last executing test programs:

1.29840785s ago: executing program 0 (id=9681):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0403d15, &(0x7f00000020c0)={0x25, 0x4})

1.202681584s ago: executing program 0 (id=9684):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x50000008})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x100, 0x2, 0xec})

1.103167534s ago: executing program 0 (id=9685):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) (async, rerun: 32)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0xfffe, @empty}}) (rerun: 32)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x6, 0x2, 0xec2a})

360.140437ms ago: executing program 1 (id=9689):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffe}, 0x1c)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r4}, 0x20)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0403d11, &(0x7f00000020c0)={0x25, 0x4})

359.886469ms ago: executing program 1 (id=9690):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) (async)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)) (async)
r1 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
close(0xffffffffffffffff) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async)
socket$kcm(0x11, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x23, 0x803, 0x1)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)

356.320561ms ago: executing program 2 (id=9691):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000004000000070000007f00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
close(0x3)

271.727554ms ago: executing program 1 (id=9692):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0x16, 0x0, &(0x7f0000003bc0))
pwrite64(r0, &(0x7f0000000140)="58814ad301b0c502e54485ab269e9bdf432ae9c0bdff5b6e401b8193c836b282786d201462d954416d6ed5d7b8a0f23d30a4e5e9353ef308fc92f575896cd4f47a749ab3969bd2b9d3c12ed5b1c728f7", 0x50, 0x9c6c)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$unix(r1, &(0x7f0000000100)=@abs={0x27}, 0x6e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
sendmsg$unix(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={<r9=>0x0, 0x7ff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={<r10=>0x0, 0xba69}, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000680)={r9, 0x2, 0x6, 0xdcce, 0x5, 0xfe3, 0x8, 0xb, {r10, @in6={{0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x7}}, 0x3, 0x5, 0x3, 0x7, 0x3}}, &(0x7f00000005c0)=0xb0)
recvmsg$unix(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r11}, 0x10)
poll(&(0x7f00000022c0), 0x58, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)

271.394301ms ago: executing program 2 (id=9693):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1}}], 0xfd68)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14)

269.446217ms ago: executing program 0 (id=9694):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x0, @empty}})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x10}, 0xe)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0xec01, 0x8002, 0x400, 0xc, r4}, &(0x7f0000000140)=0x10)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0403d11, &(0x7f00000020c0)={0x25, 0x4})

213.488274ms ago: executing program 2 (id=9695):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f00000002c0)={'lo\x00', @random})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(0x3)

212.529516ms ago: executing program 1 (id=9696):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x24, r2, 0x801, 0x70bd2b, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000100)={0xe68, r2, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2e, 0x35}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x18, 0x111, 0x0, 0x1, {0x14, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xfffffffd}, @NL80211_ATTR_PEER_MEASUREMENTS={0xe14, 0x111, 0x0, 0x1, {0xe10, 0x5, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbe71}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1e}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x358}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x2c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2c0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb70d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa00}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfb}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}]}]}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x72a5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x34c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x23c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1fc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x56}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x176}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x158}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x1cc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x16c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x164, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x56}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}]}, {0x300, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x2bc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x148, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x623b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf7}]}, @NL80211_PMSR_TYPE_FTM={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x19c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x180, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4801}, 0x40)
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x100, 0x2, 0xec})

133.247731ms ago: executing program 2 (id=9697):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create(0x9)
writev(r1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x5c, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000440)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x600c8f0}, 0x40000)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100"], 0x1c}}, 0x0)
socketpair$unix(0x1, 0xd, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="03000000650d25ecda04e982c3667e7009742768fa4a", @ANYRES16=r6, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000000)
unshare(0x24020400)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r7, 0x12, 0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000004c0), 0x1000, r8}, 0x38)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x11c, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x10a, 0xf2, 0x0, 0x1, [@typed={0x4, 0x18}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade138595d43b2dafc9f33cce68bf84b36ec72dd71265fc2e882348c26c212623754734be31d750351dc076eb43d9621dc08c029d1608a46cf29b0c816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be00"/230, @typed={0x8, 0x13, 0x0, 0x0, @ipv4=@empty}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x4000040)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10)
r12 = socket$kcm(0xa, 0x3, 0x11)
ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x80108907, 0x0)
ioctl$SIOCGSTAMP(r12, 0x8906, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r2, 0x40043d0d, &(0x7f00000020c0)={0x25, 0x4})

130.503929ms ago: executing program 0 (id=9698):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={<r2=>0x0, 0x8}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={r2, 0x8, 0x20}, 0xc)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0403d11, &(0x7f00000020c0)={0x25, 0x4})

60.44814ms ago: executing program 0 (id=9699):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="7587657a6ad211570008f9000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4015}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r4 = epoll_create1(0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="fc000000190001000000000010000000e0000001000000000000000000000000ac1414bb000000000000000000000000fffe000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000940)='afs_call\x00', r1, 0x0, 0x9b}, 0x18)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x2})
syz_emit_ethernet(0x6e, &(0x7f0000000b00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6012000800383afffe8000000000000000000000000000bbfe8000000000000000000000000000aa0200907800000000605b29ab00bcd39f001100fc0100003e0000000000000000000000fc0200"/110], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="180800000000000000000000000000001811000078e98d62453345b0ea643fd8c689ded61de58cc61d1e2a61c8e690b14b1c5a8b61d60ef271ac81e11437564b6a58f09fba3afba445ddb13c74d7fd1a8542db43cad7d4413a16105f4f927bdee5ef5c6886575c2ea1011c41ca68602e5f9f060b95ba858ff682ed3450509a0eb0837ac755c1068fc2fe3c7e1687b1df7d396e796d7c11a479e5143d28fcb5df5f323d4879ccbf3b65af5d5fb0d677cb93dfc69fc3ebbf17e79002f5c2962fed9c057687cc16edfed295af366082", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b2af8ff00000000b509000000000000c38af8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80)
socket$kcm(0x1e, 0x4, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000", @ANYRES16=r8, @ANYBLOB="01032abd700012dbdf060000000000000080"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x880)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)
close(r6)
r10 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$xdp(r10, &(0x7f0000000900)={&(0x7f00000001c0)={0x2c, 0x4, 0x0, 0x17}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000400)="356d3774b0f8e2e03275ccafb877422a6a52ead9105e998f093ddea4493cd3c6bd89425b04150904a4da54fae2557f6b4ef659a12f872c3642620eeeedc1d4b5806d7d799df36acbe68cdd3b3f8d3ed19e7bbb20a6515cd45622186184393ec450b81a5765a467acf872104e4c5628cd2daf0aab7c22ea9c1f7768bd97ad755d52fab09c67fb7c551cb471fd", 0x8c}, {&(0x7f0000000200)="7f8ed59d0e3baca7893f87878de7b353bfba63823fcbb42a505147", 0x1b}, {&(0x7f00000004c0)="8a69af55b6244e7eec0e693f44493ce1a6d94b00bc7608825df5ce40a1cf3db13abd4e41c2332008bc844631883c14f49b490486047503afd2d893f8d29c9c155be6a9faecab31f2219f46a953fcd59ba4a604e31e102cb23fa212db14c6e2e7d57644d74f619b3e1025e65e777fa02dc9d2d52cda8bf067b2cc3b316d580cd8a1f05ce969", 0x85}, {&(0x7f0000000340)="bc20a07147f28a0600381d53600975d1f231f71987131d755a1ca5808418a70c8931edf79a000df119dcaa3a8e7cde801e9b34e108197fe52431a50b5b4deba00c73bc2a848f95ea112b8bb3ff94f08f74db6ee8a7b6711d601340a64ba0c7e2259321cad7cbac33d10d5979452948ad3b9e9749cecb332a23", 0x79}, {&(0x7f0000000b80)="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", 0x10b}, {&(0x7f00000002c0)="498badcfcd9d62654b1dd938e96439c56b60dcf3", 0x14}, {&(0x7f0000000740)="1e851b5ec2e470b5cfd608288035ba145ff2c5f5075611aaefde8c44b25a12df36d6529e62c92fbd5c37df9bd9b03411178653bf61d3ae08a96927eff1b4aad5197f6ac69d23d088921bec447a353b0e351a0d78d46f3865d5c8545531327271d1ae9df3455298a64124e4fdd6eb04b2c7983f3985dd0219abfd082e6e345fc0d6b2a1effe47dd6558cb25e3b3348512dce9f5e35158c52618407fd53a57ee40cf6f0812ed07c1be2cd3e89921c7af4f87748cb51e725992b54127db727e85dc627682cd502dea5b58dcfe57475e9eaec468f038", 0xd4}], 0x7, 0x0, 0x0, 0x40000}, 0x8004005)
r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r11, 0x40383d0c, &(0x7f0000000000)={{0xf, 0x800}, {0xfffffffffffff005, 0x9}, 0x5, 0x3})

55.667474ms ago: executing program 2 (id=9700):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000000c0)="c7947c360850d0c47215a324a9ca547da08d28273224900920680a3bde5e372aa86c0318da04557e2325c017904fffa6621c56e8d19c8a8e9e885b5dd08c2c2eabc6694543984367b5bf282b984baae6d7baaa2b92c845273ae0a49fbc93c5ee441615", 0x63)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000000)={{0x1007ffb, 0x800}, {0x0, 0x9}, 0x80, 0x2})

2.56639ms ago: executing program 1 (id=9701):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(0x3)

2.074978ms ago: executing program 2 (id=9702):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r0, 0x84, 0x70, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000a80)={0x5, 0x5, 0x0, 0x100000000, 0x6, 0x1, 0x3, 0xfffffffffffffffd}, &(0x7f00000003c0)={0xdc, 0xa, 0x100000002ddd, 0x3, 0x1000000000f, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=9703):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a3, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0)
close(r3) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x28028081)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000004000a00002008000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000002000000000000000000000000000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c00000002"], 0x23c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0xbc, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x5, 0x6, 0x3, 0x8}}, @TCA_CBS_PARMS={0x0, 0x1, {0xcb, '\x00', 0x6, 0x96, 0xffff, 0x8}}, @TCA_CBS_PARMS={0x0, 0x1, {0x1, '\x00', 0xbcff, 0x10, 0x8, 0x5}}]}}, @qdisc_kind_options=@q_prio={{}, {0x0, 0x2, {0xe5f, "53e1abf67c4ca4af4846a994273c6c98"}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0}) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(0xffffffffffffffff, &(0x7f0000000540)="9d03b4a50b0c684b4e2ded077c30f6a52204ee0ce978d50b20586527a6ebf7c5aa757f003fb11cbe9d77451be8c2ba482909ceeddb32285887fece77ae28c4a8bf35493dd505146f060bce49ec79a638d582cbb1ebbf7d3306f2610f153c33a40922c9b0086873e0e0b453fa7d7c3c07201aa83b302e68a5aa9bf9204ed68d4b62e07461f3342e79c75fb57272", 0x8d) (async)
r13 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)

kernel console output (not intermixed with test programs):

6550'.
[  475.074296][T26977] team0: Port device geneve0 added
[  476.236404][T26998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  476.241950][T27003] syzkaller0: entered promiscuous mode
[  476.244692][T27003] syzkaller0: entered allmulticast mode
[  476.256412][T27003] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  476.286990][T27010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6557'.
[  476.381020][T27027] netlink: 'syz.1.6563': attribute type 13 has an invalid length.
[  476.413535][T27027] tipc: Resetting bearer <eth:syzkaller0>
[  476.453577][T27027] batadv0: left promiscuous mode
[  476.496168][ T5894] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  476.514181][ T5894] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  476.517659][ T5894] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  476.521911][ T5894] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  476.545034][ T5894] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  476.549848][ T5894] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  476.554069][ T5894] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  476.559673][ T5894] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  477.042382][T27058] xt_socket: unknown flags 0x50
[  477.148371][T27060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6572'.
[  477.283764][T27066] xt_l2tp: v2 doesn't support IP mode
[  477.336329][T27072] tipc: Enabled bearer <ib:caif0>, priority 1
[  477.456342][T27083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6577'.
[  477.460792][T27083] netlink: 'syz.2.6577': attribute type 20 has an invalid length.
[  477.464519][T27083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6577'.
[  477.468471][T27083] netlink: 'syz.2.6577': attribute type 20 has an invalid length.
[  477.474033][T27083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6577'.
[  477.632363][T27094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6581'.
[  477.749190][T27115] netlink: 'syz.1.6587': attribute type 1 has an invalid length.
[  477.757748][T27109] netlink: 'syz.2.6585': attribute type 3 has an invalid length.
[  477.823497][T27120] xt_recent: Unsupported userspace flags (000000b1)
[  477.881704][T27125] netlink: 'syz.2.6591': attribute type 2 has an invalid length.
[  478.649347][T27163] sctp: [Deprecated]: syz.1.6607 (pid 27163) Use of int in max_burst socket option.
[  478.649347][T27163] Use struct sctp_assoc_value instead
[  478.801823][T27174] __nla_validate_parse: 9 callbacks suppressed
[  478.801833][T27174] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6611'.
[  479.414749][T27186] netlink: 'syz.0.6616': attribute type 5 has an invalid length.
[  479.425237][T27185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6616'.
[  479.472914][T27195] pim6reg99999999: entered allmulticast mode
[  479.581232][T27204] lo speed is unknown, defaulting to 1000
[  479.583715][T27204] ip6_vti0 speed is unknown, defaulting to 1000
[  479.817283][T27204] wg1 speed is unknown, defaulting to 1000
[  479.820241][T27204] wg1 speed is unknown, defaulting to 1000
[  479.864834][T27234] bond19: option mode: invalid value (254)
[  479.868479][T27234] bond19 (unregistering): Released all slaves
[  479.987709][T27243] tipc: MTU too low for tipc bearer
[  480.272949][T27262] sctp: [Deprecated]: syz.2.6637 (pid 27262) Use of int in max_burst socket option deprecated.
[  480.272949][T27262] Use struct sctp_assoc_value instead
[  480.280614][T27262] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6637'.
[  480.460968][T27279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6644'.
[  480.468695][T27279] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6644'.
[  481.140405][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  481.255611][T27330] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  481.646257][T27382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6672'.
[  481.675130][T27382] IPv6: NLM_F_CREATE should be specified when creating new route
[  481.678999][T27382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6672'.
[  481.708871][T27386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6673'.
[  481.713145][T27386] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6673'.
[  481.756046][T27393] netlink: 'syz.0.6676': attribute type 30 has an invalid length.
[  481.758641][T27393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6676'.
[  481.794970][T27393] bond20: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  481.876402][T27393] bond20 (unregistering): Released all slaves
[  481.940254][T27402] netlink: 'syz.1.6678': attribute type 3 has an invalid length.
[  482.127584][T27421] pim6reg1: entered promiscuous mode
[  482.129735][T27421] pim6reg1: entered allmulticast mode
[  482.180213][T27421] netlink: 'syz.2.6684': attribute type 1 has an invalid length.
[  482.214032][T27427] netlink: 'syz.1.6685': attribute type 1 has an invalid length.
[  482.216577][T27427] netlink: 'syz.1.6685': attribute type 7 has an invalid length.
[  482.219163][T27427] netlink: 'syz.1.6685': attribute type 8 has an invalid length.
[  482.223180][T27427] NCSI netlink: No device for ifindex 65584
[  482.281261][T27431] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check.
[  482.290022][T27431] netlink: 'syz.2.6687': attribute type 4 has an invalid length.
[  482.449104][T27441] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  482.566757][T27445] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  482.965396][T27474] netlink: 'syz.0.6701': attribute type 27 has an invalid length.
[  483.210716][T27494] syzkaller1: entered promiscuous mode
[  483.212436][T27494] syzkaller1: entered allmulticast mode
[  483.506168][T27525] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  483.602108][T27538] bond20: Unable to set peer notification delay as MII monitoring is disabled
[  483.607937][T27538] bond20 (unregistering): Released all slaves
[  483.806613][T27551] netlink: 'syz.0.6725': attribute type 1 has an invalid length.
[  484.152802][T27577] __nla_validate_parse: 8 callbacks suppressed
[  484.152811][T27577] netlink: 45 bytes leftover after parsing attributes in process `syz.1.6731'.
[  484.207372][T27584] netlink: 'syz.0.6733': attribute type 1 has an invalid length.
[  484.404179][T27605] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6740'.
[  484.511977][T27610] syzkaller0: entered promiscuous mode
[  484.513885][T27610] syzkaller0: entered allmulticast mode
[  485.617466][   T25] block nbd3: Possible stuck request ffff88810a290000: control (read@0,1024B). Runtime 150 seconds
[  485.621538][   T25] block nbd3: Possible stuck request ffff88810a290200: control (read@1024,1024B). Runtime 150 seconds
[  485.625052][   T25] block nbd3: Possible stuck request ffff88810a290400: control (read@2048,1024B). Runtime 150 seconds
[  485.628518][   T25] block nbd3: Possible stuck request ffff88810a290600: control (read@3072,1024B). Runtime 150 seconds
[  485.784509][T27641] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6749'.
[  485.801042][T27643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  485.833219][T27651] Unsupported ieee802154 address type: 0
[  485.847576][T27653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6753'.
[  485.904296][T27665] sctp: [Deprecated]: syz.0.6757 (pid 27665) Use of int in maxseg socket option.
[  485.904296][T27665] Use struct sctp_assoc_value instead
[  485.985840][T27672] block nbd0: NBD_DISCONNECT
[  485.987322][T27672] block nbd0: Send disconnect failed -32
[  485.993141][T27672] block nbd0: shutting down sockets
[  486.012279][   T33] audit: type=1800 audit(1765964239.679:7): pid=27672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6761" name="0000000000000000014" dev="tmpfs" ino=11955 res=0 errno=0
[  486.036103][T27679] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  486.972139][T27742] validate_nla: 2 callbacks suppressed
[  486.972150][T27742] netlink: 'syz.1.6783': attribute type 1 has an invalid length.
[  486.976719][T27742] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  486.986693][T27743] syzkaller0: entered promiscuous mode
[  486.988949][T27743] syzkaller0: entered allmulticast mode
[  487.256578][T27757] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  487.321738][T27759] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6791'.
[  487.765726][T27738] delete_channel: no stack
[  487.897021][T27812] netlink: 'syz.0.6806': attribute type 1 has an invalid length.
[  487.898264][T27819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6808'.
[  487.919103][T27812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6806'.
[  487.922652][T27812] openvswitch: netlink: Flow key attr not present in new flow.
[  487.954620][T27820] netlink: 'syz.1.6809': attribute type 1 has an invalid length.
[  488.494790][T27879] No such timeout policy "syz0"
[  488.507182][T27879] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6825'.
[  488.512848][T27879] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6825'.
[  489.065000][T27890] netlink: 'syz.0.6829': attribute type 13 has an invalid length.
[  489.068236][T27890] netlink: 'syz.0.6829': attribute type 17 has an invalid length.
[  489.091939][T27890] erspan0: left allmulticast mode
[  489.107695][T27890] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.111891][T27890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  489.117259][ T5898] lo speed is unknown, defaulting to 1000
[  489.119195][   T10] ip6_vti0 speed is unknown, defaulting to 1000
[  489.122242][   T10] syz2: Port: 1 Link ACTIVE
[  489.123747][ T5898] syz1: Port: 1 Link ACTIVE
[  489.125936][ T5898] ip6_vti0 speed is unknown, defaulting to 1000
[  489.418908][T27897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6831'.
[  489.423153][T27897] chnl_net:caif_netlink_parms(): no params data found
[  489.539779][T27907] pimreg: entered allmulticast mode
[  489.541899][T27905] pimreg: left allmulticast mode
[  489.597837][T27905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6833'.
[  489.795403][T27925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6840'.
[  489.798432][T27925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6840'.
[  489.802993][T27925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6840'.
[  489.805971][T27925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6840'.
[  489.808999][T27925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6840'.
[  489.812083][T27925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6840'.
[  489.815099][T27925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6840'.
[  489.817909][T27925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6840'.
[  490.239171][T27943] sctp: [Deprecated]: syz.0.6847 (pid 27943) Use of int in maxseg socket option.
[  490.239171][T27943] Use struct sctp_assoc_value instead
[  490.262246][T27940] lo speed is unknown, defaulting to 1000
[  490.264720][T27940] ip6_vti0 speed is unknown, defaulting to 1000
[  490.524589][T27963] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  490.549757][T27963] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  490.653164][T27940] wg1 speed is unknown, defaulting to 1000
[  490.657154][T27940] wg1 speed is unknown, defaulting to 1000
[  490.690299][T27974] netlink: 'syz.0.6856': attribute type 1 has an invalid length.
[  490.941419][T27995] lo speed is unknown, defaulting to 1000
[  490.966410][T27995] ip6_vti0 speed is unknown, defaulting to 1000
[  491.135833][T28011] syzkaller0: left promiscuous mode
[  491.139655][T28011] syzkaller0: left allmulticast mode
[  491.364783][T27995] wg1 speed is unknown, defaulting to 1000
[  491.367281][T27995] wg1 speed is unknown, defaulting to 1000
[  491.444778][T28040] lo speed is unknown, defaulting to 1000
[  491.447268][T28040] ip6_vti0 speed is unknown, defaulting to 1000
[  491.799285][T28040] wg1 speed is unknown, defaulting to 1000
[  491.826466][T28040] wg1 speed is unknown, defaulting to 1000
[  492.142941][T28075] lo speed is unknown, defaulting to 1000
[  492.146552][T28075] ip6_vti0 speed is unknown, defaulting to 1000
[  492.400937][T28075] wg1 speed is unknown, defaulting to 1000
[  492.403608][T28075] wg1 speed is unknown, defaulting to 1000
[  492.438818][T28092] bridge14: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  492.528859][T28100] openvswitch: netlink: Missing key (keys=40, expected=100)
[  492.545320][T28099] openvswitch: netlink: Missing key (keys=40, expected=100)
[  492.709091][T28117] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  492.957347][T28151] netlink: 'syz.2.6916': attribute type 1 has an invalid length.
[  493.304719][T28179] lo speed is unknown, defaulting to 1000
[  493.307199][T28179] ip6_vti0 speed is unknown, defaulting to 1000
[  493.471901][T28179] wg1 speed is unknown, defaulting to 1000
[  493.474562][T28179] wg1 speed is unknown, defaulting to 1000
[  494.210942][T28217] xt_hashlimit: max too large, truncated to 1048576
[  494.275160][T23629] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60
[  495.106187][T28251] __nla_validate_parse: 40 callbacks suppressed
[  495.106196][T28251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6942'.
[  495.337979][T28281] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6951'.
[  495.466929][T28295] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:512
[  495.496969][T28295] lo speed is unknown, defaulting to 1000
[  495.505962][T28295] ip6_vti0 speed is unknown, defaulting to 1000
[  495.554743][T28300] lo speed is unknown, defaulting to 1000
[  495.614748][T28303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6957'.
[  495.644138][T28300] ip6_vti0 speed is unknown, defaulting to 1000
[  495.781866][T28295] wg1 speed is unknown, defaulting to 1000
[  495.786224][T28295] wg1 speed is unknown, defaulting to 1000
[  495.971760][T28300] wg1 speed is unknown, defaulting to 1000
[  495.976952][T28300] wg1 speed is unknown, defaulting to 1000
[  496.292955][T28338] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6970'.
[  496.385207][T28349] netlink: 'syz.0.6972': attribute type 83 has an invalid length.
[  496.401064][T28351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6973'.
[  496.846350][T28386] netlink: 'syz.2.6984': attribute type 9 has an invalid length.
[  496.884550][T28386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6984'.
[  496.917312][T28390] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  497.086190][T28405] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6993'.
[  497.089041][T28405] .70: renamed from hsr0
[  497.095272][T28405] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  497.098520][T28405] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  497.103157][T28405] .70: entered allmulticast mode
[  497.105672][T28405] hsr_slave_0: entered allmulticast mode
[  497.110791][T28405] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  497.117909][T28407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6994'.
[  497.233912][T28422] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6998'.
[  500.371572][T28450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7004'.
[  500.411523][T28456] A link change request failed with some changes committed already. Interface vet0_virt_wif may have been left with an inconsistent configuration, please check.
[  500.730986][T28478] netlink: 'syz.2.7012': attribute type 1 has an invalid length.
[  500.785325][T28478] 8021q: adding VLAN 0 to HW filter on device bond20
[  500.789311][T28478] bond19: (slave bond20): making interface the new active one
[  500.792316][T28478] bond19: (slave bond20): Enslaving as an active interface with an up link
[  501.295630][T28492] netlink: 185624 bytes leftover after parsing attributes in process `syz.1.7016'.
[  501.536216][T28544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7027'.
[  501.540230][T28538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7028'.
[  501.579838][   T44] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  501.625089][T28548] sctp: [Deprecated]: syz.2.7030 (pid 28548) Use of int in maxseg socket option.
[  501.625089][T28548] Use struct sctp_assoc_value instead
[  502.329889][   T44] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  502.665729][T28605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7049'.
[  502.674923][T28605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7049'.
[  502.677726][T28605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7049'.
[  502.695510][T28605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7049'.
[  502.700067][T28605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7049'.
[  502.706015][T28605] tipc: Resetting bearer <eth:gre0>
[  502.731341][T28605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7049'.
[  502.908026][ T5897] lo speed is unknown, defaulting to 1000
[  502.908047][   T44] ip6_vti0 speed is unknown, defaulting to 1000
[  502.911091][   T12] bond18: (slave erspan0): link status definitely down, disabling slave
[  502.912124][   T44] syz2: Port: 1 Link DOWN
[  502.915581][ T5897] syz1: Port: 1 Link DOWN
[  502.924344][   T12] bond18: now running without any active interface!
[  502.927728][   T44] ip6_vti0 speed is unknown, defaulting to 1000
[  503.055069][T28627] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  503.497370][T28644] lo speed is unknown, defaulting to 1000
[  503.502265][T28644] ip6_vti0 speed is unknown, defaulting to 1000
[  503.772232][T28644] wg1 speed is unknown, defaulting to 1000
[  503.775605][T28644] wg1 speed is unknown, defaulting to 1000
[  503.959111][T28685] Bluetooth: hci2: Opcode 0x0401 failed: -22
[  504.182751][   T11] block nbd4: Possible stuck request ffff88810a308000: control (read@0,1024B). Runtime 120 seconds
[  504.188857][   T11] block nbd4: Possible stuck request ffff88810a308200: control (read@1024,1024B). Runtime 120 seconds
[  504.192363][   T11] block nbd4: Possible stuck request ffff88810a308400: control (read@2048,1024B). Runtime 120 seconds
[  504.195902][   T11] block nbd4: Possible stuck request ffff88810a308600: control (read@3072,1024B). Runtime 120 seconds
[  504.313007][T28734] syzkaller1: entered promiscuous mode
[  504.314796][T28734] syzkaller1: entered allmulticast mode
[  504.375683][T28745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  504.783668][T28794] syzkaller0: entered promiscuous mode
[  504.789646][T28794] syzkaller0: entered allmulticast mode
[  504.825011][T28796] netlink: 'syz.0.7109': attribute type 3 has an invalid length.
[  504.855948][T28798] sctp: [Deprecated]: syz.0.7110 (pid 28798) Use of struct sctp_assoc_value in delayed_ack socket option.
[  504.855948][T28798] Use struct sctp_sack_info instead
[  504.861549][T28798] sctp: [Deprecated]: syz.0.7110 (pid 28798) Use of struct sctp_assoc_value in delayed_ack socket option.
[  504.861549][T28798] Use struct sctp_sack_info instead
[  505.368406][T28810] tipc: Enabling of bearer <eth:vlan0> rejected, max 3 bearers permitted
[  505.443065][T28812] bond19: option arp_validate: invalid value (18446744073491447809)
[  505.446562][T28812] bond19 (unregistering): Released all slaves
[  505.472809][T28814] __nla_validate_parse: 61 callbacks suppressed
[  505.472819][T28814] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7114'.
[  505.527218][T28817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7115'.
[  506.412324][T28845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7122'.
[  506.415325][T28845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7122'.
[  506.460899][T28850] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.7123'.
[  506.464414][T28850] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  506.467991][T28850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7123'.
[  506.523117][T28855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7124'.
[  506.529722][T28855] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7124'.
[  506.825066][T28872] tipc: Resetting bearer <eth:gre0>
[  506.896283][ T5897] lo speed is unknown, defaulting to 1000
[  506.910675][ T5897] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  507.113438][T28881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7134'.
[  507.129957][ T5897] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  507.178932][T28882] vlan0: entered promiscuous mode
[  507.181472][T28882] bridge0: entered promiscuous mode
[  507.697127][T28892] x_tables: unsorted entry at hook 1
[  507.735278][T28895] netlink: 'syz.1.7139': attribute type 12 has an invalid length.
[  508.037877][T28919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7146'.
[  508.104551][T28919] netlink: 'syz.0.7146': attribute type 1 has an invalid length.
[  508.107171][T28919] block nbd0: Unsupported socket: should be TCP or UNIX.
[  508.958327][T28996] netlink: 'syz.2.7175': attribute type 1 has an invalid length.
[  509.141790][T29006] pim6reg1: tun_chr_ioctl cmd 21731
[  509.635826][T29029] netlink: 'syz.2.7187': attribute type 21 has an invalid length.
[  509.721289][T29035] netlink: 'syz.0.7190': attribute type 1 has an invalid length.
[  510.070207][T29073] netlink: 'syz.1.7203': attribute type 2 has an invalid length.
[  510.403483][T29097] netlink: 'syz.1.7208': attribute type 11 has an invalid length.
[  510.406770][T29097] netlink: 'syz.1.7208': attribute type 11 has an invalid length.
[  510.413689][T29097] netlink: 'syz.1.7208': attribute type 1 has an invalid length.
[  510.417295][T29097] netlink: 'syz.1.7208': attribute type 1 has an invalid length.
[  510.430934][T29099] netlink: 'syz.0.7209': attribute type 1 has an invalid length.
[  510.462523][T29101] netlink: 'syz.1.7210': attribute type 9 has an invalid length.
[  510.664689][T29107] __nla_validate_parse: 11 callbacks suppressed
[  510.664704][T29107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7212'.
[  510.955846][T29117] bond0: option all_slaves_active: invalid value (7)
[  510.961718][T29117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7216'.
[  511.012402][T29119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7217'.
[  511.015412][T29119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7217'.
[  511.412951][T29144] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7226'.
[  511.538612][T29167] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7232'.
[  511.711339][T29192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7241'.
[  511.718568][T29192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7241'.
[  512.100037][T29228] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  512.143307][T29233] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7255'.
[  512.169129][T29239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7256'.
[  512.322361][T29250] xt_l2tp: invalid flags combination: 8
[  512.428048][T29264] lo speed is unknown, defaulting to 1000
[  512.430862][T29255] nbd0: detected capacity change from 0 to 127
[  512.434357][T29264] ip6_vti0 speed is unknown, defaulting to 1000
[  512.455568][   T58] block nbd0: Receive control failed (result -104)
[  512.615416][T29275] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  512.693494][T29264] wg1 speed is unknown, defaulting to 1000
[  512.696515][T29264] wg1 speed is unknown, defaulting to 1000
[  512.883791][T29294] syzkaller0: entered promiscuous mode
[  512.885526][T29294] syzkaller0: entered allmulticast mode
[  512.954998][T29303] validate_nla: 2 callbacks suppressed
[  512.955011][T29303] netlink: 'syz.1.7274': attribute type 27 has an invalid length.
[  512.973117][T29303] openvswitch: netlink: Message has -2 unknown bytes.
[  512.976902][T29303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  513.570189][T29316] lo speed is unknown, defaulting to 1000
[  513.581187][T29316] ip6_vti0 speed is unknown, defaulting to 1000
[  513.952550][T29316] wg1 speed is unknown, defaulting to 1000
[  513.955264][T29316] wg1 speed is unknown, defaulting to 1000
[  514.238209][T29348] lo speed is unknown, defaulting to 1000
[  514.256917][T29348] ip6_vti0 speed is unknown, defaulting to 1000
[  514.490736][T29348] wg1 speed is unknown, defaulting to 1000
[  514.494587][T29348] wg1 speed is unknown, defaulting to 1000
[  514.641162][T29361] netlink: 'syz.2.7296': attribute type 1 has an invalid length.
[  515.089814][T29385] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  515.462722][T29398] pimreg: entered allmulticast mode
[  515.466458][T29397] pimreg: left allmulticast mode
[  515.672667][T29429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  515.699589][   T25] block nbd3: Possible stuck request ffff88810a290000: control (read@0,1024B). Runtime 180 seconds
[  515.703021][   T25] block nbd3: Possible stuck request ffff88810a290200: control (read@1024,1024B). Runtime 180 seconds
[  515.706636][   T25] block nbd3: Possible stuck request ffff88810a290400: control (read@2048,1024B). Runtime 180 seconds
[  515.710509][   T25] block nbd3: Possible stuck request ffff88810a290600: control (read@3072,1024B). Runtime 180 seconds
[  515.745313][T29436] __nla_validate_parse: 9 callbacks suppressed
[  515.745327][T29436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7316'.
[  515.865780][T29461] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7324'.
[  515.915923][T29467] tipc: Enabling of bearer <ib:macvlan0> rejected, max 3 bearers permitted
[  515.933307][T29467] bridge0: entered allmulticast mode
[  515.984183][T29469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7327'.
[  515.989743][T29469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7327'.
[  516.008083][T29469] xt_hashlimit: size too large, truncated to 1048576
[  516.012385][T29469] xt_hashlimit: max too large, truncated to 1048576
[  516.028771][T29469] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  516.320935][T29488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7331'.
[  516.323974][T29488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7331'.
[  516.326910][T29488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7331'.
[  517.116204][T29530] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7341'.
[  517.248289][T29542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7346'.
[  518.337463][T29588] @: renamed from veth0_vlan
[  518.538870][T29606] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7366'.
[  519.337284][T29667] netlink: 'syz.2.7385': attribute type 21 has an invalid length.
[  519.340067][T29667] netlink: 'syz.2.7385': attribute type 4 has an invalid length.
[  519.342841][T29667] netlink: 'syz.2.7385': attribute type 5 has an invalid length.
[  519.763925][ T5281] udevd[5281]: worker [18893] /devices/virtual/block/nbd3 timeout; kill it
[  519.766688][ T5281] udevd[5281]: seq 20137 '/devices/virtual/block/nbd3' killed
[  519.822873][T29717] bridge0: port 1(macvtap0) entered blocking state
[  519.825048][T29717] bridge0: port 1(macvtap0) entered disabled state
[  519.827618][T29717] macvtap0: entered allmulticast mode
[  519.832920][T29717] bridge0: entered allmulticast mode
[  519.836329][T29717] macvtap0: left allmulticast mode
[  519.837923][T29717] bridge0: left allmulticast mode
[  519.894725][T29727] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  519.921056][T29729] openvswitch: netlink: Invalid VLAN frame
[  520.242913][T29747] netlink: 'syz.2.7410': attribute type 1 has an invalid length.
[  520.738882][T29783] netlink: 'syz.2.7422': attribute type 1 has an invalid length.
[  521.000470][T29810] __nla_validate_parse: 79 callbacks suppressed
[  521.000481][T29810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7432'.
[  521.008698][T29818] netlink: 'syz.2.7435': attribute type 1 has an invalid length.
[  521.012822][T29818] netlink: 'syz.2.7435': attribute type 3 has an invalid length.
[  521.016582][T29818] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7435'.
[  521.027423][T29820] batadv_slave_0: entered promiscuous mode
[  521.041472][T29819] batadv_slave_0: left promiscuous mode
[  521.055158][T29822] netlink: 'syz.2.7437': attribute type 4 has an invalid length.
[  521.152434][T29835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7442'.
[  521.356262][T29846] x_tables: duplicate underflow at hook 2
[  522.135684][T29864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  522.400111][T29886] netlink: 34 bytes leftover after parsing attributes in process `syz.1.7460'.
[  522.626907][T29912] bond0: Error: Cannot enslave bond to itself.
[  522.708833][T29920] bridge11: entered promiscuous mode
[  522.711408][T29920] bridge11: entered allmulticast mode
[  534.259916][   T11] block nbd4: Possible stuck request ffff88810a308000: control (read@0,1024B). Runtime 150 seconds
[  534.263559][   T11] block nbd4: Possible stuck request ffff88810a308200: control (read@1024,1024B). Runtime 150 seconds
[  534.267447][   T11] block nbd4: Possible stuck request ffff88810a308400: control (read@2048,1024B). Runtime 150 seconds
[  534.271652][   T11] block nbd4: Possible stuck request ffff88810a308600: control (read@3072,1024B). Runtime 150 seconds
[  542.580656][   T25] block nbd0: Possible stuck request ffff88810a1e0000: control (read@0,1024B). Runtime 30 seconds
[  542.584843][   T25] block nbd0: Possible stuck request ffff88810a1e0200: control (read@1024,1024B). Runtime 30 seconds
[  542.589193][   T25] block nbd0: Possible stuck request ffff88810a1e0400: control (read@2048,1024B). Runtime 30 seconds
[  542.593946][   T25] block nbd0: Possible stuck request ffff88810a1e0600: control (read@3072,1024B). Runtime 30 seconds
[  545.779843][   T25] block nbd3: Possible stuck request ffff88810a290000: control (read@0,1024B). Runtime 210 seconds
[  545.784146][   T25] block nbd3: Possible stuck request ffff88810a290200: control (read@1024,1024B). Runtime 210 seconds
[  545.788394][   T25] block nbd3: Possible stuck request ffff88810a290400: control (read@2048,1024B). Runtime 210 seconds
[  545.792976][   T25] block nbd3: Possible stuck request ffff88810a290600: control (read@3072,1024B). Runtime 210 seconds
[  547.803091][T29953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7479'.
[  547.806589][T29953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7479'.
[  547.975204][T29980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7487'.
[  548.031296][T29988] 8021q: adding VLAN 0 to HW filter on device bond0
[  548.053111][ T5894] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  548.057653][ T5894] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  548.063983][ T5894] bond0: now running without any active interface!
[  548.219373][T30004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7492'.
[  548.223106][T30004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7492'.
[  548.858410][T30025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7498'.
[  549.279161][T30056] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7506'.
[  549.489250][T30071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7512'.
[  549.541393][T30073] sctp: [Deprecated]: syz.1.7513 (pid 30073) Use of int in maxseg socket option.
[  549.541393][T30073] Use struct sctp_assoc_value instead
[  549.893754][T30094] syzkaller1: entered promiscuous mode
[  549.895902][T30094] syzkaller1: entered allmulticast mode
[  549.936442][T30104] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  549.939900][T30104] syzkaller0: entered promiscuous mode
[  549.942101][T30104] syzkaller0: entered allmulticast mode
[  549.959899][T30104] tipc: Resetting bearer <eth:syzkaller0>
[  549.964833][T30103] tipc: Resetting bearer <eth:syzkaller0>
[  549.977973][T30103] tipc: Disabling bearer <eth:syzkaller0>
[  550.070274][T30108] delete_channel: no stack
[  550.190513][T30123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7528'.
[  550.251461][T30130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7532'.
[  550.326183][T30134] netlink: 'syz.2.7534': attribute type 1 has an invalid length.
[  550.712247][   T33] audit: type=1107 audit(1765964304.379:8): pid=30159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  550.828420][T30169] lo speed is unknown, defaulting to 1000
[  550.832184][T30169] ip6_vti0 speed is unknown, defaulting to 1000
[  550.890121][T12276] Bluetooth: hci1: command 0x0406 tx timeout
[  551.022216][T30183] sctp: [Deprecated]: syz.0.7551 (pid 30183) Use of int in max_burst socket option.
[  551.022216][T30183] Use struct sctp_assoc_value instead
[  551.028085][T30187] sctp: [Deprecated]: syz.0.7551 (pid 30187) Use of int in max_burst socket option.
[  551.028085][T30187] Use struct sctp_assoc_value instead
[  551.038656][T30185] lo speed is unknown, defaulting to 1000
[  551.045848][T30185] ip6_vti0 speed is unknown, defaulting to 1000
[  551.183894][T30169] wg1 speed is unknown, defaulting to 1000
[  551.186758][T30169] wg1 speed is unknown, defaulting to 1000
[  551.325282][T30185] wg1 speed is unknown, defaulting to 1000
[  551.327920][T30185] wg1 speed is unknown, defaulting to 1000
[  552.072827][T30229] batadv0: mtu less than device minimum
[  552.296842][T30242] xt_socket: unknown flags 0x50
[  552.443828][T30257] netlink: 'syz.2.7572': attribute type 1 has an invalid length.
[  552.476299][T30257] bond22: (slave xfrm1): The slave device specified does not support setting the MAC address
[  552.480145][T30257] bond22: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  552.484092][T30257] bond22: (slave xfrm1): making interface the new active one
[  552.486680][T30257] bond22: (slave xfrm1): Enslaving as an active interface with an up link
[  552.809968][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  552.846824][T30277] __nla_validate_parse: 8 callbacks suppressed
[  552.846840][T30277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7578'.
[  553.948481][T30305] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  553.951986][T30304] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  554.791948][T30314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7588'.
[  554.807614][T30314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7588'.
[  555.220709][T30359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7601'.
[  555.524103][T30386] yzk: option downdelay: invalid value (18446744073709547007)
[  555.526953][T30386] yzk: option downdelay: allowed values 0 - 2147483647
[  555.532466][T30386] yzk (unregistering): Released all slaves
[  555.664560][T30401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7611'.
[  555.697904][T30405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7612'.
[  555.751872][T30408] 8021q: adding VLAN 0 to HW filter on device bond22
[  555.758621][T30408] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.794393][T30414] xt_ecn: cannot match TCP bits for non-tcp packets
[  555.861945][T30422] xt_TCPMSS: Only works on TCP SYN packets
[  555.864154][T30423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7617'.
[  555.868491][T30423] netlink: 63 bytes leftover after parsing attributes in process `syz.2.7617'.
[  555.872435][T30422] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20002
[  555.952349][T30431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7622'.
[  555.956784][T30431] --map-set only usable from mangle table
[  555.962982][T30431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7622'.
[  556.707085][T30526] netlink: 'syz.1.7655': attribute type 1 has an invalid length.
[  556.715806][T30526] netlink: 'syz.1.7655': attribute type 2 has an invalid length.
[  556.767362][T30527] netlink: 'syz.1.7655': attribute type 1 has an invalid length.
[  556.770085][T30527] netlink: 'syz.1.7655': attribute type 2 has an invalid length.
[  558.023722][T30555] __nla_validate_parse: 3 callbacks suppressed
[  558.023735][T30555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7663'.
[  558.041992][T30555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7663'.
[  558.045647][T30555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7663'.
[  558.049434][T30555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7663'.
[  558.053715][T30555] netlink: 'syz.1.7663': attribute type 6 has an invalid length.
[  558.156094][T30576] sctp: [Deprecated]: syz.2.7665 (pid 30576) Use of struct sctp_assoc_value in delayed_ack socket option.
[  558.156094][T30576] Use struct sctp_sack_info instead
[  558.241139][T30582] lo speed is unknown, defaulting to 1000
[  558.244804][T30582] ip6_vti0 speed is unknown, defaulting to 1000
[  558.307907][T30586] lo speed is unknown, defaulting to 1000
[  558.409452][T30586] ip6_vti0 speed is unknown, defaulting to 1000
[  558.515382][T30582] wg1 speed is unknown, defaulting to 1000
[  558.518080][T30582] wg1 speed is unknown, defaulting to 1000
[  558.693883][T30586] wg1 speed is unknown, defaulting to 1000
[  558.697560][T30586] wg1 speed is unknown, defaulting to 1000
[  558.829728][T30611] x_tables: duplicate underflow at hook 1
[  558.835547][T30611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7676'.
[  558.883456][T30614] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20000
[  558.886281][T30614] pim6reg1: entered promiscuous mode
[  558.888045][T30614] pim6reg1: entered allmulticast mode
[  559.094900][T30619] lo speed is unknown, defaulting to 1000
[  559.098619][T30619] ip6_vti0 speed is unknown, defaulting to 1000
[  559.277091][T30638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7683'.
[  559.392164][T30619] wg1 speed is unknown, defaulting to 1000
[  559.397282][T30619] wg1 speed is unknown, defaulting to 1000
[  559.678691][T30654] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7689'.
[  559.856908][T30668] lo speed is unknown, defaulting to 1000
[  559.877746][T30668] ip6_vti0 speed is unknown, defaulting to 1000
[  559.969875][T30677] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7698'.
[  559.984530][T30678] sctp: [Deprecated]: syz.2.7698 (pid 30678) Use of int in max_burst socket option deprecated.
[  559.984530][T30678] Use struct sctp_assoc_value instead
[  560.151092][T30686] lo speed is unknown, defaulting to 1000
[  560.153766][T30686] ip6_vti0 speed is unknown, defaulting to 1000
[  560.248729][T30668] wg1 speed is unknown, defaulting to 1000
[  560.252051][T30668] wg1 speed is unknown, defaulting to 1000
[  560.356866][T30692] xt_CT: No such helper "netbios-ns"
[  560.423592][T30704] netlink: 'syz.1.7704': attribute type 4 has an invalid length.
[  560.424670][T30686] wg1 speed is unknown, defaulting to 1000
[  560.427471][T30704] netlink: 'syz.1.7704': attribute type 4 has an invalid length.
[  560.429046][T30686] wg1 speed is unknown, defaulting to 1000
[  560.534022][T30709] syzkaller1: entered promiscuous mode
[  560.535894][T30709] syzkaller1: entered allmulticast mode
[  560.559966][T30712] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7706'.
[  560.563741][T30712] delete_channel: no stack
[  560.739296][T30738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7712'.
[  561.001425][T30764] netlink: 'syz.0.7720': attribute type 1 has an invalid length.
[  561.030170][T30764] bond23: entered promiscuous mode
[  561.032490][T30764] 8021q: adding VLAN 0 to HW filter on device bond23
[  561.154650][T30780] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  561.826911][T30800] sctp: [Deprecated]: syz.2.7730 (pid 30800) Use of struct sctp_assoc_value in delayed_ack socket option.
[  561.826911][T30800] Use struct sctp_sack_info instead
[  561.891913][T30803] netlink: 'syz.2.7731': attribute type 4 has an invalid length.
[  562.116186][T30823] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  562.670938][T30879] netlink: 'syz.2.7751': attribute type 18 has an invalid length.
[  562.981216][T30900] x_tables: duplicate underflow at hook 1
[  563.956295][T30925] netlink: 'syz.0.7770': attribute type 1 has an invalid length.
[  563.970979][T30925] netlink: 'syz.0.7770': attribute type 13 has an invalid length.
[  564.000396][T30927] __nla_validate_parse: 8 callbacks suppressed
[  564.000411][T30927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7771'.
[  564.080032][T28614] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  564.110381][T28614] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  564.336259][   T11] block nbd4: Possible stuck request ffff88810a308000: control (read@0,1024B). Runtime 180 seconds
[  564.340150][   T11] block nbd4: Possible stuck request ffff88810a308200: control (read@1024,1024B). Runtime 180 seconds
[  564.343879][   T11] block nbd4: Possible stuck request ffff88810a308400: control (read@2048,1024B). Runtime 180 seconds
[  564.347227][   T11] block nbd4: Possible stuck request ffff88810a308600: control (read@3072,1024B). Runtime 180 seconds
[  564.459373][T30952] netlink: 'syz.1.7779': attribute type 11 has an invalid length.
[  564.462393][T30952] netlink: 'syz.1.7779': attribute type 11 has an invalid length.
[  564.464792][T30952] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7779'.
[  564.633806][T30964] netlink: 277 bytes leftover after parsing attributes in process `syz.1.7783'.
[  564.638663][T30964] netlink: 'syz.1.7783': attribute type 1 has an invalid length.
[  564.837833][T30974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7787'.
[  564.844711][T30977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7788'.
[  564.877892][T30977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7788'.
[  564.941892][T30988] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  565.025134][T30993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7795'.
[  565.094579][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7798'.
[  565.097291][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7798'.
[  565.153990][T31008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7801'.
[  565.174250][T31008] macvlan0: entered promiscuous mode
[  565.176291][T31008] bond0: entered promiscuous mode
[  565.239605][ T5281] udevd[5281]: worker [18939] /devices/virtual/block/nbd4 timeout; kill it
[  565.242501][ T5281] udevd[5281]: seq 21478 '/devices/virtual/block/nbd4' killed
[  565.707003][T31055] netlink: 'syz.1.7815': attribute type 2 has an invalid length.
[  565.852576][T31065] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001
[  565.855331][T31065] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20001
[  565.937680][T31069] team0: Caught tx_queue_len zero misconfig
[  566.185359][T31101] IPVS: set_ctl: invalid protocol: 41 172.30.0.3:4
[  566.301451][T31110] lo speed is unknown, defaulting to 1000
[  566.306439][T31111] lo speed is unknown, defaulting to 1000
[  566.308696][T31110] ip6_vti0 speed is unknown, defaulting to 1000
[  566.346631][T31112] lo speed is unknown, defaulting to 1000
[  566.390847][T31111] ip6_vti0 speed is unknown, defaulting to 1000
[  566.478142][T31110] wg1 speed is unknown, defaulting to 1000
[  566.481386][T31110] wg1 speed is unknown, defaulting to 1000
[  566.533396][T31112] ip6_vti0 speed is unknown, defaulting to 1000
[  566.687171][T31111] wg1 speed is unknown, defaulting to 1000
[  566.690612][T31111] wg1 speed is unknown, defaulting to 1000
[  566.853309][T31121] xt_hashlimit: max too large, truncated to 1048576
[  566.859771][T31122] xt_hashlimit: max too large, truncated to 1048576
[  567.020297][T31112] wg1 speed is unknown, defaulting to 1000
[  567.031263][T31112] wg1 speed is unknown, defaulting to 1000
[  567.604328][T31161] smc: removing ib device syz2
[  567.737126][T31168] netlink: 'syz.2.7848': attribute type 1 has an invalid length.
[  568.359321][T31205] netlink: 'syz.2.7863': attribute type 101 has an invalid length.
[  568.384551][T31205] netlink: 'syz.2.7863': attribute type 7 has an invalid length.
[  568.681577][T31239] sctp: [Deprecated]: syz.1.7875 (pid 31239) Use of struct sctp_assoc_value in delayed_ack socket option.
[  568.681577][T31239] Use struct sctp_sack_info instead
[  568.753369][   T13] syzkaller0: tun_net_xmit 76
[  568.756500][   T13] syzkaller0: tun_net_xmit 48
[  568.759023][T31243] syzkaller0: create flow: hash 3282442484 index 1
[  568.779771][T28614] syzkaller0: tun_net_xmit 76
[  568.798453][T31242] syzkaller0: delete flow: hash 3282442484 index 1
[  569.751126][T31260] __nla_validate_parse: 13 callbacks suppressed
[  569.751137][T31260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7882'.
[  569.756158][T31260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7882'.
[  570.070185][T31284] No such timeout policy "syz1"
[  570.490263][T31329] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  570.682042][T31354] netlink: 'syz.0.7913': attribute type 9 has an invalid length.
[  570.794676][T31369] Bluetooth: hci1: too big key_count value 29096
[  570.821850][T31373] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7917'.
[  570.825106][T31363] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7917'.
[  571.256267][T31404] openvswitch: netlink: Multiple metadata blocks provided
[  571.498494][T31423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7934'.
[  571.512378][T31423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7934'.
[  571.650966][T31441] netlink: 'syz.1.7940': attribute type 5 has an invalid length.
[  571.694868][T31446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7942'.
[  571.761506][T31453] ipip0: entered promiscuous mode
[  571.763717][T31453] ipip0: entered allmulticast mode
[  571.768436][T31453] sctp: [Deprecated]: syz.0.7944 (pid 31453) Use of int in max_burst socket option.
[  571.768436][T31453] Use struct sctp_assoc_value instead
[  571.840087][T31466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7948'.
[  571.858776][T31468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7950'.
[  571.862749][T31468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7950'.
[  572.102053][T31490] netlink: 'syz.0.7957': attribute type 1 has an invalid length.
[  572.106030][T31493] batadv_slave_0: entered promiscuous mode
[  572.114096][T31493] batadv_slave_0: entered allmulticast mode
[  572.578451][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.578463][T31562] unable to load match
[  572.597900][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.597911][T31562] unable to load match
[  572.601868][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.601875][T31562] unable to load match
[  572.605423][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.605432][T31562] unable to load match
[  572.611244][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.611252][T31562] unable to load match
[  572.615476][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.615483][T31562] unable to load match
[  572.619109][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.619116][T31562] unable to load match
[  572.623774][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.623782][T31562] unable to load match
[  572.627587][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.627594][T31562] unable to load match
[  572.644481][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.644492][T31562] unable to load match
[  572.648642][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.648653][T31562] unable to load match
[  572.654836][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.654846][T31562] unable to load match
[  572.665436][   T25] block nbd0: Possible stuck request ffff88810a1e0000: control (read@0,1024B). Runtime 60 seconds
[  572.668732][   T25] block nbd0: Possible stuck request ffff88810a1e0200: control (read@1024,1024B). Runtime 60 seconds
[  572.672593][   T25] block nbd0: Possible stuck request ffff88810a1e0400: control (read@2048,1024B). Runtime 60 seconds
[  572.676149][   T25] block nbd0: Possible stuck request ffff88810a1e0600: control (read@3072,1024B). Runtime 60 seconds
[  572.682391][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.682400][T31562] unable to load match
[  572.687895][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.687904][T31562] unable to load match
[  572.692297][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.692304][T31562] unable to load match
[  572.695970][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.695976][T31562] unable to load match
[  572.699473][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.699479][T31562] unable to load match
[  572.704704][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.704711][T31562] unable to load match
[  572.708672][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.708679][T31562] unable to load match
[  572.712359][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.712365][T31562] unable to load match
[  572.715890][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.715896][T31562] unable to load match
[  572.719437][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.719443][T31562] unable to load match
[  572.724314][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.724321][T31562] unable to load match
[  572.727837][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.727842][T31562] unable to load match
[  572.732076][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.732082][T31562] unable to load match
[  572.735732][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.735739][T31562] unable to load match
[  572.739445][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.739455][T31562] unable to load match
[  572.743673][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.743680][T31562] unable to load match
[  572.747245][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.747252][T31562] unable to load match
[  572.751475][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.751482][T31562] unable to load match
[  572.755149][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.755187][T31562] unable to load match
[  572.758699][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.758705][T31562] unable to load match
[  572.762575][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.762582][T31562] unable to load match
[  572.766210][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.766217][T31562] unable to load match
[  572.769916][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.769923][T31562] unable to load match
[  572.773570][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.773579][T31562] unable to load match
[  572.777204][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.777210][T31562] unable to load match
[  572.781336][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.781343][T31562] unable to load match
[  572.784940][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.784948][T31562] unable to load match
[  572.788535][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.788541][T31562] unable to load match
[  572.792330][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.792336][T31562] unable to load match
[  572.795860][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.795866][T31562] unable to load match
[  572.799465][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.799471][T31562] unable to load match
[  572.803283][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.803290][T31562] unable to load match
[  572.806764][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.806771][T31562] unable to load match
[  572.810779][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.810786][T31562] unable to load match
[  572.814444][T31562] policy can only be matched on NF_INET_PRE_ROUTING
[  572.814454][T31562] unable to load match
[  573.631014][T31608] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  573.805998][T31628] netlink: 'syz.1.8003': attribute type 5 has an invalid length.
[  574.016786][T31655] lo speed is unknown, defaulting to 1000
[  574.087289][T31662] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  574.108578][T31662] syzkaller0: entered promiscuous mode
[  574.118348][T31662] syzkaller0: entered allmulticast mode
[  574.123659][T31662] tipc: Resetting bearer <eth:syzkaller0>
[  574.126771][T31655] wg1 speed is unknown, defaulting to 1000
[  574.129343][T31655] wg1 speed is unknown, defaulting to 1000
[  574.178368][T31661] tipc: Resetting bearer <eth:syzkaller0>
[  574.194353][T31661] tipc: Disabling bearer <eth:syzkaller0>
[  574.469474][T31689] delete_channel: no stack
[  574.713522][T31703] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  574.786449][T31722] lo speed is unknown, defaulting to 1000
[  574.902429][T31722] wg1 speed is unknown, defaulting to 1000
[  574.904920][T31722] wg1 speed is unknown, defaulting to 1000
[  575.633309][T31738] Cannot find del_set index 4 as target
[  575.702083][T31749] __nla_validate_parse: 18 callbacks suppressed
[  575.702097][T31749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8042'.
[  575.707355][T31748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8043'.
[  575.709019][T31749] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8042'.
[  575.717122][T31748] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8043'.
[  575.780930][T31757] sctp: [Deprecated]: syz.1.8045 (pid 31757) Use of struct sctp_assoc_value in delayed_ack socket option.
[  575.780930][T31757] Use struct sctp_sack_info instead
[  575.833620][T31761] netlink: 'syz.0.8048': attribute type 3 has an invalid length.
[  575.857671][   T25] block nbd3: Possible stuck request ffff88810a290000: control (read@0,1024B). Runtime 240 seconds
[  575.867183][   T25] block nbd3: Possible stuck request ffff88810a290200: control (read@1024,1024B). Runtime 240 seconds
[  575.870567][   T25] block nbd3: Possible stuck request ffff88810a290400: control (read@2048,1024B). Runtime 240 seconds
[  575.873952][   T25] block nbd3: Possible stuck request ffff88810a290600: control (read@3072,1024B). Runtime 240 seconds
[  575.921257][T31768] netlink: 'syz.0.8050': attribute type 3 has an invalid length.
[  575.972491][T31775] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8053'.
[  576.093369][T31792] lo speed is unknown, defaulting to 1000
[  576.136839][T31797] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  576.152420][T31797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8060'.
[  576.217604][T31792] wg1 speed is unknown, defaulting to 1000
[  576.220631][T31792] wg1 speed is unknown, defaulting to 1000
[  576.293489][T31807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8064'.
[  576.296356][T31807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8064'.
[  576.388810][T31815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8067'.
[  576.388846][T31816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8067'.
[  577.179027][T31826] bond24: option fail_over_mac: invalid value (127)
[  577.185665][T31826] bond24 (unregistering): Released all slaves
[  577.298710][T31840] netlink: 'syz.2.8075': attribute type 27 has an invalid length.
[  577.316980][T31841] erspan0: left allmulticast mode
[  577.322912][T31841] veth0_vlan: left allmulticast mode
[  577.331382][T31841] macvlan0: left promiscuous mode
[  577.333649][T31841] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  577.340640][T31841] bond6: left allmulticast mode
[  577.348013][T31841] tipc: Resetting bearer <eth:syzkaller0>
[  577.350497][T31841] syzkaller0: left promiscuous mode
[  577.352181][T31841] syzkaller0: left allmulticast mode
[  577.354608][T31841] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[  577.361982][T31841] macvtap1: left promiscuous mode
[  577.365177][T31841] veth15: left promiscuous mode
[  577.367043][T31841] ip6gretap2: left promiscuous mode
[  577.368647][T31841] ip6gretap2: left allmulticast mode
[  577.371342][T31841] gretap5: left promiscuous mode
[  577.373116][T31841] veth19: left promiscuous mode
[  577.374893][T31841] bridge9: left allmulticast mode
[  577.376683][T31841] veth25: left promiscuous mode
[  577.378381][T31841] ip6gretap4: left allmulticast mode
[  577.381360][T31841] bridge0: left allmulticast mode
[  577.385124][T31841] bridge11: left promiscuous mode
[  577.386710][T31841] bridge11: left allmulticast mode
[  577.465330][T31841] hsr_slave_0: left promiscuous mode
[  577.535560][T31854] bridge0: port 1(team0) entered blocking state
[  577.537639][T31854] bridge0: port 1(team0) entered disabled state
[  577.540290][T31854] team0: entered allmulticast mode
[  577.542378][T31854] geneve0: entered allmulticast mode
[  577.547170][T31854] team0: entered promiscuous mode
[  577.549193][T31854] geneve0: entered promiscuous mode
[  577.582960][T31856] syzkaller0: entered promiscuous mode
[  577.585167][T31856] syzkaller0: entered allmulticast mode
[  577.650170][T31861] netlink: 'syz.1.8082': attribute type 1 has an invalid length.
[  577.756241][T31881] netlink: 'syz.1.8090': attribute type 10 has an invalid length.
[  577.758961][T31881] team0: Cannot enslave team device to itself
[  578.844970][T31924] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  578.848119][T31924] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  579.059262][T31950] pim6reg1: entered promiscuous mode
[  579.064040][T31950] pim6reg1: entered allmulticast mode
[  579.235937][T31966] lo speed is unknown, defaulting to 1000
[  579.262376][T31970] openvswitch: netlink: Flow actions attr not present in new flow.
[  579.266939][T31971] openvswitch: netlink: Flow actions attr not present in new flow.
[  579.393636][T31978] bond24: option mode: invalid value (254)
[  579.399857][T31978] bond24 (unregistering): Released all slaves
[  579.418322][T31966] wg1 speed is unknown, defaulting to 1000
[  579.421216][T31966] wg1 speed is unknown, defaulting to 1000
[  579.565477][T31992] x_tables: duplicate underflow at hook 2
[  580.740058][ T5898] page_pool_release_retry() stalled pool shutdown: id 101, 1 inflight 60 sec
[  580.919941][T32018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  581.099730][T32032] syzkaller0: entered promiscuous mode
[  581.109595][T32032] syzkaller0: entered allmulticast mode
[  581.283871][T32032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  581.325056][T32045] lo speed is unknown, defaulting to 1000
[  581.378514][T32052] __nla_validate_parse: 12 callbacks suppressed
[  581.378530][T32052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8142'.
[  581.424087][T32045] wg1 speed is unknown, defaulting to 1000
[  581.428313][T32045] wg1 speed is unknown, defaulting to 1000
[  581.584570][T32062] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8146'.
[  581.681933][T32068] veth0_to_bridge: entered promiscuous mode
[  581.684961][T32067] veth0_to_bridge: left promiscuous mode
[  581.820345][T32023] tipc: Resetting bearer <eth:syzkaller0>
[  581.840768][T32023] tipc: Disabling bearer <eth:syzkaller0>
[  581.962270][T32084] syzkaller0: entered promiscuous mode
[  581.964534][T32084] syzkaller0: entered allmulticast mode
[  582.088534][T32093] netlink: 'syz.0.8157': attribute type 21 has an invalid length.
[  582.091714][T32093] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8157'.
[  582.095420][T32093] netlink: 'syz.0.8157': attribute type 4 has an invalid length.
[  582.098517][T32093] netlink: 'syz.0.8157': attribute type 3 has an invalid length.
[  582.102262][T32093] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8157'.
[  582.191922][T32105] syzkaller0: entered promiscuous mode
[  582.193675][T32105] syzkaller0: entered allmulticast mode
[  582.217908][T32099] netlink: 'syz.1.8160': attribute type 4 has an invalid length.
[  582.223801][T32099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8160'.
[  582.342564][T32111] netlink: 'syz.1.8164': attribute type 1 has an invalid length.
[  582.345447][T32111] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8164'.
[  582.409955][T32116] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8166'.
[  582.418765][T32116] xt_ecn: cannot match TCP bits for non-tcp packets
[  582.545841][T32129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8171'.
[  582.638343][T32137] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8173'.
[  582.654953][T32137] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  582.716802][T32147] ip6t_srh: unknown srh invflags BA61
[  582.721632][T32147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8177'.
[  582.822097][T32160] lo speed is unknown, defaulting to 1000
[  582.982325][T32160] wg1 speed is unknown, defaulting to 1000
[  582.986012][T32160] wg1 speed is unknown, defaulting to 1000
[  583.185103][T32182] dvmrp8: entered allmulticast mode
[  583.201133][T32184] tipc: Failed to remove unknown binding: 66,1,1/3801844120:3143942649/3143942651
[  583.209913][T12111] Bluetooth: hci1: command 0x0406 tx timeout
[  583.226004][T32184] tipc: Failed to remove unknown binding: 66,1,1/3801844120:3143942649/3143942651
[  583.230587][T32184] tipc: Failed to remove unknown binding: 66,1,1/3801844120:3143942649/3143942651
[  583.402927][T32195] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  583.563411][T32202] netlink: 'syz.0.8194': attribute type 1 has an invalid length.
[  583.569394][T32202] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  584.058819][T32231] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  584.161739][T32235] bond0: option arp_validate: invalid value (55553)
[  584.377691][T32250] bond24: entered promiscuous mode
[  584.380037][T32250] bond24: entered allmulticast mode
[  584.382568][T32250] 8021q: adding VLAN 0 to HW filter on device bond24
[  584.397526][T32253] siw: device registration error -23
[  585.312380][T32280] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  585.562623][T32302] syzkaller0: entered promiscuous mode
[  585.565009][T32302] syzkaller0: entered allmulticast mode
[  585.738652][T32314] netlink: 'syz.1.8230': attribute type 1 has an invalid length.
[  585.815295][T32327] xt_hashlimit: max too large, truncated to 1048576
[  585.940891][T32337] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  586.283715][T32376] can: request_module (can-proto-5) failed.
[  586.287979][T32379] netlink: 'syz.2.8254': attribute type 4 has an invalid length.
[  586.399804][T32388] __nla_validate_parse: 9 callbacks suppressed
[  586.399821][T32388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8252'.
[  586.601406][T32410] xt_HMARK: spi-set and port-set can't be combined
[  586.757027][T32423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8266'.
[  586.776771][T32425] netlink: 'syz.0.8270': attribute type 11 has an invalid length.
[  586.779224][T32425] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8270'.
[  587.481315][T32423] batman_adv: batadv0: Removing interface: batadv_slave_1
[  587.566900][T32459] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8279'.
[  587.637532][T32465] sock: sock_timestamping_bind_phc: sock not bind to device
[  587.716784][T32469] sctp: [Deprecated]: syz.2.8285 (pid 32469) Use of struct sctp_assoc_value in delayed_ack socket option.
[  587.716784][T32469] Use struct sctp_sack_info instead
[  587.723648][T32469] sctp: [Deprecated]: syz.2.8285 (pid 32469) Use of struct sctp_assoc_value in delayed_ack socket option.
[  587.723648][T32469] Use struct sctp_sack_info instead
[  587.732194][T32471] netlink: 'syz.0.8284': attribute type 3 has an invalid length.
[  588.005559][T32494] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8291'.
[  588.144182][T32509] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  588.244413][T32516] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8300'.
[  588.905835][ T5281] udevd[5281]: worker [27456] /devices/virtual/block/nbd0 is taking a long time
[  589.017579][T32568] geneve0: entered allmulticast mode
[  589.051864][T32575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8321'.
[  589.055616][T32575] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.8321'.
[  589.968694][T32606] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32)
[  590.020377][T32611] netlink: 'syz.1.8334': attribute type 15 has an invalid length.
[  590.096241][T32624] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  590.167963][T32626] tipc: Resetting bearer <eth:syzkaller0>
[  590.251956][T32636] netlink: 'syz.2.8341': attribute type 1 has an invalid length.
[  590.285474][T32638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8343'.
[  590.465715][T32669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8351'.
[  590.544382][T32678] netlink: 'syz.2.8354': attribute type 4 has an invalid length.
[  591.041963][T32728] syzkaller1: entered promiscuous mode
[  591.043666][T32728] syzkaller1: entered allmulticast mode
[  591.225958][T32745] netlink: 'syz.2.8375': attribute type 1 has an invalid length.
[  591.239449][T32745] 8021q: adding VLAN 0 to HW filter on device bond25
[  591.246229][T32745] netlink: 'syz.2.8375': attribute type 1 has an invalid length.
[  591.282908][T32747] syzkaller0: left promiscuous mode
[  591.284525][T32747] syzkaller0: left allmulticast mode
[  591.440754][T32762] __nla_validate_parse: 4 callbacks suppressed
[  591.440768][T32762] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8379'.
[  591.478032][  T301] openvswitch: netlink: EtherType 50a is less than min 600
[  591.625446][  T306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8382'.
[  592.198898][  T316] syzkaller0: entered promiscuous mode
[  592.200762][  T316] syzkaller0: entered allmulticast mode
[  592.229983][  T314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  592.323604][  T327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8390'.
[  592.333661][  T327] netlink: 'syz.2.8390': attribute type 1 has an invalid length.
[  592.359947][  T327] bond26: entered promiscuous mode
[  592.361887][  T327] 8021q: adding VLAN 0 to HW filter on device bond26
[  592.391144][  T335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8392'.
[  592.534941][  T339] netlink: 124 bytes leftover after parsing attributes in process `syz.2.8393'.
[  592.640321][  T367] bond0: Device is already in use.
[  592.697895][  T375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8406'.
[  592.701881][  T375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8406'.
[  592.704898][  T375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8406'.
[  592.707676][  T375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8406'.
[  592.720624][  T375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8406'.
[  592.750749][  T383] netlink: zone id is out of range
[  592.752416][  T383] netlink: zone id is out of range
[  592.756966][  T383] netlink: zone id is out of range
[  592.758575][  T383] netlink: zone id is out of range
[  592.761572][  T383] netlink: zone id is out of range
[  592.763507][  T383] netlink: zone id is out of range
[  592.765111][  T383] netlink: get zone limit has 4 unknown bytes
[  592.890123][  T386] wg1 speed is unknown, defaulting to 1000
[  592.893014][  T386] wg1 speed is unknown, defaulting to 1000
[  593.095446][  T418] netlink: 'syz.2.8417': attribute type 10 has an invalid length.
[  593.482516][  T444] wg1 speed is unknown, defaulting to 1000
[  593.485096][  T444] wg1 speed is unknown, defaulting to 1000
[  593.725393][  T486] netlink: 'syz.1.8438': attribute type 1 has an invalid length.
[  593.728284][  T487] netlink: 'syz.1.8438': attribute type 1 has an invalid length.
[  593.743727][  T486] 8021q: adding VLAN 0 to HW filter on device bond19
[  593.761590][  T487] bond19: (slave veth35): Enslaving as an active interface with a down link
[  593.767361][  T486] bond19: (slave dummy0): making interface the new active one
[  593.770984][  T486] dummy0: entered promiscuous mode
[  593.772745][  T486] bond19: (slave dummy0): Enslaving as an active interface with an up link
[  593.850157][  T486] bond19 (unregistering): (slave veth35): Releasing active interface
[  593.856494][  T486] bond19 (unregistering): (slave dummy0): Releasing active interface
[  593.862757][  T486] bond19 (unregistering): Released all slaves
[  594.116369][  T498] x_tables: duplicate underflow at hook 1
[  594.410340][   T11] block nbd4: Possible stuck request ffff88810a308000: control (read@0,1024B). Runtime 210 seconds
[  594.414618][   T11] block nbd4: Possible stuck request ffff88810a308200: control (read@1024,1024B). Runtime 210 seconds
[  594.417802][   T11] block nbd4: Possible stuck request ffff88810a308400: control (read@2048,1024B). Runtime 210 seconds
[  594.421328][   T11] block nbd4: Possible stuck request ffff88810a308600: control (read@3072,1024B). Runtime 210 seconds
[  594.737837][  T566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.806783][  T573] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .	΁*]
[  594.921037][  T588] xt_hashlimit: invalid rate
[  594.925298][  T588] sctp: [Deprecated]: syz.2.8471 (pid 588) Use of int in maxseg socket option.
[  594.925298][  T588] Use struct sctp_assoc_value instead
[  595.176876][  T616] Cannot find del_set index 4 as target
[  595.302968][  T624] netlink: 'syz.1.8483': attribute type 32 has an invalid length.
[  595.916897][  T607] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  596.557570][  T750] netlink: 'syz.0.8523': attribute type 1 has an invalid length.
[  596.583576][  T750] 8021q: adding VLAN 0 to HW filter on device bond26
[  596.597112][  T750] veth23: entered promiscuous mode
[  596.601663][  T750] bond26: (slave veth23): Enslaving as an active interface with a down link
[  596.606378][  T750] __nla_validate_parse: 112 callbacks suppressed
[  596.606387][  T750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8523'.
[  596.611781][  T750] erspan0: entered allmulticast mode
[  596.614291][  T750] bond18: (slave erspan0): Releasing active interface
[  596.619238][  T750] bond26: (slave erspan0): making interface the new active one
[  596.622728][  T750] erspan0: entered promiscuous mode
[  596.624590][  T750] bond26: (slave erspan0): Enslaving as an active interface with an up link
[  596.650866][  T760] wg1: Caught tx_queue_len zero misconfig
[  596.852479][  T772] nbd: must specify a device to reconfigure
[  596.938958][  T776] netlink: 'syz.0.8532': attribute type 2 has an invalid length.
[  597.021771][  T785] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8535'.
[  597.025730][  T785] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8535'.
[  597.112873][  T794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8537'.
[  597.373481][  T826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8545'.
[  597.464797][  T822] wg1 speed is unknown, defaulting to 1000
[  597.467980][  T822] wg1 speed is unknown, defaulting to 1000
[  597.713393][  T852] x_tables: ip_tables: ah match: only valid for protocol 51
[  597.778896][  T861] ip6t_srh: unknown srh invflags BA61
[  597.873881][  T875] netlink: 'syz.0.8563': attribute type 3 has an invalid length.
[  597.876252][  T875] netlink: 666 bytes leftover after parsing attributes in process `syz.0.8563'.
[  597.890132][  T875] netlink: 'syz.0.8563': attribute type 3 has an invalid length.
[  597.898216][  T875] netlink: 666 bytes leftover after parsing attributes in process `syz.0.8563'.
[  597.913961][  T875] netlink: 'syz.0.8563': attribute type 3 has an invalid length.
[  597.919874][  T875] netlink: 666 bytes leftover after parsing attributes in process `syz.0.8563'.
[  597.929894][  T875] netlink: 'syz.0.8563': attribute type 3 has an invalid length.
[  597.932491][  T875] netlink: 666 bytes leftover after parsing attributes in process `syz.0.8563'.
[  597.941375][  T875] netlink: 666 bytes leftover after parsing attributes in process `syz.0.8563'.
[  598.196909][  T917] sctp: [Deprecated]: syz.2.8572 (pid 917) Use of int in max_burst socket option deprecated.
[  598.196909][  T917] Use struct sctp_assoc_value instead
[  598.506584][   T33] audit: type=1800 audit(1765964352.169:9): pid=948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8577" name="memory.events" dev="tmpfs" ino=15093 res=0 errno=0
[  598.572913][  T956] openvswitch: netlink: Flow actions attr not present in new flow.
[  598.644675][  T965] tipc: Enabling of bearer <eth:gre0> rejected, max 3 bearers permitted
[  598.648637][  T965] validate_nla: 61 callbacks suppressed
[  598.648646][  T965] netlink: 'syz.1.8581': attribute type 3 has an invalid length.
[  598.657604][  T965] macvtap0: entered allmulticast mode
[  598.666860][  T965] macvtap0: left allmulticast mode
[  598.766907][  T974] syzkaller1: entered promiscuous mode
[  598.771129][  T974] syzkaller1: entered allmulticast mode
[  599.111960][ T1005] tunl0: Caught tx_queue_len zero misconfig
[  600.218596][ T1057] SET target dimension over the limit!
[  600.228921][ T1057] netlink: 'syz.1.8602': attribute type 3 has an invalid length.
[  601.134858][ T1099] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  601.499462][ T1144] netlink: 'syz.1.8622': attribute type 1 has an invalid length.
[  601.537948][ T1150] netlink: 'syz.1.8625': attribute type 4 has an invalid length.
[  601.816201][ T1185] __nla_validate_parse: 74 callbacks suppressed
[  601.816215][ T1185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8636'.
[  601.855302][ T1187] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8637'.
[  602.166873][ T1218] tipc: Failed to remove unknown binding: 66,1,1/1677787392:319799282/319799284
[  602.170974][ T1218] tipc: Failed to remove unknown binding: 66,1,1/1677787392:319799282/319799284
[  602.173750][ T1218] tipc: Failed to remove unknown binding: 66,1,1/1677787392:319799282/319799284
[  602.224014][ T1220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8645'.
[  602.235457][ T1220] xt_hashlimit: invalid rate
[  602.268405][ T1222] tipc: Enabled bearer <ib:caif0>, priority 1
[  602.323249][ T1227] netlink: 'syz.0.8649': attribute type 4 has an invalid length.
[  602.384785][ T1232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  602.387338][ T1232] syzkaller0: entered promiscuous mode
[  602.389274][ T1232] syzkaller0: entered allmulticast mode
[  602.399154][ T1232] tipc: Resetting bearer <eth:syzkaller0>
[  602.411474][ T1232] tipc: Disabling bearer <eth:syzkaller0>
[  602.736330][ T1260] lo: Caught tx_queue_len zero misconfig
[  602.738228][ T1260] netlink: 'syz.0.8658': attribute type 2 has an invalid length.
[  602.738260][   T25] block nbd0: Possible stuck request ffff88810a1e0000: control (read@0,1024B). Runtime 90 seconds
[  602.745540][   T25] block nbd0: Possible stuck request ffff88810a1e0200: control (read@1024,1024B). Runtime 90 seconds
[  602.750183][   T25] block nbd0: Possible stuck request ffff88810a1e0400: control (read@2048,1024B). Runtime 90 seconds
[  602.754846][   T25] block nbd0: Possible stuck request ffff88810a1e0600: control (read@3072,1024B). Runtime 90 seconds
[  602.888235][   T58] block nbd5: Receive control failed (result -32)
[  602.939216][ T1274] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  603.063798][ T1283] syzkaller0: entered promiscuous mode
[  603.065936][ T1283] syzkaller0: entered allmulticast mode
[  604.011250][ T1329] netlink: 'syz.2.8677': attribute type 7 has an invalid length.
[  604.013922][ T1329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8677'.
[  604.112221][ T1338] netlink: 'syz.2.8680': attribute type 2 has an invalid length.
[  604.115238][ T1338] netlink: 'syz.2.8680': attribute type 8 has an invalid length.
[  604.117908][ T1338] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8680'.
[  604.227506][ T1347] pim6reg1: entered allmulticast mode
[  604.339775][ T1358] netlink: 276 bytes leftover after parsing attributes in process `syz.0.8688'.
[  604.447957][ T1375] openvswitch: netlink: Message has 4 unknown bytes.
[  604.560477][ T1362] wg1 speed is unknown, defaulting to 1000
[  604.563562][ T1362] wg1 speed is unknown, defaulting to 1000
[  604.742084][ T1393] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  604.744182][ T1392] No such timeout policy "syz0"
[  604.746171][ T1393] syzkaller0: entered promiscuous mode
[  604.765941][ T1393] syzkaller0: entered allmulticast mode
[  604.966002][ T1405] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  604.988191][ T1410] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  605.082742][ T1414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8705'.
[  605.475057][ T1454] syzkaller1: entered promiscuous mode
[  605.477568][ T1454] syzkaller1: entered allmulticast mode
[  605.504414][ T1455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8716'.
[  605.931608][   T25] block nbd3: Possible stuck request ffff88810a290000: control (read@0,1024B). Runtime 270 seconds
[  605.934930][   T25] block nbd3: Possible stuck request ffff88810a290200: control (read@1024,1024B). Runtime 270 seconds
[  605.938424][   T25] block nbd3: Possible stuck request ffff88810a290400: control (read@2048,1024B). Runtime 270 seconds
[  605.941982][   T25] block nbd3: Possible stuck request ffff88810a290600: control (read@3072,1024B). Runtime 270 seconds
[  606.224671][ T1478] syzkaller0: entered promiscuous mode
[  606.228083][ T1478] syzkaller0: entered allmulticast mode
[  606.318446][ T1483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8729'.
[  606.442766][ T1495] xt_CT: No such helper "snmp_trap"
[  606.444272][ T1498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8733'.
[  606.551047][ T1508] No such timeout policy "syz0"
[  606.626145][ T1519] netlink: 'syz.2.8737': attribute type 39 has an invalid length.
[  606.628805][ T1518] netlink: 'syz.2.8737': attribute type 39 has an invalid length.
[  606.636875][ T1519] netlink: 'syz.2.8737': attribute type 5 has an invalid length.
[  606.643744][ T1518] vlan5: entered allmulticast mode
[  606.645398][ T1518] bridge_slave_0: entered allmulticast mode
[  606.710806][ T1527] veth0: Caught tx_queue_len zero misconfig
[  606.844519][ T1541] __nla_validate_parse: 6 callbacks suppressed
[  606.844529][ T1541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8743'.
[  606.875113][ T1543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8744'.
[  606.879662][ T1545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8744'.
[  607.015969][ T1556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8748'.
[  607.041428][ T1565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8750'.
[  607.405049][ T1592] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8753'.
[  607.799842][ T1313] erspan0: left promiscuous mode
[  607.946156][ T1634] IPVS: length: 216 != 8
[  608.084840][ T1652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8768'.
[  608.086609][ T1654] netlink: 'syz.2.8767': attribute type 1 has an invalid length.
[  608.181041][ T1662] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8769'.
[  608.386525][ T1667] netlink: 'syz.1.8771': attribute type 2 has an invalid length.
[  608.399327][ T1667] pim6reg1: entered allmulticast mode
[  608.771051][ T1682] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8777'.
[  608.904867][ T1687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8778'.
[  608.960859][ T1690] netlink: 'syz.1.8779': attribute type 1 has an invalid length.
[  608.965871][ T1690] xt_l2tp: v2 sid > 0xffff: 4294901760
[  609.062086][ T1695] vlan0: entered promiscuous mode
[  609.064280][ T1695] bridge0: entered promiscuous mode
[  609.206618][ T1720] sctp: [Deprecated]: syz.1.8790 (pid 1720) Use of int in max_burst socket option deprecated.
[  609.206618][ T1720] Use struct sctp_assoc_value instead
[  609.516512][ T1740] wg1 speed is unknown, defaulting to 1000
[  609.519359][ T1740] wg1 speed is unknown, defaulting to 1000
[  609.689113][ T1752] netlink: 'syz.1.8798': attribute type 11 has an invalid length.
[  609.758650][ T1756] xt_socket: unknown flags 0x50
[  610.359449][ T1812] bond0: Caught tx_queue_len zero misconfig
[  610.581554][ T1845] netlink: 'syz.2.8828': attribute type 2 has an invalid length.
[  610.594234][ T1849] netlink: 'syz.1.8829': attribute type 1 has an invalid length.
[  610.639088][ T1849] 8021q: adding VLAN 0 to HW filter on device bond20
[  610.670601][ T1854] 8021q: adding VLAN 0 to HW filter on device bond20
[  610.673619][ T1854] bond20: (slave vxcan1): The slave device specified does not support setting the MAC address
[  610.678413][ T1854] bond20: (slave vxcan1): Error -95 calling set_mac_address
[  610.720875][ T1849] veth37: entered promiscuous mode
[  610.724340][ T1849] bond20: (slave veth37): Enslaving as an active interface with a down link
[  611.037154][ T1858] wg1 speed is unknown, defaulting to 1000
[  611.041262][ T1858] wg1 speed is unknown, defaulting to 1000
[  611.088289][ T1858] netlink: 'syz.0.8831': attribute type 2 has an invalid length.
[  611.186292][ T1870] ip6t_srh: unknown srh match flags  4000
[  611.851918][ T1912] __nla_validate_parse: 36 callbacks suppressed
[  611.851930][ T1912] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8848'.
[  611.944240][ T1914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  611.948460][ T1918] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  612.210312][ T1934] wg1 speed is unknown, defaulting to 1000
[  612.217624][ T1934] wg1 speed is unknown, defaulting to 1000
[  612.371173][ T1935] wg1 speed is unknown, defaulting to 1000
[  612.374958][ T1935] wg1 speed is unknown, defaulting to 1000
[  612.574458][ T1945] pim6reg1: entered promiscuous mode
[  612.580851][ T1945] pim6reg1: entered allmulticast mode
[  612.795013][ T1976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8864'.
[  612.807452][ T1976] netlink: 'syz.2.8864': attribute type 10 has an invalid length.
[  612.901376][ T1983] syzkaller1: entered promiscuous mode
[  612.903333][ T1983] syzkaller1: entered allmulticast mode
[  613.098071][ T2006] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8874'.
[  613.111006][ T2004] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8873'.
[  613.281557][ T2001] wg1 speed is unknown, defaulting to 1000
[  613.284166][ T2001] wg1 speed is unknown, defaulting to 1000
[  613.642600][ T2059] netlink: 'syz.2.8888': attribute type 4 has an invalid length.
[  614.174259][ T2113] syzkaller1: entered promiscuous mode
[  614.176688][ T2113] syzkaller1: entered allmulticast mode
[  614.506618][ T2119] netlink: 'syz.2.8906': attribute type 1 has an invalid length.
[  614.523390][ T2119] 8021q: adding VLAN 0 to HW filter on device bond28
[  614.538140][ T2119] 8021q: adding VLAN 0 to HW filter on device bond28
[  614.541876][ T2119] bond28: (slave wireguard0): The slave device specified does not support setting the MAC address
[  614.545779][ T2119] bond28: (slave wireguard0): Error -95 calling set_mac_address
[  614.568591][ T2123] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  614.578131][ T2124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8906'.
[  614.685576][ T2124] bond28 (unregistering): Released all slaves
[  614.697519][ T2131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8909'.
[  614.758755][ T2133] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  615.056716][ T2170] macsec0: entered allmulticast mode
[  615.061583][ T2170] veth1_macvtap: entered allmulticast mode
[  615.064040][ T2170] macsec0: left allmulticast mode
[  615.066023][ T2170] veth1_macvtap: left allmulticast mode
[  615.463656][ T2184] netlink: 'syz.0.8927': attribute type 15 has an invalid length.
[  615.512110][ T2188] netlink: 'syz.0.8928': attribute type 1 has an invalid length.
[  615.684432][ T2198] netlink: 'syz.0.8932': attribute type 21 has an invalid length.
[  615.687550][ T2198] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8932'.
[  615.691487][ T2198] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8932'.
[  615.997143][ T2214] netlink: 'syz.1.8935': attribute type 1 has an invalid length.
[  616.050363][ T2214] 8021q: adding VLAN 0 to HW filter on device bond21
[  616.204712][ T2232] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  616.561000][ T2257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8950'.
[  616.663545][ T2264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8951'.
[  616.673429][ T2264] netlink: 'syz.0.8951': attribute type 6 has an invalid length.
[  616.679342][ T2264] netlink: 'syz.0.8951': attribute type 6 has an invalid length.
[  616.749287][ T2266] netlink: 'syz.2.8954': attribute type 9 has an invalid length.
[  616.887577][ T2278] netlink: 'syz.1.8959': attribute type 1 has an invalid length.
[  616.903283][ T2278] bond22: entered promiscuous mode
[  616.905156][ T2278] 8021q: adding VLAN 0 to HW filter on device bond22
[  617.082378][ T2291] syzkaller0: entered promiscuous mode
[  617.084353][ T2291] syzkaller0: entered allmulticast mode
[  617.092485][ T2291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  617.096781][ T2295] __nla_validate_parse: 3 callbacks suppressed
[  617.096793][ T2295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8964'.
[  617.128389][ T2279] syz.1.8959: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  617.134310][ T2279] CPU: 1 UID: 0 PID: 2279 Comm: syz.1.8959 Not tainted syzkaller #0 PREEMPT(full) 
[  617.134322][ T2279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  617.134326][ T2279] Call Trace:
[  617.134329][ T2279]  <TASK>
[  617.134333][ T2279]  dump_stack_lvl+0x189/0x250
[  617.134345][ T2279]  ? __pfx_dump_stack_lvl+0x10/0x10
[  617.134353][ T2279]  ? __pfx__printk+0x10/0x10
[  617.134363][ T2279]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  617.134374][ T2279]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  617.134384][ T2279]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  617.134395][ T2279]  warn_alloc+0x214/0x310
[  617.134408][ T2279]  ? __pfx_warn_alloc+0x10/0x10
[  617.134420][ T2279]  ? __get_vm_area_node+0x28f/0x300
[  617.134428][ T2279]  ? xskq_create+0xbf/0x170
[  617.134438][ T2279]  __vmalloc_node_range_noprof+0x690/0x12d0
[  617.134458][ T2279]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  617.134468][ T2279]  ? __kasan_kmalloc+0x93/0xb0
[  617.134480][ T2279]  vmalloc_user_noprof+0xad/0xf0
[  617.134488][ T2279]  ? xskq_create+0xbf/0x170
[  617.134495][ T2279]  xskq_create+0xbf/0x170
[  617.134504][ T2279]  xsk_init_queue+0xb0/0x110
[  617.134512][ T2279]  xsk_setsockopt+0x57b/0x8d0
[  617.134520][ T2279]  ? __pfx_xsk_setsockopt+0x10/0x10
[  617.134528][ T2279]  ? __pfx_aa_sk_perm+0x10/0x10
[  617.134539][ T2279]  ? aa_sock_opt_perm+0xff/0x1a0
[  617.134547][ T2279]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  617.134556][ T2279]  ? __pfx_xsk_setsockopt+0x10/0x10
[  617.134563][ T2279]  do_sock_setsockopt+0x17c/0x1b0
[  617.134575][ T2279]  __x64_sys_setsockopt+0x13f/0x1b0
[  617.134587][ T2279]  do_syscall_64+0xfa/0xf80
[  617.134596][ T2279]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.134603][ T2279]  ? exc_page_fault+0xab/0x100
[  617.134612][ T2279]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.134618][ T2279] RIP: 0033:0x7f4cdbf8f7c9
[  617.134625][ T2279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  617.134632][ T2279] RSP: 002b:00007f4cdce74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  617.134639][ T2279] RAX: ffffffffffffffda RBX: 00007f4cdc1e6090 RCX: 00007f4cdbf8f7c9
[  617.134644][ T2279] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000e
[  617.134648][ T2279] RBP: 00007f4cdbff297f R08: 0000000000000004 R09: 0000000000000000
[  617.134652][ T2279] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  617.134656][ T2279] R13: 00007f4cdc1e6128 R14: 00007f4cdc1e6090 R15: 00007fffe352afe8
[  617.134668][ T2279]  </TASK>
[  617.134670][ T2279] Mem-Info:
[  617.221150][ T2279] active_anon:13643 inactive_anon:0 isolated_anon:0
[  617.221150][ T2279]  active_file:1474 inactive_file:38475 isolated_file:0
[  617.221150][ T2279]  unevictable:1768 dirty:39 writeback:0
[  617.221150][ T2279]  slab_reclaimable:12702 slab_unreclaimable:158786
[  617.221150][ T2279]  mapped:18363 shmem:2444 pagetables:1129
[  617.221150][ T2279]  sec_pagetables:0 bounce:0
[  617.221150][ T2279]  kernel_misc_reclaimable:0
[  617.221150][ T2279]  free:1038319 free_pcp:24397 free_cma:0
[  617.237337][ T2279] Node 0 active_anon:8884kB inactive_anon:0kB active_file:1488kB inactive_file:4448kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34704kB dirty:36kB writeback:0kB shmem:4928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9848kB pagetables:2724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  617.249311][ T2279] Node 1 active_anon:45688kB inactive_anon:0kB active_file:4408kB inactive_file:149452kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38748kB dirty:120kB writeback:0kB shmem:4848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3964kB pagetables:1792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  617.261474][ T2279] Node 0 
[  617.261593][ T2298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8964'.
[  617.270986][ T2298] ip6gretap3: entered promiscuous mode
[  617.273254][ T2279] DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  617.283874][ T2298] ip6gretap3: entered allmulticast mode
[  617.286948][ T2279] lowmem_reserve[]: 0 1596 2128 2128 2128
[  617.288775][ T2279] Node 0 DMA32 free:1533256kB boost:0kB min:25140kB low:31424kB high:37708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1635164kB mlocked:0kB bounce:0kB free_pcp:25920kB local_pcp:15216kB free_cma:0kB
[  617.298564][ T2279] lowmem_reserve[]: 0 0 531 531 531
[  617.300390][ T2279] Node 0 Normal free:14084kB boost:0kB min:8516kB low:10644kB high:12772kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8884kB inactive_anon:0kB active_file:1488kB inactive_file:4448kB unevictable:3536kB writepending:36kB zspages:0kB present:1572868kB managed:544644kB mlocked:0kB bounce:0kB free_pcp:7544kB local_pcp:192kB free_cma:0kB
[  617.310776][ T2279] lowmem_reserve[]: 0 0 0 0 0
[  617.312529][ T2279] Node 1 Normal free:2587888kB boost:0kB min:56212kB low:70264kB high:84316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45688kB inactive_anon:0kB active_file:4408kB inactive_file:149452kB unevictable:3536kB writepending:120kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:58956kB local_pcp:27628kB free_cma:0kB
[  617.325641][ T2298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8964'.
[  617.329069][ T2298] netlink: 'syz.2.8964': attribute type 7 has an invalid length.
[  617.339994][ T2298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8964'.
[  617.343138][ T2298] netlink: 'syz.2.8964': attribute type 7 has an invalid length.
[  617.346578][ T2279] lowmem_reserve[]: 0 0 0 0 0
[  617.359617][ T2279] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  617.363746][ T2279] Node 0 DMA32: 0*4kB 3*8kB (UME) 6*16kB (ME) 11*32kB (UE) 3*64kB (UME) 2*128kB (ME) 69*256kB (U) 78*512kB (UE) 85*1024kB (UM) 12*2048kB (UME) 331*4096kB (UM) = 1525912kB
[  617.369379][ T2279] Node 0 Normal: 22*4kB (M) 5*8kB (M) 161*16kB (M) 120*32kB (ME) 45*64kB (ME) 8*128kB (M) 8*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 14032kB
[  617.371416][ T2298] xt_cluster: node mask cannot exceed total number of nodes
[  617.386027][ T2279] Node 1 Normal: 1*4kB (U) 6*8kB (UME) 583*16kB (UM) 574*32kB (UM) 671*64kB (UME) 305*128kB (UM) 88*256kB (UM) 30*512kB (UME) 15*1024kB (UM) 2*2048kB (M) 591*4096kB (M) = 2587812kB
[  617.399703][ T2279] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  617.403456][ T2279] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  617.417541][ T2279] 42393 total pagecache pages
[  617.419488][ T2279] 0 pages in swap cache
[  617.421360][ T2279] Free swap  = 124996kB
[  617.423161][ T2279] Total swap = 124996kB
[  617.424844][ T2279] 1834877 pages RAM
[  617.426356][ T2279] 0 pages HighMem/MovableOnly
[  617.438445][ T2279] 387412 pages reserved
[  617.440639][ T2279] 0 pages cma reserved
[  617.695549][ T2308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8967'.
[  617.698479][ T2309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8967'.
[  617.710429][ T2308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8967'.
[  617.713448][ T2309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8967'.
[  617.717833][ T2310] netlink: 'syz.1.8967': attribute type 13 has an invalid length.
[  617.720836][ T2310] tipc: Resetting bearer <eth:syzkaller0>
[  617.858055][ T2289] tipc: Resetting bearer <eth:syzkaller0>
[  617.903971][ T2289] tipc: Disabling bearer <eth:syzkaller0>
[  618.073905][ T2336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8974'.
[  618.148405][ T2338] tc_dump_action: action bad kind
[  618.167845][ T2342] netem: change failed
[  618.278701][ T2362] team0: Port device geneve0 removed
[  618.281246][ T2362] bond0: (slave wlan1): Releasing backup interface
[  618.284880][ T2362] team0: Port device bond5 removed
[  618.287245][ T2362] bond9: (slave gretap2): Releasing active interface
[  618.292800][ T2362] bond13: (slave geneve2): Releasing active interface
[  618.295910][ T2362] batman_adv: batadv0: Removing interface: gretap5
[  618.299137][ T2362] bond15: (slave ip6gretap3): Releasing active interface
[  618.302817][ T2362] bond20: (slave veth37): Releasing active interface
[  618.395057][ T2368] syzkaller0: left promiscuous mode
[  618.397671][ T2368] veth37: left promiscuous mode
[  618.399368][ T2368] bond22: left promiscuous mode
[  618.451222][ T2375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8987'.
[  618.457334][ T2375] vlan5: entered promiscuous mode
[  618.458924][ T2375] bond0: entered promiscuous mode
[  618.469696][ T2375] bond_slave_0: entered promiscuous mode
[  618.471649][ T2375] bond_slave_1: entered promiscuous mode
[  618.646378][ T2394] netlink: 'syz.1.8996': attribute type 1 has an invalid length.
[  618.707651][ T2403] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  618.991578][ T2420] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0
[  619.023231][ T2422] openvswitch: netlink: Key 6 has unexpected len 81 expected 2
[  619.150788][ T2427] team0: entered promiscuous mode
[  619.152407][ T2427] team0: entered allmulticast mode
[  619.154259][ T2427] 8021q: adding VLAN 0 to HW filter on device team0
[  619.165035][ T2426] team1: entered promiscuous mode
[  619.166727][ T2426] team1: entered allmulticast mode
[  619.168596][ T2426] 8021q: adding VLAN 0 to HW filter on device team1
[  619.322223][T25701] nci: nci_rsp_packet: unsupported rsp opcode 0xf06
[  619.953890][ T2442] dvmrp1: tun_chr_ioctl cmd 35111
[  620.790717][ T2541] validate_nla: 1 callbacks suppressed
[  620.790729][ T2541] netlink: 'syz.1.9036': attribute type 12 has an invalid length.
[  620.907207][ T2559] netlink: 'syz.2.9041': attribute type 23 has an invalid length.
[  621.021012][ T2587] openvswitch: netlink: Tunnel attr 193 out of range max 16
[  621.266972][ T2563] wg1 speed is unknown, defaulting to 1000
[  621.275091][ T2563] wg1 speed is unknown, defaulting to 1000
[  621.327008][ T2623] x_tables: duplicate entry at hook 1
[  621.576346][ T2640] mac80211_hwsim hwsim5 wlan0: Caught tx_queue_len zero misconfig
[  621.699620][ T2658] bond27: Removing last arp target with arp_interval on
[  622.216321][ T2691] unsupported nla_type 29115
[  622.229052][ T2691] __nla_validate_parse: 19 callbacks suppressed
[  622.229062][ T2691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9073'.
[  622.595162][ T2711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9079'.
[  622.822811][ T2724] netlink: 'syz.2.9082': attribute type 58 has an invalid length.
[  622.825553][ T2724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9082'.
[  622.993369][ T2727] netlink: 'syz.1.9083': attribute type 1 has an invalid length.
[  623.362766][ T2742] syzkaller0: left allmulticast mode
[  623.417676][ T2743] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  623.528535][ T2742] wg1 speed is unknown, defaulting to 1000
[  623.532057][ T2742] wg1 speed is unknown, defaulting to 1000
[  624.033006][ T2780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9098'.
[  624.084052][ T2784] IPVS: set_ctl: invalid protocol: 44 172.20.20.49:20000
[  624.508398][   T11] block nbd4: Possible stuck request ffff88810a308000: control (read@0,1024B). Runtime 240 seconds
[  624.512616][   T11] block nbd4: Possible stuck request ffff88810a308200: control (read@1024,1024B). Runtime 240 seconds
[  624.516046][   T11] block nbd4: Possible stuck request ffff88810a308400: control (read@2048,1024B). Runtime 240 seconds
[  624.522880][   T11] block nbd4: Possible stuck request ffff88810a308600: control (read@3072,1024B). Runtime 240 seconds
[  624.698000][ T2822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9110'.
[  624.707436][ T2822] syzkaller0: entered promiscuous mode
[  624.709224][ T2822] syzkaller0: entered allmulticast mode
[  624.895527][ T2835] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9112'.
[  625.906793][ T2862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9119'.
[  626.064953][ T2796] Set syz1 is full, maxelem 65536 reached
[  626.194650][ T2865] wg1 speed is unknown, defaulting to 1000
[  626.197672][ T2865] wg1 speed is unknown, defaulting to 1000
[  626.293506][ T2884] netlink: 10968 bytes leftover after parsing attributes in process `syz.0.9124'.
[  626.296435][ T2884] netlink: 13456 bytes leftover after parsing attributes in process `syz.0.9124'.
[  626.351550][ T2887] x_tables: duplicate entry at hook 1
[  626.354463][ T2887] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9125'.
[  626.626423][ T2909] netlink: 'syz.1.9131': attribute type 4 has an invalid length.
[  626.633352][ T2910] netlink: 'syz.0.9130': attribute type 1 has an invalid length.
[  626.649331][ T2909] syzkaller0: left promiscuous mode
[  626.657708][ T2909] syzkaller0: left allmulticast mode
[  626.894712][ T2935] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  627.275758][ T2963] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  627.524973][ T2981] dvmrp0: left allmulticast mode
[  627.527089][ T2981] dvmrp1: left allmulticast mode
[  627.529203][ T2981] dvmrp8: left allmulticast mode
[  627.654827][ T2990] syzkaller0: entered promiscuous mode
[  627.656610][ T2990] syzkaller0: entered allmulticast mode
[  627.684283][ T2990] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  627.950376][ T3034] netlink: 'syz.2.9168': attribute type 2 has an invalid length.
[  627.963400][ T3036] __nla_validate_parse: 7 callbacks suppressed
[  627.963410][ T3036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9167'.
[  627.970960][ T3036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9167'.
[  628.006828][ T3042] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9171'.
[  628.011654][ T3042] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9171'.
[  628.018848][ T3044] erspan0: entered promiscuous mode
[  628.031373][ T3044] erspan0: left allmulticast mode
[  628.038733][ T3044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9172'.
[  628.052409][ T3049] netem: change failed
[  628.076096][ T3055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9174'.
[  628.093819][T21721] bond26: (slave erspan0): link status definitely down, disabling slave
[  628.098082][T21721] bond26: now running without any active interface!
[  628.214629][ T3076] xt_cgroup: path and classid specified
[  628.515078][ T3117] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  628.592179][ T3125] netlink: 'syz.1.9193': attribute type 11 has an invalid length.
[  628.631722][ T3132] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9195'.
[  628.868808][ T3155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9201'.
[  628.873046][ T3155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9201'.
[  628.876200][ T3155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9201'.
[  628.887023][ T3157] netlink: 'syz.0.9204': attribute type 11 has an invalid length.
[  629.439740][ T3195] batadv_slave_0: left promiscuous mode
[  629.441587][ T3195] batadv_slave_0: left allmulticast mode
[  629.443856][ T3195] .70: left allmulticast mode
[  629.445833][ T3195] hsr_slave_0: left allmulticast mode
[  629.461568][ T3195] geneve0: left allmulticast mode
[  629.481660][ T3195] ip6gre1: left promiscuous mode
[  629.485093][ T3195] ip6gre1: left allmulticast mode
[  629.500422][ T3195] geneve4: left promiscuous mode
[  629.503191][ T3195] geneve4: left allmulticast mode
[  629.513530][ T3195] ipvlan3: left promiscuous mode
[  629.526336][ T3195] bond12: left promiscuous mode
[  629.529760][ T3195] bond12: left allmulticast mode
[  629.535063][ T3195] bond13: left promiscuous mode
[  629.539186][ T3195] bond13: left allmulticast mode
[  629.548155][ T3195] bridge16: left promiscuous mode
[  629.551110][ T3195] bridge16: left allmulticast mode
[  629.553224][ T3195] vlan4: left promiscuous mode
[  629.554959][ T3195] vlan4: left allmulticast mode
[  629.556698][ T3195] hsr_slave_1: left allmulticast mode
[  629.564789][ T3195] bond15: left promiscuous mode
[  629.569603][ T3195] bond15: left allmulticast mode
[  629.605032][ T3195] ip6gretap1: left promiscuous mode
[  629.609240][ T3195] ip6gretap1: left allmulticast mode
[  629.614153][ T3195] bond18: left promiscuous mode
[  629.618244][ T3195] bond18: left allmulticast mode
[  629.656215][ T3195] bond24: left promiscuous mode
[  629.657759][ T3195] bond24: left allmulticast mode
[  629.670135][ T3195] bond26: left promiscuous mode
[  629.684749][ T3195] ip6gretap3: left promiscuous mode
[  629.686427][ T3195] ip6gretap3: left allmulticast mode
[  629.700206][ T3195] vlan5: left promiscuous mode
[  629.701736][ T3195] bond0: left promiscuous mode
[  629.704999][ T3195] bond_slave_0: left promiscuous mode
[  629.706795][ T3195] bond_slave_1: left promiscuous mode
[  629.711200][ T3195] team0: left promiscuous mode
[  629.712725][ T3195] team0: left allmulticast mode
[  629.718780][ T3195] team1: left promiscuous mode
[  629.720453][ T3195] team1: left allmulticast mode
[  629.731618][ T1297] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  629.734220][ T1297] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  629.736926][ T1297] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  629.739837][ T1297] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  629.742481][ T1297] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  629.744963][ T1297] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  629.747618][ T1297] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  629.750196][ T1297] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  629.752761][ T3200] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  629.757759][ T3200] netem: change failed
[  629.941633][ T3211] syzkaller1: entered promiscuous mode
[  629.943921][ T3211] syzkaller1: entered allmulticast mode
[  630.086786][ T3223] xt_ecn: cannot match TCP bits for non-tcp packets
[  630.089386][ T3223] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  630.093649][ T3223] netlink: 'syz.0.9227': attribute type 10 has an invalid length.
[  630.334223][ T3249] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  630.913352][ T3284] netlink: 'syz.1.9246': attribute type 6 has an invalid length.
[  631.138231][ T3300] team0: Mode "loadbala" not found
[  631.157884][ T3301] team0: Mode "loadbala" not found
[  631.266379][ T3318] netlink: 'syz.2.9255': attribute type 46 has an invalid length.
[  631.362478][ T3328] bond23: entered promiscuous mode
[  631.364723][ T3328] bond23: entered allmulticast mode
[  631.367373][ T3328] 8021q: adding VLAN 0 to HW filter on device bond23
[  631.486209][ T3345] netlink: 'syz.1.9262': attribute type 6 has an invalid length.
[  631.492278][ T3345] netlink: 'syz.1.9262': attribute type 6 has an invalid length.
[  632.011825][ T3369] wg1 speed is unknown, defaulting to 1000
[  632.014501][ T3369] wg1 speed is unknown, defaulting to 1000
[  632.095440][ T3374] netlink: 'syz.0.9270': attribute type 1 has an invalid length.
[  632.145169][ T3374] bond28: (slave vxcan3): The slave device specified does not support setting the MAC address
[  632.148954][ T3374] bond28: (slave vxcan3): Error -95 calling set_mac_address
[  632.337862][ T3389] xt_recent: Unsupported userspace flags (000000b1)
[  632.418547][ T3394] netlink: 'syz.2.9277': attribute type 2 has an invalid length.
[  632.427921][ T3394] !: entered promiscuous mode
[  632.601820][ T3409] netlink: 'syz.1.9283': attribute type 1 has an invalid length.
[  632.604277][ T3410] netlink: 'syz.1.9283': attribute type 1 has an invalid length.
[  632.628681][ T3409] 8021q: adding VLAN 0 to HW filter on device bond24
[  632.663643][ T3409] 8021q: adding VLAN 0 to HW filter on device bond24
[  632.666634][ T3409] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  632.668517][ T3414] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  632.671425][ T3409] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  632.674060][ T3414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  632.697343][ T3410] veth39: entered promiscuous mode
[  632.701030][ T3410] bond24: (slave veth39): Enslaving as an active interface with a down link
[  632.811555][   T25] block nbd0: Possible stuck request ffff88810a1e0000: control (read@0,1024B). Runtime 120 seconds
[  632.812187][ T3422] bridge19: entered allmulticast mode
[  632.814992][   T25] block nbd0: Possible stuck request ffff88810a1e0200: control (read@1024,1024B). Runtime 120 seconds
[  632.821576][   T25] block nbd0: Possible stuck request ffff88810a1e0400: control (read@2048,1024B). Runtime 120 seconds
[  632.825285][   T25] block nbd0: Possible stuck request ffff88810a1e0600: control (read@3072,1024B). Runtime 120 seconds
[  633.205955][ T3470] openvswitch: netlink: IP tunnel TTL not specified.
[  633.431693][ T3483] ip6t_srh: unknown srh invflags 4000
[  633.737322][ T3494] 8021q: adding VLAN 0 to HW filter on device bond28
[  633.740379][ T3494] team0: Port device bond28 added
[  633.757719][ T3505] __nla_validate_parse: 17 callbacks suppressed
[  633.757730][ T3505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9310'.
[  633.761968][ T3495] 8021q: adding VLAN 0 to HW filter on device bond29
[  633.766979][ T3495] team0: Port device bond29 added
[  633.821592][ T3517] netlink: 'syz.2.9314': attribute type 1 has an invalid length.
[  634.120295][ T3533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9321'.
[  634.131619][ T3531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9320'.
[  634.266721][ T3541] syzkaller0: entered promiscuous mode
[  634.272735][ T3541] syzkaller0: entered allmulticast mode
[  634.577796][ T3566] xt_time: unknown flags 0xf4
[  634.729335][ T3582] pim6reg1: entered promiscuous mode
[  634.739575][ T3582] pim6reg1: entered allmulticast mode
[  634.744137][ T3586] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  634.794932][ T3591] ip6t_srh: unknown srh match flags  4000
[  635.250984][ T3633] netlink: set zone limit has 4 unknown bytes
[  635.337131][ T3647] xt_hashlimit: max too large, truncated to 1048576
[  636.020433][   T25] block nbd3: Possible stuck request ffff88810a290000: control (read@0,1024B). Runtime 300 seconds
[  636.023797][   T25] block nbd3: Possible stuck request ffff88810a290200: control (read@1024,1024B). Runtime 300 seconds
[  636.027427][   T25] block nbd3: Possible stuck request ffff88810a290400: control (read@2048,1024B). Runtime 300 seconds
[  636.031124][   T25] block nbd3: Possible stuck request ffff88810a290600: control (read@3072,1024B). Runtime 300 seconds
[  636.252073][ T3702] netlink: 'syz.2.9375': attribute type 3 has an invalid length.
[  636.322331][ T3712] netlink: 'syz.2.9377': attribute type 101 has an invalid length.
[  636.324804][ T3712] netlink: 'syz.2.9377': attribute type 7 has an invalid length.
[  636.325728][ T3714] team_slave_1: entered allmulticast mode
[  636.327259][ T3712] netlink: 'syz.2.9377': attribute type 101 has an invalid length.
[  636.349841][ T3712] netlink: 'syz.2.9377': attribute type 7 has an invalid length.
[  636.424141][ T3729] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9382'.
[  636.433280][ T3729] netlink: 272 bytes leftover after parsing attributes in process `syz.2.9382'.
[  636.509820][ T3738] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9386'.
[  636.513072][ T3738] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9386'.
[  637.557911][ T3771] bridge0: port 1(veth0_to_bridge) entered blocking state
[  637.561291][ T3769] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  637.561323][ T3771] bridge0: port 1(veth0_to_bridge) entered disabled state
[  637.568783][ T3771] veth0_to_bridge: entered allmulticast mode
[  637.574130][ T3771] veth0_to_bridge: entered promiscuous mode
[  637.587488][ T3771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9397'.
[  637.764686][ T3791] netlink: 468 bytes leftover after parsing attributes in process `syz.1.9402'.
[  637.816194][ T3798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9404'.
[  638.005709][ T3812] netlink: 'syz.1.9408': attribute type 3 has an invalid length.
[  638.048080][ T3814] sctp: [Deprecated]: syz.1.9409 (pid 3814) Use of struct sctp_assoc_value in delayed_ack socket option.
[  638.048080][ T3814] Use struct sctp_sack_info instead
[  638.092639][ T3816] netlink: 'syz.1.9410': attribute type 1 has an invalid length.
[  638.155812][ T3820] virt_wifi0 speed is unknown, defaulting to 1000
[  638.160631][ T3820] virt_wifi0 speed is unknown, defaulting to 1000
[  638.163574][ T3820] virt_wifi0 speed is unknown, defaulting to 1000
[  638.176366][ T3820] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  638.195182][ T3820] virt_wifi0 speed is unknown, defaulting to 1000
[  638.202235][ T3820] virt_wifi0 speed is unknown, defaulting to 1000
[  638.210016][ T3820] virt_wifi0 speed is unknown, defaulting to 1000
[  638.424244][ T3840] netlink: 'syz.0.9417': attribute type 12 has an invalid length.
[  638.562381][ T3844] xt_nat: multiple ranges no longer supported
[  638.689423][ T3858] netlink: 'syz.0.9422': attribute type 29 has an invalid length.
[  638.692497][ T3858] netlink: 'syz.0.9422': attribute type 29 has an invalid length.
[  638.956799][ T3876] __nla_validate_parse: 6 callbacks suppressed
[  638.956808][ T3876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9428'.
[  639.393312][ T3909] netlink: 'syz.0.9441': attribute type 2 has an invalid length.
[  639.404124][ T3909] !: entered promiscuous mode
[  639.788807][ T3942] syzkaller1: tun_chr_ioctl cmd 1074025677
[  639.792148][ T3942] syzkaller1: linktype set to 825
[  639.851920][ T3949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9455'.
[  639.998805][ T3970] x_tables: duplicate underflow at hook 2
[  640.032252][ T3972] netlink: 'syz.2.9462': attribute type 32 has an invalid length.
[  640.419123][ T3987] netlink: 'syz.1.9467': attribute type 15 has an invalid length.
[  640.840990][ T3991] netlink: 'syz.2.9468': attribute type 8 has an invalid length.
[  640.969313][ T3997] netlink: 'syz.2.9471': attribute type 4 has an invalid length.
[  641.350731][ T4028] syzkaller1: entered promiscuous mode
[  641.352418][ T4028] syzkaller1: entered allmulticast mode
[  641.517478][ T4036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9482'.
[  641.856066][ T4036] team0: left allmulticast mode
[  641.859346][ T4036] geneve0: left allmulticast mode
[  641.863047][ T4036] team0: left promiscuous mode
[  641.867459][ T4036] geneve0: left promiscuous mode
[  641.870394][ T4036] bridge0: port 1(team0) entered disabled state
[  642.159306][ T4037] syzkaller0: entered promiscuous mode
[  642.164234][ T4037] syzkaller0: entered allmulticast mode
[  642.261718][ T4045] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9485'.
[  642.328997][ T4051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9488'.
[  642.418888][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.535711][ T4073] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[  642.569589][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.716561][ T4097] netlink: 548 bytes leftover after parsing attributes in process `syz.1.9506'.
[  642.716935][ T4098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9506'.
[  643.002263][ T4121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9510'.
[  643.052342][ T4095] wg1 speed is unknown, defaulting to 1000
[  643.055898][ T4095] wg1 speed is unknown, defaulting to 1000
[  643.059418][ T4095] virt_wifi0 speed is unknown, defaulting to 1000
[  643.139688][ T4124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9512'.
[  643.928216][ T4151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  644.649642][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  644.801345][ T4173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9526'.
[  644.951027][ T4185] IPv6: Can't replace route, no match found
[  645.553529][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9532'.
[  645.591242][ T4199] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9533'.
[  645.689669][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.889480][ T4227] validate_nla: 5 callbacks suppressed
[  645.896700][ T4227] netlink: 'syz.1.9543': attribute type 1 has an invalid length.
[  645.927935][ T4227] bond25: entered promiscuous mode
[  645.930029][ T4227] 8021q: adding VLAN 0 to HW filter on device bond25
[  645.933936][ T4226] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  645.944540][ T4228] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  645.995673][ T4238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9545'.
[  646.123542][ T4247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9548'.
[  646.802011][ T4283] Unsupported ieee802154 address type: 0
[  646.834696][ T4290] netlink: 'syz.0.9558': attribute type 12 has an invalid length.
[  646.853213][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9558'.
[  646.883233][ T4292] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9559'.
[  646.988240][ T4302] netlink: 7 bytes leftover after parsing attributes in process `syz.2.9564'.
[  646.994024][ T4302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9564'.
[  646.997739][ T4302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9564'.
[  647.158856][ T4312] netlink: 'syz.0.9568': attribute type 3 has an invalid length.
[  647.170861][ T4313] openvswitch: netlink: Key 6 has unexpected len 8 expected 2
[  647.230699][ T4326] netlink: 'syz.0.9573': attribute type 83 has an invalid length.
[  647.245211][ T4326] netlink: 'syz.0.9573': attribute type 8 has an invalid length.
[  647.332056][ T4339] macvlan0: entered allmulticast mode
[  647.334235][ T4339] veth0_to_team: entered allmulticast mode
[  647.561744][ T4379] pim6reg1: entered allmulticast mode
[  648.343742][ T4436] bond30: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  648.349305][ T4436] bond30 (unregistering): Released all slaves
[  648.648266][ T4446] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  648.654962][ T4447] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  649.140983][ T4466] 8021q: adding VLAN 0 to HW filter on device bond26
[  649.971590][ T4512] __nla_validate_parse: 20 callbacks suppressed
[  649.971608][ T4512] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9628'.
[  650.050549][ T4518] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9630'.
[  650.166105][ T4528] netem: incorrect ge model size
[  650.167953][ T4528] netem: change failed
[  650.385389][ T4545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9641'.
[  650.389167][ T4545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9641'.
[  650.465765][ T4552] x_tables: ip6_tables: mh match: only valid for protocol 135
[  650.594089][ T4560] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  650.603327][   T33] audit: type=1107 audit(1765964404.269:10): pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='{6o0j6=3 rf꼋Bai&xBK^6ZE$y#0:egc'GT'wCdv+;n~]_])<PFiF_pGG݊ࡶm\'
[  650.883567][ T4585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9655'.
[  650.895345][ T4580] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  650.944262][ T4591] bridge23: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  651.339451][ T4619] netlink: 'syz.2.9669': attribute type 2 has an invalid length.
[  651.342952][ T4619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9669'.
[  651.579161][ T4639] wg1 speed is unknown, defaulting to 1000
[  651.582702][ T4639] wg1 speed is unknown, defaulting to 1000
[  651.586384][ T4639] virt_wifi0 speed is unknown, defaulting to 1000
[  652.375280][ T4653] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9677'.
[  652.543863][ T4664] tipc: Resetting bearer <eth:gre0>
[  652.548945][ T4664] tipc: Resetting bearer <eth:gre0>
[  652.556962][ T4664] gretap0: entered promiscuous mode
[  652.566879][ T4664] erspan0: left promiscuous mode
[  652.593317][ T4664] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  652.643176][ T4669] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9683'.
[  652.662440][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9683'.
[  652.689872][   T12] bond26: (slave erspan0): failed to get link speed/duplex
[  652.768205][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9683'.
[  652.769934][ T1313] nci: nci_rsp_packet: unsupported rsp opcode 0xf06
[  652.810552][   T12] bond26: (slave erspan0): failed to get link speed/duplex
[  652.920575][ T1313] bond26: (slave erspan0): failed to get link speed/duplex
[  653.040056][T21721] bond26: (slave erspan0): failed to get link speed/duplex
[  653.149841][   T12] bond26: (slave erspan0): failed to get link speed/duplex
[  653.259740][   T12] bond26: (slave erspan0): failed to get link speed/duplex
[  653.611342][ T4759] netlink: 'syz.0.9694': attribute type 1 has an invalid length.
[  653.635081][ T4759] 8021q: adding VLAN 0 to HW filter on device bond30
[  653.657480][ T4759] veth27: entered promiscuous mode
[  653.706466][ T4769] net_ratelimit: 3 callbacks suppressed
[  653.706478][ T4769] openvswitch: netlink: IP tunnel dst address not specified
[  653.720907][ T1313] bond26: (slave erspan0): failed to get link speed/duplex
[  653.726601][ T4769] netlink: 'syz.2.9697': attribute type 1 has an invalid length.
[  653.829725][T25701] bond26: (slave erspan0): failed to get link speed/duplex
[  653.939736][T23629] bond26: (slave erspan0): failed to get link speed/duplex
[  654.027122][ T4804] syzkaller0: entered promiscuous mode
[  654.034531][ T4804] syzkaller0: entered allmulticast mode
[  654.069731][T23629] bond26: (slave erspan0): failed to get link speed/duplex
[  654.072877][ T4793] wg1 speed is unknown, defaulting to 1000
[  654.076277][ T4793] wg1 speed is unknown, defaulting to 1000
[  654.079861][ T4793] virt_wifi0 speed is unknown, defaulting to 1000
[  654.184340][T25701] bond26: (slave erspan0): failed to get link speed/duplex
[  654.203537][ T4794] wg1 speed is unknown, defaulting to 1000
[  654.208566][ T4794] wg1 speed is unknown, defaulting to 1000
[  654.222851][ T4794] virt_wifi0 speed is unknown, defaulting to 1000
[  654.379641][T21721] bond26: (slave erspan0): failed to get link speed/duplex
[  654.489846][ T1297] bond26: (slave erspan0): failed to get link speed/duplex
[  654.570284][   T11] block nbd4: Possible stuck request ffff88810a308000: control (read@0,1024B). Runtime 270 seconds
[  654.574617][   T11] block nbd4: Possible stuck request ffff88810a308200: control (read@1024,1024B). Runtime 270 seconds
[  654.578948][   T11] block nbd4: Possible stuck request ffff88810a308400: control (read@2048,1024B). Runtime 270 seconds
[  654.583295][   T11] block nbd4: Possible stuck request ffff88810a308600: control (read@3072,1024B). Runtime 270 seconds
[  654.614563][ T5894] bond26: (slave erspan0): failed to get link speed/duplex
[  654.719713][ T1297] bond26: (slave erspan0): failed to get link speed/duplex
[  658.769911][T23629] net_ratelimit: 35 callbacks suppressed
[  658.769928][T23629] bond26: (slave erspan0): failed to get link speed/duplex
[  658.889924][T23629] bond26: (slave erspan0): failed to get link speed/duplex
[  659.010010][ T5894] bond26: (slave erspan0): failed to get link speed/duplex
[  659.129925][ T5894] bond26: (slave erspan0): failed to get link speed/duplex
[  659.239975][ T5894] bond26: (slave erspan0): failed to get link speed/duplex
[  659.349978][ T5894] bond26: (slave erspan0): failed to get link speed/duplex
[  659.459974][T21721] bond26: (slave erspan0): failed to get link speed/duplex
[  659.579968][T21721] bond26: (slave erspan0): failed to get link speed/duplex
[  659.699870][ T5894] bond26: (slave erspan0): failed to get link speed/duplex
[  659.810050][T21721] bond26: (slave erspan0): failed to get link speed/duplex
[  660.330321][    C0] ------------[ cut here ]------------
[  660.332958][    C0] ODEBUG: free active (active state 0) object: ffff88811300bc90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350
[  660.338124][    C0] WARNING: lib/debugobjects.c:615 at 0x0, CPU#0: swapper/0/0
[  660.341179][    C0] Modules linked in:
[  660.343309][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  660.346877][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  660.350994][    C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550
[  660.353612][    C0] Code: 89 44 24 20 e8 c7 de 92 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 cc bf 8b 48 c7 c2 c0 d1 bf 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc
[  660.361341][    C0] RSP: 0018:ffffc90000007a70 EFLAGS: 00010246
[  660.363795][    C0] RAX: ffffffff8a3bd810 RBX: ffffffff99a7a2b8 RCX: 0000000000000000
[  660.366979][    C0] RDX: ffffffff8bbfd1c0 RSI: ffffffff8bbfcca0 RDI: ffffffff8f8aa470
[  660.370137][    C0] RBP: ffffffff8b6d24a0 R08: ffff88811300bc90 R09: ffffffff8b6d3600
[  660.373317][    C0] R10: dffffc0000000000 R11: ffffffff81ae6210 R12: ffff88811300be00
[  660.376032][    C0] R13: ffffffff8f8aa470 R14: ffff88811300b000 R15: ffff88811300bc90
[  660.378424][    C0] FS:  0000000000000000(0000) GS:ffff88818eab1000(0000) knlGS:0000000000000000
[  660.381357][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  660.383564][    C0] CR2: 00007f6ddd1b6ad8 CR3: 0000000112c0a000 CR4: 00000000000006f0
[  660.386052][    C0] Call Trace:
[  660.387118][    C0]  <IRQ>
[  660.388029][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  660.389818][    C0]  ? do_raw_spin_lock+0x121/0x290
[  660.391384][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  660.392989][    C0]  kfree+0x13b/0x660
[  660.394214][    C0]  rose_timer_expiry+0x4cb/0x600
[  660.395739][    C0]  call_timer_fn+0x16e/0x590
[  660.397172][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  660.398863][    C0]  ? call_timer_fn+0xbe/0x590
[  660.400384][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  660.401973][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  660.403595][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[  660.405227][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  660.406919][    C0]  __run_timer_base+0x61a/0x860
[  660.408425][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  660.410142][    C0]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  660.412106][    C0]  run_timer_softirq+0xb7/0x180
[  660.413642][    C0]  handle_softirqs+0x27d/0x850
[  660.415164][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  660.416649][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  660.418307][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  660.419991][    C0]  __irq_exit_rcu+0xca/0x1f0
[  660.421450][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  660.423080][    C0]  irq_exit_rcu+0x9/0x30
[  660.424411][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  660.426304][    C0]  </IRQ>
[  660.427359][    C0]  <TASK>
[  660.428543][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  660.430974][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  660.432899][    C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  660.438731][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 00000286
[  660.440672][    C0] RAX: 72e62d8b59389c00 RBX: ffffffff8197438a RCX: 72e62d8b59389c00
[  660.443219][    C0] RDX: 0000000000000001 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660
[  660.445679][    C0] RBP: ffffffff8dc07ea8 R08: ffff88812123359b R09: 1ffff110242466b3
[  660.448198][    C0] R10: dffffc0000000000 R11: ffffed10242466b4 R12: ffffffff8f805a70
[  660.450745][    C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000
[  660.453634][    C0]  ? do_idle+0x1ea/0x520
[  660.455165][    C0]  default_idle+0x13/0x20
[  660.456587][    C0]  default_idle_call+0x73/0xb0
[  660.458229][    C0]  do_idle+0x1ea/0x520
[  660.459606][    C0]  ? irqentry_exit+0x5ba/0x660
[  660.461113][    C0]  ? __pfx_do_idle+0x10/0x10
[  660.462579][    C0]  cpu_startup_entry+0x44/0x60
[  660.464087][    C0]  rest_init+0x2de/0x300
[  660.465476][    C0]  start_kernel+0x3ae/0x410
[  660.466965][    C0]  x86_64_start_reservations+0x24/0x30
[  660.468709][    C0]  x86_64_start_kernel+0x143/0x1c0
[  660.470843][    C0]  common_startup_64+0x13e/0x147
[  660.472591][    C0]  </TASK>
[  660.473637][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  660.476042][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  660.478865][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  660.482159][    C0] Call Trace:
[  660.483276][    C0]  <IRQ>
[  660.484234][    C0]  dump_stack_lvl+0x99/0x250
[  660.485738][    C0]  ? __asan_memcpy+0x40/0x70
[  660.487266][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  660.488872][    C0]  ? __pfx__printk+0x10/0x10
[  660.490369][    C0]  vpanic+0x237/0x6d0
[  660.491756][    C0]  ? __pfx_vpanic+0x10/0x10
[  660.493257][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  660.494952][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  660.496652][    C0]  panic+0xb9/0xc0
[  660.497896][    C0]  ? __pfx_panic+0x10/0x10
[  660.499327][    C0]  ? common_startup_64+0x13e/0x147
[  660.501084][    C0]  __warn+0x317/0x4b0
[  660.502457][    C0]  __report_bug+0x288/0x500
[  660.504096][    C0]  ? __pfx___report_bug+0x10/0x10
[  660.505727][    C0]  ? do_raw_spin_lock+0x121/0x290
[  660.507489][    C0]  report_bug_entry+0x16a/0x220
[  660.509091][    C0]  ? debug_check_no_obj_freed+0x44a/0x550
[  660.510946][    C0]  ? debug_check_no_obj_freed+0x44f/0x550
[  660.512795][    C0]  handle_bug+0xca/0x200
[  660.514244][    C0]  exc_invalid_op+0x1a/0x50
[  660.515722][    C0]  asm_exc_invalid_op+0x1a/0x20
[  660.517331][    C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550
[  660.519372][    C0] Code: 89 44 24 20 e8 c7 de 92 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 cc bf 8b 48 c7 c2 c0 d1 bf 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc
[  660.525569][    C0] RSP: 0018:ffffc90000007a70 EFLAGS: 00010246
[  660.527546][    C0] RAX: ffffffff8a3bd810 RBX: ffffffff99a7a2b8 RCX: 0000000000000000
[  660.530085][    C0] RDX: ffffffff8bbfd1c0 RSI: ffffffff8bbfcca0 RDI: ffffffff8f8aa470
[  660.532741][    C0] RBP: ffffffff8b6d24a0 R08: ffff88811300bc90 R09: ffffffff8b6d3600
[  660.535264][    C0] R10: dffffc0000000000 R11: ffffffff81ae6210 R12: ffff88811300be00
[  660.537828][    C0] R13: ffffffff8f8aa470 R14: ffff88811300b000 R15: ffff88811300bc90
[  660.540350][    C0]  ? __pfx_timer_debug_hint+0x10/0x10
[  660.542257][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  660.544096][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  660.545931][    C0]  ? do_raw_spin_lock+0x121/0x290
[  660.547577][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  660.549232][    C0]  kfree+0x13b/0x660
[  660.550483][    C0]  rose_timer_expiry+0x4cb/0x600
[  660.552105][    C0]  call_timer_fn+0x16e/0x590
[  660.553630][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  660.555374][    C0]  ? call_timer_fn+0xbe/0x590
[  660.556962][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  660.558586][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  660.560287][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[  660.562098][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  660.563870][    C0]  __run_timer_base+0x61a/0x860
[  660.565459][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  660.567191][    C0]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  660.569189][    C0]  run_timer_softirq+0xb7/0x180
[  660.570792][    C0]  handle_softirqs+0x27d/0x850
[  660.572371][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  660.573868][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  660.575579][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  660.577383][    C0]  __irq_exit_rcu+0xca/0x1f0
[  660.578904][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  660.580502][    C0]  irq_exit_rcu+0x9/0x30
[  660.581951][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  660.583789][    C0]  </IRQ>
[  660.584750][    C0]  <TASK>
[  660.585703][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  660.587606][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  660.589751][    C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  660.597433][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 00000286
[  660.599954][    C0] RAX: 72e62d8b59389c00 RBX: ffffffff8197438a RCX: 72e62d8b59389c00
[  660.603145][    C0] RDX: 0000000000000001 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660
[  660.606365][    C0] RBP: ffffffff8dc07ea8 R08: ffff88812123359b R09: 1ffff110242466b3
[  660.609587][    C0] R10: dffffc0000000000 R11: ffffed10242466b4 R12: ffffffff8f805a70
[  660.612857][    C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000
[  660.616075][    C0]  ? do_idle+0x1ea/0x520
[  660.617849][    C0]  default_idle+0x13/0x20
[  660.619633][    C0]  default_idle_call+0x73/0xb0
[  660.621631][    C0]  do_idle+0x1ea/0x520
[  660.623344][    C0]  ? irqentry_exit+0x5ba/0x660
[  660.625320][    C0]  ? __pfx_do_idle+0x10/0x10
[  660.627244][    C0]  cpu_startup_entry+0x44/0x60
[  660.629217][    C0]  rest_init+0x2de/0x300
[  660.630997][    C0]  start_kernel+0x3ae/0x410
[  660.632896][    C0]  x86_64_start_reservations+0x24/0x30
[  660.635137][    C0]  x86_64_start_kernel+0x143/0x1c0
[  660.637240][    C0]  common_startup_64+0x13e/0x147
[  660.639323][    C0]  </TASK>
[  660.641321][    C0] Kernel Offset: disabled
[  660.643086][    C0] Rebooting in 86400 seconds..
