356][T11540] netlink: 'syz.2.1927': attribute type 20 has an invalid length.
[  144.441424][T11540] netlink: 'syz.2.1927': attribute type 20 has an invalid length.
[  144.441449][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.450655][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.469241][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.476679][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.509364][T11540] netlink: 'syz.2.1927': attribute type 7 has an invalid length.
[  144.528630][T11540] : entered promiscuous mode
[  144.563816][T11546] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  144.583746][T11548] netlink: 'syz.2.1931': attribute type 12 has an invalid length.
[  144.588453][T11550] netlink: 'syz.2.1931': attribute type 12 has an invalid length.
[  144.767241][T11571] openvswitch: netlink: Multiple metadata blocks provided
[  144.890881][T11582] openvswitch: netlink: Multiple metadata blocks provided
[  144.998888][T11593] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  145.142145][T11612] netlink: 'syz.3.1953': attribute type 1 has an invalid length.
[  145.152174][T11615] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  145.157451][T11615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.244015][T11627] : renamed from batadv_slave_1 (while UP)
[  145.288550][T11633] netlink: 'syz.1.1961': attribute type 3 has an invalid length.
[  145.292502][T11633] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  145.302526][T11634] netlink: 'syz.1.1961': attribute type 3 has an invalid length.
[  145.426980][T11649] bridge0: port 4(syz_tun) entered blocking state
[  145.429248][T11649] bridge0: port 4(syz_tun) entered disabled state
[  145.431526][T11649] syz_tun: entered allmulticast mode
[  145.433992][T11649] syz_tun: entered promiscuous mode
[  145.437209][T11649] bridge0: port 4(syz_tun) entered blocking state
[  145.439549][T11649] bridge0: port 4(syz_tun) entered forwarding state
[  145.601918][T11667] can: request_module (can-proto-5) failed.
[  145.763773][T11688] netlink: 'syz.3.1981': attribute type 1 has an invalid length.
[  145.780170][T11688] 8021q: adding VLAN 0 to HW filter on device bond4
[  146.143976][T11723] tipc: Enabling <ib:lo> not permitted
[  146.147349][T11723] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  147.449967][T11805] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  147.608198][T11815] 8021q: VLANs not supported on ipvlan1
[  147.759032][T11841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.108609][T11860] __nla_validate_parse: 41 callbacks suppressed
[  148.108622][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'.
[  148.312350][T11871] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2043'.
[  148.503520][T11887] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2048'.
[  148.673271][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2052'.
[  148.679332][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2052'.
[  148.687431][T11899] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  148.690562][T11903] tipc: Enabling <ib:lo> not permitted
[  148.693010][T11903] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  148.858465][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2057'.
[  148.920064][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'.
[  148.931688][T11917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.001741][T11917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.012687][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'.
[  149.016845][T11936] net_ratelimit: 12 callbacks suppressed
[  149.016855][T11936] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  149.020924][T11936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.063332][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2059'.
[  149.066642][T11917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.076754][T11944] xfrm1: entered promiscuous mode
[  149.086012][T11944] xfrm1: entered allmulticast mode
[  149.104554][T11948] netlink: 336 bytes leftover after parsing attributes in process `syz.3.2071'.
[  149.110449][T11948] validate_nla: 4 callbacks suppressed
[  149.110460][T11948] netlink: 'syz.3.2071': attribute type 29 has an invalid length.
[  149.129489][T11917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.190328][T11956] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  149.257547][ T5851] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.266444][ T5851] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.288230][ T5851] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.295057][ T5851] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.192378][T11994] tipc: Enabling <ib:lo> not permitted
[  150.194268][T11994] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  150.510385][T12032] netlink: 'syz.3.2104': attribute type 1 has an invalid length.
[  150.565910][T12038] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 4, id = 0
[  150.583594][T12040] netlink: 'syz.2.2107': attribute type 3 has an invalid length.
[  150.750151][T12059] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  150.753084][T12059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.827776][T12069] openvswitch: netlink: Message has 24 unknown bytes.
[  151.038965][T12091] syzkaller0: entered promiscuous mode
[  151.046439][T12091] syzkaller0: entered allmulticast mode
[  151.134584][T12098] 8021q: VLANs not supported on wg1
[  151.207241][T12107] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  151.304347][T12115] netlink: 'syz.2.2129': attribute type 30 has an invalid length.
[  151.346521][T12115] netlink: 'syz.2.2129': attribute type 30 has an invalid length.
[  151.432964][T12118] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  151.573207][T12132] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  151.630551][T12146] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  151.760056][ T5212] Bluetooth: hci3: link tx timeout
[  151.762135][ T5212] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  152.663846][T12184] netlink: 'syz.1.2152': attribute type 30 has an invalid length.
[  152.687882][T12184] netlink: 'syz.1.2152': attribute type 30 has an invalid length.
[  152.733338][ T5859] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.737238][ T5859] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.739816][ T5859] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.752129][ T5859] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.966287][T12208] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  153.156719][T12223] __nla_validate_parse: 95 callbacks suppressed
[  153.156729][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'.
[  153.231186][T12229] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  153.384571][T12239] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2174'.
[  153.437638][T12243] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  153.592894][T12255] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2181'.
[  153.627716][T12257] netlink: 'syz.2.2182': attribute type 1 has an invalid length.
[  153.635592][T12257] netlink: 'syz.2.2182': attribute type 2 has an invalid length.
[  153.647143][T12259] tipc: Enabling <ib:lo> not permitted
[  153.653197][T12259] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  153.721764][T12267] netlink: 'syz.3.2188': attribute type 1 has an invalid length.
[  153.724372][T12267] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2188'.
[  153.776494][ T5828] Bluetooth: hci3: command 0x0405 tx timeout
[  153.865514][T12269] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2187'.
[  153.869674][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2187'.
[  154.591966][T12295] net_ratelimit: 5 callbacks suppressed
[  154.591982][T12295] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  154.662971][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'.
[  154.667424][T12302] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  154.669829][T12302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.695928][T12304] tipc: Enabling <ib:lo> not permitted
[  154.697880][T12304] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  154.756914][T12311] syzkaller1: entered promiscuous mode
[  154.759145][T12311] syzkaller1: entered allmulticast mode
[  154.964213][T12327] tipc: Enabling <ib:lo> not permitted
[  154.967079][T12327] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  155.202388][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'.
[  155.256231][T12340] openvswitch: netlink: Key 32 has unexpected len 20 expected 2
[  155.412529][T12351] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  155.440200][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2215'.
[  155.493341][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2217'.
[  155.496814][T12357] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  155.499088][T12357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.688931][T12366] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  156.264152][T12393] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  156.269588][T12393] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  156.832499][T12431] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  157.622917][T12509] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  158.189007][T12550] hsr_slave_1 (unregistering): left promiscuous mode
[  158.219729][T12550] __nla_validate_parse: 41 callbacks suppressed
[  158.219767][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'.
[  158.227063][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'.
[  158.230665][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'.
[  158.234567][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'.
[  158.240496][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'.
[  158.244041][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'.
[  158.253313][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'.
[  158.263801][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'.
[  158.272724][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'.
[  158.276223][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'.
[  158.399096][T12573] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000
[  159.409462][T12653] 8021q: adding VLAN 0 to HW filter on device bond5
[  159.423322][T12653] bond_slave_0: entered promiscuous mode
[  159.425429][T12653] bond_slave_1: entered promiscuous mode
[  159.427592][T12653] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  159.431936][T12653] bond5: (slave macvlan2): Enslaving as a backup interface with an up link
[  159.437033][T12653] ip_vti0: entered allmulticast mode
[  159.531811][T12666] validate_nla: 1 callbacks suppressed
[  159.531820][T12666] netlink: 'syz.3.2277': attribute type 13 has an invalid length.
[  160.004588][T12691] net_ratelimit: 3 callbacks suppressed
[  160.004597][T12691] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  160.012296][T12691] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.072471][T12698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.094545][T12700] openvswitch: netlink: Multiple metadata blocks provided
[  160.538823][T12718] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  160.543650][T12723] netlink: 'syz.3.2296': attribute type 23 has an invalid length.
[  160.592281][T12729] rdma_op ffff8880323f31f0 conn xmit_rdma 0000000000000000
[  160.738062][T12747] netlink: 'syz.3.2304': attribute type 4 has an invalid length.
[  160.978297][T12778] syzkaller1: entered promiscuous mode
[  160.980220][T12778] syzkaller1: entered allmulticast mode
[  161.082998][T12791] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  161.107187][T12796] netlink: 'syz.2.2315': attribute type 8 has an invalid length.
[  161.144850][T12799] bond0: entered promiscuous mode
[  161.150640][T12799] bond0: left promiscuous mode
[  161.321646][T12824] netlink: 'syz.1.2327': attribute type 1 has an invalid length.
[  161.324205][T12824] netlink: 'syz.1.2327': attribute type 11 has an invalid length.
[  161.677742][T12865] netlink: 'syz.1.2334': attribute type 9 has an invalid length.
[  161.680335][T12865] netlink: 'syz.1.2334': attribute type 6 has an invalid length.
[  162.007843][T12883] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  162.017052][T12883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.288347][T12908] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  162.421463][T12920] netlink: 'syz.2.2346': attribute type 11 has an invalid length.
[  162.463540][T12919] netlink: 'syz.3.2347': attribute type 1 has an invalid length.
[  162.620443][T12930] team0: Port device geneve0 added
[  162.622823][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.636661][T12930] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  162.639890][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.642726][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.659015][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.705932][T12934] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  162.868913][T12951] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  162.872153][T12953] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  163.090015][T12983] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  163.328072][T13015] __nla_validate_parse: 85 callbacks suppressed
[  163.328092][T13015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2375'.
[  163.337281][T13015] dummy0: entered promiscuous mode
[  163.347854][T13015] bridge0: port 1(dummy0) entered blocking state
[  163.350005][T13015] bridge0: port 1(dummy0) entered disabled state
[  163.352423][T13015] dummy0: entered allmulticast mode
[  163.584774][T13046] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2380'.
[  163.594977][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'.
[  164.264799][T13132] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[  164.328420][T13139] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2397'.
[  164.422748][T13151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2400'.
[  164.428025][T13151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2400'.
[  164.437272][T13151] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2400'.
[  164.444571][T13151] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2400'.
[  164.453736][T13151] netlink: 364 bytes leftover after parsing attributes in process `syz.1.2400'.
[  164.457431][T13151] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  164.464259][T13151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2400'.
[  164.661458][T13175] sctp: [Deprecated]: syz.1.2407 (pid 13175) Use of int in max_burst socket option.
[  164.661458][T13175] Use struct sctp_assoc_value instead
[  164.949046][T13213] validate_nla: 7 callbacks suppressed
[  164.949057][T13213] netlink: 'syz.3.2415': attribute type 3 has an invalid length.
[  164.966024][T13213] syzkaller1: entered promiscuous mode
[  164.968483][T13213] syzkaller1: entered allmulticast mode
[  165.055006][T13229] netlink: 'syz.3.2418': attribute type 1 has an invalid length.
[  165.594724][T13290] net_ratelimit: 9 callbacks suppressed
[  165.594734][T13290] openvswitch: netlink: Multiple metadata blocks provided
[  165.652756][T13293] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  165.671224][T13293] netlink: 'syz.3.2430': attribute type 7 has an invalid length.
[  165.676255][T13293] netlink: 'syz.3.2430': attribute type 8 has an invalid length.
[  165.762412][T13301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  165.767478][T13300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  165.946546][T13337] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  165.950798][T13337] vlan0: mtu less than device minimum
[  166.023124][T13347] netlink: 'syz.2.2444': attribute type 1 has an invalid length.
[  166.208158][T13366] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  166.234243][T13371] openvswitch: netlink: Multiple metadata blocks provided
[  166.270892][T13375] netlink: 'syz.2.2450': attribute type 1 has an invalid length.
[  166.342113][T13379] openvswitch: netlink: Message has 24 unknown bytes.
[  166.492752][T13405] IPv6: Can't replace route, no match found
[  166.538306][T13411] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  166.877215][T13460] netlink: 'syz.2.2471': attribute type 2 has an invalid length.
[  166.902701][T13462] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  166.904998][T13462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.008007][T13470] raw_sendmsg: syz.1.2475 forgot to set AF_INET. Fix it!
[  167.043079][T13482] openvswitch: netlink: Message has 24 unknown bytes.
[  167.165878][T13501] IPv6: sit3: Disabled Multicast RS
[  167.223799][T13508] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  167.393894][T13524] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  167.405285][T13524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.679794][T13563] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  168.193222][T13584] pim6reg1: entered promiscuous mode
[  168.195444][T13584] pim6reg1: entered allmulticast mode
[  168.447262][T13624] __nla_validate_parse: 29 callbacks suppressed
[  168.447273][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2522'.
[  168.482198][T13628] netlink: 'syz.1.2523': attribute type 1 has an invalid length.
[  168.492882][T13628] pim6reg1: entered promiscuous mode
[  168.499334][T13628] pim6reg1: entered allmulticast mode
[  168.687808][T13640] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  168.790759][T13658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'.
[  168.880153][T13668] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2533'.
[  168.896632][T13668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2533'.
[  168.951622][T13676] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2532'.
[  168.955403][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2532'.
[  169.282143][T13714] netlink: 'syz.2.2547': attribute type 11 has an invalid length.
[  169.290844][T13713] IPVS: Scheduler module ip_vs_sip not found
[  169.341593][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2549'.
[  169.484337][T13743] netlink: 'syz.2.2552': attribute type 1 has an invalid length.
[  169.487275][T13743] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2552'.
[  169.546335][ T5824] Bluetooth: hci3: command 0x0405 tx timeout
[  169.742920][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2560'.
[  169.812960][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'.
[  169.864479][T13784] C: renamed from team_slave_0
[  169.872869][T13784] netlink: 'syz.2.2564': attribute type 3 has an invalid length.
[  170.185376][ T5212] Bluetooth: hci1: command 0x0406 tx timeout
[  170.187432][ T5212] Bluetooth: hci2: command 0x0406 tx timeout
[  170.657093][T13901] net_ratelimit: 26 callbacks suppressed
[  170.657103][T13901] openvswitch: netlink: Multiple metadata blocks provided
[  171.039396][T13948] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  171.113324][T13956] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  171.118814][T13956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.340451][T13984] validate_nla: 1 callbacks suppressed
[  171.340461][T13984] netlink: 'syz.2.2623': attribute type 7 has an invalid length.
[  171.344670][T13984] netlink: 'syz.2.2623': attribute type 8 has an invalid length.
[  171.548391][T14007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.729817][T14038] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[  171.734109][T14038] Bluetooth: MGMT ver 1.23
[  172.014779][T14063] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  172.167959][T14075] openvswitch: netlink: Multiple metadata blocks provided
[  172.579546][T14125] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  172.609674][T14122] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  172.645021][T14132] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  172.647869][T14132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.780414][T14148] ip_vti0: left allmulticast mode
[  172.793114][T14148] bridge0: port 4(syz_tun) entered disabled state
[  172.798104][T14148] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.800740][T14148] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.807215][T14148] bond_slave_0: left promiscuous mode
[  172.809286][T14148] bond_slave_1: left promiscuous mode
[  172.886175][T14148] tipc: Resetting bearer <eth:syzkaller0>
[  172.889971][T14148] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  172.892282][T14148] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  172.894949][T14148] vlan2: left promiscuous mode
[  172.896879][T14148] bridge0: left promiscuous mode
[  172.904404][T14148] ip6gretap1: left promiscuous mode
[  172.909832][T14148] vti0: left promiscuous mode
[  172.913737][T14148] bond2: left promiscuous mode
[  172.915553][T14148] bridge2: left promiscuous mode
[  172.917269][T14148] bond2: left allmulticast mode
[  172.918847][T14148] bridge2: left allmulticast mode
[  172.930763][   T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.941465][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.946874][   T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.949891][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.952732][   T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.958444][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.970348][   T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.972991][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.351874][T14202] netlink: 'syz.1.2678': attribute type 12 has an invalid length.
[  173.549514][T14231] __nla_validate_parse: 34 callbacks suppressed
[  173.549525][T14231] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2684'.
[  173.701129][T14246] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2688'.
[  173.739922][T14252] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2690'.
[  173.823178][T14265] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  173.911162][T14281] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2699'.
[  174.068307][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2705'.
[  174.111588][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2707'.
[  174.143870][T14311] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2708'.
[  174.234796][T14325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2714'.
[  174.280106][T14332] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2717'.
[  174.396139][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2721'.
[  174.826633][T14391] only policy match revision 0 supported
[  174.826644][T14391] unable to load match
[  174.869386][T14397] netlink: 'syz.3.2732': attribute type 1 has an invalid length.
[  174.871961][T14397] netlink: 'syz.3.2732': attribute type 4 has an invalid length.
[  175.539276][T14468] netlink: 'syz.2.2748': attribute type 21 has an invalid length.
[  175.723126][T14501] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.730648][T14501] syzkaller0: left promiscuous mode
[  175.732393][T14501] syzkaller0: left allmulticast mode
[  175.868714][T14517] netlink: 'syz.1.2764': attribute type 29 has an invalid length.
[  175.871517][T14517] netlink: 'syz.1.2764': attribute type 29 has an invalid length.
[  175.893907][T14521] netlink: 'syz.2.2766': attribute type 10 has an invalid length.
[  175.899047][T14521] team0: Cannot enslave team device to itself
[  175.907067][T14524] net_ratelimit: 20 callbacks suppressed
[  175.907076][T14524] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  175.914923][T14524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.027907][T14543] veth0_to_bridge: entered promiscuous mode
[  176.041901][T14542] veth0_to_bridge: left promiscuous mode
[  176.111719][T14560] openvswitch: netlink: Multiple metadata blocks provided
[  176.217082][T14573] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.223059][T14573] netlink: 'syz.3.2784': attribute type 30 has an invalid length.
[  176.239646][ T5851] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  176.243394][ T5851] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  176.262892][ T5851] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  176.271340][T14573] syzkaller0: mtu less than device minimum
[  176.274110][ T5851] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  176.451858][T14598] vxcan0: entered promiscuous mode
[  176.530740][T14613] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  176.733947][T14623] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  176.736705][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.342822][T14652] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  177.350945][T14657] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  177.393467][T14661] veth0: entered promiscuous mode
[  177.400399][T14658] veth0: left promiscuous mode
[  177.500797][T14677] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  177.504519][T14678] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  177.508827][T14678] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  177.593859][T14688] validate_nla: 2 callbacks suppressed
[  177.593869][T14688] netlink: 'syz.2.2818': attribute type 29 has an invalid length.
[  177.846751][ T5886] IPVS: starting estimator thread 0...
[  177.936552][T14714] IPVS: using max 56 ests per chain, 134400 per kthread
[  177.989520][T14730] netlink: 'syz.1.2832': attribute type 1 has an invalid length.
[  178.045015][T14739] netlink: 'syz.1.2836': attribute type 1 has an invalid length.
[  178.050311][T14739] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  178.138034][T14752] netlink: 'syz.1.2841': attribute type 10 has an invalid length.
[  178.143606][T14752] netlink: 'syz.1.2841': attribute type 10 has an invalid length.
[  178.393597][T14781] lo speed is unknown, defaulting to 1000
[  178.399755][T14781] lo speed is unknown, defaulting to 1000
[  178.404395][T14781] lo speed is unknown, defaulting to 1000
[  178.412357][T14781] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  178.427054][T14781] lo speed is unknown, defaulting to 1000
[  178.430329][T14781] lo speed is unknown, defaulting to 1000
[  178.432999][T14781] lo speed is unknown, defaulting to 1000
[  178.438033][T14781] lo speed is unknown, defaulting to 1000
[  179.001843][T14800] __nla_validate_parse: 37 callbacks suppressed
[  179.001854][T14800] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2855'.
[  179.173393][T14781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  179.308409][T14822] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  179.423208][T14841] TCP: TCP_TX_DELAY enabled
[  179.434958][T14844] bond9: entered promiscuous mode
[  179.437282][T14844] 8021q: adding VLAN 0 to HW filter on device bond9
[  179.442263][T14841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2868'.
[  179.445198][T14841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2868'.
[  179.448357][T14841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2868'.
[  179.451426][T14841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2868'.
[  179.454519][T14841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2868'.
[  179.458060][T14841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2868'.
[  179.461635][T14841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2868'.
[  179.464513][T14841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2868'.
[  179.467740][T14841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2868'.
[  180.374409][T14879] IPVS: length: 8 != 446622349272
[  180.554162][T14903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.563234][T14903] syzkaller0: entered promiscuous mode
[  180.567757][T14903] syzkaller0: entered allmulticast mode
[  180.597748][T14899] netlink: 'syz.3.2883': attribute type 1 has an invalid length.
[  180.799079][T14903] tipc: Resetting bearer <eth:syzkaller0>
[  181.450934][T14902] tipc: Resetting bearer <eth:syzkaller0>
[  181.504364][T14902] tipc: Disabling bearer <eth:syzkaller0>
[  181.651362][T14947] lo speed is unknown, defaulting to 1000
[  181.659045][T14947] lo speed is unknown, defaulting to 1000
[  181.662941][T14947] lo speed is unknown, defaulting to 1000
[  181.716886][T14951] net_ratelimit: 14 callbacks suppressed
[  181.716891][T14951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.723870][   T47] lo speed is unknown, defaulting to 1000
[  181.728990][   T47] syz2: Port: 1 Link ACTIVE
[  181.768893][T14956] netlink: 'syz.3.2901': attribute type 1 has an invalid length.
[  181.810092][T14947] infiniband syz0: set active
[  181.812478][   T24] lo speed is unknown, defaulting to 1000
[  181.814481][   T24] syz0: Port: 1 Link ACTIVE
[  181.816305][T14947] infiniband syz0: added lo
[  181.838920][T14947] RDS/IB: syz0: added
[  181.840854][T14947] smc: adding ib device syz0 with port count 1
[  181.842955][T14947] smc:    ib device syz0 port 1 has pnetid 
[  181.849977][   T24] lo speed is unknown, defaulting to 1000
[  181.862031][T14947] lo speed is unknown, defaulting to 1000
[  181.892158][T14960] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  181.894899][T14960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.972623][T14947] lo speed is unknown, defaulting to 1000
[  181.981358][T14963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.087120][T14947] lo speed is unknown, defaulting to 1000
[  182.220506][T14979] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.223789][T14947] lo speed is unknown, defaulting to 1000
[  182.478872][T15005] netlink: 'syz.3.2914': attribute type 6 has an invalid length.
[  182.614991][T15028] openvswitch: netlink: Multiple metadata blocks provided
[  182.700893][T15034] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  182.703409][T15034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.806797][T15049] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  182.903660][T15062] netlink: 'syz.2.2937': attribute type 7 has an invalid length.
[  182.980805][T15078] lo speed is unknown, defaulting to 1000
[  182.983042][T15082] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  182.986207][T15078] lo speed is unknown, defaulting to 1000
[  183.122708][T15091] sctp: [Deprecated]: syz.1.2948 (pid 15091) Use of int in maxseg socket option.
[  183.122708][T15091] Use struct sctp_assoc_value instead
[  183.282094][T15116] netlink: 'syz.2.2954': attribute type 1 has an invalid length.
[  183.310241][T15116] bond10: entered promiscuous mode
[  183.349122][T15116] bond10: entered allmulticast mode
[  183.371100][T15116] bridge6: the hash_elasticity option has been deprecated and is always 16
[  183.416010][T15128] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  183.459072][T15128] nbd0: detected capacity change from 0 to 127
[  183.462347][   T55] block nbd0: Receive control failed (result -32)
[  183.469634][T12382] block nbd0: Dead connection, failed to find a fallback
[  183.472057][T12382] block nbd0: shutting down sockets
[  183.486390][T12382] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  183.493593][T12382] Buffer I/O error on dev nbd0, logical block 0, async page read
[  183.499408][T12382] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  183.502573][T12382] Buffer I/O error on dev nbd0, logical block 1, async page read
[  183.512567][T12382] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  183.517209][T12382] Buffer I/O error on dev nbd0, logical block 2, async page read
[  183.519993][T12382] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  183.523044][T12382] Buffer I/O error on dev nbd0, logical block 3, async page read
[  183.526320][T12382] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  183.530990][T12382] Buffer I/O error on dev nbd0, logical block 0, async page read
[  183.538926][T12382] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  183.542112][T12382] Buffer I/O error on dev nbd0, logical block 1, async page read
[  183.544967][T12382] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  183.548359][T12382] Buffer I/O error on dev nbd0, logical block 2, async page read
[  183.551249][T12382] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  183.554577][T12382] Buffer I/O error on dev nbd0, logical block 3, async page read
[  183.557747][T12382] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  183.561245][T12382] Buffer I/O error on dev nbd0, logical block 0, async page read
[  183.566710][T12382] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  183.577132][T12382] Buffer I/O error on dev nbd0, logical block 1, async page read
[  183.588689][T12382] ldm_validate_partition_table(): Disk read failed.
[  183.595694][T12382] Dev nbd0: unable to read RDB block 0
[  183.600936][T12382]  nbd0: unable to read partition table
[  183.611045][T12382] ldm_validate_partition_table(): Disk read failed.
[  183.614029][T12382] Dev nbd0: unable to read RDB block 0
[  183.618344][T12382]  nbd0: unable to read partition table
[  183.854395][T15168] sctp: [Deprecated]: syz.3.2968 (pid 15168) Use of int in maxseg socket option.
[  183.854395][T15168] Use struct sctp_assoc_value instead
[  184.046360][T15174] __nla_validate_parse: 92 callbacks suppressed
[  184.046370][T15174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2971'.
[  184.051166][T15174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2971'.
[  184.149302][T15184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2972'.
[  184.232329][T15196] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2976'.
[  184.239011][T15196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2976'.
[  184.241978][T15196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2976'.
[  184.244883][T15196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2976'.
[  184.275889][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2978'.
[  184.303882][T15205] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2979'.
[  184.472325][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2986'.
[  184.729332][T15265] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.732182][T15264] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  185.307650][T15334] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  185.307833][T15333] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  185.704977][T15384] batadv_slave_0: entered promiscuous mode
[  186.012956][T15430] netlink: 'syz.3.3038': attribute type 39 has an invalid length.
[  186.370589][T15472] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  186.373865][T15472] netlink: 'syz.3.3045': attribute type 1 has an invalid length.
[  186.380202][T15472] NCSI netlink: No device for ifindex 0
[  186.452673][T15487] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  186.958284][T15567] netlink: 'syz.3.3067': attribute type 24 has an invalid length.
[  187.024754][T15578] net_ratelimit: 13 callbacks suppressed
[  187.024764][T15578] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  187.027419][T15580] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  187.033699][T15578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.143816][T15596] openvswitch: netlink: Multiple metadata blocks provided
[  187.218873][T15612] openvswitch: netlink: Flow key attr not present in new flow.
[  187.345033][T15630] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  187.351394][T15630] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.615368][T15680] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  187.707856][T15694] netlink: 'syz.3.3101': attribute type 1 has an invalid length.
[  187.892665][T15718] bond7: entered promiscuous mode
[  187.894461][T15718] bond7: entered allmulticast mode
[  187.898969][T15718] 8021q: adding VLAN 0 to HW filter on device bond7
[  188.030598][T15737] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.059543][T15743] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  188.063190][T15743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.089734][T15737] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.146910][T15737] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.183468][T15737] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.257473][T12188] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  188.266379][T12188] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  188.278273][ T5836] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  188.289796][ T5836] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  188.307233][T15769] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20002
[  188.553578][ T5852] lo speed is unknown, defaulting to 1000
[  188.556581][ T5852] syz0: Port: 1 Link DOWN
[  188.558236][ T5852] lo speed is unknown, defaulting to 1000
[  189.419944][T15898] __nla_validate_parse: 41 callbacks suppressed
[  189.419954][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3143'.
[  189.429260][T15898] gtp1: entered allmulticast mode
[  189.558694][T15912] netlink: 'syz.2.3146': attribute type 10 has an invalid length.
[  189.561919][T15912] team0: Cannot enslave team device to itself
[  189.638865][T15927] netlink: 'syz.1.3148': attribute type 1 has an invalid length.
[  189.778626][T15948] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3154'.
[  189.782490][T15947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3155'.
[  189.792890][T15947] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3155'.
[  189.821960][T15955] netlink: 308 bytes leftover after parsing attributes in process `syz.2.3157'.
[  189.825046][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3157'.
[  189.990579][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3164'.
[  190.008550][T15978] syz_tun (unregistering): left allmulticast mode
[  190.010909][T15978] syz_tun (unregistering): left promiscuous mode
[  190.013188][T15978] bridge0: port 4(syz_tun) entered disabled state
[  190.111798][T15988] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3168'.
[  190.117175][T15988] veth0_vlan: left promiscuous mode
[  190.119010][T15988] veth0_vlan: entered allmulticast mode
[  190.121687][T15988] veth0_vlan: entered promiscuous mode
[  190.213717][T15993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  190.217864][ T5836] nci: nci_rx_work: unknown MT 0x1
[  190.469447][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3175'.
[  190.699025][T16022] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3180'.
[  191.363949][T16036] netlink: 'syz.1.3185': attribute type 9 has an invalid length.
[  191.617314][T16046] netlink: 'syz.2.3190': attribute type 1 has an invalid length.
[  191.759369][T16069] vxcan0: entered promiscuous mode
[  192.073045][T16089] gtp2: entered promiscuous mode
[  192.074757][T16089] gtp2: entered allmulticast mode
[  192.106382][T16091] net_ratelimit: 12 callbacks suppressed
[  192.106434][T16091] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  192.147157][T16100] netlink: 'syz.3.3211': attribute type 1 has an invalid length.
[  192.171478][T16100] 8021q: adding VLAN 0 to HW filter on device bond10
[  192.174596][T16100] bond9: (slave bond10): making interface the new active one
[  192.178040][T16100] bond9: (slave bond10): Enslaving as an active interface with an up link
[  192.237224][T16109] 8021q: adding VLAN 0 to HW filter on device bond9
[  192.242726][T16110] openvswitch: netlink: Multiple metadata blocks provided
[  192.536513][T16137] syzkaller1: entered promiscuous mode
[  192.538398][T16137] syzkaller1: entered allmulticast mode
[  192.586572][T16136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.058364][T16157] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  193.073229][ T5836] nci: nci_rx_work: unknown MT 0x1
[  193.917493][T16171] openvswitch: netlink: Tunnel attr 260 out of range max 16
[  193.946740][T16173] 8021q: adding VLAN 0 to HW filter on device bond11
[  193.973155][T16181] openvswitch: netlink: Multiple metadata blocks provided
[  194.053349][T16173] bond11 (unregistering): Released all slaves
[  194.088856][T16187] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  194.091832][T16187] syzkaller0: entered promiscuous mode
[  194.093568][T16187] syzkaller0: entered allmulticast mode
[  194.101911][T16179] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  194.114462][T16179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.230052][T16203] netlink: 'syz.3.3241': attribute type 1 has an invalid length.
[  195.059626][T16212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  195.123983][T16225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.127698][T16225] syzkaller0: entered promiscuous mode
[  195.129532][T16225] syzkaller0: entered allmulticast mode
[  195.146810][T16224] tipc: Resetting bearer <eth:syzkaller0>
[  195.169464][T16224] tipc: Disabling bearer <eth:syzkaller0>
[  195.172831][T16228] __nla_validate_parse: 24 callbacks suppressed
[  195.172839][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3249'.
[  195.188044][T16228] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  195.195452][T16228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.282872][T16243] openvswitch: netlink: Multiple metadata blocks provided
[  195.370181][T16254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3257'.
[  195.483279][T16271] bridge8: entered allmulticast mode
[  195.518244][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'.
[  195.521284][T16273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3261'.
[  195.585562][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'.
[  195.588966][T16273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3261'.
[  195.768927][T16307] netlink: 'syz.2.3274': attribute type 1 has an invalid length.
[  195.786258][T16307] 8021q: adding VLAN 0 to HW filter on device bond12
[  195.796196][T16307] vlan1: entered promiscuous mode
[  195.797934][T16307] bond12: entered promiscuous mode
[  195.799719][T16307] vlan1: entered allmulticast mode
[  195.801475][T16307] bond12: entered allmulticast mode
[  195.809582][T16307] bond12: (slave gretap1): making interface the new active one
[  195.812136][T16307] gretap1: entered promiscuous mode
[  195.813971][T16307] gretap1: entered allmulticast mode
[  195.818260][T16307] bond12: (slave gretap1): Enslaving as an active interface with an up link
[  195.823393][T16307] syz.2.3274 (16307) used greatest stack depth: 18152 bytes left
[  195.841790][T16312] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3273'.
[  195.849123][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3273'.
[  195.853943][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3276'.
[  195.857691][T16315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3277'.
[  195.873088][T16315] 8021q: adding VLAN 0 to HW filter on device bond13
[  195.888747][T16315] bond13: (slave batadv0): Opening slave failed
[  195.976123][T12188] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  196.752331][T16337] sctp: [Deprecated]: syz.3.3282 (pid 16337) Use of struct sctp_assoc_value in delayed_ack socket option.
[  196.752331][T16337] Use struct sctp_sack_info instead
[  196.844192][T16340] lo speed is unknown, defaulting to 1000
[  196.849880][T16340] lo speed is unknown, defaulting to 1000
[  197.035346][ T6566] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
[  197.187246][T16340] netlink: 'syz.1.3284': attribute type 18 has an invalid length.
[  197.195886][T16340] net_ratelimit: 6 callbacks suppressed
[  197.195895][T16340] openvswitch: netlink: Missing key (keys=40, expected=80)

VM DIAGNOSIS:
11:23:19  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820bea11 RBX=ffffea0004804a40 RCX=ffff8880224d9cc0 RDX=0000000000000000
RSI=ffffea0004804a40 RDI=ffffea0004804a40 RBP=0000000000000001 RSP=ffffc9000381f380
R8 =ffffea0004804a77 R9 =1ffffd400090094e R10=dffffc0000000000 R11=fffff9400090094f
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffea0004804a40 R15=ffffea0004804a40
RIP=ffffffff81bfb0e7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555581b77500 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007feb3a6e56c0 CR3=0000000110708000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007feb39a12e17
XMM06=0000000000000000 00007feb39a12e11 XMM07=0000000000000000 00007feb39a12e25
XMM08=0000000000000000 00007feb39a12eab XMM09=0000000000000000 00007feb39a12f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000007 RBX=0000000000000005 RCX=ffffffff9342c8a8 RDX=0000000000000008
RSI=ffff8881115c8bb8 RDI=ffff8881115c8000 RBP=0000000000000000 RSP=ffffc90007a17398
R8 =0000000000000000 R9 =ffffffff825c8e9c R10=dffffc0000000000 R11=ffffed100365ef25
R12=0000000000000004 R13=0000000000000001 R14=ffff8881115c8bb8 R15=0000000000000000
RIP=ffffffff819d7aaf RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ffaeaeba6c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000125f6a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 000000000e0014aa
XMM02=1800080000000400 1600080000000000 XMM03=100012b00305f810 001003fffffff700
XMM04=12e00300100012d0 0300100012c00302 XMM05=0100100012800401 0000000806060168
XMM06=e60380080012e003 00100012d0030010 XMM07=0012c00302100012 b00305f810001003
XMM08=fffffff700180008 0000000400160008 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
