last executing test programs:

6m13.609895335s ago: executing program 0 (id=86):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newtaction={0xac, 0x30, 0x1, 0x0, 0x0, {}, [{0x98, 0x1, [@m_simple={0x94, 0x1, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x61, 0x3, 'vlUn\x00\xed\x1d\xddo\x0fk\x1aE\fL\x87\xf2\xc5\xc4\xd1\xc0ufV\xb6K\xe8\x9cM\xd2M\x1d\xdb[\xa2\x04x=\x8c\x96\x02\xc1\x8c6O\xa1nw\x15\x9f\x866\xe0\tE\x00\x89\x0e\'\f\x8dL\xd6|\nA\x9cP\xe32\x14\xdb\x82\n\xc8\x86\xbe\x10\x01\x1b\xe3\xe4\xba\x97\xf4\x1f&\x1aF\x8eAY\xbc'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xac}}, 0x80)
sendmmsg$inet6(r4, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x7, 0xc, 0x9, 0xac, 0xe, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=@getae={0x184, 0x1f, 0x400, 0x70bd2c, 0x25dfdbfc, {{@in6=@remote, 0x4d6, 0x2, 0x6c}, @in=@private=0xa010101, 0x2, 0x3501}, [@algo_comp={0x136, 0x3, {{'deflate\x00'}, 0x770, "410ee341bfc29b31194b692269708424499e22a33116fffca32b219ea324c3fe4fed37530edd96185a7754eaca56fcd29f05f672f05bbbe52f7135cdf4c09122754eddf17ff37ceb7da87b069414b450f95b7efdcf1d258f31bb71674663f63522abf838a9eee9f814208ba9720c1681d50a14486354d71e046adcbbf57627454051d3bd4c5b666c5ecee7ce1c26293c3d8d1efba96ca5f6a7c194821debbc7bb2d4ff457b0ec4a444e6094039dd81c46984bdf851de67a86c1139eb7a6fedcaa2a5c690f1863d4fb10e6409b0ae141b0c1be2cae19455012fb918fc02cc6152582e84d900eba0a2e32c9e939e16"}}, @lastused={0xc, 0xf, 0x6}]}, 0x184}}, 0x1e213a1ccb9d525d)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0909000000000000000001"], 0x68}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xbc8}, 0x10}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r6, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x48000)
close(0x3)

6m10.107340649s ago: executing program 0 (id=89):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x86b, 0xffffffff00000000})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x50) (async, rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="0100"], 0x8) (async)
close(0x3) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async, rerun: 64)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 64)
r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) (async, rerun: 64)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) (async, rerun: 64)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r7) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
close(0x3) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000800000000000000008098110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x1, 0x6, 0x492f, 0x7f, 0x1, 0x1}, 0x50) (rerun: 64)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0xca, r9}, 0x38) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)

6m9.945325115s ago: executing program 0 (id=93):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x80010, r0, 0x9c395000)
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/201, &(0x7f0000000100)=0xc9)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={<r1=>r0})
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=@newae={0x1c0, 0x1e, 0x1, 0x70bd27, 0x25dfdbfc, {{@in6=@mcast2, 0x4d2, 0x8, 0xff}, @in6=@rand_addr=' \x01\x00', 0x9}, [@replay_esn_val={0x30, 0x17, {0x5, 0x70bd29, 0x70bd26, 0x70bd2b, 0x70bd29, 0xff, [0x9a5e, 0x7, 0x1, 0x9, 0x7fffffff]}}, @algo_aead={0x134, 0x12, {{'morus1280-generic\x00'}, 0x740, 0x180, "180dc94a8aa3c9527635c0e2839763a6a6be75de517e49807ecd5dee5739b44042c3293253102f0824fd7a45c2d53ecffd4d6fb85d3fd6c97add9b11a5004feddf08768df8cf7a0973b8b2e3208a68312763a902d2da5751914c5dba35fd6b077f4695eb0e9ac7b777343e0c24bdaefd4216c413af8d6cc1a34296c320a783799abecbf57dcbd56720d432050ab90240f6d6eefc55ddebed265b8f75f208e574617360d044737500e9b294d5d14a9f3cce352d5208ee5e10d66633f9a1a7fb1dc62a3eca7b6b05cbcf4ea80ab6d00d0f1bc8fde9f34824493173320a60605e768a4f42fb933fdbd6"}}, @coaddr={0x14, 0xe, @in=@empty}, @proto={0x5, 0x19, 0x2b}]}, 0x1c0}}, 0x4000011)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000540)={'geneve1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000580)={<r3=>r0, 0x3, 0x80000000, 0x1})
sendmsg$nl_generic(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x39, 0x200, 0x70bd2b, 0x25dfdbff, {0x5}, [@typed={0x2e, 0xce, 0x0, 0x0, @str='blkio.throttle.io_service_bytes_recursive\x00'}, @typed={0x8, 0x150, 0x0, 0x0, @ipv4=@empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x90)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000a40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x20c, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x100, 0x2a, [@random_vendor={0xdd, 0xc0, "1456eb55084f8bab090ce39c16cebe2d99f2bf1c9cc101acdbec918970a2d8589f0090caf981b14c752a069e1bc9df4b9397353947c27fa084cb8bc4b4a1c7ebb199c7a97f248578b1d52f233ac7167755d43e89cf3e1499694a5e8f6511a3992761e8f325ebd0dc900a267ab49c7e40f9330ab9bc1843a213856d790e1ae8f59114314ae8eb54898cfcd04b9ff41a5092972db4d653d87859023f90d54034bd87eb32c882c0e3674db719621bbbe73c7a06b3bb1a64d8f69dd40683d514f726"}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, 0x21}}, @rann={0x7e, 0x15, {{0x0, 0x6c}, 0x2, 0x2, @device_b, 0x1, 0x6, 0x1}}, @mic={0x8c, 0x18, {0xfd6, "db8c7d17e1b8", @long="8f28ac0fab92f66ba494997338124dd4"}}]}, @NL80211_ATTR_IE={0xee, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x8}, 0x5, 0x0, @broadcast, 0x3880000, 0x3, 0x1088}}, @sec_chan_ofs={0x3e, 0x1}, @prep={0x83, 0x1f, {{}, 0x81, 0x5, @broadcast, 0x2, @void, 0x81, 0x101, @device_b, 0x6}}, @random={0xb, 0xad, "730b7df0a0be6204544ed4ad243b5136f5fdd81cb79f8e0455206bf915e39715c37d726b5717af2d307d9917b5544421992382782167109f5bda85f034d2c2ff6fc022acb891cfc74099d7b750b3af92b79fdf795dfb9cb74444e30f4e0ebbab6efbad7cf0a9532abdef06bf737184109f13e1e21def3d07a4af37543d9d942fac122f8a92db7d3e7fa46dd1e5c492d00f1b4867acd8a0956d8097e2a36e2cfab71561bdfc823e06e8ab4ec299"}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x8080}, 0x4)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f00000014c0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000000ac0)={0x990, r4, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x894, 0x111, 0x0, 0x1, {0x890, 0x5, 0x0, 0x1, [{0x1b4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x9c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x190, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe6d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x89}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfe00}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x138}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x4bc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x44, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x29c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xcc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0xe8, 0x111, 0x0, 0x1, {0xe4, 0x5, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x245}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x922}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x126}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x267}]}]}]}}]}, 0x990}, 0x1, 0x0, 0x0, 0x40000}, 0x44800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001540), r2)
sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000002b00)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000001580)={0x152c, r7, 0x609, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x6c, 0x3, "eedaa6212d996e4385f517f1dbe21bf53b439c9fede41ae29600ed12fb1ac058612176d873000c21c053936233054946979ac019c70a88bea93f8a939a941992f8887c2523500dec9f9382210aba1dd8559f48907258af0b8540e45c8843c75394461b35c563049b"}, @ETHTOOL_A_WOL_MODES={0x390, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xbf, 0x4, "691ef3db48af943f5c1ffccff6bb9bb71f5c30817f264711ef016e158169fc20067d1a07ff182c7a2cdcfd8710976aed3818f0d49ed1e4b8333bbd17027aadd96f1a438c7343ab4a81d9af07de806ee1e2b2454177a4c6ed189a8a0542c6c68802fe0509eca4a24aa07b1abec651eefd12085371dc364a62a4ca9adb914c815c36bdccc11e78e3e0ac5bc22a34a94a1f2b3e06447a9825fd7a5d3e9456d913c7bd344b44dae7a32f902bdc0537ae067f09900320475fb510dc67d6"}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x37ac29ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc3ba}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4c1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x480}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^-(..\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x6f, 0x5, "7292c80652734482f8e3d82cc979fe3baed681a54323f3b6fe64fd812a929a19038647505c5426758438ff6e5972d136ad6c122cd096b2ccd759bd3359f6fbe76a83621b926765af219094f9766c47a3e6fe5720587fa74da9ea552bd66bac469067892dd40a0215f9bc6b"}, @ETHTOOL_A_BITSET_MASK={0xdf, 0x5, "ad0ed407b11c08bc422f27fb23ea9ffcd892920ae74e54b17c88e87b046076eb5fe08b554e812310cbcfa8306b86c6a73c08fbcf86348f6df1620385e9a53af8161976dedcbcb72bbeb951b0de609dd95520631a8f3a1d606ee3c7bb4ad00874820571cdd044f7d7c6d6abc682fbe7bc5027a0f9aea6fc884ff13b900ed4c4a1f78dffd7b36e2f0d39f54b5f760f1a8eedf3f297b60bcabe441a9a1040b6075316c258312e787c30ff62e2bdcc9a469a63e65e0d1a0861ceeec65264f063615bdd1e4df67b95ae52dc9e410c1b7099d87ff6aef995996b396fc83a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff0000}, @ETHTOOL_A_BITSET_MASK={0xf, 0x5, "9e1f036433e0589e360b0c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf2}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'morus1280-generic\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "bacfb4f11d7c5f999cecd8b985436cce1f321e026ed3fb566ce04aa5d947de515cee58533784e5f0bd85a1ea851dba965557c33f9396fcbab3b05ebe067c368f6985aa9e4dd96cf9277351b42583015f602c1096c2236878de61b45055c9bd926cc7529f0b9592fb297956d5f5d3c107640a19760eae590f91f1e0848472fd0f0bab10388f50ba6e266c7ac9bd164bbdac763f003d5d81ec0508f76b4746988c8709d9ced9e6d8247c91ed09703b8b7e26cca73eb38ceb8797bba54c6a8a17c7112c812da2caa256b2bc7a3b7e763755899ba9ec364759a7c115d8b815ce99e222946648185dd97b9abfbbdaf2cacc7ee1e54b3c7ef7da21df1c80fa86ab2c214ae3bbef6c1745067fdff89ba5605a59d0a46fb0cab00f6a81ea408a360e2be8d380a909624e5f51a4ed045b71a9f00ebde3b4008f3f80b476f2150edbe820407ffa92bc55ad0ddb976f678a7dbfcee66eca2283f36e3d87896291b123094abcaa30348418c795364923588c162b74831467ae0ef033368ba9cf75df25e70f511639cfba6d9cad30c2ff20eebd7abe5c851ac59e25834352253136390dd8b05bfe637e921600b5b21b7d85286aaa285659214f7431c044e63f84f2bcf7368ef06e892e021bd2d9e1032d69f72809cb23e281c559ad99789ceb4c28b4ab47b1802916463e67d0d91d1d337a4624d8dca4804197ca7bf9b677b1a5cbf9e4465eff0c1c128fd7aa3b6f51a74e0ca4f34a876ccb197365f1344fb4e405b19ea2f2fa1a525754efdf0abf93186f7a2aa2c377ab359aafc2856977bfd6f679fc191e291369fa23addd139a2077bc542756c4a63d94b99c2d547cd0cc75d298bdda6c88b622bb40005208d973611c16f48fd76aefc833a257141d011794c932d4f47cd1716dbae593d523f3114ab9fbfce07d64a9d97863506a5661e021be266bf40928e130b81378927c6ac576e65cbc0e3710880efa40b67f799413d0cddbf1283c951dabc15b09c4bc6d5f965ae88fb93ef2fb88003db174e16ad2e4b2ee6a2618d7cff3b954a967079f086615e6caf7055ef76817849be8bdde26149ec28cbd6563ae5a1071b1541d32099faf3c3570c484ccb35ac61bc232d32af6f3b896bbba5bb4edf9bb3d0848e60c2f208328d5f87c95c43f8d9b4987cbd56cd08549c485e50b117db30d9c0003377bb1e843c898000e5ea6791a87fff3b7a172430054780f8af88425b3725afcb0c51078f818343c2c25d385f00fbd8ac3b4ec52242078abea98d295f1b766c2ef1bef3adbc4033ab4266e4a25138a9ae6265995e31d20fd5e3b95ce105d45edd048ab3be639db77f204b4ac81b51906cc5628096507cbe141bd9213074bb5c3b86c5ce40665ab51fdccbab18e3f50653dd5757fcf9e0a542bca436ed95ea5a46af2d26f6829839ef19591dfd8ecb92cd03f9f23be7a5303c175fa2e84519ad85bac3c096cb513be84fece4232f63a5db7fc5ba773c361330efab67698f5a3350094ee1bc162df9ddc7946a654b6a4333334e4cccbd9562193dc02a75d7567a4ff4fb3f55e25690627a3dcf9acc314b2a80375962fa1c7a41c21ee7d2355f7509a05ad16364adce4dba36cea17e7c20fe1b576ae1beb134e8f847ac365face50a2332f16f4e79823e08447941a5b2f2599e595eb53faee17a3af491b2738aeaa12a37b80eca8c45d9118d7c2228d2e1162a3e1691652c19199ad44b4ff898e8d67e86d1c993d71baa9745fea27254dcd57819e31d883361dbfb7b14d86b23361b0f7d1715f4d02b32ea42d94d92fbf86c629193e64715165ceaaa80a7254577fa3b79b5c31f58bdb11bcb5b0adfee6aea829872d31a94a31694659d806ee639af311e4ea60b2b65cbc0f3767ea795f761ab3825942da39ae9096cef00e5c55ad99481aaec3d0374d8aaa609e901b538eb89d113fb2c389176037158d4dcaf61d515740aa07f426945876e70940562822478dbe44d2f1a590d1d45faaf25fcece3f01389e841367a913cf11160dedc5a3bd73b978da7acda4355e3854311a5e66a14aced8b4ebfafd764a2864a3262c654c84e67bd464b84e56163e8b357d89ded6731cd9824a8feeb76d3335c3bc145242543b913d11e85b527c0951a18de73ce946bc79f6dcbeeb442d02d661114c1a880a8cb58f804a61efc4723ef11e1d90cf7264ff773fe8436983562abf8c5a24d5cbc00063fdd7cc98a3cfbdfc63c19e1b050d8e93ddfa48fd23f7e8185654a0706890b4896a07e227ff7d10c6901eca68ec22eb82c5782b432176a6ddc88926ec396bd92916d4f9c285d8e4f02bf3af3af5a77ef5c5810e162f7947848827ad1aacfeb46e6828348e0fec80fee48c29b636a980a7b28e8209187bb4609793010223cd0478da35fa8516766f8b7492c4f37068179e4380f4471157e41845cc066916e1fd7a7c90161e64c74cba9a77c76bfa9b1cc6b04894f2c3005673f78d6a934d2237c495991e723130992f920db686716a3079d535c9e09a1024acd0b380227e311074e4f3619a8d482a0f0fbc5fbd038a785d53dedc7ac78795cb20308034b0db7b5139d082f1ae3756b44e19c20d43e8593ed4b78041f88df6e24a301820b936e612cafbb900af717e9a4cb8059741daf0018c1e3586559357408616e4f3812b875cd32a47d6ec2ce9fb34472ddd87959dceb5f2e5b5773686e3d6da9bd8c122d92740f6eb546f078036e7221bbffe975e6624c5e443c577d7f95e5aa6dc398fec5ae1611e19d7088911b6452c4a1dd290d5b027bfa5e5b5078adf034a6205b01adb275be12b5c9fa5ae0f631e5eaac1e8f1a010e98d066e07a2e2bcbf54293e6d0e6c401a69526df3b641c6cd6ccceca64b2c3eaded84483e86f536ca2a3fea45aa46796a2718ef423f0b3754cbf056e5fb6ee26aabc3f1ec503c7508e3a47f5fdd16a235f2b853bc1355fe07f350895ec6e02788f025e3fb12c8a15c1748d5256b26300afd4a4a2f84c986195fdd332cc2d0b53fe70285d390e766400f24f66a714ced0ef9f89385765d16e5565881a2c6451794ca2c16eb7556581df89e88f99ba5818a89843432e9a475f5a1e650b5b62188f30f4c5720d68a88928350b221c96d06ece3c1d63d681829c293ff2411b1d30ca540907ee5519add3166b6f6fca7a9a9e9457ecaa5327e8e3d400a83a5e05c367110a4a4232dd6bc7dcb5c5e2f5019d49ef87a866dec2f0c73f5feaae6209cef4a32e407ce8b4943c9f039d064808127c4c364f3d3b318ba293b925788892a3ac17c7ffc08880b11a16bacedd1618c8500ce7310ab86c803e0027ec1451025aa95f8f20ec6b4a0c0915515884ef45fff9aba21be138d1f7f27ce81784efba0f010a50e6ff7ff374aa99890eda711b63250cc302c95e24c462444999d54bd4f2868d6808e5fa5a6de4b9632d4d2dc97c808420283cb3a8f196660e1f7c7ce5326c383177b177c1abd96afd7cc6280b1db88a281cbf26c8f8f20d45e40b4ade8a38c42761816c47ffc1d44be8681e5dc1be2916c79791999c7bab9fc53c5b1998f5f617b04ad7c0c1a67ff62e3aae6d7488be11825da0b50f17c7c63bbc45316fd18646f5280cc46d5e9ad85ea05c781bb08223a6e1884d0768de6c3caa514a841cca9786b7eb2b6631d2fecad32b0e50b661e1c24ab17eb2a704b2d94df71727512073d7bb28e4287580a41eccfb2514013e765e5c4077a6e2d5e41bcd47a330ced1e025f4509c3eaa967b8c72295740b18289450ae02368c1599ee76e916f320de14be1c7dd258542ac8c4f97a6a60841a20293da1b5a3aed19b1f909ab3041fb82e26fe9593dbeb30ae350763eefe5d230ecd4600e003331c73e2048f3235f1c28a28545bdad3d09e44cac9b1009bf69d85d5fb8e74da645376c5614dc6fc70e60fa858efcf72b6c05842f5ee6b332418e396aeed51f101bb4d50189acc6ecb58d73938fb6594e375cc2f8485325a03e1da3aadba98f50968e9d2969cd8d326fb99a020c0b26101dc43ddbf714fbe92864a731e9efc41f4a327b2918e8fe7561c0bc23f5282d469f5cda95ce5f946106e8c8eaa67e29bb67d56b4270c6ca19b72f8ee34710e4a435e662ea63d55a2f7d05112d6135ec4ed263cbe41504dd0358797259cd8ba14d7f8c187bfd8759bf4ef51246aa246d53856a98a0a09a015f57d0d2feff142763503e7246e84fab39edadaed398cb51203bab126840204de0e03317dc545382bacccad608a16466586bdf3b7be37a721f71538e21f87012903cd1e1435a1355226fa854a983de48f05b3e89273927ee8d817a15009c44291f6a72f5fad2a080e88b0931ab2994ca7f66ed9a22ca48bf5b4b7d40ce3316dd6e74557f251713995124e2670537c78f4b6b86713193a5a7a1cbbd897a3710bde1df4014f219aaa16a8f3060b5d7865d7723834309d4ba27350e558886eb0fbf75e75dddf0e76aeb785630241baee8d27aabdad6706b94184d8292231d4bbe5976ea049bd9189c9c2e11c12eaf0f236583653a3bcd1b3c4e48423255666314aebaefc2ccdd7f9e5cd2d43979559bc5ae029dde3f3f4f76bb0a39445a3f9e9b706a0bddd393343509fbb6a73794919760ff63798822bc77cc44046bb234aa00a66439a7c0f34908ffb4bc0d9325c89e7854324f65bb5ea44e424c21a16e44c41044834d9e727076e6a18874ca9b4f7c2a0b50475765f8e2e3c2afc9397aae5ce3d6a81962dfe06785b94f9829dbee4cc64736c1a5381c64c9ee8881387bd1a79e9dac660c002e9ad103b75fdcd860ea42ff7018aaf3d728cacd2f6431fa529e6312f4a716d2c03df86e81c15dc0da00bfed838af8b99a76cb7206e3599de93c2b422435dce28b91a43601b07e2a32479771db913675b8dcabd6509cfa4787fd98c754216e30e53882eda51cc823c60775b593b8ad735b9949c4a84f8bfa2c55df65322cb17640242ae0f0ac3ebe04e8bafd7f1d0b34c91073dc5f828b4ca96eaac978e5d345be5db54bd02cd7bfcbf3cfe5695bee6b27b65c852f44ae33cfd9fdd025154e64df8617ae80ce6889bdeffe0de22211373dd197124caadd1abb8d6d1a3e7813bbb97badb08d85d1eaef04a55fa5d385564a5277070ccdba124bf0dcf31928150f4b71972996ed3acc5a1a97e9cc358d45281d18628ddc50792c8a09bd7276038da4581145d6511f6b8f1d1dd9f09ed9d11b7f8933dbd29f90e7b77f243302b01fcd23d7f0546de89155687796c8a567708823437fe38b2aa53ae02966b1f08340105a473b16c142c1cde574cc5a972b42eb1c6d81432da3a333757d5d0371a994de37019ff4dc6b2ad30ec07b30189d2d0a5871ad8323b97a6c6e6f94f20af613c1653e85ad7e219a700ef21003b4a2ee81fca6077e25934ac47aaeafb826296df9848930bea8aa49f96dec8bae54448ddb8a9040e2dafdf7253e5a09dbb5c5456c37cd5dc9743f6eb21c8cc093b69ad02385cfb21c3fba7beb8578def776d6de5f4a1733049ff382b0c4551f427ed373b399c3d34b384b8f806a6f1b375aa80dbc1ebea0d75867aff546855a04d9dc0c70981ac10f0fdbbdc872e3c5e3636eba48a138c8dc05ae7dddadfea5f5e83adc84871260719ce9ca38e40613fcd4a5861b5936facfc0638b8f8defa97f6cf45a78db2766af58cba560210879636179eb70e37aff4290fe8db3e36300e80c2b341ba9a908835e6a44570e40f4a11cfb18cebe8e736e014debc203d03b363880aee07d4b9f2297b5b98818d6463161e5981704ea4b14465959423a3032585"}, @ETHTOOL_A_WOL_MODES={0x118, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7, 0x5, "a92d6a"}, @ETHTOOL_A_BITSET_VALUE={0x101, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}]}, 0x152c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002b40), 0x1, 0x0)
ioctl$FICLONE(r8, 0x40049409, r6)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000002b80), &(0x7f0000002bc0)=0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000002d00)={'gretap0\x00', &(0x7f0000002c40)={'ip_vti0\x00', <r9=>0x0, 0x7, 0x7800, 0x5, 0x0, {{0x26, 0x4, 0x2, 0x12, 0x98, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x2c, 0xab, 0x1, 0x9, [{@empty, 0x2}, {@remote, 0x401}, {@empty, 0x3}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0xf}, 0xf}]}, @timestamp={0x44, 0x1c, 0xd0, 0x0, 0x3, [0x9, 0x7, 0x9, 0x7fffffff, 0x0, 0xe]}, @timestamp_addr={0x44, 0x2c, 0xa8, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@local, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x80200000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x8001}]}, @timestamp={0x44, 0x10, 0x8c, 0x0, 0x9, [0x5, 0xa, 0xa613]}]}}}}})
sendmsg$nl_route_sched(r3, &(0x7f0000002f40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002d40)=@delqdisc={0x184, 0x25, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x2, 0x3}, {0x8, 0x1}, {0xe, 0xfff2}}, [@TCA_STAB={0x4}, @TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf7, 0x5, 0x7, 0x9, 0x1, 0x1, 0x0, 0x5}}, {0xe, 0x2, [0x6, 0x80, 0x2, 0x9, 0x8]}}, {{0x1c, 0x1, {0x4, 0x3, 0x8, 0x5, 0x0, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x5, 0x6, 0x9, 0x0, 0x26d, 0xe67, 0x8}}, {0x14, 0x2, [0x8, 0x2, 0x6724, 0x8, 0x10, 0x2, 0xfffb, 0x7fff]}}, {{0x1c, 0x1, {0x0, 0x3, 0x0, 0xc, 0x0, 0x10000, 0x781, 0x3}}, {0xa, 0x2, [0x7, 0x0, 0x6d5f]}}, {{0x1c, 0x1, {0xa, 0x7, 0x3ff, 0x3, 0x2, 0x0, 0x8e15, 0x2}}, {0x8, 0x2, [0xfc01, 0x97]}}, {{0x1c, 0x1, {0x7, 0x9, 0x5, 0x37, 0x2, 0x7, 0xa7, 0xa}}, {0x18, 0x2, [0x5, 0x80, 0x1, 0x9, 0x25f2, 0xd26, 0x81, 0x6, 0xfff, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0xe, 0x4}}, @qdisc_kind_options=@q_drr={0x8}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x8001, 0x2, 0x8, 0x7fff, 0x5, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x7dd}]}}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000004)
r10 = accept4$netrom(r2, &(0x7f0000002f80)={{}, [@default, @bcast, @null, @netrom, @bcast, @netrom, @netrom, @rose]}, &(0x7f0000003000)=0x48, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000003040))
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000003080)={<r11=>0x0, 0x9fee45d}, &(0x7f00000030c0)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000003100)={<r12=>r11, 0x4, 0xfed}, &(0x7f0000003140)=0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000003180)=@gcm_256={{0x303}, "377eb1b1123aeb2c", "44791d6f4e388f51315719ae2003c68475109ba06ea407dfc075ed8772bcf8ef", "e6d24b9b", "e32fa555ece9c19d"}, 0x38)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000031c0)=@assoc_value={r12, 0x2}, 0x8)

6m9.833059966s ago: executing program 0 (id=96):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) (async)
bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7, 0x1}, 0x20)
getpeername$l2tp6(r1, 0x0, &(0x7f0000000080))
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r2=>0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x7}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="d15f1e7aa4aff784dda7ee2882eff43292035a89e004ecaaaad69ff8d39a21a88b3c46e7a74998b364605d48ddebc9243fb394bc81f0c3eae8ed689ea6d9cc4c96cdfafad8de71b9cc6397c63c4945f1ea1fbf10f2c9b07eea573f6147dbb1e75d4fd86f029801fe2d096b5e3448f1872b372c8e758e35b9018321f8b26ebff67d7ba393b208342867b08d49524eb78e83cfa68c21fdee5a1a72bb8943babc47f4e9f57460da068db37ab2bddc03288e1ce3ecf5c80268fcf3577fa902dd29812f433cfc2aab90437f09a8990fad442ea75b9b7389728475ad11d11b93738899be8630c17387929d6af39aa0934c2c166be04838a3a863b75c2d7ade87512f07") (async)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="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")
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)

6m9.757799274s ago: executing program 0 (id=97):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="8fedec7907001175f3757a43a0c8630080e900083723db5b6863589bcfe8875ac8a85475cf14472a0023000000000000000000000000ac1414aa33"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8], 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r4=>0x0}, &(0x7f0000000880)=0x8)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r4, 0xef, 0x6}, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newsa={0x104, 0x10, 0x281, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x4d2, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@multicast1}]}, 0x104}}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x24, 0x0, 0x3, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@fallback=r5, r0, 0x29, 0x2018, 0x0, @value, @void, @void, @void, r7}, 0x20)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x6)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r8, 0x40309410, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r9, 0x84, 0x85, 0x0, 0x0)

6m9.628451249s ago: executing program 0 (id=101):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair(0x23, 0x5, 0x1, &(0x7f00000000c0))
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
write$cgroup_int(r2, &(0x7f00000001c0)=0x5, 0x12)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x8, 0x9, 0xd5}, 0x14)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001e40), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$BTRFS_IOC_SCRUB(r4, 0x4008af13, &(0x7f0000000400)={0x0, 0xa05, 0xfffffffffffffffe, 0x1})
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r5=>0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x7}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000080)=0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080)
socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)

6m9.517362585s ago: executing program 32 (id=101):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair(0x23, 0x5, 0x1, &(0x7f00000000c0))
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
write$cgroup_int(r2, &(0x7f00000001c0)=0x5, 0x12)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x8, 0x9, 0xd5}, 0x14)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001e40), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$BTRFS_IOC_SCRUB(r4, 0x4008af13, &(0x7f0000000400)={0x0, 0xa05, 0xfffffffffffffffe, 0x1})
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r5=>0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x7}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000080)=0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080)
socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)

2.850383832s ago: executing program 2 (id=4156):
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffeab, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32, @ANYBLOB="d461e83e4791e2e3fef94d95649775afac284d5a2d5c21e783b4b2ad673cb1aed7deb3ff26a1a3ec0252b1151688df81d2c3b7dcb20013c35248476a302873166c98c1ca51abb85bea9bdabb1c6e48bd6b5b902a62b7822158bae2f7827cbedadca11af3d3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000001900000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}, 0x1, 0x0, 0x0, 0x3ca07969f0248e73}, 0x0)

2.849406672s ago: executing program 2 (id=4158):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000007c0)="e6b4a6b8860c482cc261aebc6c53b11b5a5fceeb6c751f41430957cc9f1fcc8805ae0ec866c654685ad491ed023e0d56de6c5812159a3e7e52226fd6bd54a17c31a750746e7b5eec1b556220d5510a0bd1dc8be37c716fe142344a621ab3d470729f532a2269151d78423d2243c1b69642f3b9e28b5c5aebdc4debd3343561a13f1a4bd637b137294e5d01ee038dd4d9469e60e9711cfd00f8c796cedb52d7d15fc9c8984d476b643210c3e599a3d3b2b3d5fdf72ffd1a299e1cc63a65910ea54d2241568788648859fae5784a150923ce315fc591a0ff65606aaa742b8793671c64d9feed286ec9c446102cc04f4b3ccd3a6694d685abcaa2292a", 0xfb}, {&(0x7f00000004c0)="41d47b3fe5e15d283417125c98111522b083814fb49fb1e7c04cbad3a6f83e2d88a715ef8433351fca006dc5b3", 0x2d}, {&(0x7f0000000600)="5ccff63aefc16162b6fea0a040c38b046d967018d58ef7481b4423ee12561e65f03b1ed3e2cd7b80a8d54e32fa3510777619433b827030d75d98ad7bf84fedfca0933ef3546648cd02666cb79e94efb204859cf75b897cae54d8ef20dc06", 0x5e}], 0x3}, 0x40040891)
socket$kcm(0x10, 0x3, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYRES32=r0], 0x23)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="ddaa05df47df2eeb32a903e0f87d0e469f1445cf04a69c72853fb98ab8cc97bf301f0964f62562b22713994156def6bd6ea09e0ca8fd8aa1d22dfb5391b4cfee2a7bab9299206041d3044683b500b326b05f24ff4f42d149002e5dce920c688020daef7c850cfd06aa0f8fbc35b38f193c710cc689b258e82f64ed76d9e74e55f23d657835067ad2efa5b3aa5de78dd19fb80378c2bef743cff55453"], 0x98}, 0x1, 0x0, 0x0, 0x20008894}, 0x4c010)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'bond_slave_0\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="0000891700030002800080000000bbbbbbbbbbbbffffffffffff08004519001c0065000001069078ac14141dac1e0001bcad05faa84cb67961610e4039a349d05f0b204986506699d6a4dfc9b5b7cd05d7c503ca7ad1e2459d1c0af4f200"/113], 0x38)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
r6 = socket(0x25, 0x3, 0xfffffffc)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010000304000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r7, @ANYBLOB="08001f000c"], 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00'})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r5, &(0x7f0000000080), 0x10)
ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000340)={0x0, @isdn={0x22, 0x7, 0x5, 0x18, 0x8}, @in={0x2, 0x4e23, @local}, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)='pim6reg0\x00', 0x0, 0x7120, 0x6})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'bridge_slave_1\x00', <r9=>0x0})
socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRES64=r9, @ANYRES64=r5, @ANYBLOB="000000000000000044001280110001006272696467655f736c617665000000002c00058005000a000000000008002200", @ANYRES8=r3], 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r10, 0x80487436, &(0x7f0000000180)="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")
socket$nl_route(0x10, 0x3, 0x0)

1.931068793s ago: executing program 2 (id=4160):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
unshare(0x26020480)
r1 = socket(0x28, 0x801, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x1)

1.428929596s ago: executing program 3 (id=4175):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64})
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000006c0)={0x8, {{0x2, 0x4e26, @multicast2}}}, 0x90)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x44}, 0x80d1)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0000000700000009d3010000", @ANYRES32=0x1, @ANYBLOB="9600"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000005000000000000000600"/28], 0x50)
r6 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendto$phonet(r9, &(0x7f0000000180)="20d093758a4f7a30081afb991f6724719fc447dcc9efa8206987c4e57a24039b88b33d1a9d21d9b2c52e0db4be519a71b5bc0b055fc782ff4592de332b92d56f123e5d52ad904c20ddf7ba2917f26defaec0854e2379bd98e157927ae385da92f4848cb0422df46d96dda8952ebd8e9dba", 0x71, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10)
sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)

1.352986456s ago: executing program 3 (id=4176):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b40)={0x460, 0x3f3, 0x100, 0x70bd2c, 0x25dfdbff, {0x1, 0x0, 0x3, [0x61, 0x68, 0x6, 0x101, 0x1000, 0x0, 0x1, 0x7f, 0x316, 0x0, 0xffff7410, 0x2, 0x6, 0x9153, 0xaf6, 0x1, 0xd, 0x5, 0x7f, 0xffffffff, 0x2, 0x3ec, 0x200, 0x0, 0x4, 0x80000000, 0x1f, 0x9, 0x7f, 0x9, 0x40, 0x80, 0x1f4ebd24, 0x2, 0x8, 0xfffffffd, 0x9, 0x6, 0x401, 0x3, 0x6, 0x8, 0x3, 0xff, 0x4, 0x1, 0x7, 0xa79b, 0x2, 0x6, 0xd1, 0x4, 0x400, 0x5, 0x5, 0xff, 0x5, 0xcb, 0x8, 0x1, 0x9, 0x1, 0x9, 0xffffffff], [0xa28, 0x6, 0x7, 0x6449, 0x3369, 0x6, 0x1, 0xbe, 0x6, 0x80, 0x2, 0x10001, 0x5, 0x40, 0x1, 0x400, 0x0, 0x7bf7bd54, 0x1aa, 0x6, 0x6, 0x4, 0x3ff, 0x1, 0x81, 0x5, 0x2, 0x7fffffff, 0xd, 0x214, 0x2, 0xe, 0x5, 0xfffffffb, 0xfffffff6, 0x800, 0x6, 0x4e, 0x9, 0x6, 0x609, 0x3b, 0x40, 0x80000000, 0x5, 0x4, 0x8e9, 0xb, 0xe, 0x84a, 0xa80, 0x5, 0x10000, 0x1902, 0x1, 0x7, 0x6, 0x5, 0x0, 0x3, 0xb887, 0x9, 0x5, 0x1], [0xc, 0x2, 0xf9, 0x1, 0x3390, 0xa, 0x81, 0xf27, 0x4, 0x8, 0xffff, 0x0, 0x6, 0x5, 0x7, 0x1, 0x800, 0x3, 0x0, 0x5, 0x3, 0x9, 0x6a, 0x3989, 0x400, 0x5, 0xd, 0x0, 0xeb11, 0x80, 0xffff, 0x6, 0x0, 0x6, 0x4, 0x0, 0x12, 0x36, 0x5, 0x2, 0xfffffff9, 0x1000, 0xa03d, 0x80000000, 0x3ff, 0x1, 0xe015, 0x10, 0x8, 0x2, 0x1, 0x3ff, 0x7, 0x4, 0x9, 0x3c1, 0x2, 0x40, 0x9, 0x200, 0x4, 0x8ef6, 0x2a6, 0x907], [0x1, 0xffff, 0x9, 0xffff8000, 0x0, 0x6, 0xe, 0x4, 0x2, 0x1ac, 0xd, 0x1, 0x0, 0xff, 0x0, 0x7, 0x81, 0x5, 0x7, 0x0, 0x6, 0xf0a, 0x0, 0x2, 0xe1cb, 0x5, 0x8000, 0x5, 0x4, 0x0, 0x2, 0x4, 0xfffffffc, 0x1, 0x1000, 0x6, 0x2, 0xffffffff, 0x91c6, 0x1ff, 0x89, 0x1, 0x3, 0x5, 0xd, 0x6, 0x3, 0x1, 0x7, 0x2, 0x80000001, 0x7f, 0xffffffff, 0x1, 0xd6, 0x3b5a, 0x38, 0x8, 0x0, 0x2, 0x0, 0xb, 0x0, 0x1], 0x3f, ['@#!+{\\\xb9$)+\'{\x00', 'counter\x00', 'syz2\x00', '*:\x00', 'match\x00', 'counter\x00', 'meta\x00', 'hl\x00', ']&#],\x00', '^)%\xc9\xb0\x00']}, ["", "", "", "", "", "", ""]}, 0x460}, 0x1, 0x0, 0x0, 0x80004}, 0x90)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={<r3=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={r3, 0x1, 0x20, 0x1ff, 0x400}, &(0x7f0000000040)=0x18) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2, 0x200}]}, &(0x7f0000000180)=0x10) (async, rerun: 64)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r5, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32)
setsockopt$inet6_tcp_int(r7, 0x6, 0xa, 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0xe8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0xb4, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x7, 0x1, 'hl\x00'}, @NFTA_MATCH_INFO={0x45, 0x3, "e7d81730a6ee5e19cd92ab79b53766091762781ede361416162b2aa82aa6028b2d5458c60acbd2d4ec4083c0b447c7294873f75163ded8970e6fa0f7f0f0c1fba7"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x110}}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async)
r10 = epoll_create1(0x80000) (async)
r11 = socket(0x1, 0x3, 0x0) (async)
r12 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000100)={0x8000000d}) (async)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f00000000c0)={0x10000001}) (async)
close(r11)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e2a, 0x20000000, @empty, 0x1000}}, 0x3, 0x0, 0x20000, 0x0, 0x8d, 0x5, 0x3}, 0x9c)

1.352652916s ago: executing program 3 (id=4177):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2, 0x200}]}, &(0x7f0000000180)=0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4)
write(r0, &(0x7f0000000540)="75097eb4e875c3fffdb491dec30c23b47b95701c7b99849ffcef49d843722a14470430d56fa8bef3824ca3a5e031159d4d5dcd4db459e1c0dbd8651ea7d9ed08ce18b7581454d5afcd679ec157a6affd6ca3c95461376c8bef0254aa953d3bcf7854f73f5d7b341bec0a", 0x6a)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x2, 0x8, 0x81, 0x9, 0x24, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0x1000, @remote, 0x9}}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d2}, @sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x70bd2d, 0x3506}, @sadb_x_policy={0x8, 0x12, 0x4, 0x2, 0x0, 0x6e6bba, 0x3, {0x6, 0xff, 0x9, 0x2, 0x0, 0x1, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote}}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0x5}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x25, 0x10, 0x4}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x28, 0x4, 0x10}]}, 0x120}}, 0x20008004)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000340)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xff, 0xfffff034}, {0x50}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, 0x0, &(0x7f0000000200))
write$tun(r4, &(0x7f0000000380)={@val, @void, @eth={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv6={0x86dd, @tcp={0x1, 0x6, "b404ba", 0x28, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x8, 0x7, 0x0, 0x6, {[@md5sig={0x13, 0x12, "2c14486192166a53444fdf3392add95e"}]}}}}}}}}}, 0x62)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
r8 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r8, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4001}, 0x1c)
connect$l2tp6(r8, &(0x7f0000000180)={0xa, 0x0, 0x5, @remote, 0x7, 0x4}, 0x20)
bind$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e2a, 0x20000100, @empty, 0x1000}}, 0x3, 0x0, 0x20000, 0x0, 0x8d, 0x5, 0x3}, 0x9c)

1.181836606s ago: executing program 3 (id=4181):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = getpid()
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)=r1) (async)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)=r1)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000))
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002800)) (async)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002800))
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x3c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8011)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$kcm(0x2, 0x1, 0x84) (async)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{0x0}], 0x1}, 0x4000080)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x8937, &(0x7f0000000040)={'dummy0\x00', @ifru_mtu=0x1})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket(0x10, 0x803, 0x0) (async)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r9, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20040054)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x0)
unshare(0x10800)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)

1.088812885s ago: executing program 2 (id=4183):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280))
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
epoll_create(0x3)
unshare(0x22020400)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.043592101s ago: executing program 3 (id=4184):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r0, 0xffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @remote, 0x5}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @remote, 0x5}, 0x1c)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000080a010800000000000000000a0000070900010073797a3100000000140000001100010000000000000000000100000ac3cffc85b43eb78d2088a6455fed09c5e2ddd0a8af8d8a352283d65f93722fbb4a7346c309918bf291e5bc3a508418bce89e186642e0c8693f6e7f339170d79810ab230779ce4ef19c39563aa556fd"], 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x24000840)
sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="af9b"], 0xfe61}}], 0x2, 0xc88c4)

1.041798894s ago: executing program 1 (id=4185):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a050000000000008000000700000a0900010073797a30000000003c000000090a010400000000000000200700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021680000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000003c0003803800008004000180300007800b0001007461726765740000200002800800024000000002080001004c45440009000100534e415400000000140000001000010000000000000000000084000a"], 0xec}}, 0x4)

991.569956ms ago: executing program 1 (id=4186):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4)
sendto$inet(r1, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c340", 0x8d}], 0x1}], 0x1, 0x40800)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x2)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x158, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x57, 0x7, 0x1, 0x0, "1e2190b8d7c69598b73b32651b1aff1d343fde419e2edc77579a7795e28d20fddd5b6255aaa23373d898be7a0552eee4427a271b0ecafd2a698945623197814ae09ff2cd5e0a1b3b9df8b8ecbc3b96d89bae70"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xd6, 0x7, 0x1, 0x0, "06380d9ca77520d8042ce0ee005cf7e0e1f0b558e986f6837a36baca424ecf3f0663a0b891c3520799a89e62684ecc4e8c4ccf40087d39fed8ce309af67d92f0bbd9a8f4268cc09d698171fc1024b6ceebdd0f342afe10fe0b241eeef2d7deb4f43012eecf5c26b2986234c3d2336eec5d86d71a82b8fd71bd640c5e4cb4d59b8fa0c903dd921a7efb4d6bb87796e0bd86d5bfe201a52e70818f9b59811cef6bb429b38dffabf41ea37ea3eed9f10c1168ee0b096f250e5d851fa87e4c295d4fb910bf5d78eaee8a48a5600ecd7d5ba5b0d3"}]}, 0x158}, 0x1, 0x0, 0x0, 0x4008800}, 0x8004)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x154, r11, 0x300, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000200))

193.178236ms ago: executing program 2 (id=4187):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async)
r3 = socket$kcm(0x2, 0xf, 0x2) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (rerun: 64)
r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f00000004c0)=0x8) (rerun: 32)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000002c0)={r7}, &(0x7f0000000000)=0x8)
r8 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 64)
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64)
bind$802154_dgram(r9, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) (async)
setsockopt$WPAN_WANTLQI(r9, 0x0, 0x3, &(0x7f0000000040), 0x4)
r10 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) (async, rerun: 32)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0, <r11=>0x0}, &(0x7f00000000c0)=0xc) (rerun: 32)
ioctl$SIOCAX25GETUID(r10, 0x89e0, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r11}) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @usage, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_RM_DEV_V2(r8, 0x5000943a, &(0x7f0000000f80)={{r8}, 0x0, 0x4, @unused=[0xa, 0x7f, 0x401, 0x4], @devid=r12}) (async)
r13 = socket(0x10, 0x400000000080803, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r13, 0x84009422, &(0x7f0000001380)={0x0, 0x0, {0x0, @struct, <r14=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000900)={0x2, 0x243, @start={r14, 0x0, "a07a9bc1a4e0b3d59b72cdec22f1ed4f68bee088792d3d7511adaaf1f7b6f43719c9d7e808f52914e61bd4a102fb6c4af47cfd985395c1f64c0da5be082685a5bf26d952831d114c88fcaae2f5857b18088a0c75f7c3d3e2fd5cff3e3fc264194e810cbe73024fa3d505222398ca23c737597081bd6d7f74922ba596ab76a872caa13c9f1faefffc53dfdc2e6af2caa10bc4f620c1db0ada52d8ad89888fb4b7d08f67443973e9db30e345f8cb4e22a1e537f815e032c1865e105a24ac01481d13c9a6a1e9e5ce7fb7653aacdbd4f2e323a0ce620e15cdcbdb0bccb16bf8b807dda9d17c5f8776253146fabeb139eac8f2c82fed59c86777f1f4568f36baf85d854e644e032147e47c03e2ab2fd92ddf6078bbea68d22dc14dab735fc3245ee44e6d563187db529d7ef8db3603b5a47510b1fa31233d439f7f3340965b39b63319d8516dd5f526c00991858d6f03dcbdd8011bea0bc10ee9af84910cfd47887edfa5ac09cbb1aae2f4f5533285e76568736d31dc4d5c8a8174858351d2edc138facc1a7e7ec1fc3a214d598888c3b4ec0cefe066cc05a5b8dba07d26773f072333d15094b739135b72e33111abad3ea801fd0613e4ec9c4827802b08fd16e1788852bb682e30573af2b358c4077f3fafe9c3640c95b465a39ae5181a0b82ac905f43056e23e1eac7f0bfefc48c977ac330556fcd852498b18263c900047976616ea3f19757bba3c986e02e019e79e9cbded11433e99331ca2b8df3dd478ac0ed1df7b6db8df73ca7d9b7881f0e88c54178c63a0b5182bb65cefb4fab6b41cf37b34481e733c247478b36debfdc0e2768df875e783cd2662aba4ad623a32dce7c3873c2c0cbbe97aa5c7d70b4feea96f13cbf2e25370826bc909ee74be97a1e7e324a563ad27670709d4926864d3e38b5b4f7646e1440b84947c70b62af0d687413e6416383dd522db4858373acf2580fad3f4647578b1c11b7722171d40fc78c2a0dbc7a153390724d4aa3c4d320dd19d1f8d479d5ada5ea66984a043bb0f20a50266384bb94b0b8837713830dd624b8555664c6492ebb3da09e487853414e4a52979aa8416fffc894c75b944e261b5b9967b8d2c9184202dae104da02e797fd948473fe19b713e930653aceb23a6ee38eec5ac4f05bc217b3a669f418c68fa2eb4a429a92c7a8edabc8b900e5560ac100e331daaf9a39383be1c51479d56bacb643d6619a83b7e32e9df605fcd10c2ef4f35e2b93f87fe455d0dd33d85dcfe45f93f1b50189a5a5b46bd4ea008def2e302d7b7a771615f0a4dedf82bf0471518d066539643a01c2dacc557b668bcb40752fd04d2592c702b1469180ba347138b4594911f8016d11060ba4a65839783afa5bea09d6a0b505f7d19c75b29459d8e5ec77523bd2e7c638bf21d3c7f09dfef9318d2f8a604d8b59009e8bc214f9578a", "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"}, [0xcdd6, 0x8, 0x718, 0x0, 0x5, 0x7fffffffffffffff, 0x3, 0x1, 0x200, 0x0, 0x616d, 0x6, 0xb200000000000000, 0x5, 0x6, 0x8, 0xe, 0x9, 0x9, 0x7, 0x4, 0x2, 0x1, 0x1000, 0x81, 0x4, 0x6, 0xfffffffffffffff9, 0x8f9, 0xc6, 0x2, 0x8001, 0x5, 0xd7b7, 0x0, 0x9, 0x0, 0x8, 0x0, 0x8ddd, 0x0, 0x6dc8, 0x80000000, 0x9, 0x7fffffff, 0xffff, 0x7fffffffffffffff, 0x200, 0x4, 0x6, 0xa, 0x7ff, 0xffff, 0x8, 0x3ff, 0x10, 0x3, 0xd, 0x400, 0x8000000000000001, 0x62, 0x3, 0x8000, 0x7]}) (async, rerun: 32)
ioctl$BTRFS_IOC_BALANCE_V2(r13, 0xc4009420, &(0x7f0000000ec0)={0x8, 0x4, {0x7, @usage=0x5, 0x0, 0x6, 0x5, 0x8c1, 0x6, 0x3, 0x404, @usage=0x4, 0x1, 0x8001, [0x733e, 0xd37, 0x1, 0xffffffffffffffff, 0x9, 0xfd]}, {0x0, @usage=0x7fffffff, 0x0, 0x3, 0xfffffffffffffffe, 0x3, 0x9, 0x8, 0x20, @usage=0x400, 0x401, 0x8, [0x80000001, 0x7fff, 0xb, 0x0, 0x3, 0x2]}, {0xd, @usage, r14, 0xa00000000000, 0x3, 0x2, 0xff, 0x28, 0x10, @struct={0x5}, 0x3ff, 0x200, [0x2, 0x2, 0x0, 0x57b, 0x9, 0x6]}, {0x400, 0x4, 0x8}}) (rerun: 32)
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000500)={<r15=>0x0, 0x5, 0x800, 0x1})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000900)={0x11, 0x3, {0x20, @struct={0xe, 0x2}, r12, 0x8001, 0xfffffffffffffc00, 0x100000001, 0x2, 0x9, 0x98, @usage=0x8000, 0x401, 0x0, [0x3, 0xdb02, 0x8, 0x10, 0x6, 0x8]}, {0x4, @usage=0x4, r14, 0x0, 0x4, 0x3, 0x0, 0x4, 0x0, @usage=0xffffffff, 0xef, 0x6a1c98ee, [0x80000000, 0x1, 0x40, 0x10006, 0x9, 0x3]}, {0x7, @struct={0x2, 0x4df3}, r15, 0x7, 0x9, 0x6, 0x63e3, 0x3, 0xa, @usage=0x400, 0x80000000, 0x800, [0x33, 0x63, 0x6, 0x400, 0x2, 0x8]}, {0x2, 0x7, 0x40}}) (async)
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010007000000200000004600003f00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="fa0007009000000002d58838068b9100"/32], 0x4e)

192.398534ms ago: executing program 3 (id=4188):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x1, 0xffffffff00000000})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x50)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x4c, @empty}, 0x1c)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000740)="18f0c3c5fa88468231e163c7bbfbfd0cb66c899ef375d1f7414e90f2654b45c02e78c6fba4fcc9e70f75c37d365f7ae10eadccf1649e380b69db785f173d11407583b04f33c580c73e36f7e335560c886857b0dfdd066c8f1f2838554cce63896e5f83b710fda02470ee8adf52d16e94b44895825ebc465f4ebe752dcfa73b65c651c9cc49cf2cb9627daacec8ac05f9b82e2a000e099ff6f4c083e14258c3b82aa8275b9efb67a2163a0ddea688270ca7303ea4f7d44c836cb3af11ade5e9ed7a37c33caa84d5529191b000bec7084d0ba725e1e3513155095df1ae3d628010e6c11130a13822503601c0d524bc91c1cbdb39cd24b88453b2", &(0x7f0000001b00)=""/4096, &(0x7f0000000880)="3e2f7ed3b20dc10f17d87f46288889a6a3784a389f2d54bd9dc01eb10a369afcabdfd6b36adc9744b3ec6dc1e0e8e322c4f284e7e17623af1c6a64cb1c217cb55c0979f7c582abce5ec3121de8ff", &(0x7f0000000900)="8998632b4ffd29b1c6022a0d650b608ff1de58e1861deaf21f2ace86ccbfcc056b5f82eec2bfd767e6d2b253aa7d0a8327b22204cba44de0918033d3bdcb3181c32cd04c3688083f9e847ac62d9d877b5ccef846339d36887739f6b41595cb035eb09a4042eb1523dc35a9824070f644d02732c3812ec2a47b0e2549da121da0df2a5438009db9b46b3ecd7b419995a1e9476ed113e5c09a202dde636a7eab9d9fc8ed36940c7e1a1f1df87810ff8e27657d8d99000320e29cba4f2da5ade46a63abcc8bf945762969006736cba935ab73923c5f3fb9e0cb0481bff9f8", 0x8001, r0}, 0x38)
sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="0100"], 0x8)
close(0x3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000d39cee48832432900000000000000018010000f4751f2100000000002020207b1af8ff0000cb08bdae0000bfa100000000000007010000f8ffffffb702000005000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000})
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r7)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r9=>0x0})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000800000000000000008098110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x1, 0x6, 0x492f, 0x7f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0xca, r11}, 0x38)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r12, 0x0, 0x0}, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fbdbdf251500000008000300", @ANYRES32=r9, @ANYBLOB=' \x00+'], 0x3c}, 0x1, 0x0, 0x0, 0x2400089c}, 0x4000080)

93.000335ms ago: executing program 1 (id=4189):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x8001, 0x7, 0x8, 0x0, <r1=>0x0}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0xeb10}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000180)}}], 0x2, 0x4840)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x5, 0x1, 0xd, 0x1c80, 0xfffa, 0xff4e, 0xced, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x2, 0x7, 0x9, 0xffffffff, 0x5}}, &(0x7f0000000040)=0xb0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01034000000000000000010000000900010073797a3100000000080002400000000140000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048014000000110001"], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x200000d4)
r3 = socket$kcm(0xa, 0x3, 0x87)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000)=0x200, 0x4)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000001080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e21, 0x4, @local, 0x7}, @in6={0xa, 0x4e21, 0xfffffffb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}], 0x58)

91.869754ms ago: executing program 2 (id=4190):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x1, 0xffffffff00000000})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r0, @ANYRES32, @ANYBLOB="00000000006e000000000000dc7a2800000000010000000000000000"], 0x50)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x200, @loopback}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRESHEX=r3, @ANYBLOB="0100"], 0x8)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x14, r6, 0x1, 0xfffffd, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x80)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000080)={'lo\x00', 0x100})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r8)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000800000000000000008098110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x5, 0xe, 0x3, 0x10020, r1, 0x47, '\x00', 0x0, r0, 0x1, 0x5, 0x2, 0x9, @void, @value, @value=r0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0xca, r10}, 0x38)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x3, <r11=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.773426ms ago: executing program 1 (id=4191):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
unshare(0x26020480) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x2c, 0x0, 0x0) (async)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x10, 0x4)
sendmmsg$inet6(r0, &(0x7f00000024c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xcb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="a7", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)=']', 0x1}], 0x1}}], 0x2, 0x200400c0)

1.325461ms ago: executing program 1 (id=4192):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x20, 0x0, 0xc000}, 0xc010)

0s ago: executing program 1 (id=4193):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000240), &(0x7f00000002c0)=0x4)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4)
sendto$inet(r2, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200))
ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000040)=0xf3)
bind(r2, 0x0, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

 leftover after parsing attributes in process `syz.3.1713'.
[  206.639081][T11949] vlan2 (unregistering): left allmulticast mode
[  206.640963][T11949] bridge0 (unregistering): left allmulticast mode
[  206.642858][T11949] vlan2 (unregistering): left promiscuous mode
[  206.644674][T11949] bridge0 (unregistering): left promiscuous mode
[  206.646606][T11949] bridge4: port 1(vlan2) entered disabled state
[  206.682949][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'.
[  206.687045][T11953] netlink: 'syz.2.1714': attribute type 1 has an invalid length.
[  206.701848][T11953] bond6: entered promiscuous mode
[  206.703984][T11953] 8021q: adding VLAN 0 to HW filter on device bond6
[  206.716775][T11953] 8021q: adding VLAN 0 to HW filter on device bond6
[  206.719245][T11953] bond6: (slave gre2): The slave device specified does not support setting the MAC address
[  206.722249][T11953] bond6: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  206.725611][T11953] bond6: (slave gre2): Opening slave failed
[  206.762302][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'.
[  206.764392][T11957] netlink: 'syz.3.1715': attribute type 2 has an invalid length.
[  206.956518][T11976] ; speed is unknown, defaulting to 1000
[  207.081705][T11995] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  207.085355][T11995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  207.146628][T11995] ; speed is unknown, defaulting to 1000
[  207.149797][T11999] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  207.223563][T12004] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  207.225781][T12004] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  207.228389][T12004] tipc: Resetting bearer <eth:syzkaller0>
[  207.391518][T12012] netlink: 'syz.3.1732': attribute type 12 has an invalid length.
[  207.854771][T12064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  207.863210][T12064] netlink: 'syz.1.1746': attribute type 10 has an invalid length.
[  207.865631][T12064] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  207.870202][T12064] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  207.873111][T12064] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  208.407234][T12069] netlink: 'syz.3.1748': attribute type 1 has an invalid length.
[  208.436832][T12069] bond18: (slave vxcan1): The slave device specified does not support setting the MAC address
[  208.441625][T12069] bond18: (slave vxcan1): Error -95 calling set_mac_address
[  209.334169][T12079] netlink: 'syz.3.1751': attribute type 6 has an invalid length.
[  209.701266][T12102] netlink: 'syz.1.1756': attribute type 5 has an invalid length.
[  209.703963][T12102] netlink: 'syz.1.1756': attribute type 8 has an invalid length.
[  210.780969][T12136] tipc: Resetting bearer <eth:syzkaller0>
[  210.952925][T12144] netlink: 'syz.3.1772': attribute type 4 has an invalid length.
[  211.482994][T12148] netlink: 'syz.2.1774': attribute type 6 has an invalid length.
[  211.485847][T12148] netlink: 'syz.2.1774': attribute type 5 has an invalid length.
[  211.490755][T12148] netlink: 'syz.2.1774': attribute type 4 has an invalid length.
[  211.496285][T12148] netlink: 'syz.2.1774': attribute type 4 has an invalid length.
[  211.511079][T12151] netlink: 'syz.1.1775': attribute type 6 has an invalid length.
[  211.513535][T12151] netlink: 'syz.1.1775': attribute type 5 has an invalid length.
[  211.766680][T12177] netlink: 'syz.2.1783': attribute type 1 has an invalid length.
[  211.771325][T12177] __nla_validate_parse: 19 callbacks suppressed
[  211.771334][T12177] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1783'.
[  212.749319][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1790'.
[  212.761824][T12205] netlink: 'syz.2.1790': attribute type 1 has an invalid length.
[  212.776986][T12205] bond7: entered promiscuous mode
[  212.780212][T12205] 8021q: adding VLAN 0 to HW filter on device bond7
[  212.790605][T12205] 8021q: adding VLAN 0 to HW filter on device bond7
[  212.793118][T12205] bond7: (slave gre2): The slave device specified does not support setting the MAC address
[  212.796135][T12205] bond7: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  212.801145][T12205] bond7: (slave gre2): Opening slave failed
[  212.833171][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1790'.
[  212.836594][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'.
[  213.168025][T12237] netlink: 'syz.3.1797': attribute type 1 has an invalid length.
[  213.205428][T12237] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address
[  213.210912][T12237] bond19: (slave vxcan1): Error -95 calling set_mac_address
[  213.499398][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'.
[  213.620277][T12260] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1805'.
[  213.624890][T12259] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1805'.
[  213.667694][T12263] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1806'.
[  213.671349][T12263] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1806'.
[  213.674747][T12263] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1806'.
[  213.675103][T12259] ; speed is unknown, defaulting to 1000
[  213.753750][T12269] tc_dump_action: action bad kind
[  213.755344][T12268] tc_dump_action: action bad kind
[  215.002974][T12307] bond20: (slave vxcan1): The slave device specified does not support setting the MAC address
[  215.006570][T12307] bond20: (slave vxcan1): Error -95 calling set_mac_address
[  215.131647][T12318] C: renamed from lo (while UP)
[  215.134724][T12318] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  216.551509][T12369] validate_nla: 9 callbacks suppressed
[  216.551525][T12369] netlink: 'syz.3.1834': attribute type 12 has an invalid length.
[  216.600404][T12375] ; speed is unknown, defaulting to 1000
[  216.832703][T12379] __nla_validate_parse: 8 callbacks suppressed
[  216.832715][T12379] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1836'.
[  216.895735][T12383] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  216.900292][T12383] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  216.977022][T12389] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  217.084733][T12398] syzkaller0: entered promiscuous mode
[  217.086513][T12398] syzkaller0: entered allmulticast mode
[  217.932629][T12415] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1846'.
[  217.935957][T12415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1846'.
[  217.961809][T12417] ; speed is unknown, defaulting to 1000
[  217.990838][T12415] ; speed is unknown, defaulting to 1000
[  218.076944][T12424] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  218.092490][T12424] netlink: 'syz.3.1848': attribute type 10 has an invalid length.
[  218.094823][T12424] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  218.343181][T12430] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  218.404777][T12430] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1851'.
[  218.460155][T12435] tipc: Resetting bearer <eth:syzkaller0>
[  218.469121][T12435] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  218.471542][T12435] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  218.545600][T12439] tipc: Invalid UDP bearer configuration
[  218.545630][T12439] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  218.635132][T12437] tap0: tun_chr_ioctl cmd 1074025677
[  218.636890][T12437] tap0: linktype set to 804
[  218.904449][T12456] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  219.109783][T12461] "syz.1.1860" (12461) uses obsolete ecb(arc4) skcipher
[  219.693714][T12482] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1866'.
[  219.891318][T12501] netlink: 'syz.3.1870': attribute type 4 has an invalid length.
[  219.895018][T12501] netlink: 'syz.3.1870': attribute type 4 has an invalid length.
[  219.926473][T12505] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  219.931930][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1873'.
[  219.935394][T12508] bond0: (slave wlan1): Releasing backup interface
[  219.938497][T12508] bond1: (slave geneve2): Releasing active interface
[  219.942032][T12508] bond14: (slave bond15): Releasing backup interface
[  219.995668][T12512] netlink: 'syz.3.1874': attribute type 10 has an invalid length.
[  219.998615][T12512] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  220.006514][T12512] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  220.014007][T12512] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  220.016859][T12512] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  220.039646][T12516] set match dimension is over the limit!
[  220.086661][T12518] ; speed is unknown, defaulting to 1000
[  220.202046][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'.
[  220.208428][T12522] xt_TPROXY: Can be used only with -p tcp or -p udp
[  220.933346][T12539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1883'.
[  220.941423][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1883'.
[  220.944357][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1883'.
[  221.186626][T12553] openvswitch: netlink: Duplicate or invalid key (type 0).
[  221.190571][T12553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.371894][T12570] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  221.383123][T12570] bond0: (slave wlan1): Releasing backup interface
[  221.389621][T12570] netlink: 'syz.3.1895': attribute type 10 has an invalid length.
[  221.392255][T12570] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  221.395918][T12570] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  221.402679][T12570] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  221.405481][T12570] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  222.085238][T12573] ; speed is unknown, defaulting to 1000
[  222.163786][T12578] __nla_validate_parse: 2 callbacks suppressed
[  222.163797][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'.
[  222.196457][T12579] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1898'.
[  222.205658][T12578] syzkaller1: entered promiscuous mode
[  222.207414][T12578] syzkaller1: entered allmulticast mode
[  222.267907][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'.
[  222.433350][T12599] ; speed is unknown, defaulting to 1000
[  222.457984][T12603] xt_bpf: check failed: parse error
[  222.483992][T12603] ; speed is unknown, defaulting to 1000
[  222.694138][T12624] netlink: 'syz.2.1910': attribute type 1 has an invalid length.
[  222.696491][T12623] netlink: 566 bytes leftover after parsing attributes in process `syz.3.1909'.
[  222.782596][T12624] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  222.785784][T12624] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  222.812610][T12630] vlan2: entered allmulticast mode
[  222.814183][T12630] bridge0: entered allmulticast mode
[  222.816288][T12630] bond8: (slave vlan2): Opening slave failed
[  222.837486][T12629] ; speed is unknown, defaulting to 1000
[  222.996733][T12640] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1914'.
[  223.106095][T12637] ; speed is unknown, defaulting to 1000
[  223.267642][T12661] netlink: 'syz.3.1919': attribute type 1 has an invalid length.
[  223.296856][T12661] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address
[  223.301431][T12661] bond21: (slave vxcan1): Error -95 calling set_mac_address
[  223.437122][T12680] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  223.450677][T12679] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  223.768683][T12702] netlink: 'syz.2.1932': attribute type 6 has an invalid length.
[  224.177227][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1935'.
[  224.183400][T12710] netlink: 'syz.3.1935': attribute type 1 has an invalid length.
[  224.186024][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1935'.
[  224.637941][T12725] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1939'.
[  224.641514][T12725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.804294][T12741] netlink: 'syz.1.1943': attribute type 1 has an invalid length.
[  224.827360][T12741] bond14: (slave vxcan7): The slave device specified does not support setting the MAC address
[  224.831279][T12741] bond14: (slave vxcan7): Error -95 calling set_mac_address
[  224.863072][T12743] ; speed is unknown, defaulting to 1000
[  225.462256][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1950'.
[  225.785290][T12788] bridge0: port 1(veth0_to_bridge) entered blocking state
[  225.788254][T12788] bridge0: port 1(veth0_to_bridge) entered disabled state
[  225.792648][T12788] veth0_to_bridge: entered allmulticast mode
[  225.796078][T12788] veth0_to_bridge: entered promiscuous mode
[  225.814927][T12788] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  226.087368][T12799] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  226.512372][T12801] ; speed is unknown, defaulting to 1000
[  226.991362][T12818] netlink: 'syz.1.1966': attribute type 6 has an invalid length.
[  227.040158][T12820] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1967'.
[  227.312273][T12839] sctp: [Deprecated]: syz.1.1974 (pid 12839) Use of struct sctp_assoc_value in delayed_ack socket option.
[  227.312273][T12839] Use struct sctp_sack_info instead
[  227.375917][T12841] ; speed is unknown, defaulting to 1000
[  227.524814][T12848] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  227.527156][T12848] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  227.530189][T12848] tipc: Resetting bearer <eth:syzkaller0>
[  227.567776][T12850] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  227.573210][T12851] bond0: (slave wlan1): Releasing backup interface
[  227.575932][T12851] tipc: Resetting bearer <eth:syzkaller0>
[  227.581496][T12850] netlink: 'syz.3.1978': attribute type 10 has an invalid length.
[  227.583952][T12851] netlink: 'syz.3.1978': attribute type 10 has an invalid length.
[  227.585610][T12850] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  227.593310][T12850] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  227.620518][T12851] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  227.623310][T12851] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  227.776606][T12855] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1979'.
[  227.781120][T12855] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1979'.
[  228.115925][T12857] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.1980'.
[  228.118869][T12857] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  228.121812][T12858] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.1980'.
[  228.124498][T12858] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  228.665244][T12895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1992'.
[  228.691484][T12899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1991'.
[  228.736801][T12899] ; speed is unknown, defaulting to 1000
[  228.833010][T12914] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  228.842677][T12914] veth0_to_bridge: left allmulticast mode
[  228.844771][T12914] veth0_to_bridge: left promiscuous mode
[  228.847095][T12914] bridge0: port 1(veth0_to_bridge) entered disabled state
[  228.852669][T12914] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  228.944676][T12914] netlink: 'syz.2.1994': attribute type 10 has an invalid length.
[  228.947806][T12914] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  228.956008][T12914] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  228.959780][T12914] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  229.410117][T12923] 8021q: VLANs not supported on bond0
[  229.475736][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1998'.
[  230.766204][T12975] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2012'.
[  230.902201][T12981] ; speed is unknown, defaulting to 1000
[  231.304551][T13003] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2021'.
[  231.307659][T13003] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2021'.
[  231.311134][T13003] netlink: 'syz.1.2021': attribute type 6 has an invalid length.
[  231.313533][T13003] netlink: 'syz.1.2021': attribute type 5 has an invalid length.
[  231.318160][T13003] netlink: 'syz.1.2021': attribute type 4 has an invalid length.
[  232.206226][T13020] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  232.214203][T13020] bond0: (slave wlan1): Releasing backup interface
[  232.218405][T13020] tipc: Resetting bearer <eth:syzkaller0>
[  232.233007][T13020] netlink: 'syz.3.2026': attribute type 10 has an invalid length.
[  232.235381][T13020] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  232.240315][T13020] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  232.244903][T13020] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  232.247833][T13020] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  232.257087][T13024] tipc: Failed to remove unknown binding: 66,1,1/0:3238710724/3238710726
[  233.073075][T13023] tipc: Failed to remove unknown binding: 66,1,1/0:3238710724/3238710726
[  233.082406][T13023] tipc: Failed to remove unknown binding: 66,1,1/0:3238710724/3238710726
[  233.116159][T13039] netlink: 'syz.3.2031': attribute type 6 has an invalid length.
[  233.321755][T13070] netlink: 'syz.2.2039': attribute type 6 has an invalid length.
[  233.340638][T13066] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  233.347860][T13066] __nla_validate_parse: 3 callbacks suppressed
[  233.347870][T13066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2040'.
[  233.431210][T13076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.472762][T13081] tc_dump_action: action bad kind
[  233.608688][T13089] ; speed is unknown, defaulting to 1000
[  234.225988][T13105] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2052'.
[  234.255208][T13105] ; speed is unknown, defaulting to 1000
[  234.400746][T13118] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2055'.
[  234.544604][T13129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2059'.
[  234.563938][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'.
[  234.567677][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2059'.
[  234.571341][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2059'.
[  234.574941][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2059'.
[  234.578201][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2059'.
[  234.581610][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2059'.
[  234.763092][T13142] ; speed is unknown, defaulting to 1000
[  235.923671][T13191] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  235.935439][T13191] bond0: (slave wlan1): Releasing backup interface
[  235.938553][T13191] tipc: Resetting bearer <eth:syzkaller0>
[  235.946304][T13191] netlink: 'syz.3.2078': attribute type 10 has an invalid length.
[  235.948664][T13191] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  235.952655][T13191] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  235.983561][T13196] netlink: 'syz.1.2081': attribute type 1 has an invalid length.
[  236.010122][T13196] bond15: entered promiscuous mode
[  236.012775][T13196] 8021q: adding VLAN 0 to HW filter on device bond15
[  236.034047][T13198] ; speed is unknown, defaulting to 1000
[  236.131702][T13208] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  236.138049][T13208] netlink: 'syz.1.2086': attribute type 10 has an invalid length.
[  236.143587][T13208] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  236.146352][T13208] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  236.319164][ T5200] Bluetooth: hci2: command 0x0419 tx timeout
[  237.094093][T13230] pim6reg1: entered promiscuous mode
[  237.095743][T13230] pim6reg1: entered allmulticast mode
[  237.262347][T13237] netlink: 'syz.2.2096': attribute type 1 has an invalid length.
[  237.296218][T13237] bond10: entered promiscuous mode
[  237.298542][T13237] 8021q: adding VLAN 0 to HW filter on device bond10
[  237.441905][T13247] bond10: left promiscuous mode
[  238.023142][T13251] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  238.191127][T13264] netlink: 'syz.3.2105': attribute type 1 has an invalid length.
[  238.207004][T13264] bond22: entered promiscuous mode
[  238.209088][T13264] 8021q: adding VLAN 0 to HW filter on device bond22
[  238.212287][T13265] bond15: left promiscuous mode
[  238.263121][T13271] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  238.320727][T13276] tipc: Resetting bearer <eth:syzkaller0>
[  238.322630][T13276] tipc: Resetting bearer <eth:syzkaller0>
[  238.338357][T13278] bond11: invalid ARP target 0.0.0.0 specified for addition
[  238.341688][T13278] bond11: option arp_ip_target: invalid value (0)
[  238.344782][T13278] bond11 (unregistering): Released all slaves
[  238.614119][T13286] __nla_validate_parse: 17 callbacks suppressed
[  238.614137][T13286] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2111'.
[  238.619986][T13286] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2111'.
[  238.623281][T13286] netlink: 'syz.2.2111': attribute type 6 has an invalid length.
[  238.626083][T13286] netlink: 'syz.2.2111': attribute type 5 has an invalid length.
[  238.628873][T13286] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2111'.
[  238.642565][T13287] netlink: 'syz.2.2111': attribute type 4 has an invalid length.
[  238.942444][T13306] ; speed is unknown, defaulting to 1000
[  239.013337][T13309] syzkaller0: entered promiscuous mode
[  239.015085][T13309] syzkaller0: entered allmulticast mode
[  239.028081][T13309] netlink: 'syz.1.2117': attribute type 11 has an invalid length.
[  239.041049][T13311] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2116'.
[  239.145441][T13314] tipc: Resetting bearer <eth:syzkaller0>
[  239.263192][T13316] ; speed is unknown, defaulting to 1000
[  239.363016][T13325] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  239.374149][T13325] bond0: (slave wlan1): Releasing backup interface
[  239.376821][T13325] tipc: Resetting bearer <eth:syzkaller0>
[  239.385239][T13325] netlink: 'syz.3.2122': attribute type 10 has an invalid length.
[  239.388093][T13325] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  239.392616][T13325] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  239.397651][T13325] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  239.401694][T13325] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  239.913459][T13329] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  239.918437][T13329] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  239.927492][T13329] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  240.405399][T13351] ; speed is unknown, defaulting to 1000
[  240.721786][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2134'.
[  241.224650][T13380] smc: net device bond0 applied user defined pnetid SYZ0
[  241.384934][T13399] ; speed is unknown, defaulting to 1000
[  241.451714][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2143'.
[  241.524762][T13415] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  241.552906][T13415] bond0: (slave wlan1): Releasing backup interface
[  241.559384][T13415] tipc: Resetting bearer <eth:syzkaller0>
[  241.584437][T13415] validate_nla: 1 callbacks suppressed
[  241.584449][T13415] netlink: 'syz.3.2145': attribute type 10 has an invalid length.
[  241.591816][T13415] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  241.596060][T13415] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  241.601437][T13415] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  241.605081][T13415] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  241.672424][T13424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2148'.
[  241.710570][T13426] ; speed is unknown, defaulting to 1000
[  241.974846][T13436] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  242.129258][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'.
[  242.138613][T13449] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  242.380729][T13455] ; speed is unknown, defaulting to 1000
[  242.457547][T13458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2160'.
[  242.689766][T13475] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2165'.
[  242.692960][T13475] smc: net device bond0 erased user defined pnetid SYZ0
[  242.797193][T13484] tipc: Resetting bearer <eth:syzkaller0>
[  242.802572][T13484] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  242.804759][T13484] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  242.816016][T13484] bond22: left promiscuous mode
[  242.818219][T13489] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  243.217420][T13509] netlink: 'syz.1.2175': attribute type 4 has an invalid length.
[  243.993884][T13523] __nla_validate_parse: 1 callbacks suppressed
[  243.993895][T13523] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2178'.
[  244.097594][T13531] netlink: 'syz.2.2182': attribute type 83 has an invalid length.
[  244.662519][T13544] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check.
[  244.988332][T13552] netlink: 'syz.2.2189': attribute type 142 has an invalid length.
[  245.028489][T13555] netlink: 'syz.2.2190': attribute type 142 has an invalid length.
[  245.531769][T13567] ; speed is unknown, defaulting to 1000
[  245.669350][T13567] netlink: 'syz.3.2194': attribute type 4 has an invalid length.
[  245.671712][T13567] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2194'.
[  246.064217][T13575] syz_tun: entered allmulticast mode
[  246.213753][T13574] syz_tun: left allmulticast mode
[  246.666505][T13606] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2205'.
[  246.702250][T13610] bond0: Master is either lo or non-ether device
[  247.458207][T13632] ; speed is unknown, defaulting to 1000
[  247.499722][T13635] xt_bpf: check failed: parse error
[  247.507689][T13637] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  247.514709][T13637] xt_l2tp: missing protocol rule (udp|l2tpip)
[  247.599929][T13643] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  247.606750][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2215'.
[  247.665760][T13647] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  247.751533][T13647] netlink: 'syz.2.2218': attribute type 10 has an invalid length.
[  247.753956][T13647] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  247.757405][T13647] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  247.761802][T13647] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  247.796718][T13659] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  247.800967][T13660] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  248.563943][T13682] ; speed is unknown, defaulting to 1000
[  248.681319][T13692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2230'.
[  248.684064][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2230'.
[  248.688411][T13692] syzkaller0: entered promiscuous mode
[  248.690288][T13692] syzkaller0: entered allmulticast mode
[  248.802409][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'.
[  248.862375][T13697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2232'.
[  248.867743][T13697] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2232'.
[  249.805608][T13717] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2236'.
[  249.810957][T13716] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2236'.
[  249.924646][T13740] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2243'.
[  249.965335][T13746] IPVS: length: 141 != 8
[  249.967372][T13746] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20003
[  249.985310][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2246'.
[  250.002225][T13752] netlink: 'syz.3.2244': attribute type 1 has an invalid length.
[  250.025806][T13752] bond23: (slave vxcan1): The slave device specified does not support setting the MAC address
[  250.030172][T13752] bond23: (slave vxcan1): Error -95 calling set_mac_address
[  250.073239][T13760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2244'.
[  250.084731][T13762] netlink: 'syz.2.2250': attribute type 6 has an invalid length.
[  250.127189][T13766] bond16 (unregistering): Released all slaves
[  250.166949][T13773] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2251'.
[  250.184232][T13775] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2253'.
[  250.259296][T13773] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  250.263283][T13773] bond0 (unregistering): Released all slaves
[  250.352706][T13781] syz_tun: entered allmulticast mode
[  250.357165][T13781] syz_tun: left allmulticast mode
[  250.368485][T13781] dvmrp1: entered allmulticast mode
[  250.422831][T13785] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.2257'.
[  250.438847][T13785] bond0: Error: Cannot enslave bond to itself.
[  250.486602][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'.
[  250.572102][T13800] bond11 (unregistering): Released all slaves
[  251.403464][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2268'.
[  251.406567][T13820] chnl_net:caif_netlink_parms(): no params data found
[  251.622459][T13837] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  251.671006][T13838] ; speed is unknown, defaulting to 1000
[  252.101331][T13856] : renamed from wg2
[  252.107757][T13856] ieee802154 phy0 wpan0: encryption failed: -22
[  252.965302][T13896] netlink: 'syz.2.2288': attribute type 83 has an invalid length.
[  252.983679][T13898] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  252.987578][T13898] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  252.993265][T13898] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  252.996539][T13898] tipc: Resetting bearer <eth:syzkaller0>
[  252.999056][T13897] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.653908][T13944] netlink: 'syz.3.2305': attribute type 1 has an invalid length.
[  253.683775][T13944] bond24: entered promiscuous mode
[  253.689139][T13944] 8021q: adding VLAN 0 to HW filter on device bond24
[  253.786121][T13955] netlink: 'syz.2.2308': attribute type 6 has an invalid length.
[  253.788415][T13955] netlink: 'syz.2.2308': attribute type 5 has an invalid length.
[  253.791933][T13956] netlink: 'syz.2.2308': attribute type 4 has an invalid length.
[  253.794427][T13955] netlink: 'syz.2.2308': attribute type 4 has an invalid length.
[  253.796271][T13952] xt_CT: No such helper "snmp_trap"
[  253.796732][T13956] netlink: 'syz.2.2308': attribute type 4 has an invalid length.
[  253.833704][T13958] set match dimension is over the limit!
[  254.044123][T13987] netlink: 'syz.3.2316': attribute type 6 has an invalid length.
[  254.047727][T13986] netlink: 'syz.3.2316': attribute type 6 has an invalid length.
[  254.053706][T13986] netlink: 'syz.3.2316': attribute type 4 has an invalid length.
[  254.097200][T13993] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.301932][T14011] tipc: Resetting bearer <eth:syzkaller0>
[  254.307402][T14011] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  254.309729][T14011] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  254.324871][T14011] bond24: left promiscuous mode
[  254.493998][T14039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.503721][T14041] macvtap1: entered promiscuous mode
[  254.505270][T14041] batadv0: entered promiscuous mode
[  254.507604][T14041] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  254.511875][T14041] batadv0: left promiscuous mode
[  254.537371][T14039] tipc: Disabling bearer <eth:syzkaller0>
[  255.841630][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.844145][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  256.049550][T14084] __nla_validate_parse: 63 callbacks suppressed
[  256.049561][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2350'.
[  256.217480][T14091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2352'.
[  256.231279][T14091] sch_tbf: burst 88 is lower than device veth7 mtu (1514) !
[  256.364069][T14096] workqueue: Failed to create a rescuer kthread for wq "nfc13_nci_rx_wq": -EINTR
[  256.566721][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2359'.
[  256.796668][T14170] bond0: (slave wlan1): Releasing backup interface
[  256.806573][T14170] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  257.045375][T14188] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  257.105352][T14195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2369'.
[  257.185452][T14201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2375'.
[  257.188277][T14201] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2375'.
[  258.159667][T14221] validate_nla: 8 callbacks suppressed
[  258.159683][T14221] netlink: 'syz.2.2381': attribute type 1 has an invalid length.
[  258.172603][T14226] nbd: device at index 1 is going down
[  258.637803][T14254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2390'.
[  258.737942][T14262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2394'.
[  258.740860][T14263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2394'.
[  259.235106][T14275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2398'.
[  259.641155][T14301] netlink: 'syz.2.2406': attribute type 1 has an invalid length.
[  259.669896][T14301] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address
[  259.673603][T14301] bond11: (slave vxcan5): Error -95 calling set_mac_address
[  259.713977][T14305] netdevsim netdevsim3 : renamed from netdevsim0
[  259.938701][T14313] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  260.679065][T14319] netlink: 'syz.2.2412': attribute type 1 has an invalid length.
[  261.107080][T14344] __nla_validate_parse: 3 callbacks suppressed
[  261.107092][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2420'.
[  261.113036][T14344] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  261.131065][T14344] team1: entered promiscuous mode
[  261.132666][T14344] team1: entered allmulticast mode
[  261.494339][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'.
[  262.232526][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2432'.
[  262.815488][T14412] ; speed is unknown, defaulting to 1000
[  263.538390][T14420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2443'.
[  263.620438][T14424] xt_CT: No such helper "snmp"
[  263.706805][T14436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2446'.
[  265.266023][T14498] macsec1: entered promiscuous mode
[  265.267691][T14498] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  265.271203][T14498] macsec1: entered allmulticast mode
[  265.273235][T14498] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  266.293265][T14543] syzkaller1: entered promiscuous mode
[  266.294981][T14543] syzkaller1: entered allmulticast mode
[  266.491902][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2481'.
[  266.631851][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2486'.
[  266.640026][T14566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2486'.
[  266.924436][T14587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2494'.
[  266.999534][T14587] block nbd0: shutting down sockets
[  267.364684][T14594] netlink: 'syz.2.2497': attribute type 15 has an invalid length.
[  267.755681][T14612] ; speed is unknown, defaulting to 1000
[  267.892258][T14619] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2505'.
[  268.115462][T14631] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  268.118670][T14631] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  268.453578][T14647] netlink: 'syz.2.2513': attribute type 1 has an invalid length.
[  268.456016][T14647] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2513'.
[  269.316068][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'.
[  269.585919][T14678] ; speed is unknown, defaulting to 1000
[  269.602830][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2523'.
[  269.652169][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2524'.
[  269.753275][T14705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  269.755672][T14705] IPv6: NLM_F_CREATE should be set when creating new route
[  269.757797][T14705] IPv6: NLM_F_CREATE should be set when creating new route
[  269.764977][T14705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  269.966452][T14719] sctp: [Deprecated]: syz.2.2533 (pid 14719) Use of int in maxseg socket option.
[  269.966452][T14719] Use struct sctp_assoc_value instead
[  269.974557][T14727] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2536'.
[  270.055898][T14734] netlink: 'syz.1.2537': attribute type 4 has an invalid length.
[  270.059713][T14734] netlink: 'syz.1.2537': attribute type 6 has an invalid length.
[  270.104565][T14736] netlink: 'syz.1.2538': attribute type 1 has an invalid length.
[  270.127235][T14736] bond0: entered promiscuous mode
[  270.130806][T14736] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.148815][T14736] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.151279][T14736] bond0: (slave gre2): The slave device specified does not support setting the MAC address
[  270.154365][T14736] bond0: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  270.157480][T14736] bond0: (slave gre2): Opening slave failed
[  270.278714][T14744] netlink: 'syz.1.2539': attribute type 1 has an invalid length.
[  270.304115][T14744] bond16: (slave vxcan7): The slave device specified does not support setting the MAC address
[  270.307629][T14744] bond16: (slave vxcan7): Error -95 calling set_mac_address
[  270.720013][T14750] netlink: 'syz.2.2540': attribute type 6 has an invalid length.
[  270.723128][T14750] netlink: 'syz.2.2540': attribute type 5 has an invalid length.
[  270.812398][T14750] netlink: 'syz.2.2540': attribute type 4 has an invalid length.
[  270.816579][T14750] netlink: 'syz.2.2540': attribute type 4 has an invalid length.
[  271.570484][T14785] __nla_validate_parse: 7 callbacks suppressed
[  271.570500][T14785] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2550'.
[  271.577018][T14785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2550'.
[  271.867902][T14803] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2556'.
[  271.874617][   T10] IPVS: starting estimator thread 0...
[  271.877732][T14803] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2556'.
[  271.889938][T14803] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2556'.
[  271.959023][T14808] IPVS: using max 62 ests per chain, 148800 per kthread
[  272.016378][T14830] team1: left promiscuous mode
[  272.018251][T14830] team1: left allmulticast mode
[  272.023240][T14830] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  272.025549][T14830] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  272.028095][T14830] macsec1: left promiscuous mode
[  272.029797][T14830] macsec1: left allmulticast mode
[  272.208032][T14840] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2565'.
[  272.211017][T14840] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2565'.
[  272.213797][T14840] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2565'.
[  272.256892][T14846] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  272.369736][T14855] bond17: (slave vxcan7): The slave device specified does not support setting the MAC address
[  272.373321][T14855] bond17: (slave vxcan7): Error -95 calling set_mac_address
[  273.352788][T14873] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  273.429665][T14878] Bluetooth: MGMT ver 1.23
[  273.517487][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'.
[  300.118263][T14888] validate_nla: 10 callbacks suppressed
[  300.118276][T14888] netlink: 'syz.1.2581': attribute type 1 has an invalid length.
[  300.122754][T14888] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2581'.
[  300.128304][T14888] netlink: 'syz.1.2581': attribute type 13 has an invalid length.
[  300.172708][T14896] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2583'.
[  300.242830][T14898] bond18: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  300.246816][T14898] bond18 (unregistering): Released all slaves
[  300.450696][T14912] netlink: 'syz.1.2588': attribute type 1 has an invalid length.
[  304.176132][T14921] netlink: 'syz.1.2591': attribute type 1 has an invalid length.
[  304.225042][T14921] bond18: (slave bridge0): making interface the new active one
[  304.227758][T14921] bond18: (slave bridge0): Enslaving as an active interface with an up link
[  304.240205][T14931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.244903][T14929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2594'.
[  304.370133][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2596'.
[  304.552535][T14951] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  305.412183][T14965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2604'.
[  305.507027][T14969] ; speed is unknown, defaulting to 1000
[  306.113200][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2610'.
[  306.545030][T14993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2613'.
[  306.794975][T15008] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2616'.
[  307.237677][T15030] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  307.252755][T15030] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  307.261755][T15030] netlink: 'syz.1.2623': attribute type 10 has an invalid length.
[  307.264180][T15030] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  307.445847][T15052] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  307.509821][T15052] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  307.511907][T15052] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  307.521162][T15052] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  307.522897][T15052] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  307.528201][T15052] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  307.531127][T15052] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  307.579146][T15062] ; speed is unknown, defaulting to 1000
[  307.735479][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'.
[  307.739936][T15076] vlan2: entered promiscuous mode
[  307.741453][T15076] hsr_slave_1: entered promiscuous mode
[  307.744185][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2631'.
[  307.744671][T15076] vlan2: entered allmulticast mode
[  307.750766][T15076] hsr_slave_1: entered allmulticast mode
[  307.947800][T15092] ; speed is unknown, defaulting to 1000
[  308.015323][T15103] ; speed is unknown, defaulting to 1000
[  308.088635][T15112] x_tables: unsorted entry at hook 1
[  308.881186][T15130] ; speed is unknown, defaulting to 1000
[  308.965329][T15136] syzkaller1: entered promiscuous mode
[  308.966963][T15136] syzkaller1: entered allmulticast mode
[  309.251831][T15144] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2644'.
[  309.284673][T15144] ; speed is unknown, defaulting to 1000
[  309.624039][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2647'.
[  309.710831][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2649'.
[  310.272307][T15186] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2657'.
[  310.710661][T15194] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2659'.
[  310.744290][T15193] ; speed is unknown, defaulting to 1000
[  310.876736][T15201] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2661'.
[  312.031591][T15225] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  312.052480][T15228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2669'.
[  312.066438][T15228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2669'.
[  312.130305][T15232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2668'.
[  312.154185][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2671'.
[  312.232112][T15237] bond0: (slave wlan1): Releasing backup interface
[  312.238823][T15237] netlink: 'syz.3.2672': attribute type 10 has an invalid length.
[  312.245812][T15237] bond0: (slave wlan1): Opening slave failed
[  312.252636][T15237] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  312.256278][T15237] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  312.260889][T15241] netlink: 'syz.1.2673': attribute type 1 has an invalid length.
[  312.448462][T15249] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  312.451627][T15250] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  312.977475][T15269] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2680'.
[  313.061216][T15273] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2684'.
[  313.342711][T15302] 8021q: VLANs not supported on dvmrp0
[  313.408543][T15309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'.
[  313.426012][T15309] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  314.343292][T15328] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2702'.
[  314.440166][T15331] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  314.446019][T15331] vlan2: left promiscuous mode
[  314.447515][T15331] hsr_slave_1: left promiscuous mode
[  314.449434][T15331] vlan2: left allmulticast mode
[  314.451006][T15331] hsr_slave_1: left allmulticast mode
[  315.882778][T15352] __nla_validate_parse: 1 callbacks suppressed
[  315.882792][T15352] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2712'.
[  316.774822][T15375] netlink: 'syz.3.2718': attribute type 1 has an invalid length.
[  316.787178][T15375] vlan5: entered allmulticast mode
[  316.788807][T15375] bridge0: entered allmulticast mode
[  316.872210][T15377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2720'.
[  316.875087][T15377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2720'.
[  316.877843][T15377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2720'.
[  316.881343][T15377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2720'.
[  317.097598][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2726'.
[  317.247286][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2727'.
[  318.058108][T15412] netlink: 'syz.2.2731': attribute type 1 has an invalid length.
[  318.061071][T15412] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2731'.
[  318.221358][T15429] netlink: 'syz.1.2736': attribute type 1 has an invalid length.
[  318.546946][T15440] netlink: 'syz.3.2739': attribute type 29 has an invalid length.
[  318.551967][T15440] netlink: 'syz.3.2739': attribute type 29 has an invalid length.
[  318.555273][T15443] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2739'.
[  318.560377][T15443] unsupported nla_type 58
[  318.563067][T15443] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2739'.
[  319.284963][T15460] ; speed is unknown, defaulting to 1000
[  319.440535][T15465] ; speed is unknown, defaulting to 1000
[  319.674210][T15476] netlink: 'syz.1.2750': attribute type 6 has an invalid length.
[  319.796795][T15483] ; speed is unknown, defaulting to 1000
[  320.140536][T15512] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  320.380784][T15532] netlink: 'syz.1.2764': attribute type 6 has an invalid length.
[  320.619184][T15548] netlink: 'syz.2.2771': attribute type 1 has an invalid length.
[  320.637925][T15548] bond13: entered promiscuous mode
[  320.641352][T15548] 8021q: adding VLAN 0 to HW filter on device bond13
[  320.825259][T15561] veth0_to_bridge: entered promiscuous mode
[  321.319388][T15588] netlink: 'syz.1.2784': attribute type 1 has an invalid length.
[  321.321670][T15588] nbd: error processing sock list
[  321.541869][T15555] veth0_to_bridge: left promiscuous mode
[  321.673633][T15621] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  321.713638][T15624] __nla_validate_parse: 46 callbacks suppressed
[  321.713654][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2795'.
[  321.914534][T15627] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2798'.
[  321.981676][T15634] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2800'.
[  321.984434][T15634] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2800'.
[  321.987385][T15634] netlink: 'syz.3.2800': attribute type 6 has an invalid length.
[  321.991699][T15634] netlink: 'syz.3.2800': attribute type 5 has an invalid length.
[  321.994633][T15634] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2800'.
[  322.004796][T15634] netlink: 'syz.3.2800': attribute type 4 has an invalid length.
[  322.011354][T15634] netlink: 'syz.3.2800': attribute type 4 has an invalid length.
[  322.051582][T15637] vlan5: left allmulticast mode
[  322.053137][T15637] bridge0: left allmulticast mode
[  322.200222][T15643] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2803'.
[  322.739979][T15667] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.745434][T15667] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  322.748257][T15667] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  322.843622][T15671] netlink: 'syz.3.2813': attribute type 10 has an invalid length.
[  322.924663][T15683] netlink: 'syz.1.2816': attribute type 23 has an invalid length.
[  322.974448][T15689] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  322.976551][T15689] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  322.989634][T15683] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2816'.
[  322.993069][T15683] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2816'.
[  323.225216][T15710] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  323.283967][T15712] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  323.302735][T15712] netlink: 'syz.1.2822': attribute type 10 has an invalid length.
[  323.305888][T15712] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  324.014056][T15720] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2826'.
[  324.352315][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2836'.
[  324.354959][T15744] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  324.357941][T15744] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  324.361660][T15744] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  324.364904][T15744] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  324.368208][T15744] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  324.371564][T15744] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  324.374669][T15744] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  324.377795][T15744] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  324.381211][T15744] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  324.388106][T15746] bond13: left promiscuous mode
[  324.448207][T15752] netlink: 'syz.3.2837': attribute type 12 has an invalid length.
[  324.453563][T15752] netlink: 'syz.3.2837': attribute type 21 has an invalid length.
[  325.415946][T15791] ; speed is unknown, defaulting to 1000
[  325.579610][T15801] ; speed is unknown, defaulting to 1000
[  325.984220][T15824] ; speed is unknown, defaulting to 1000
[  326.299043][T15833] bond18: (slave bridge0): Releasing active interface
[  326.495714][T15838] ; speed is unknown, defaulting to 1000
[  326.623229][T15849] sctp: [Deprecated]: syz.3.2862 (pid 15849) Use of int in max_burst socket option deprecated.
[  326.623229][T15849] Use struct sctp_assoc_value instead
[  326.645437][T15849] netlink: 'syz.3.2862': attribute type 4 has an invalid length.
[  326.675310][T15851] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  327.044168][T15867] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  327.066398][T15870] __nla_validate_parse: 38 callbacks suppressed
[  327.066408][T15870] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2871'.
[  327.072264][T15870] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2871'.
[  327.075136][T15870] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2871'.
[  327.193370][T15876] validate_nla: 1 callbacks suppressed
[  327.193386][T15876] netlink: 'syz.3.2872': attribute type 1 has an invalid length.
[  327.203557][T15881] netlink: 'syz.2.2874': attribute type 1 has an invalid length.
[  327.220779][T15881] 8021q: adding VLAN 0 to HW filter on device bond14
[  327.320064][T15891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2876'.
[  327.331356][T15891] vlan4: entered promiscuous mode
[  327.333272][T15891] dummy0: entered promiscuous mode
[  327.475291][T15906] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2881'.
[  327.480617][T15905] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2881'.
[  327.615977][T15909] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2882'.
[  327.621117][T15909] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2882'.
[  327.623738][T15909] netlink: 'syz.2.2882': attribute type 6 has an invalid length.
[  327.630150][T15909] netlink: 'syz.2.2882': attribute type 5 has an invalid length.
[  327.633841][T15909] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2882'.
[  327.643509][T15909] netlink: 'syz.2.2882': attribute type 4 has an invalid length.
[  327.647281][T15909] netlink: 'syz.2.2882': attribute type 4 has an invalid length.
[  327.743705][T15933] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  327.780791][T15941] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2891'.
[  327.836789][T15941] : left promiscuous mode
[  328.095782][T15962] netlink: 'syz.1.2898': attribute type 4 has an invalid length.
[  328.405247][T15965] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  328.863961][T15970] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  331.050480][T16042] net_ratelimit: 29 callbacks suppressed
[  331.050496][T16042] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  331.068646][T16042] netlink: 'syz.1.2924': attribute type 10 has an invalid length.
[  331.073871][T16042] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  331.077446][T16042] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  331.479395][T16049] netlink: 'syz.2.2927': attribute type 1 has an invalid length.
[  331.511605][T16049] bond15: (slave vxcan5): The slave device specified does not support setting the MAC address
[  331.516069][T16049] bond15: (slave vxcan5): Error -95 calling set_mac_address
[  331.567161][T16051] vlan4: entered allmulticast mode
[  331.635213][T16053] ; speed is unknown, defaulting to 1000
[  332.403566][T16081] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.433815][T16081] syzkaller0: entered promiscuous mode
[  332.435662][T16081] syzkaller0: entered allmulticast mode
[  332.437830][T16081] tipc: Resetting bearer <eth:syzkaller0>
[  332.445600][T16080] tipc: Resetting bearer <eth:syzkaller0>
[  332.832304][T16087] __nla_validate_parse: 6 callbacks suppressed
[  332.832316][T16087] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2938'.
[  333.419032][ T5856] tipc: Node number set to 2919331391
[  333.607288][T16080] tipc: Disabling bearer <eth:syzkaller0>
[  333.616483][T16083] vti0: entered promiscuous mode
[  333.621486][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2938'.
[  333.761411][T16099] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2943'.
[  333.788229][T16099] ; speed is unknown, defaulting to 1000
[  333.843402][T16102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2944'.
[  333.959401][T16105] ; speed is unknown, defaulting to 1000
[  334.016672][T16114] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  334.020891][T16113] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  334.030117][T16114] netlink: 'syz.1.2948': attribute type 10 has an invalid length.
[  334.032975][T16114] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  334.036988][T16113] netlink: 'syz.1.2948': attribute type 10 has an invalid length.
[  334.108042][T16121] vti0: left promiscuous mode
[  334.977931][T16133] netlink: 'syz.3.2954': attribute type 1 has an invalid length.
[  335.012250][T16133] bond26: (slave vxcan3): The slave device specified does not support setting the MAC address
[  335.016569][T16133] bond26: (slave vxcan3): Error -95 calling set_mac_address
[  335.041142][T16136] ; speed is unknown, defaulting to 1000
[  335.071534][T16132] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2953'.
[  335.076168][T16138] xt_bpf: check failed: parse error
[  335.339570][T16146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2957'.
[  335.693835][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2960'.
[  335.796411][T16159] ; speed is unknown, defaulting to 1000
[  335.858742][T16163] xt_bpf: check failed: parse error
[  335.967312][T16174] netlink: 'syz.1.2966': attribute type 1 has an invalid length.
[  336.028664][T16174] bond21: (slave vxcan9): The slave device specified does not support setting the MAC address
[  336.039725][T16174] bond21: (slave vxcan9): Error -95 calling set_mac_address
[  336.089964][T16179] netlink: 'syz.2.2968': attribute type 21 has an invalid length.
[  336.099108][T16179] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2968'.
[  336.596817][T16204] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2975'.
[  336.750859][T16212] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2978'.
[  337.208630][T16226] 8021q: adding VLAN 0 to HW filter on device bond16
[  337.319412][T16234] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  337.684067][T16248] netlink: 'syz.2.2989': attribute type 1 has an invalid length.
[  337.920065][T16273] : entered promiscuous mode
[  337.975807][T16267] x_tables: duplicate underflow at hook 1
[  338.175049][T16286] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  338.180556][T16287] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  338.187107][T16286] netlink: 'syz.2.3000': attribute type 1 has an invalid length.
[  338.577727][T16316] netlink: 'syz.1.3010': attribute type 58 has an invalid length.
[  338.581922][T16316] __nla_validate_parse: 6 callbacks suppressed
[  338.581932][T16316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3010'.
[  338.757493][T16329] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  338.763118][T16329] netlink: 'syz.3.3014': attribute type 6 has an invalid length.
[  339.095969][T16343] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3019'.
[  339.423548][T16352] tun0: tun_chr_ioctl cmd 1074025675
[  339.425234][T16352] tun0: persist enabled
[  339.428553][T16352] tun0: tun_chr_ioctl cmd 1074025675
[  339.431878][T16352] tun0: persist enabled
[  340.566365][T16387] netlink: 'syz.1.3035': attribute type 6 has an invalid length.
[  340.603455][T16389] ; speed is unknown, defaulting to 1000
[  340.647285][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'.
[  340.654527][T16391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3037'.
[  340.670920][T16389] xt_bpf: check failed: parse error
[  340.739008][T16399] 8021q: VLANs not supported on ip6gre0
[  340.830406][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3044'.
[  340.833244][T16415] : left promiscuous mode
[  340.937594][T16427] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3047'.
[  340.940328][T16427] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3047'.
[  340.941197][T16429] netlink: 'syz.1.3047': attribute type 4 has an invalid length.
[  340.943070][T16427] netlink: 'syz.1.3047': attribute type 6 has an invalid length.
[  340.945575][T16428] netlink: 'syz.1.3047': attribute type 4 has an invalid length.
[  340.947836][T16427] netlink: 'syz.1.3047': attribute type 5 has an invalid length.
[  340.947850][T16427] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3047'.
[  341.090702][T16441] netlink: 'syz.1.3050': attribute type 1 has an invalid length.
[  341.093759][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3050'.
[  341.103078][T16441] tap0: tun_chr_ioctl cmd 1074812118
[  341.105442][T16441] IPVS: set_ctl: invalid protocol: 47803 127.0.0.1:20003
[  341.281676][T16443] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3051'.
[  341.285026][T16443] netlink: 'syz.1.3051': attribute type 6 has an invalid length.
[  341.287981][T16443] netlink: 'syz.1.3051': attribute type 5 has an invalid length.
[  341.322056][T16443] netlink: 'syz.1.3051': attribute type 4 has an invalid length.
[  341.325324][T16443] netlink: 'syz.1.3051': attribute type 4 has an invalid length.
[  341.333563][T16443] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  341.713383][T16454] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  342.007719][T16474] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  342.132149][T16478] ; speed is unknown, defaulting to 1000
[  342.163617][T16480] ip_vti0: entered promiscuous mode
[  342.171372][T16481] xt_bpf: check failed: parse error
[  343.145660][T16503] : left promiscuous mode
[  343.233184][T16510] ip_vti0: left promiscuous mode
[  343.301644][T16520] batadv_slave_1: entered promiscuous mode
[  343.318279][T16520] batadv_slave_1: left promiscuous mode
[  343.392959][T16528] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  343.395266][T16528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.425558][T16526] ; speed is unknown, defaulting to 1000
[  344.079057][ T5813] Bluetooth: hci0: command tx timeout
[  344.278371][T16542] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  344.383190][T16548] __nla_validate_parse: 6 callbacks suppressed
[  344.383203][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3083'.
[  344.508044][T16562] veth1_to_bridge: entered allmulticast mode
[  344.536467][T16566] : entered promiscuous mode
[  344.573971][T16575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3090'.
[  344.617047][T16579] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  344.621299][T16581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'.
[  344.622656][T16579] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  344.631054][T16579] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  344.635155][T16579] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  344.637908][T16579] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  344.745026][T16590] ; speed is unknown, defaulting to 1000
[  344.761735][T16591] xt_bpf: check failed: parse error
[  344.821046][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3097'.
[  344.856733][T16596] : entered promiscuous mode
[  344.952036][T16600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3100'.
[  344.954877][T16600] : left promiscuous mode
[  345.342768][T16615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3105'.
[  345.346637][T16615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3105'.
[  345.479892][T16623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3108'.
[  346.541586][T16659] veth1_to_bridge: left allmulticast mode
[  346.697685][T16675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.716583][T16675] tipc: Disabling bearer <eth:syzkaller0>
[  346.856746][T16690] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3128'.
[  346.864533][T16690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3128'.
[  347.033863][T16700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.064926][T16700] syzkaller0: entered promiscuous mode
[  347.066605][T16700] syzkaller0: entered allmulticast mode
[  347.068773][T16700] tipc: Resetting bearer <eth:syzkaller0>
[  347.125884][T14538] tipc: Resetting bearer <eth:syzkaller0>
[  347.128440][T16699] tipc: Resetting bearer <eth:syzkaller0>
[  348.273502][T16699] tipc: Disabling bearer <eth:syzkaller0>
[  348.448566][T16727] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  348.453194][T16730] bridge_slave_1: entered promiscuous mode
[  348.455465][T16727] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  348.464375][T16727] validate_nla: 4 callbacks suppressed
[  348.464390][T16727] netlink: 'syz.1.3141': attribute type 10 has an invalid length.
[  348.468607][T16727] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  348.474331][T16727] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  348.477881][T16727] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  349.354213][T16754] netlink: 'syz.3.3149': attribute type 1 has an invalid length.
[  349.448682][T16762] __nla_validate_parse: 6 callbacks suppressed
[  349.448696][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3151'.
[  349.483506][T16764] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  349.535871][T16770] sctp: [Deprecated]: syz.3.3154 (pid 16770) Use of int in maxseg socket option.
[  349.535871][T16770] Use struct sctp_assoc_value instead
[  349.584912][T16774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3153'.
[  349.678523][T16786] netlink: 'syz.2.3157': attribute type 1 has an invalid length.
[  349.704008][T16786] vlan4: entered allmulticast mode
[  349.706408][T16786] bond17: (slave vlan4): Opening slave failed
[  350.534336][T16797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.616430][T16802] ; speed is unknown, defaulting to 1000
[  350.651324][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3164'.
[  350.667831][T16805] xt_bpf: check failed: parse error
[  350.816985][T16813] vlan4: entered allmulticast mode
[  350.818531][T16813] bridge_slave_0: entered allmulticast mode
[  351.034403][T16826] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3168'.
[  351.037764][T16818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3168'.
[  351.087047][T16819] ; speed is unknown, defaulting to 1000
[  351.102794][T16818] ; speed is unknown, defaulting to 1000
[  351.122455][T16831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3171'.
[  351.213651][T16834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  351.221560][T16834] netlink: 'syz.1.3172': attribute type 10 has an invalid length.
[  351.225213][T16834] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  351.228097][T16834] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  351.363835][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3173'.
[  351.371835][T16836] netlink: 'syz.3.3173': attribute type 10 has an invalid length.
[  351.375114][T16836] bond0: (slave wlan1): Opening slave failed
[  351.414596][T16840] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  351.449983][T16840] netlink: 'syz.3.3174': attribute type 10 has an invalid length.
[  351.454441][T16840] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  351.457412][T16840] bond0: (slave wlan1): Opening slave failed
[  351.509338][T16844] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  351.710024][T16848] netlink: 'syz.2.3177': attribute type 4 has an invalid length.
[  351.713947][T16848] netlink: 'syz.2.3177': attribute type 4 has an invalid length.
[  351.816350][T16855] netlink: 'syz.2.3179': attribute type 7 has an invalid length.
[  351.818654][T16855] netlink: 'syz.2.3179': attribute type 8 has an invalid length.
[  351.882440][T16861] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  352.056554][T16865] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3182'.
[  354.223670][T16895] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  354.228530][T16895] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  354.255795][T16896] validate_nla: 3 callbacks suppressed
[  354.255808][T16896] netlink: 'syz.1.3191': attribute type 10 has an invalid length.
[  354.260654][T16896] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  354.264496][T16895] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  354.267374][T16895] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  354.792976][T16917] syzkaller1: entered promiscuous mode
[  354.794797][T16917] syzkaller1: entered allmulticast mode
[  355.357898][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'.
[  355.362200][T16934] : left promiscuous mode
[  355.467913][T16937] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  355.474969][T16937] netlink: 'syz.1.3206': attribute type 10 has an invalid length.
[  355.477410][T16937] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  355.481230][T16937] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  355.484023][T16937] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  356.026148][T16943] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  356.326527][T16957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3212'.
[  356.570393][T16971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3218'.
[  356.708464][T16978] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3221'.
[  356.712937][T16975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3221'.
[  356.746019][T16975] ; speed is unknown, defaulting to 1000
[  357.257041][T16993] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  357.532327][T17005] : entered promiscuous mode
[  357.598114][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3229'.
[  358.305539][T17033] netlink: 'syz.2.3236': attribute type 6 has an invalid length.
[  358.390182][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3237'.
[  358.410390][T17040] netlink: 'syz.1.3234': attribute type 4 has an invalid length.
[  358.415807][T17040] netlink: 'syz.1.3234': attribute type 4 has an invalid length.
[  359.147198][T17068] IPVS: set_ctl: invalid protocol: 11612 0.0.0.0:21
[  359.161694][T17072] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3247'.
[  359.164810][T17072] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3247'.
[  359.168003][T17072] netlink: 'syz.3.3247': attribute type 6 has an invalid length.
[  359.170550][T17072] netlink: 'syz.3.3247': attribute type 5 has an invalid length.
[  359.172870][T17072] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3247'.
[  359.176030][T17074] netlink: 'syz.3.3247': attribute type 6 has an invalid length.
[  359.179378][T17074] netlink: 'syz.3.3247': attribute type 5 has an invalid length.
[  359.187746][T17072] netlink: 'syz.3.3247': attribute type 4 has an invalid length.
[  359.312591][T17092] validate_nla: 2 callbacks suppressed
[  359.312602][T17092] netlink: 'syz.3.3252': attribute type 1 has an invalid length.
[  359.581268][T17114] netlink: 'syz.2.3259': attribute type 10 has an invalid length.
[  359.617281][T17123] netlink: 'syz.2.3261': attribute type 1 has an invalid length.
[  359.623517][T17121] : entered promiscuous mode
[  359.638225][T17123] bond18: entered promiscuous mode
[  359.641090][T17123] 8021q: adding VLAN 0 to HW filter on device bond18
[  359.689505][T17119] ; speed is unknown, defaulting to 1000
[  360.548773][T17139] bond0: entered promiscuous mode
[  360.550796][T17139] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  360.554446][T17139] batadv0: entered promiscuous mode
[  360.558247][T17139] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  360.561815][T17139] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  360.566150][T17139] 8021q: adding VLAN 0 to HW filter on device hsr1
[  360.794860][T17153] __nla_validate_parse: 11 callbacks suppressed
[  360.794876][T17153] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3270'.
[  360.802299][T17151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3270'.
[  360.838542][T17151] ; speed is unknown, defaulting to 1000
[  361.378710][T17187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'.
[  362.150416][T17202] netlink: 'syz.2.3286': attribute type 11 has an invalid length.
[  362.152899][T17202] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3286'.
[  362.271325][T17211] ; speed is unknown, defaulting to 1000
[  362.307264][T17211] xt_bpf: check failed: parse error
[  362.330558][T17216] netlink: 'syz.3.3290': attribute type 1 has an invalid length.
[  362.370578][T17216] bond27: (slave vxcan3): The slave device specified does not support setting the MAC address
[  362.375265][T17216] bond27: (slave vxcan3): Error -95 calling set_mac_address
[  362.422834][T17227] xt_NFQUEUE: number of queues (65532) out of range (got 118598)
[  362.665962][T17242] netlink: 'syz.1.3299': attribute type 21 has an invalid length.
[  362.668542][T17242] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3299'.
[  362.671620][T17242] netlink: 'syz.1.3299': attribute type 5 has an invalid length.
[  362.673933][T17242] netlink: 'syz.1.3299': attribute type 6 has an invalid length.
[  362.676258][T17242] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3299'.
[  362.685980][T17242] netlink: 'syz.1.3299': attribute type 1 has an invalid length.
[  363.182197][T17260] netlink: 'syz.3.3304': attribute type 10 has an invalid length.
[  363.185420][T17260] bond0: (slave wlan1): Opening slave failed
[  363.190206][T17260] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  363.193062][T17260] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  363.531785][T17264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3306'.
[  363.623212][T17268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3308'.
[  363.683001][T17277] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  363.688417][T17277] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  363.697132][T17277] netlink: 'syz.1.3310': attribute type 10 has an invalid length.
[  363.699681][T17277] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  363.771508][T17257] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  363.774240][T17257] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  364.598395][T17326] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  364.601646][T17327] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  365.622714][T17350] validate_nla: 1 callbacks suppressed
[  365.622730][T17350] netlink: 'syz.2.3336': attribute type 1 has an invalid length.
[  365.671069][T17350] bond19: (slave vxcan5): The slave device specified does not support setting the MAC address
[  365.677294][T17350] bond19: (slave vxcan5): Error -95 calling set_mac_address
[  365.912156][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3339'.
[  366.167907][T17365] netlink: 'syz.1.3341': attribute type 4 has an invalid length.
[  366.175636][T17365] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3341'.
[  366.178234][T17365] nbd: couldn't find a device at index 0
[  366.182138][T17365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3341'.
[  366.226813][T17367] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  366.235011][T17367] netlink: 'syz.1.3342': attribute type 10 has an invalid length.
[  366.238854][T17367] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  366.242608][T17367] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  366.646135][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3344'.
[  366.783597][T17379] netlink: 'syz.3.3346': attribute type 1 has an invalid length.
[  366.807418][T17379] bond28: (slave vxcan3): The slave device specified does not support setting the MAC address
[  366.812281][T17379] bond28: (slave vxcan3): Error -95 calling set_mac_address
[  366.858481][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3346'.
[  367.251047][T17392] nbd: device at index 1 is going down
[  367.603054][T17407] netlink: 'syz.2.3356': attribute type 1 has an invalid length.
[  367.639208][T17407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3356'.
[  367.671669][T17407] vlan4: entered allmulticast mode
[  367.676056][T17407] bond20: (slave vlan4): Opening slave failed
[  367.722197][T17416] dvmrp0: left allmulticast mode
[  367.941393][T17428] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3364'.
[  367.944349][T17428] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3364'.
[  367.947027][T17428] netlink: 'syz.1.3364': attribute type 6 has an invalid length.
[  367.949594][T17428] netlink: 'syz.1.3364': attribute type 5 has an invalid length.
[  367.951936][T17428] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3364'.
[  367.957270][T17428] netlink: 'syz.1.3364': attribute type 4 has an invalid length.
[  367.964136][T17428] netlink: 'syz.1.3364': attribute type 4 has an invalid length.
[  368.044972][T17432] ; speed is unknown, defaulting to 1000
[  368.083491][T17433] xt_bpf: check failed: parse error
[  368.143548][T17436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3367'.
[  368.333044][T17449] tipc: Enabled bearer <eth:gre0>, priority 10
[  368.861489][T17469] bridge_slave_1: left promiscuous mode
[  368.865595][T17469] bond18: left promiscuous mode
[  369.069117][T17473] netlink: 'syz.1.3379': attribute type 1 has an invalid length.
[  369.194675][T17485] Set syz0 is full, maxelem 0 reached
[  369.258142][T17483] ; speed is unknown, defaulting to 1000
[  370.061268][T17526] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  370.294079][T17539] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  371.743071][T17579] __nla_validate_parse: 8 callbacks suppressed
[  371.743082][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3414'.
[  372.375349][T17586] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3417'.
[  372.596455][T17594] validate_nla: 1 callbacks suppressed
[  372.596467][T17594] netlink: 'syz.3.3420': attribute type 1 has an invalid length.
[  372.621991][T17594] bond29: (slave vxcan3): The slave device specified does not support setting the MAC address
[  372.625368][T17594] bond29: (slave vxcan3): Error -95 calling set_mac_address
[  372.709989][T17615] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  373.188070][T17637] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3434'.
[  373.828153][T17651] sctp: [Deprecated]: syz.1.3438 (pid 17651) Use of struct sctp_assoc_value in delayed_ack socket option.
[  373.828153][T17651] Use struct sctp_sack_info instead
[  374.010153][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3441'.
[  374.019139][T17662] netlink: 'syz.1.3441': attribute type 1 has an invalid length.
[  374.147639][T17667] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3443'.
[  374.151775][T17666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3443'.
[  374.185036][T17666] ; speed is unknown, defaulting to 1000
[  375.212420][T17692] netlink: 'syz.3.3451': attribute type 6 has an invalid length.
[  375.369630][T17703] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3455'.
[  375.372320][T17703] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3455'.
[  375.374952][T17703] netlink: 'syz.3.3455': attribute type 6 has an invalid length.
[  375.377317][T17703] netlink: 'syz.3.3455': attribute type 5 has an invalid length.
[  375.379799][T17703] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3455'.
[  375.384460][T17700] syzkaller1: entered promiscuous mode
[  375.386263][T17700] syzkaller1: entered allmulticast mode
[  375.386342][T17705] netlink: 'syz.3.3455': attribute type 4 has an invalid length.
[  375.390155][T17706] netlink: 'syz.3.3455': attribute type 4 has an invalid length.
[  375.689779][T17724] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3461'.
[  375.692552][T17724] netlink: 'syz.2.3461': attribute type 6 has an invalid length.
[  375.694978][T17724] netlink: 'syz.2.3461': attribute type 5 has an invalid length.
[  375.787797][T17734] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  375.793682][T17734] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  375.855149][T17734] netlink: 'syz.2.3463': attribute type 10 has an invalid length.
[  375.857545][T17734] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  375.862241][T17734] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  375.867471][T17734] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  375.929765][T17746] ; speed is unknown, defaulting to 1000
[  376.077848][T17752] bond22: (slave vxcan9): The slave device specified does not support setting the MAC address
[  376.081826][T17752] bond22: (slave vxcan9): Error -95 calling set_mac_address
[  377.876857][T17793] validate_nla: 1 callbacks suppressed
[  377.876875][T17793] netlink: 'syz.1.3481': attribute type 13 has an invalid length.
[  377.881932][T17793] netlink: 'syz.1.3481': attribute type 17 has an invalid length.
[  377.936064][T17793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  377.956774][T17800] ; speed is unknown, defaulting to 1000
[  377.986805][T17793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.473955][T17805] netlink: 'syz.3.3483': attribute type 10 has an invalid length.
[  378.479248][T17805] bond0: (slave wlan1): Opening slave failed
[  378.554872][T17814] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  378.557793][T17814] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  378.575643][T17818] __nla_validate_parse: 9 callbacks suppressed
[  378.575655][T17818] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3484'.
[  378.581868][T17811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3484'.
[  378.617677][T17811] ; speed is unknown, defaulting to 1000
[  379.198019][T17678] bridge_slave_1: left allmulticast mode
[  379.200887][T17678] bridge_slave_1: left promiscuous mode
[  379.204686][T17678] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.209150][T17678] bridge_slave_0: left allmulticast mode
[  379.211242][T17678] bridge_slave_0: left promiscuous mode
[  379.213332][T17678] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.327347][T17678] batman_adv: batadv0: Removing interface: gretap1
[  379.456562][T17678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  379.460431][T17678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  379.463451][T17678] bond0 (unregistering): Released all slaves
[  379.497487][T17837] ; speed is unknown, defaulting to 1000
[  379.661159][T17848] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3495'.
[  379.709124][T17678] hsr_slave_0: left promiscuous mode
[  379.712508][T17678] hsr_slave_1: left promiscuous mode
[  379.719775][T17678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.722485][T17678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  379.836715][T17863] netlink: 'syz.3.3499': attribute type 8 has an invalid length.
[  380.050223][T17678] team0 (unregistering): Port device team_slave_1 removed
[  380.082170][T17678] team0 (unregistering): Port device team_slave_0 removed
[  380.857855][T17887] netlink: 'syz.1.3506': attribute type 1 has an invalid length.
[  380.880364][T17887] 8021q: adding VLAN 0 to HW filter on device bond23
[  380.919812][T17887] bond23: (slave geneve3): making interface the new active one
[  380.923737][T17887] bond23: (slave geneve3): Enslaving as an active interface with an up link
[  380.926579][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.930274][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.934617][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.937264][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.939591][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3506'.
[  381.473612][T17893] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002
[  382.116062][T17920] ; speed is unknown, defaulting to 1000
[  382.153322][T17920] xt_bpf: check failed: parse error
[  382.256447][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3518'.
[  382.259427][T17926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3518'.
[  382.314944][T17926] geneve4: entered promiscuous mode
[  382.317444][T17678] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  382.328217][T17678] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  382.333318][T17678] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  382.335704][T17678] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  383.004034][T17982] sctp: [Deprecated]: syz.2.3535 (pid 17982) Use of int in maxseg socket option.
[  383.004034][T17982] Use struct sctp_assoc_value instead
[  383.013546][T17983] sctp: [Deprecated]: syz.2.3535 (pid 17983) Use of int in maxseg socket option.
[  383.013546][T17983] Use struct sctp_assoc_value instead
[  383.423199][T18010] netlink: 'syz.3.3544': attribute type 1 has an invalid length.
[  383.426401][T18010] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3544'.
[  383.486993][T18015] xt_TCPMSS: Only works on TCP SYN packets
[  383.700959][T18024] ; speed is unknown, defaulting to 1000
[  383.743030][T18024] xt_bpf: check failed: parse error
[  383.955418][T18040] netlink: 'syz.1.3554': attribute type 6 has an invalid length.
[  384.164783][T17678] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  384.168858][T17678] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  384.171618][T17678] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  384.177018][T17678] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  384.322093][T18051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3556'.
[  384.326915][T18051] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3556'.
[  385.287178][T18074] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  385.293049][T18074] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  385.348710][T18074] netlink: 'syz.2.3562': attribute type 10 has an invalid length.
[  385.351717][T18078] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  385.355241][T18074] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  385.358273][T18078] netlink: 'syz.3.3563': attribute type 10 has an invalid length.
[  385.359777][T18074] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  385.361535][T18078] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  385.363997][T18074] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  385.370792][T18078] bond0: (slave wlan1): Opening slave failed
[  386.205965][T18102] nbd: must specify a device to reconfigure
[  386.210500][T18102] GUP no longer grows the stack in syz.2.3571 (18102): 200000003000-20000000a000 (200000001000)
[  386.214300][T18102] CPU: 0 UID: 0 PID: 18102 Comm: syz.2.3571 Not tainted syzkaller #0 PREEMPT(full) 
[  386.214312][T18102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  386.214319][T18102] Call Trace:
[  386.214324][T18102]  <TASK>
[  386.214328][T18102]  dump_stack_lvl+0x189/0x250
[  386.214349][T18102]  ? __pfx_dump_stack_lvl+0x10/0x10
[  386.214360][T18102]  ? __pfx__printk+0x10/0x10
[  386.214368][T18102]  ? find_vma+0xe7/0x160
[  386.214386][T18102]  __get_user_pages+0x2470/0x2a00
[  386.214410][T18102]  ? __gup_longterm_locked+0xc63/0x1660
[  386.214420][T18102]  ? down_read_killable+0x1d1/0x350
[  386.214435][T18102]  __gup_longterm_locked+0xde4/0x1660
[  386.214483][T18102]  ? sanity_check_pinned_pages+0x123a/0x1300
[  386.214501][T18102]  gup_fast_fallback+0x1d65/0x22d0
[  386.214511][T18102]  ? is_bpf_text_address+0x26/0x2b0
[  386.214538][T18102]  ? __pfx_gup_fast_fallback+0x10/0x10
[  386.214547][T18102]  ? stack_trace_save+0x9c/0xe0
[  386.214559][T18102]  ? stack_depot_save_flags+0x40/0x860
[  386.214573][T18102]  ? __page_table_check_zero+0x1/0x530
[  386.214588][T18102]  ? pin_user_pages_fast+0x4d/0xb0
[  386.214599][T18102]  iov_iter_extract_pages+0x35f/0x5e0
[  386.214613][T18102]  extract_iter_to_sg+0xe46/0x24e0
[  386.214629][T18102]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  386.214646][T18102]  ? __asan_memset+0x22/0x50
[  386.214658][T18102]  af_alg_get_rsgl+0x436/0x810
[  386.214677][T18102]  aead_recvmsg+0x4d5/0x13b0
[  386.214692][T18102]  ? aa_sk_perm+0x81e/0x950
[  386.214708][T18102]  ? __pfx_aead_recvmsg+0x10/0x10
[  386.214721][T18102]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  386.214729][T18102]  ? __pfx_aead_recvmsg+0x10/0x10
[  386.214741][T18102]  sock_recvmsg_nosec+0x186/0x1c0
[  386.214754][T18102]  ____sys_recvmsg+0x3aa/0x460
[  386.214767][T18102]  ? __pfx_____sys_recvmsg+0x10/0x10
[  386.214782][T18102]  ? import_iovec+0x74/0xa0
[  386.214793][T18102]  ___sys_recvmsg+0x1b5/0x510
[  386.214804][T18102]  ? __pfx____sys_recvmsg+0x10/0x10
[  386.214827][T18102]  ? __might_fault+0xb0/0x130
[  386.214842][T18102]  do_recvmmsg+0x307/0x770
[  386.214855][T18102]  ? __pfx_do_recvmmsg+0x10/0x10
[  386.214870][T18102]  ? __pfx_do_futex+0x10/0x10
[  386.214890][T18102]  __x64_sys_recvmmsg+0x190/0x240
[  386.214900][T18102]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  386.214910][T18102]  ? do_syscall_64+0xbe/0xfa0
[  386.214922][T18102]  do_syscall_64+0xfa/0xfa0
[  386.214931][T18102]  ? lockdep_hardirqs_on+0x9c/0x150
[  386.214941][T18102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.214949][T18102]  ? exc_page_fault+0xab/0x100
[  386.214959][T18102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.214967][T18102] RIP: 0033:0x7fea33d8efc9
[  386.214976][T18102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  386.214984][T18102] RSP: 002b:00007fea34ca9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  386.214995][T18102] RAX: ffffffffffffffda RBX: 00007fea33fe5fa0 RCX: 00007fea33d8efc9
[  386.215001][T18102] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000b
[  386.215007][T18102] RBP: 00007fea33e11f91 R08: 0000000000000000 R09: 0000000000000000
[  386.215012][T18102] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  386.215017][T18102] R13: 00007fea33fe6038 R14: 00007fea33fe5fa0 R15: 00007ffd937cae78
[  386.215032][T18102]  </TASK>
[  386.401776][T18111] geneve4: left promiscuous mode
[  386.413799][T17678] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  386.416315][T17678] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  386.418820][T17678] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  386.422477][T17678] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  386.456599][T18120] netlink: 'syz.2.3577': attribute type 4 has an invalid length.
[  386.494191][T18124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3579'.
[  386.555086][T18126] syzkaller0: entered promiscuous mode
[  386.556822][T18126] syzkaller0: entered allmulticast mode
[  387.672286][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3581'.
[  387.695991][T18133] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3582'.
[  387.702934][T18138] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3582'.
[  387.706480][T18133] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3582'.
[  387.933013][T18168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3593'.
[  387.935837][T18168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3593'.
[  387.944359][T18168] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3593'.
[  388.938836][T18193] x_tables: duplicate underflow at hook 3
[  389.015719][T18197] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  389.702655][T18215] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  390.098403][T18230] netlink: 'syz.2.3609': attribute type 142 has an invalid length.
[  390.124560][T18232] ; speed is unknown, defaulting to 1000
[  390.194472][T18237] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  390.337498][T18247] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  390.410959][T18251] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3614'.
[  390.516969][T18253] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3614'.
[  390.522455][T18253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3614'.
[  390.563692][T18252] ; speed is unknown, defaulting to 1000
[  391.027923][T18274] netlink: 'syz.2.3620': attribute type 13 has an invalid length.
[  391.276211][T18286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3623'.
[  391.282057][T18286] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3623'.
[  391.289084][T18286] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3623'.
[  392.289632][T18307] syzkaller0: entered allmulticast mode
[  392.579836][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3632'.
[  392.582557][T18317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3632'.
[  393.362642][T18323] vlan4: entered allmulticast mode
[  393.386809][T18329] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3636'.
[  394.193379][T18355] netlink: 'syz.2.3646': attribute type 6 has an invalid length.
[  394.371256][T18362] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  394.374199][T18362] syzkaller0: entered promiscuous mode
[  394.376208][T18362] syzkaller0: entered allmulticast mode
[  394.388076][T18362] tipc: Resetting bearer <eth:syzkaller0>
[  394.402789][T18362] tipc: Resetting bearer <eth:syzkaller0>
[  394.410704][T18362] tipc: Disabling bearer <eth:syzkaller0>
[  394.577817][T18373] IPv6: sit2: Disabled Multicast RS
[  395.262776][T18391] ; speed is unknown, defaulting to 1000
[  395.303522][T18391] xt_bpf: check failed: parse error
[  395.448270][T18396] netlink: 'syz.1.3658': attribute type 4 has an invalid length.
[  395.455025][T18396] netlink: 'syz.1.3658': attribute type 4 has an invalid length.
[  395.615181][T18404] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  395.629589][T18404] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  395.683102][T18404] netlink: 'syz.2.3661': attribute type 10 has an invalid length.
[  395.686123][T18404] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  395.765542][T18416] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3663'.
[  395.769840][T18412] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3663'.
[  395.806249][T18417] netlink: 'syz.2.3665': attribute type 6 has an invalid length.
[  395.807229][T18412] ; speed is unknown, defaulting to 1000
[  395.921816][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3669'.
[  395.924665][T18429] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3669'.
[  395.927621][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3669'.
[  396.027132][T18440] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  396.031135][T18440] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  396.146094][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3674'.
[  396.149380][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3674'.
[  396.193552][T18451] xt_bpf: check failed: parse error
[  396.890907][T18471] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  396.897347][T18471] netlink: 'syz.3.3681': attribute type 10 has an invalid length.
[  396.899815][T18471] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  396.902460][T18471] bond0: (slave wlan1): Opening slave failed
[  396.906105][T18471] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  396.910753][T18471] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  397.081205][T18477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3683'.
[  397.083938][T18477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3683'.
[  397.185835][T18489] bridge0: entered allmulticast mode
[  397.747205][T18495] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3688'.
[  397.827520][T18501] netlink: 'syz.3.3689': attribute type 21 has an invalid length.
[  398.851849][T18528] netlink: 'syz.3.3696': attribute type 2 has an invalid length.
[  399.103080][T18555] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  399.255636][T18570] netlink: 'syz.1.3707': attribute type 30 has an invalid length.
[  399.276210][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  399.281905][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  399.285351][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  399.288464][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  399.441317][T18581] netlink: 'syz.1.3709': attribute type 1 has an invalid length.
[  399.463037][T18581] bond24: (slave vxcan9): The slave device specified does not support setting the MAC address
[  399.467114][T18581] bond24: (slave vxcan9): Error -95 calling set_mac_address
[  399.530273][T18581] gretap2: entered promiscuous mode
[  399.531964][T18581] gretap2: entered allmulticast mode
[  399.535380][T18581] bond24: (slave gretap2): making interface the new active one
[  399.538116][T18581] bond24: (slave gretap2): Enslaving as an active interface with an up link
[  400.240936][T18613] netlink: 'syz.1.3717': attribute type 1 has an invalid length.
[  400.271572][T18613] bond25: entered promiscuous mode
[  400.275140][T18613] 8021q: adding VLAN 0 to HW filter on device bond25
[  400.280547][T18615] bond0: (slave rose0): Enslaving as an active interface with an up link
[  400.294307][T18613] 8021q: adding VLAN 0 to HW filter on device bond25
[  400.296768][T18613] bond25: (slave gre3): The slave device specified does not support setting the MAC address
[  400.299859][T18613] bond25: (slave gre3): Setting fail_over_mac to active for active-backup mode
[  400.303163][T18613] bond25: (slave gre3): Opening slave failed
[  401.015058][T18634] __nla_validate_parse: 11 callbacks suppressed
[  401.015068][T18634] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3722'.
[  401.147734][T18650] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  401.197945][T18650] netlink: 'syz.2.3725': attribute type 10 has an invalid length.
[  401.200527][T18650] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  401.424028][T18668] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3731'.
[  401.426741][T18668] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3731'.
[  401.429722][T18668] netlink: 'syz.2.3731': attribute type 6 has an invalid length.
[  401.432628][T18668] netlink: 'syz.2.3731': attribute type 5 has an invalid length.
[  401.435356][T18668] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3731'.
[  401.444084][T18668] netlink: 'syz.2.3731': attribute type 4 has an invalid length.
[  401.452908][T18668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3731'.
[  401.456299][T18668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3731'.
[  401.467492][T18668] vlan4: entered promiscuous mode
[  401.482340][T18671] macvtap1: entered promiscuous mode
[  401.484046][T18671] veth1_to_hsr: entered promiscuous mode
[  401.485951][T18671] macvtap1: entered allmulticast mode
[  401.488005][T18671] veth1_to_hsr: entered allmulticast mode
[  401.503822][T18673] netlink: 'syz.2.3731': attribute type 4 has an invalid length.
[  401.506156][T18671] ; speed is unknown, defaulting to 1000
[  401.516022][T18673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3731'.
[  401.569114][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3733'.
[  401.641002][T18678] ; speed is unknown, defaulting to 1000
[  401.657169][T18681] ; speed is unknown, defaulting to 1000
[  401.685536][T18683] xt_bpf: check failed: parse error
[  401.765450][T18689] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3737'.
[  401.814641][T18688] vxcan1: entered allmulticast mode
[  401.819332][T18690] vxcan1: left allmulticast mode
[  401.829756][T18689] netlink: 'syz.2.3737': attribute type 2 has an invalid length.
[  401.832217][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3737'.
[  401.967509][T18694] bridge10: port 1(veth5) entered blocking state
[  401.970537][T18694] bridge10: port 1(veth5) entered disabled state
[  401.972524][T18694] veth5: entered allmulticast mode
[  401.975074][T18694] veth5: entered promiscuous mode
[  402.053623][T18703] : left promiscuous mode
[  402.110923][T18697] ; speed is unknown, defaulting to 1000
[  402.898520][T18739] ; speed is unknown, defaulting to 1000
[  403.065958][T18747] ip6t_srh: unknown srh invflags BA61
[  403.374381][T18761] IPv6: Can't replace route, no match found
[  403.672158][T18770] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  403.805116][T18779] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  404.038523][T18801] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  404.044822][T18801] netlink: 'syz.2.3769': attribute type 10 has an invalid length.
[  405.046060][T18825] tap0: tun_chr_ioctl cmd 1074025681
[  405.061711][T18825] macsec1: entered promiscuous mode
[  405.066561][T18825] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  405.069398][T18825] macsec1: entered allmulticast mode
[  405.071045][T18825] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  406.492768][T18882] __nla_validate_parse: 14 callbacks suppressed
[  406.492798][T18882] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3793'.
[  406.501298][T18881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3793'.
[  406.538836][T18881] ; speed is unknown, defaulting to 1000
[  406.747218][T18894] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3796'.
[  406.805847][T18896] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3797'.
[  406.839637][T18895] ; speed is unknown, defaulting to 1000
[  407.107009][T18915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3800'.
[  407.223609][T18919] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3801'.
[  407.228386][T18918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3801'.
[  407.267302][T18918] ; speed is unknown, defaulting to 1000
[  407.353581][T18923] only policy match revision 0 supported
[  407.353595][T18923] unable to load match
[  407.357006][T18923] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3802'.
[  407.582745][T18934] ipvlan2: entered promiscuous mode
[  407.614833][T18940] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  407.653208][T18940] netlink: 'syz.2.3805': attribute type 10 has an invalid length.
[  407.656756][T18940] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  407.659837][T18940] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  408.530364][T18958] netlink: 'syz.2.3807': attribute type 1 has an invalid length.
[  408.561407][T18958] vlan4: entered allmulticast mode
[  409.127861][T19003] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3813'.
[  409.131406][T19003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3813'.
[  409.247404][T19018] ; speed is unknown, defaulting to 1000
[  409.613300][T19041] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  409.694475][T19059] bridge0: left allmulticast mode
[  409.715284][T19059] gretap2: left promiscuous mode
[  409.717516][T19059] gretap2: left allmulticast mode
[  409.724921][T19059] veth1_to_hsr: left allmulticast mode
[  409.726540][T19059] veth1_to_hsr: left promiscuous mode
[  409.738430][T19059] macvtap1: left promiscuous mode
[  409.742831][T19059] macvtap1: left allmulticast mode
[  409.745171][ T5900] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  409.748092][ T5900] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  409.751456][ T5900] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  409.754118][ T5900] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  409.777750][T19065] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[  409.781429][T19065] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[  409.784360][T19065] macsec1: left promiscuous mode
[  409.786269][T19065] macsec1: left allmulticast mode
[  409.796469][T19065] ipvlan2: left promiscuous mode
[  409.798884][T19065] vlan4: left allmulticast mode
[  409.829280][T19063] nbd2: detected capacity change from 0 to 127
[  409.880027][   T57] block nbd2: Receive control failed (result -32)
[  410.084884][T19082] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  410.845631][T19113] netlink: 'syz.1.3841': attribute type 21 has an invalid length.
[  410.848570][T19113] netlink: 'syz.1.3841': attribute type 1 has an invalid length.
[  411.463217][T19182] xt_CT: You must specify a L4 protocol and not use inversions on it
[  411.504358][T19184] __nla_validate_parse: 6 callbacks suppressed
[  411.504378][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3861'.
[  411.511969][T19185] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3859'.
[  411.518283][T19180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3859'.
[  411.522301][T19184] : entered promiscuous mode
[  411.528686][T19184] netlink: 'syz.3.3861': attribute type 1 has an invalid length.
[  411.549191][T19184] bond30: entered promiscuous mode
[  411.551348][T19184] 8021q: adding VLAN 0 to HW filter on device bond30
[  411.563571][T19180] ; speed is unknown, defaulting to 1000
[  411.577837][T19184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3861'.
[  411.584579][T19184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3861'.
[  411.790394][T19198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3864'.
[  411.843733][T19198] ; speed is unknown, defaulting to 1000
[  411.936116][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3867'.
[  412.035055][T19212] syzkaller0: entered allmulticast mode
[  412.093987][T19222] openvswitch: netlink: Missing key (keys=40, expected=80)
[  412.248008][T19226] ; speed is unknown, defaulting to 1000
[  412.949964][T19242] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  412.954757][T19241] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3876'.
[  412.958289][T19241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3876'.
[  412.963943][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'.
[  413.057218][T19241] netlink: 'syz.2.3876': attribute type 10 has an invalid length.
[  413.062323][T19241] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  413.065897][T19242] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  413.068691][T19242] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  413.843027][T19304] xt_CT: You must specify a L4 protocol and not use inversions on it
[  415.185469][T19350] ; speed is unknown, defaulting to 1000
[  415.903379][T19418] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  416.143353][T19430] netlink: 'syz.2.3928': attribute type 1 has an invalid length.
[  416.167829][T19430] bond22: (slave vxcan7): The slave device specified does not support setting the MAC address
[  416.171825][T19430] bond22: (slave vxcan7): Error -95 calling set_mac_address
[  416.795886][T19439] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  416.806317][T19439] __nla_validate_parse: 3 callbacks suppressed
[  416.806330][T19439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3930'.
[  417.550408][T19453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3935'.
[  417.661124][T19459] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  417.717922][T19457] ; speed is unknown, defaulting to 1000
[  418.105629][T19464] ; speed is unknown, defaulting to 1000
[  418.741980][T19480] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  418.744311][T19480] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  418.748080][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3942'.
[  418.751102][T19480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3942'.
[  418.754119][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3942'.
[  418.757016][T19480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3942'.
[  418.963960][T19485] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3944'.
[  419.529273][T19514] vlan2: entered allmulticast mode
[  419.531442][T19514] bridge0: entered allmulticast mode
[  419.551231][T19515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3955'.
[  419.606409][T19516] ipt_ECN: cannot use operation on non-tcp rule
[  419.850057][T19518] dvmrp1: tun_chr_ioctl cmd 1074025677
[  419.851793][T19518] dvmrp1: linktype set to 769
[  419.853736][T19518] netlink: 'syz.3.3956': attribute type 4 has an invalid length.
[  419.857894][T19518] tipc: New replicast peer: 255.255.255.255
[  419.861600][T19518] tipc: Enabled bearer <udp:syz2>, priority 10
[  420.488358][T19530] ; speed is unknown, defaulting to 1000
[  421.007160][T19539] ; speed is unknown, defaulting to 1000
[  421.157262][T19545] ; speed is unknown, defaulting to 1000
[  421.362576][T19551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3967'.
[  421.440372][T19561] batadv1: entered allmulticast mode
[  421.443822][T19561] 8021q: adding VLAN 0 to HW filter on device batadv1
[  421.619721][T19579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3975'.
[  421.629757][T19580] netlink: 'syz.3.3975': attribute type 1 has an invalid length.
[  421.636766][T19585] netlink: 'syz.1.3978': attribute type 6 has an invalid length.
[  421.644512][T19580] bond31: entered promiscuous mode
[  421.646408][T19580] 8021q: adding VLAN 0 to HW filter on device bond31
[  421.823969][T19589] __nla_validate_parse: 3 callbacks suppressed
[  421.823987][T19589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3979'.
[  422.004169][T19626] sctp: [Deprecated]: syz.3.3989 (pid 19626) Use of int in max_burst socket option.
[  422.004169][T19626] Use struct sctp_assoc_value instead
[  422.032642][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3990'.
[  422.307725][T19655] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3996'.
[  422.320414][T19654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3996'.
[  422.367680][T19654] ; speed is unknown, defaulting to 1000
[  422.380381][T19659] netlink: 'syz.1.3997': attribute type 1 has an invalid length.
[  422.425512][T19659] bond26: (slave vxcan9): The slave device specified does not support setting the MAC address
[  422.439426][T19659] bond26: (slave vxcan9): Error -95 calling set_mac_address
[  422.497833][T19659] vlan2: entered allmulticast mode
[  422.505080][T19659] bond26: (slave vlan2): Opening slave failed
[  422.684818][T19674] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  422.687380][T19674] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  422.690139][T19674] bond30: left promiscuous mode
[  422.692686][T19674] batadv1: left allmulticast mode
[  422.696026][T19674] bond31: left promiscuous mode
[  422.812141][T19684] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4005'.
[  423.274115][T19699] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4010'.
[  423.277876][T19698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4010'.
[  423.312869][T19698] ; speed is unknown, defaulting to 1000
[  423.538694][T19711] ; speed is unknown, defaulting to 1000
[  423.712790][T19714] ; speed is unknown, defaulting to 1000
[  423.952907][T19727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4018'.
[  424.061959][T19732] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  424.379969][T19734] netlink: 'syz.3.4020': attribute type 5 has an invalid length.
[  424.382423][T19734] netlink: 'syz.3.4020': attribute type 5 has an invalid length.
[  424.485827][T19738] pimreg: entered allmulticast mode
[  424.576368][T19749] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4024'.
[  424.579582][T19749] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4024'.
[  424.582205][T19749] netlink: 'syz.3.4024': attribute type 6 has an invalid length.
[  424.584649][T19749] netlink: 'syz.3.4024': attribute type 5 has an invalid length.
[  424.591727][T19749] netlink: 'syz.3.4024': attribute type 4 has an invalid length.
[  424.594384][T19749] netlink: 'syz.3.4024': attribute type 4 has an invalid length.
[  424.872568][T19761] ; speed is unknown, defaulting to 1000
[  425.057043][T19765] ; speed is unknown, defaulting to 1000
[  425.107555][T19777] nbd: socks must be embedded in a SOCK_ITEM attr
[  425.239218][T19786] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  425.318405][T19790] veth5: left allmulticast mode
[  425.320291][T19790] veth5: left promiscuous mode
[  425.322107][T19790] bridge10: port 1(veth5) entered disabled state
[  425.381255][T19791] netlink: 'syz.3.4039': attribute type 10 has an invalid length.
[  425.385304][T19791] bond0: (slave wlan1): Opening slave failed
[  425.390955][T19791] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  425.394403][T19791] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  425.952260][T19815] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  425.992146][T19820] ; speed is unknown, defaulting to 1000
[  426.079654][T19820] bond0 (unregistering): Released all slaves
[  426.209904][T19830] 8021q: adding VLAN 0 to HW filter on device bond32
[  427.771144][T19913] netlink: 'syz.1.4071': attribute type 6 has an invalid length.
[  429.340821][T19955] netlink: 'syz.2.4085': attribute type 4 has an invalid length.
[  429.343949][T19955] netlink: 'syz.2.4085': attribute type 4 has an invalid length.
[  429.902244][T19986] __nla_validate_parse: 11 callbacks suppressed
[  429.902262][T19986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4094'.
[  430.013479][T19988] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  430.152941][T19992] netlink: 'syz.2.4096': attribute type 32 has an invalid length.
[  430.210405][T19993] netlink: 'syz.2.4096': attribute type 1 has an invalid length.
[  430.244994][T19993] bond23: (slave vxcan7): The slave device specified does not support setting the MAC address
[  430.250082][T19993] bond23: (slave vxcan7): Error -95 calling set_mac_address
[  430.285598][T19995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4096'.
[  430.533834][T20001] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4099'.
[  430.674393][T20010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4103'.
[  430.689464][T20010] 8021q: adding VLAN 0 to HW filter on device bond33
[  430.762904][T20020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4106'.
[  430.763589][T20019] netlink: 'syz.1.4105': attribute type 6 has an invalid length.
[  430.766257][T20020] 8021q: VLANs not supported on ipvlan1
[  430.777918][T20020] macsec2: entered promiscuous mode
[  430.779602][T20020] macsec2: entered allmulticast mode
[  430.920717][T20027] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4107'.
[  430.927721][T20027] netlink: 'syz.1.4107': attribute type 2 has an invalid length.
[  431.045129][T20026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4108'.
[  431.067099][T20032] netlink: 'syz.2.4109': attribute type 5 has an invalid length.
[  431.067104][T20031] netlink: 'syz.2.4109': attribute type 1 has an invalid length.
[  431.067118][T20031] netlink: 'syz.2.4109': attribute type 2 has an invalid length.
[  431.371967][T20038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4111'.
[  431.479464][T20040] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  431.731334][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4112'.
[  431.737983][T20042] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4112'.
[  431.803547][T20044] ; speed is unknown, defaulting to 1000
[  431.839799][T20049] netlink: 'syz.1.4114': attribute type 1 has an invalid length.
[  431.948162][T20059] syzkaller1: entered promiscuous mode
[  431.952814][T20059] syzkaller1: entered allmulticast mode
[  432.095473][T20068] macsec2: left promiscuous mode
[  432.097522][T20068] macsec2: left allmulticast mode
[  433.128851][T20102] netlink: 'syz.2.4131': attribute type 3 has an invalid length.
[  433.396881][T20112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  433.442878][T20116] ; speed is unknown, defaulting to 1000
[  435.102655][T20160] __nla_validate_parse: 5 callbacks suppressed
[  435.102668][T20160] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4147'.
[  435.150758][T20158] ; speed is unknown, defaulting to 1000
[  435.311636][T20172] pim6reg1: entered promiscuous mode
[  435.320222][T20172] pim6reg1: entered allmulticast mode
[  435.413161][T20178] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  435.415457][T20178] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  435.837650][T20181] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4152'.
[  435.847307][T20181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4152'.
[  436.154803][T20189] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4154'.
[  436.161751][T20186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4154'.
[  436.201228][T20186] ; speed is unknown, defaulting to 1000
[  436.331086][T20199] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  436.335008][T20199] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  436.342900][T20199] netlink: 'syz.1.4159': attribute type 10 has an invalid length.
[  436.345164][T20199] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  436.348609][T20199] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  436.352502][T20199] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  437.317232][T20223] netlink: 'syz.3.4165': attribute type 29 has an invalid length.
[  437.320188][T20223] netlink: 'syz.3.4165': attribute type 29 has an invalid length.
[  437.322820][T20223] netlink: 500 bytes leftover after parsing attributes in process `syz.3.4165'.
[  437.367111][T20226] netlink: 'syz.3.4166': attribute type 6 has an invalid length.
[  437.411630][T20230] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4167'.
[  437.414968][T20233] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4168'.
[  437.443333][T20230] ; speed is unknown, defaulting to 1000
[  437.524545][T20245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4170'.
[  437.698620][T20256] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  437.993402][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4182'.
[  437.996940][T20282] : left promiscuous mode
[  438.182817][T20295] netlink: 'syz.1.4186': attribute type 1 has an invalid length.
[  438.205100][T20295] bond28: (slave vxcan9): The slave device specified does not support setting the MAC address
[  438.208560][T20295] bond28: (slave vxcan9): Error -95 calling set_mac_address
[  439.023758][T20305] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  439.026073][T20305] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  439.028244][T20305] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  439.122070][T20319] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  439.142352][T20319] lo: entered promiscuous mode
[  439.170935][T20320] netlink: 'syz.1.4193': attribute type 1 has an invalid length.
[  439.207357][T20320] bond29: (slave vxcan9): The slave device specified does not support setting the MAC address
[  439.211893][T20320] bond29: (slave vxcan9): Error -95 calling set_mac_address
[  439.257475][T20322] vlan2: entered allmulticast mode
[  439.260599][T20322] bond29: (slave vlan2): Opening slave failed

VM DIAGNOSIS:
04:21:54  Registers:
info registers vcpu 0

CPU#0
RAX=c9e1805219a9d400 RBX=ffffffff81967b87 RCX=c9e1805219a9d400 RDX=0000000000000001
RSI=ffffffff8d70bfda RDI=ffffffff8bbf0460 RBP=ffffffff8dc07ea8 RSP=ffffffff8dc07d80
R8 =ffff888121232fdb R9 =1ffff110242465fb R10=dffffc0000000000 R11=ffffed10242465fc
R12=ffffffff8f7ccb70 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1b92a40
RIP=ffffffff8b45fdd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818eb40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055faa3454680 CR3=000000000dd38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000051 0000000000000000
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=00336e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=e03412746f560200 RBX=ffffffff81967b87 RCX=e03412746f560200 RDX=0000000000000001
RSI=ffffffff8d70bfda RDI=ffffffff8bbf0460 RBP=ffffc90000197f10 RSP=ffffc90000197de0
R8 =ffff88823c632fdb R9 =1ffff110478c65fb R10=dffffc0000000000 R11=ffffed10478c65fc
R12=ffffffff8f7ccb70 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102c1d1000
RIP=ffffffff8b45fdd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9f40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055faa3453600 CR3=000000016f070000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
