last executing test programs:

822.373371ms ago: executing program 0 (id=1817):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=@newtfilter={0x480, 0x2c, 0xd27, 0x703d24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x454, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x5, 0x4, 0x5, {0xa5, 0x0, 0x1, 0x4, 0xd6, 0x3}, {0x9, 0x2, 0x6, 0x7ff, 0x6, 0xfffffffc}, 0x5, 0x189d, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0x0, 0x7ff, 0x100, 0x80, 0x1, 0x4, 0x7de9, 0xfffffd13, 0xdb, 0x2, 0x80000001, 0x4, 0xa, 0xdc, 0xe, 0x8, 0x3, 0xb, 0x3, 0x1, 0x4, 0x1, 0x9, 0x9, 0x4, 0x944c00, 0x0, 0x8, 0x5, 0xe1, 0x3ff, 0x7, 0x8, 0xe7be, 0x4, 0x1, 0x2, 0x2cf, 0x7, 0x401, 0x432, 0x5, 0x5, 0x5, 0x4, 0x8, 0xffff5a9a, 0x6, 0x181a, 0x7, 0x1, 0x1, 0x80000000, 0x10000, 0x10, 0x10001, 0x2, 0x9, 0xe20, 0x2, 0x4, 0x5, 0xdfc9, 0x0, 0x1, 0x6, 0x8, 0x40000000, 0x6, 0xe, 0x6e, 0x2, 0xf5, 0x0, 0x7, 0x7, 0x0, 0x4ba, 0x10000, 0x9, 0x8000, 0x0, 0x6, 0x8, 0xfff, 0x1d, 0x6, 0xe7d, 0x7, 0xd517, 0x0, 0x6, 0xb, 0x4, 0x2dc, 0x4, 0xe, 0xaa, 0x9, 0x2db3, 0x5a29, 0x0, 0x659, 0x72, 0xfb4, 0xe1, 0x31, 0x1, 0x6000000, 0x6, 0x4, 0x4, 0x7f, 0x1e59, 0x4, 0x7, 0x4, 0x100, 0x80, 0xe9c, 0x4, 0x7, 0x1, 0xd0, 0x8000, 0x2, 0x7, 0x401, 0xb1, 0x2, 0xfffffffa, 0x9b, 0xd, 0x3, 0x0, 0x9, 0x4, 0x7fffffff, 0x7c, 0xffffffff, 0x4, 0xa, 0x5, 0x84f, 0x4, 0x5, 0x2, 0x57d, 0x7, 0xc, 0x0, 0xfff, 0x40, 0x7, 0x9, 0xfffffffe, 0x5, 0xdb3e, 0x3, 0xb, 0x81, 0xfffffffb, 0x1, 0x8, 0x6, 0x101, 0x2, 0x0, 0x643, 0xfffff376, 0x41a5, 0x8, 0xff, 0x2, 0x7, 0x22c, 0x8001, 0x8000, 0x7, 0x9, 0x8, 0x3, 0x8d3c, 0x3, 0x76e0fdac, 0xd1, 0x0, 0x0, 0xa5b, 0x8, 0x1, 0x2, 0xc8b, 0x4, 0x100, 0xea6, 0x19, 0x7fff, 0xffff, 0x4, 0x9, 0x1ff, 0x8, 0x165, 0x8, 0x8, 0x81, 0xa11c, 0x100, 0x4, 0x3a6b94c2, 0x2, 0x1, 0x347c, 0x81, 0xffff, 0x1, 0x2, 0x2, 0x8, 0xf6, 0x3, 0x3a, 0x7, 0x9f, 0x7f, 0x9, 0x3, 0x1, 0x3, 0xfffffff8, 0x8, 0x0, 0xb8c0, 0x5, 0x13, 0x2, 0xffffffff, 0x9, 0x8, 0x6, 0x8001, 0x5, 0x6, 0x1691, 0x6422, 0x3, 0x10, 0x3, 0x388, 0x6, 0x5, 0x8, 0xffffffc0]}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

762.547495ms ago: executing program 0 (id=1818):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x4100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e28, @loopback}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000040)={0x1, 0x20a, 0xc, 0x7, r8}, &(0x7f0000000080)=0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r10 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)={0x34, 0x2e, 0x503, 0x40000, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}, @generic="a8bb"]}, 0x34}], 0x1}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000200)}, 0x20)
close(r10)
recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}, 0xbe}, {{0x0, 0x0, &(0x7f0000000840)}, 0x3ff}, {{&(0x7f0000000700)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/212, 0xd4}, {&(0x7f0000001140)=""/169, 0xa9}, {&(0x7f0000000b00)=""/111, 0x6f}, {&(0x7f0000001200)=""/190, 0xbe}], 0x4}, 0x1}], 0x3, 0x2001, 0x0)

550.232797ms ago: executing program 0 (id=1821):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000340e542e45a1153b0000000000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYRES16=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0xa, 0x3)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@x25={0x9, @remote}, 0x0, 0x80800)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%ps    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), 0x0}, 0x20)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e1f, @broadcast}}, 0x7, 0x6191, 0xd7cf, 0x7, 0x11, 0x8, 0xf}, &(0x7f00000001c0)=0x9c)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="b5a4290e3e2c", 0x6}], 0x1}], 0x1, 0x881)
close(0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
r7 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x50, &(0x7f0000000100), 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18e200000000950000008000d4064d62f70dce00008500000092fcff0095"], 0x0}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0c000280060001"], 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="060000000400004008000000080086e4adf5fcf9ff0239f22bcaab72c4000080080000de07032a7eb9b03118993ff640adee2b0946ee0a2ceee59e5fbda0ccac0c7418587a94f70a8c0f3344302319ba951660b4afd8a9b7c5e94cd5e6aa11f4f3e1ce3912a1a8cd99ef93bc7711aa4239b5427a3ad66cf9fd7b57ea1fa2b34b8435ce6716a0891ce885abf063fcce6423fa68832d50f999c0031f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

348.968111ms ago: executing program 2 (id=1826):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000280)={&(0x7f0000000340)={0x64, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x1}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x401}]}, @NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x87, 0x8, 0x9, 0x6, 0x6, 0x7, 0x4, 0xaf7b]}}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x64}}, 0x4040810)

344.940418ms ago: executing program 1 (id=1827):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40800}, 0x20048804) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], <r5=>0x0, 0x31, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) (async)
pipe(&(0x7f0000000840)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x18}, 0xc) (async)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x54fd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) (async)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x8000, 0x10}, 0xc) (async)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0xa, 0x10}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x93}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x8001, 0x55, &(0x7f00000003c0)=""/85, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x9, 0xec1, 0x3ff}, 0x10, r5, 0xffffffffffffffff, 0x3, &(0x7f00000009c0)=[r6, r7, r9, r10, r11, r12], &(0x7f0000000a00)=[{0x5, 0x3, 0x4}, {0x5, 0x2, 0x5, 0x1}, {0x0, 0x1, 0x6, 0x1}], 0x10, 0xe4a}, 0x94)
r13 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0xb}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x5}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x65}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x8}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x38e}, @NFQA_CFG_FLAGS={0x8}]}, 0x5c}}, 0x0) (async)
r14 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r14, 0x80089419, &(0x7f0000000c40)) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
ioctl$BTRFS_IOC_SYNC(r13, 0x9408, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000)
setsockopt$packet_tx_ring(r14, 0x107, 0xd, &(0x7f0000000d80)=@req3={0x4, 0xfffffff8, 0x4444, 0x226, 0x2, 0x9}, 0x1c) (async)
r15 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r7)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r15, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r16, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8632, 0x46}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11c676506974fd23}, 0x20000050)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000f00)={{{@in=@loopback, @in=@private=0xa010102, 0x4e23, 0x800, 0x4e23, 0x0, 0x2, 0xa0, 0xa0, 0x7f, r4, 0xffffffffffffffff}, {0x100000001, 0x2, 0xffffffffffffff81, 0x22, 0x24ad, 0x9, 0x6}, {0x6, 0xaa, 0x47, 0xfffffffffffffffb}, 0x9, 0x6e6bbc, 0x2, 0x1, 0x3, 0x2}, {{@in=@remote, 0x4d3, 0x6c}, 0xa, @in=@multicast2, 0x3501, 0x1, 0x1, 0x3, 0x6738, 0xfa, 0x8}}, 0xe8)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r7, &(0x7f0000001780)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001740)={&(0x7f0000001040)={0x6d4, r16, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x2a}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x658, 0x111, 0x0, 0x1, {0x654, 0x5, 0x0, 0x1, [{0x2c8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xf0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x58}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x17c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xeb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffff00}]}]}, {0x190, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x48}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x6}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x200}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6d4}}, 0x4040)
r17 = syz_genetlink_get_family_id$tipc(&(0x7f0000001800), r8)
sendmsg$TIPC_CMD_GET_NODES(r15, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r17, 0x800, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008024}, 0x4000800)

287.237883ms ago: executing program 2 (id=1828):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x4c000000, 0x0, 0x10000047}, 0x4000084)

286.851068ms ago: executing program 2 (id=1829):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f0000000040)=0xfffffffffffffe44)
socket$inet6(0xa, 0x80002, 0x0) (async)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x4, 0x4, 0x5}, 0x50)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) (async)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r6}, 0x10)
ppoll(&(0x7f0000000300), 0x0, &(0x7f00000003c0), 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e22, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='xfrm0\x00', 0x10)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40020000", @ANYRES8=0x0, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050000000000f80108808c000080200004000a00000000000000fe800000000000000000000000000000000000001400040002000000e0000001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00000000000000fe880000000000000000000000000001000000000800030000000000060005000000000068010080fc00098070000080060001000200000008000200ac1414bb0500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac141400050003000000000088000080060001000200000008000200e00000020500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000a0000001400020000000000000000000000ffffac1414000500030000000000240002002767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6200004000a00000000000000fc0100000000000000000000000000010000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", @ANYBLOB='!'], 0x240}}, 0x0) (async)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40020000", @ANYRES8=0x0, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050000000000f80108808c000080200004000a00000000000000fe800000000000000000000000000000000000001400040002000000e0000001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00000000000000fe880000000000000000000000000001000000000800030000000000060005000000000068010080fc00098070000080060001000200000008000200ac1414bb0500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac141400050003000000000088000080060001000200000008000200e00000020500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000a0000001400020000000000000000000000ffffac1414000500030000000000240002002767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6200004000a00000000000000fc0100000000000000000000000000010000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", @ANYBLOB='!'], 0x240}}, 0x0)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000140)=0xd, 0x4) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000140)=0xd, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r9}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r9}, 0xc)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xd, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xd, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)

271.117038ms ago: executing program 0 (id=1830):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0xf0ff, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40054}, 0x4804)

219.721078ms ago: executing program 1 (id=1831):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x6, 0x5, 0x5, 0x7, 0x8}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x10}, {0xfff2, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x19}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004815}, 0x2)
r5 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'blkio'}]}, 0x7) (async, rerun: 32)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0xfffffffffffffebe, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x8b, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (rerun: 32)

211.937592ms ago: executing program 0 (id=1832):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x4100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001)
recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}, 0xbe}, {{0x0, 0x0, &(0x7f0000000840)}, 0x3ff}, {{&(0x7f0000000700)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/212, 0xd4}, {&(0x7f0000001140)=""/169, 0xa9}, {&(0x7f0000000b00)=""/111, 0x6f}, {&(0x7f0000001200)=""/190, 0xbe}], 0x4, 0x0, 0x0, 0x1000000}, 0x1}], 0x3, 0x2001, 0x0)

61.862736ms ago: executing program 0 (id=1833):
socket(0x2b, 0x80801, 0x1) (async)
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xab, @empty, 0x1}, 0x1c)
ppoll(&(0x7f0000000040)=[{r0, 0x180}], 0x1, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000180)={0x6, 0xfffffffb, 0x2, 0xfffffff9}, 0x10)
getsockname$packet(r0, 0x0, &(0x7f0000000440)) (async)
getsockname$packet(r0, 0x0, &(0x7f0000000440))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getnexthop={0x18, 0x6a, 0x20, 0x70bd25, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x404c085}, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000003c0))
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x7f30, 0x0, 0x6, 0x1, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast1, @multicast2, {[@noop, @end, @generic={0x88, 0x2}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x7f30, 0x0, 0x6, 0x1, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast1, @multicast2, {[@noop, @end, @generic={0x88, 0x2}]}}}}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x48978, 0x10003}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc85}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x1}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async)
sendto$packet(r3, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

60.053315ms ago: executing program 1 (id=1834):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdadf252a0000000c000600010000000100000084002f800c000200000000000000000018000100070000006c00038005000200030000003800038008000200"], 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x40)

59.171019ms ago: executing program 2 (id=1835):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r1=>0x0, 0x20, 0x10, 0x7, 0xb71, {{0x7, 0x4, 0x2, 0x0, 0x1c, 0x66, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@generic={0xc0, 0x8, "e566d3ed06d5"}]}}}}})
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000440000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="240000002d000100000000000000000008000c00", @ANYRES32=r5, @ANYBLOB="0b000080976b640868603000e73dbd734ef7fb48c6475731edfdc4110e3375d0d49b9f3ae473b9f8d463e478643015cdcad6c058765273266b10d21a2b39905641b5d5b62adc5e7a5d6de8576b50473553f4115114813a185f101ebe79f32cd762b33758304a942382adb6f35d465cf55c5fc4b6c883fa26adfe64c43d43db3a4d24126827f9521a5388d37162484c2aac5cae94f334b79f95125b951eefa15edc8a2d2eb38c33b94360ce7819472df05ecc8b31593b37dda1d597e348"], 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)={0x18c, 0x10, 0x509, 0x0, 0x0, "", [@nested={0xb9, 0x9c, 0x0, 0x1, [@nested={0x8, 0x13a, 0x0, 0x1, [@nested={0x4, 0x7d}]}, @typed={0x8, 0xe9, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@local}, @generic="46e16f7519cabb74e75f5284a7644ee2669cf260d7ee8a72b1d2136dd2cf8f62ab5e0a5db5c620d94653ffcf494387a7cace4f6db5809d7bfd444c39f08538cf4ab4867900a34e58819453bee4b96fc4da12184791474d35fe57ec181883bcd4803ca788a4adfedaaf47763633fea932df1a5ecc8e402f4288d8b2085e457fcdfcac92fab90e27f24d8a1494fb4e35fe93ff248cd58762e1ca3a5ba1c5"]}, @generic="b7b86d126d136b69478a408c8a3294c0ebf12eb1653e0d0ce38a7973dbf1402bbd1ead61ed55bb641efcc2b6acfe736059f4a4c569c1615b4cbeb079c76fb51ea210b0c65fb642d65472f7e83c0b95c09a5d5b117d1d4fb22e7edf06d7d2a08895ecab5f99e105c5f99b4a057929e21baa5217459a3cc534049033c023a0cc90f3ed876af56bfc32d8fa72e6b8d8c31b88a255ad43853ac796750fc27cf67e738f4aa69974a655d7b30d992d5d0aa6e2c4cc40eabdc6751c3b404610a2597a23"]}, 0x18c}], 0x1}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="a00100001b0004002dbd7000ffdbdf2500000000000000000000000000000000fc0200000000000000000000034e240002020000a016000000", @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x4004014}, 0x24004800)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94)
close(0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0xcc, r7, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x68}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x4c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x42, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad76"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x80)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0)
socket$key(0xf, 0x3, 0x2)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010026"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28)
r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r10}, 0x10)
r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8)
close(r12)
bind$vsock_stream(r12, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @hyper}, 0x10)

58.247408ms ago: executing program 1 (id=1836):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x25, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}, 0x1, 0xfff0}, 0x0)

57.586873ms ago: executing program 2 (id=1837):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8002, 0x6}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000000008000300000000000800070000000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000080)=""/50, 0x311000, 0x1000, 0xf8}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={<r4=>r3, 0x7bd, 0xfffffffffffffffd, 0x7})
setsockopt$inet_opts(r4, 0x0, 0x16, &(0x7f0000000180)="230adca366913e176d96182d9a4185b2b74430769b33e17705bb0faf195aa1197ccbd64ac3664d82b3d34749d3a35b2223d7dd885fa1cabd1679208cb33405960da161e5516865319a316099c55d261f277f9a0945bdf909c5b1fc99b2e1a640d14e1976aaab149e840bfed36e67ff9607bb4281f483ece4414fc9df11a846d462c1f82a90cd731444757c41caa41b85a86fa441955f5873d1ee3a8db851fad820e50cf04d505c78a3920992ed8c6bba48d092aea02d70eaca2465aa750eaaa3fc79d9bc55067c1d663787ea9a9782aa044e2bf9cbba12098f995bf05830908cf828635a6688d15970", 0xe9)

1.554286ms ago: executing program 1 (id=1838):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x64, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x1}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x401}]}, @NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x87, 0x8, 0x9, 0x6, 0x6, 0x7, 0x4, 0xaf7b]}}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x64}}, 0x4040810)

844.165µs ago: executing program 2 (id=1839):
r0 = socket(0x2, 0x80805, 0x0) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) (async)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xac}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000feffffff000000000800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000341200f4840000007700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
close(r1) (async, rerun: 64)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000001240)={0x49834e15, 0x4f0, 0x9, 0x1, 0x81}, 0x14) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
shutdown(r6, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5}, 0x10) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48)
socket$tipc(0x1e, 0x5, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x6e, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

0s ago: executing program 1 (id=1840):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x2, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}, {0x0, [0x61, 0x0, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x61, 0x5f, 0x5f]}}, 0x0, 0x4c}, 0x28)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002800)=@delchain={0x164, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x84, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x7, 0x7, 0x1, 0x4}, {0xf3d0, 0xeb, 0x30, 0x2}, {0x7bd, 0x7, 0xdf, 0x3616}, {0x0, 0xb, 0x81, 0x1}, {0x81, 0x80, 0x40, 0x3}, {0x8, 0xa1, 0x5, 0xc365}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x80, 0x8, 0xa, 0x7fff}, {0xe5fe, 0x10, 0x0, 0x5}, {0x400, 0xf, 0x81, 0x28e49d38}, {0x1, 0xff, 0xef, 0x5}, {0xe68, 0x7, 0x2}, {0xfff0, 0x9c, 0x30, 0xb2}, {0x8000, 0x8, 0x1, 0xa4}]}}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_route={{0xa}, {0x84, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x68, 0x6, [@m_vlan={0x64, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x2e, 0x6, "4536d5ba67cb41f3417191a0b4758169ba997e9dbec50e599419b7f290f4ee70efc0bdcb1d84cd2098b9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x164}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002880)={'wlan0\x00', <r4=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32], 0xd8}}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
socket(0x28, 0x5, 0x0)
r6 = socket(0x28, 0x5, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30eab000000900010073797a30000000001c0003801d000380140001007465616d300000000000000000000000080007"], 0xd8}}, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='fsi_slave_invalid_cfam\x00', r7}, 0x18)
bind$llc(r6, &(0x7f0000000040)={0x1a, 0x1b, 0x0, 0xd, 0xca, 0x85, @multicast}, 0x10)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000340)={0x2}, 0x4)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r9, 0x8917, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100))
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000000)={0x40, r2, 0x10, 0xb, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040881}, 0x4000010)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:25892' (ED25519) to the list of known hosts.
syzkaller login: [   56.043744][ T5836] cgroup: Unknown subsys name 'net'
[   56.136895][ T5836] cgroup: Unknown subsys name 'cpuset'
[   56.141684][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.968112][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.424513][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.427729][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.436954][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.440251][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.444143][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.447225][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.451041][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.473627][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.477447][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.480201][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.522935][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.534109][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.537553][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.541974][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.546339][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.732826][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   62.818254][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   62.879067][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.882205][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.886567][ T5849] bridge_slave_0: entered allmulticast mode
[   62.889787][ T5849] bridge_slave_0: entered promiscuous mode
[   62.895149][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.897427][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.899852][ T5849] bridge_slave_1: entered allmulticast mode
[   62.902729][ T5849] bridge_slave_1: entered promiscuous mode
[   62.946470][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   62.977666][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.994172][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.048247][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.050605][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.052972][ T5853] bridge_slave_0: entered allmulticast mode
[   63.057503][ T5853] bridge_slave_0: entered promiscuous mode
[   63.077379][ T5849] team0: Port device team_slave_0 added
[   63.082171][ T5849] team0: Port device team_slave_1 added
[   63.110124][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.114447][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.117417][ T5853] bridge_slave_1: entered allmulticast mode
[   63.121027][ T5853] bridge_slave_1: entered promiscuous mode
[   63.208034][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.210724][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.221494][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.228463][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.232076][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.235291][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.245236][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.249667][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.252646][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.257240][ T5859] bridge_slave_0: entered allmulticast mode
[   63.260962][ T5859] bridge_slave_0: entered promiscuous mode
[   63.267217][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.280710][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.283099][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.286222][ T5859] bridge_slave_1: entered allmulticast mode
[   63.289410][ T5859] bridge_slave_1: entered promiscuous mode
[   63.363613][ T5849] hsr_slave_0: entered promiscuous mode
[   63.367680][ T5849] hsr_slave_1: entered promiscuous mode
[   63.386723][ T5853] team0: Port device team_slave_0 added
[   63.391747][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.398798][ T5853] team0: Port device team_slave_1 added
[   63.404080][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.472613][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.476466][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.486496][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.492124][ T5859] team0: Port device team_slave_0 added
[   63.511098][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.514570][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.525291][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.531935][ T5859] team0: Port device team_slave_1 added
[   63.578493][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.580714][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.589046][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.615530][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.618235][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.629401][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.678472][ T5853] hsr_slave_0: entered promiscuous mode
[   63.681383][ T5853] hsr_slave_1: entered promiscuous mode
[   63.683965][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   63.686375][ T5853] Cannot create hsr debugfs directory
[   63.716284][ T5859] hsr_slave_0: entered promiscuous mode
[   63.718739][ T5859] hsr_slave_1: entered promiscuous mode
[   63.720980][ T5859] debugfs: 'hsr0' already exists in 'hsr'
[   63.722887][ T5859] Cannot create hsr debugfs directory
[   63.990431][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.997823][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.008106][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.018306][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.089026][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.110051][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.116964][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.123822][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.163175][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.170559][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.175671][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.182531][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.291605][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.332434][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   64.342452][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.381308][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.384101][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.407957][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.410894][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.418282][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   64.427906][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.439884][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.442360][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.453812][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.456348][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.476413][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   64.489117][ T4530] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.491781][ T4530] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.504793][   T55] Bluetooth: hci1: command tx timeout
[   64.505815][ T5855] Bluetooth: hci0: command tx timeout
[   64.508037][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.528865][ T4530] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.531117][ T4530] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.584349][ T5855] Bluetooth: hci2: command tx timeout
[   64.697004][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.725220][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.731638][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.762140][ T5859] veth0_vlan: entered promiscuous mode
[   64.776658][ T5859] veth1_vlan: entered promiscuous mode
[   64.811508][ T5849] veth0_vlan: entered promiscuous mode
[   64.822468][ T5853] veth0_vlan: entered promiscuous mode
[   64.827958][ T5849] veth1_vlan: entered promiscuous mode
[   64.837598][ T5853] veth1_vlan: entered promiscuous mode
[   64.846847][ T5859] veth0_macvtap: entered promiscuous mode
[   64.851549][ T5859] veth1_macvtap: entered promiscuous mode
[   64.876318][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.888174][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.895637][ T5849] veth0_macvtap: entered promiscuous mode
[   64.901557][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.907454][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.910320][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.926449][ T5849] veth1_macvtap: entered promiscuous mode
[   64.937261][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.953870][ T5853] veth0_macvtap: entered promiscuous mode
[   64.975434][ T5853] veth1_macvtap: entered promiscuous mode
[   64.981746][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.993008][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.019115][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.026183][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.030157][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.040327][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.042560][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.045620][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.052177][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.062773][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.076149][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.089495][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.092520][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.109601][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.119157][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.122610][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.211635][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.236923][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.245307][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.291662][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.295168][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.301740][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.315830][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.325072][ T5917] netlink: 'syz.0.1': attribute type 3 has an invalid length.
[   65.349140][ T4530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.352546][ T4530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.528789][ T5929] Zero length message leads to an empty skb
[   65.558776][ T5933] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7'.
[   65.649830][ T5935] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET)
[   65.731925][ T5940] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10'.
[   65.991422][ T5962] netlink: 27 bytes leftover after parsing attributes in process `syz.2.14'.
[   66.031764][ T5965] warning: `syz.0.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.430340][ T5986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.480556][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'.
[   66.584827][ T5855] Bluetooth: hci0: command tx timeout
[   66.587016][ T5855] Bluetooth: hci1: command tx timeout
[   66.623837][ T5900] IPVS: starting estimator thread 0...
[   66.663793][ T5855] Bluetooth: hci2: command tx timeout
[   66.723991][ T5995] IPVS: using max 63 ests per chain, 151200 per kthread
[   67.351373][ T6043] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.357034][ T6043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.29'.
[   67.502298][ T6050] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.510327][ T6050] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   67.858367][ T6074] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   67.906560][ T6079] netlink: 76 bytes leftover after parsing attributes in process `syz.2.41'.
[   67.934283][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'.
[   67.986117][ T6090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.47'.
[   67.997879][ T6093] netlink: 80 bytes leftover after parsing attributes in process `syz.1.48'.
[   68.035080][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'.
[   68.038091][ T6096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.134257][ T6104] tun0: tun_chr_ioctl cmd 1074025672
[   68.135957][ T6104] tun0: ignored: set checksum disabled
[   68.177794][ T6107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   68.242923][ T6117] syz_tun: entered allmulticast mode
[   68.265065][ T6114] syz_tun: left allmulticast mode
[   68.504344][ T6140] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   68.665248][ T5855] Bluetooth: hci0: command tx timeout
[   68.665282][   T55] Bluetooth: hci1: command tx timeout
[   68.680881][ T6157] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.744347][   T55] Bluetooth: hci2: command tx timeout
[   68.867318][ T6172] netlink: 'syz.1.82': attribute type 3 has an invalid length.
[   68.870191][ T6172] netlink: 'syz.1.82': attribute type 3 has an invalid length.
[   68.952159][ T6175] netlink: 'syz.2.83': attribute type 3 has an invalid length.
[   69.872159][ T6192] Dead loop on virtual device ip6_vti0, fix it urgently!
[   69.875564][ T6192] Dead loop on virtual device ip6_vti0, fix it urgently!
[   69.878341][ T6192] Dead loop on virtual device ip6_vti0, fix it urgently!
[   69.880837][ T6192] Dead loop on virtual device ip6_vti0, fix it urgently!
[   69.883295][ T6192] Dead loop on virtual device ip6_vti0, fix it urgently!
[   69.886104][ T6192] Dead loop on virtual device ip6_vti0, fix it urgently!
[   69.990011][ T6200] syzkaller1: entered promiscuous mode
[   69.992139][ T6200] syzkaller1: entered allmulticast mode
[   70.129232][ T6207] netlink: 'syz.0.96': attribute type 1 has an invalid length.
[   70.145597][ T6209] netlink: 'syz.0.96': attribute type 1 has an invalid length.
[   70.155553][ T6209] netlink: 'syz.0.96': attribute type 4 has an invalid length.
[   70.163795][ T6207] netlink: 'syz.0.96': attribute type 4 has an invalid length.
[   70.173511][ T6207] netlink: 'syz.0.96': attribute type 25 has an invalid length.
[   70.176674][ T6209] netlink: 'syz.0.96': attribute type 25 has an invalid length.
[   70.466680][ T6236] raw_sendmsg: syz.0.105 forgot to set AF_INET. Fix it!
[   70.660336][ T6256] __nla_validate_parse: 13 callbacks suppressed
[   70.660348][ T6256] netlink: 52 bytes leftover after parsing attributes in process `syz.1.110'.
[   70.666127][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'.
[   70.743978][   T55] Bluetooth: hci0: command tx timeout
[   70.744727][ T5855] Bluetooth: hci1: command tx timeout
[   70.811790][ T6265] netlink: 'syz.1.115': attribute type 6 has an invalid length.
[   70.815607][ T6266] netlink: 32 bytes leftover after parsing attributes in process `syz.2.114'.
[   70.824806][   T55] Bluetooth: hci2: command tx timeout
[   70.852252][ T6268] netlink: 92 bytes leftover after parsing attributes in process `syz.1.116'.
[   70.909886][ T6271] syzkaller1: entered promiscuous mode
[   70.911874][ T6271] syzkaller1: entered allmulticast mode
[   71.019017][ T6278] netlink: 32 bytes leftover after parsing attributes in process `syz.2.121'.
[   71.107737][ T6282] netlink: 40 bytes leftover after parsing attributes in process `syz.2.123'.
[   71.118239][ T6283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.123'.
[   71.148825][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.152161][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.295144][ T6302] netlink: 256 bytes leftover after parsing attributes in process `syz.1.130'.
[   71.298960][ T6302] unsupported nlmsg_type 40
[   71.503177][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'.
[   71.625835][ T6325] netlink: 'syz.0.137': attribute type 3 has an invalid length.
[   71.629190][ T6325] netlink: 'syz.0.137': attribute type 3 has an invalid length.
[   71.671364][ T6330] netlink: 'syz.2.138': attribute type 1 has an invalid length.
[   71.867725][ T6341] netlink: 'syz.0.142': attribute type 6 has an invalid length.
[   72.371566][ T6349] syz_tun: entered allmulticast mode
[   72.377909][ T6348] syz_tun: left allmulticast mode
[   72.544377][ T6357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.149'.
[   72.903581][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   73.711584][ T6388] netlink: 'syz.0.161': attribute type 3 has an invalid length.
[   73.714900][ T6388] netlink: 'syz.0.161': attribute type 3 has an invalid length.
[   74.287254][ T6407] 8021q: VLANs not supported on xfrm0
[   74.415248][ T6336] net_ratelimit: 19 callbacks suppressed
[   74.415272][ T6336] Set syz1 is full, maxelem 65536 reached
[   74.539177][ T6421] netlink: 'syz.0.172': attribute type 13 has an invalid length.
[   74.542510][ T6421] netlink: 'syz.0.172': attribute type 17 has an invalid length.
[   74.605864][ T6421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.260545][ T6448] Dead loop on virtual device ip6_vti0, fix it urgently!
[   75.263491][ T6448] Dead loop on virtual device ip6_vti0, fix it urgently!
[   75.265834][ T6448] Dead loop on virtual device ip6_vti0, fix it urgently!
[   75.268170][ T6448] Dead loop on virtual device ip6_vti0, fix it urgently!
[   75.270707][ T6448] Dead loop on virtual device ip6_vti0, fix it urgently!
[   75.273428][ T6448] Dead loop on virtual device ip6_vti0, fix it urgently!
[   75.346040][ T6453] syz_tun: entered allmulticast mode
[   75.350399][ T6452] syz_tun: left allmulticast mode
[   75.431922][ T6455] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   75.700769][ T6487] netlink: 'syz.1.193': attribute type 1 has an invalid length.
[   75.720142][ T6489] __nla_validate_parse: 8 callbacks suppressed
[   75.720156][ T6489] netlink: 40 bytes leftover after parsing attributes in process `syz.2.195'.
[   75.731672][ T6489] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[   75.740525][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'.
[   75.800968][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'.
[   75.886123][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.889016][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.991076][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.002182][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.152321][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.156198][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[   76.170523][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.183405][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[   76.190723][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.194417][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[   76.198085][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.201786][   T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[   76.208704][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.203'.
[   76.275119][ T6523] netlink: 76 bytes leftover after parsing attributes in process `syz.2.205'.
[   76.288000][ T6523] netlink: 44 bytes leftover after parsing attributes in process `syz.2.205'.
[   76.338491][ T6525] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.207'.
[   76.347028][ T6525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.207'.
[   76.531329][ T6543] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   76.540941][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'.
[   76.728703][ T6559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.215'.
[   76.837116][ T6571] tipc: Started in network mode
[   76.840180][ T6571] tipc: Node identity a2703eee8fdf, cluster identity 4711
[   76.844408][ T6571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.851133][ T6574] Bluetooth: MGMT ver 1.23
[   76.854337][ T6571] syzkaller0: entered promiscuous mode
[   76.856639][ T6571] syzkaller0: entered allmulticast mode
[   76.861267][ T6574] validate_nla: 2 callbacks suppressed
[   76.861297][ T6574] netlink: 'syz.0.219': attribute type 1 has an invalid length.
[   76.893810][ T6571] tipc: Resetting bearer <eth:syzkaller0>
[   76.902573][ T6570] tipc: Resetting bearer <eth:syzkaller0>
[   76.920964][ T6570] tipc: Disabling bearer <eth:syzkaller0>
[   77.158959][   T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[   78.030754][ T6620] Dead loop on virtual device ip6_vti0, fix it urgently!
[   78.033206][ T6620] Dead loop on virtual device ip6_vti0, fix it urgently!
[   78.382322][ T6634] netlink: 'syz.1.236': attribute type 2 has an invalid length.
[   78.406260][ T6634] `: entered promiscuous mode
[   78.568008][ T6642] netlink: 'syz.2.239': attribute type 2 has an invalid length.
[   78.582997][ T6642] syzkaller0: entered promiscuous mode
[   78.585609][ T6642] syzkaller0: entered allmulticast mode
[   78.835379][ T6659] 0: renamed from hsr0 (while UP)
[   78.839254][ T6659] 0: entered allmulticast mode
[   78.840892][ T6659] hsr_slave_0: entered allmulticast mode
[   78.842657][ T6659] hsr_slave_1: entered allmulticast mode
[   80.011144][ T6685] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   80.111262][ T6691] netlink: 'syz.2.256': attribute type 2 has an invalid length.
[   80.126965][ T6693] netlink: 'syz.1.257': attribute type 21 has an invalid length.
[   80.129757][ T6694] netlink: 'syz.1.257': attribute type 21 has an invalid length.
[   80.145524][ T6696] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   80.147994][ T6696] netlink: 'syz.0.258': attribute type 2 has an invalid length.
[   80.235062][ T6704] syzkaller1: entered promiscuous mode
[   80.237451][ T6704] syzkaller1: entered allmulticast mode
[   80.617858][ T6755] netlink: 'syz.2.279': attribute type 2 has an invalid length.
[   81.419328][ T6763] __nla_validate_parse: 13 callbacks suppressed
[   81.419350][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'.
[   81.420622][ T6766] netlink: 68 bytes leftover after parsing attributes in process `syz.0.283'.
[   81.470831][ T6771] net_ratelimit: 5 callbacks suppressed
[   81.470848][ T6771] Dead loop on virtual device ip6_vti0, fix it urgently!
[   81.475477][ T6771] Dead loop on virtual device ip6_vti0, fix it urgently!
[   81.478136][ T6771] Dead loop on virtual device ip6_vti0, fix it urgently!
[   81.480982][ T6771] Dead loop on virtual device ip6_vti0, fix it urgently!
[   81.483856][ T6771] Dead loop on virtual device ip6_vti0, fix it urgently!
[   81.486937][ T6771] Dead loop on virtual device ip6_vti0, fix it urgently!
[   81.494677][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'.
[   81.499426][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'.
[   81.507878][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'.
[   81.514362][ T6774] openvswitch: netlink: Flow actions attr not present in new flow.
[   81.578236][ T6781] syzkaller1: entered promiscuous mode
[   81.580008][ T6781] syzkaller1: entered allmulticast mode
[   81.584364][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'.
[   81.633176][ T6787] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   81.782505][ T6802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.299'.
[   81.920244][ T6812] netlink: 388 bytes leftover after parsing attributes in process `syz.2.304'.
[   82.047903][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'.
[   82.149192][ T6837] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   82.164833][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'.
[   82.167743][ T6839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.204570][ T6842] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   82.210267][ T6839] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.352542][ T6849] netlink: 'syz.2.319': attribute type 21 has an invalid length.
[   82.485697][ T6856] ieee802154 phy0 wpan0: encryption failed: -22
[   82.990695][ T6867] ip6gre1: entered allmulticast mode
[   83.468983][ T6876] syzkaller0: entered promiscuous mode
[   83.470872][ T6876] syzkaller0: entered allmulticast mode
[   84.476347][ T6890] bridge_slave_0: left allmulticast mode
[   84.478190][ T6890] bridge_slave_0: left promiscuous mode
[   84.480093][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.488007][ T6890] bridge_slave_1: left allmulticast mode
[   84.490007][ T6890] bridge_slave_1: left promiscuous mode
[   84.492371][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.505528][ T6890] bond0: (slave bond_slave_0): Releasing backup interface
[   84.519422][ T6890] bond0: (slave bond_slave_1): Releasing backup interface
[   84.537621][ T6890] team0: Port device team_slave_0 removed
[   84.550491][ T6890] team0: Port device team_slave_1 removed
[   84.552961][ T6890] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.556254][ T6890] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.559621][ T6890] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.561946][ T6890] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.659640][ T6894] team0: Mode changed to "activebackup"
[   84.739957][ T6905] netlink: 'syz.1.338': attribute type 83 has an invalid length.
[   84.811018][ T6910] syz_tun: entered allmulticast mode
[   84.814565][ T6909] syz_tun: left allmulticast mode
[   85.055162][ T6922] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.059181][ T6920] syzkaller0: entered promiscuous mode
[   85.064951][ T6920] syzkaller0: entered allmulticast mode
[   85.071337][ T6919] tipc: Resetting bearer <eth:syzkaller0>
[   85.086428][ T6919] tipc: Disabling bearer <eth:syzkaller0>
[   85.535108][ T6955] bond0: entered promiscuous mode
[   85.537021][ T6955] bond_slave_0: entered promiscuous mode
[   85.539808][ T6955] bond_slave_1: entered promiscuous mode
[   85.625456][   T90] wlan1: Trigger new scan to find an IBSS to join
[   85.683619][ T6916] Bluetooth: hci0: Opcode 0x080f failed: -4
[   85.727143][ T6963] netlink: 'syz.0.360': attribute type 3 has an invalid length.
[   85.729813][ T6963] netlink: 'syz.0.360': attribute type 3 has an invalid length.
[   85.773074][ T6969] netlink: 'syz.2.362': attribute type 1 has an invalid length.
[   85.775814][ T6969] netlink: 'syz.2.362': attribute type 2 has an invalid length.
[   85.901247][ T6985] syz_tun: entered allmulticast mode
[   85.905027][ T6984] syz_tun: left allmulticast mode
[   85.996598][ T6992] : entered promiscuous mode
[   86.332268][ T7015] IPVS: length: 73 != 24
[   86.389767][ T7014] tipc: Started in network mode
[   86.391431][ T7014] tipc: Node identity d227175c7a62, cluster identity 4711
[   86.397850][ T7014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.402812][ T7014] syzkaller0: entered promiscuous mode
[   86.411826][ T7014] syzkaller0: entered allmulticast mode
[   86.427402][ T7014] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   86.443939][ T7014] tipc: Resetting bearer <eth:syzkaller0>
[   86.447282][ T7020] __nla_validate_parse: 16 callbacks suppressed
[   86.447293][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'.
[   86.484870][ T7031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.388'.
[   86.488409][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'.
[   86.493014][ T7031] netlink: 31 bytes leftover after parsing attributes in process `syz.1.388'.
[   86.497892][ T7031] netlink: 'syz.1.388': attribute type 3 has an invalid length.
[   86.501401][ T7031] netlink: 'syz.1.388': attribute type 2 has an invalid length.
[   86.507616][    T9] cfg80211: failed to load regulatory.db
[   86.510661][ T7031] netlink: 31 bytes leftover after parsing attributes in process `syz.1.388'.
[   86.520869][ T7031] netlink: 'syz.1.388': attribute type 2 has an invalid length.
[   86.554844][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.388'.
[   86.557851][ T7031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.388'.
[   86.561246][ T7031] netlink: 'syz.1.388': attribute type 10 has an invalid length.
[   86.581181][ T7031] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   86.619538][ T7050] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   86.740539][ T7057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'.
[   86.907661][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'.
[   86.910851][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'.
[   86.985544][ T5855] Bluetooth: hci0: command 0x080f tx timeout
[   87.074932][ T7006] tipc: Resetting bearer <eth:syzkaller0>
[   87.091992][ T7006] tipc: Disabling bearer <eth:syzkaller0>
[   87.167066][ T7087] syzkaller1: entered promiscuous mode
[   87.169456][ T7087] syzkaller1: entered allmulticast mode
[   87.209152][ T7093] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   87.212739][ T7093] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   87.220219][ T7093] bond0: option mode: unable to set because the bond device has slaves
[   87.252168][ T7097] syz_tun: entered allmulticast mode
[   87.256408][ T7096] syz_tun: left allmulticast mode
[   87.288031][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.290917][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.304530][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.308108][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.369156][ T7106] gretap0: entered promiscuous mode
[   87.372187][ T7106] 0{X: renamed from gretap0
[   87.376761][ T7106] 0{X: left promiscuous mode
[   87.379833][ T7106] 0{X: entered allmulticast mode
[   87.386662][ T7106] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[   88.070610][ T7175] bridge_slave_0: left allmulticast mode
[   88.072490][ T7175] bridge_slave_0: left promiscuous mode
[   88.077220][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.089453][ T7175] bridge_slave_1: left allmulticast mode
[   88.091329][ T7175] bridge_slave_1: left promiscuous mode
[   88.093182][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.102432][ T7175] bond0: (slave bond_slave_0): Releasing backup interface
[   88.108746][ T7175] bond0: (slave bond_slave_1): Releasing backup interface
[   88.120956][ T7175] team0: Port device team_slave_0 removed
[   88.127206][ T7175] team0: Port device team_slave_1 removed
[   88.130750][ T7175] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.133937][ T7175] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.145860][ T7175] bond0: (slave wlan1): Releasing backup interface
[   88.198845][ T7185] validate_nla: 6 callbacks suppressed
[   88.198860][ T7185] netlink: 'syz.0.443': attribute type 6 has an invalid length.
[   88.385514][ T7201] syz_tun: entered allmulticast mode
[   88.387758][ T7200] syz_tun: left allmulticast mode
[   88.593641][   T36] wlan1: Trigger new scan to find an IBSS to join
[   88.606398][ T7233] !: renamed from dummy0 (while UP)
[   89.180884][ T7291] netlink: 'syz.1.475': attribute type 3 has an invalid length.
[   89.185864][ T7291] netlink: 'syz.1.475': attribute type 3 has an invalid length.
[   89.247392][ T7299] netlink: 'syz.1.477': attribute type 6 has an invalid length.
[   89.631499][ T7339] wlan1: Creating new IBSS network, BSSID b2:4e:c0:1d:28:17
[   89.719093][ T7348] Dead loop on virtual device ip6_vti0, fix it urgently!
[   89.722054][ T7348] Dead loop on virtual device ip6_vti0, fix it urgently!
[   89.725023][ T7348] Dead loop on virtual device ip6_vti0, fix it urgently!
[   89.727878][ T7348] Dead loop on virtual device ip6_vti0, fix it urgently!
[   89.730764][ T7348] Dead loop on virtual device ip6_vti0, fix it urgently!
[   89.734135][ T7348] Dead loop on virtual device ip6_vti0, fix it urgently!
[   89.807548][ T7354] syz_tun: entered allmulticast mode
[   89.810642][ T7353] syz_tun: left allmulticast mode
[   90.139016][ T7382] netlink: 'syz.0.491': attribute type 1 has an invalid length.
[   90.713055][ T7436] netlink: 'syz.0.503': attribute type 1 has an invalid length.
[   91.035055][ T7459] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   91.255864][ T7481] syz_tun: entered allmulticast mode
[   91.258043][ T7479] syz_tun: left allmulticast mode
[   91.416288][ T7494] sctp: [Deprecated]: syz.0.520 (pid 7494) Use of int in maxseg socket option.
[   91.416288][ T7494] Use struct sctp_assoc_value instead
[   91.419214][ T7504] netlink: 'syz.1.523': attribute type 1 has an invalid length.
[   91.491032][ T7511] Dead loop on virtual device ip6_vti0, fix it urgently!
[   91.538232][ T7510] netlink: 'syz.1.526': attribute type 1 has an invalid length.
[   91.540722][ T7510] __nla_validate_parse: 26 callbacks suppressed
[   91.540731][ T7510] netlink: 236 bytes leftover after parsing attributes in process `syz.1.526'.
[   91.625067][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'.
[   91.858225][ T7546] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   91.861958][ T7546] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   92.031876][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'.
[   92.097684][ T7564] net_ratelimit: 5 callbacks suppressed
[   92.097707][ T7564] Dead loop on virtual device ip6_vti0, fix it urgently!
[   92.101997][ T7564] Dead loop on virtual device ip6_vti0, fix it urgently!
[   92.178241][ T7571] syz_tun: entered allmulticast mode
[   92.186942][ T7569] syz_tun: left allmulticast mode
[   92.247700][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'.
[   92.283360][ T7582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.374059][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'.
[   92.383971][ T7586] netlink: 'syz.2.556': attribute type 30 has an invalid length.
[   92.387345][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'.
[   92.392237][ T7586] netlink: 'syz.2.556': attribute type 30 has an invalid length.
[   92.441520][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'.
[   92.454406][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.560'.
[   92.547584][ T7611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.565'.
[   92.571281][ T7609] tipc: Started in network mode
[   92.572890][ T7609] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[   92.579911][ T7609] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   92.694666][ T7625] netlink: 51 bytes leftover after parsing attributes in process `syz.1.570'.
[   92.789066][ T7630] veth1: entered promiscuous mode
[   92.792196][ T7630] bridge1: entered promiscuous mode
[   92.797001][ T7630] debugfs: 'hsr0' already exists in 'hsr'
[   92.799086][ T7630] Cannot create hsr debugfs directory
[   92.801102][ T7630] hsr0: entered promiscuous mode
[   92.810637][ T7634] vti1: entered promiscuous mode
[   92.813777][ T7634] vti1: entered allmulticast mode
[   92.883576][ T7647] syz_tun: entered allmulticast mode
[   92.887640][ T7644] syz_tun: left allmulticast mode
[   93.054835][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.061607][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.066188][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.077168][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.139143][ T7676] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   93.146649][ T7676] IPVS: set_ctl: invalid protocol: 42511 127.0.0.1:0
[   93.344530][ T7694] vlan2: entered promiscuous mode
[   93.346169][ T7694] bridge0: entered promiscuous mode
[   93.348208][ T7694] vlan2: entered allmulticast mode
[   93.350051][ T7694] bridge0: entered allmulticast mode
[   93.504694][ T7711] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   93.578209][ T7716] veth13: entered promiscuous mode
[   93.644302][ T7724] validate_nla: 6 callbacks suppressed
[   93.644316][ T7724] netlink: 'syz.2.606': attribute type 3 has an invalid length.
[   93.648651][ T7724] netlink: 'syz.2.606': attribute type 3 has an invalid length.
[   93.673357][ T7728] syz_tun: entered allmulticast mode
[   93.678313][ T7727] syz_tun: left allmulticast mode
[   93.692267][ T7730] netlink: 'syz.2.609': attribute type 1 has an invalid length.
[   93.696873][ T7730] netlink: 'syz.2.609': attribute type 2 has an invalid length.
[   93.814442][ T7743] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.822171][ T7743] bond0: (slave rose0): Enslaving as an active interface with an up link
[   93.826654][ T7744] batadv_slave_0: entered promiscuous mode
[   94.065916][ T7731] batadv_slave_0: left promiscuous mode
[   94.121312][ T7778] netlink: 'syz.0.621': attribute type 1 has an invalid length.
[   94.127469][ T7779] netlink: 'syz.0.621': attribute type 1 has an invalid length.
[   94.510089][ T7821] syz_tun: entered allmulticast mode
[   94.512322][ T7820] syz_tun: left allmulticast mode
[   94.646635][ T7835] lo speed is unknown, defaulting to 1000
[   94.651468][ T7835] lo speed is unknown, defaulting to 1000
[   94.656620][ T7835] lo speed is unknown, defaulting to 1000
[   94.760643][ T7835] infiniband syz0: set active
[   94.763150][    T9] lo speed is unknown, defaulting to 1000
[   94.766475][ T7835] infiniband syz0: added lo
[   94.792232][ T7835] RDS/IB: syz0: added
[   94.794465][ T7835] smc: adding ib device syz0 with port count 1
[   94.799690][ T7835] smc:    ib device syz0 port 1 has pnetid 
[   94.803133][    T9] lo speed is unknown, defaulting to 1000
[   94.806079][ T7835] lo speed is unknown, defaulting to 1000
[   94.955216][ T7835] lo speed is unknown, defaulting to 1000
[   95.073766][ T7835] lo speed is unknown, defaulting to 1000
[   95.295806][ T7818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.759899][ T7886] syz_tun: entered allmulticast mode
[   95.763680][ T7883] syz_tun: left allmulticast mode
[   95.900817][ T7895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   95.907676][ T7912] netlink: 'syz.2.664': attribute type 1 has an invalid length.
[   95.910131][ T7912] netlink: 'syz.2.664': attribute type 2 has an invalid length.
[   96.906111][ T7932] nbd: socks must be embedded in a SOCK_ITEM attr
[   96.909757][ T7932] block nbd0: shutting down sockets
[   96.937363][ T7936] netlink: 'syz.2.672': attribute type 4 has an invalid length.
[   96.969880][ T7932] __nla_validate_parse: 25 callbacks suppressed
[   96.969893][ T7932] netlink: 60 bytes leftover after parsing attributes in process `syz.1.670'.
[   96.984768][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'.
[   97.012319][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.670'.
[   97.066859][ T7946] tipc: Enabled bearer <eth:team0>, priority 0
[   97.090012][ T7949] syz_tun: entered allmulticast mode
[   97.095859][ T7948] syz_tun: left allmulticast mode
[   97.209574][ T7961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.683'.
[   97.217751][ T7961] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   97.229607][ T7963] netlink: 'syz.1.684': attribute type 3 has an invalid length.
[   97.250883][ T7965] netlink: 3 bytes leftover after parsing attributes in process `syz.2.685'.
[   97.510622][   T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   97.519016][   T10] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   97.751051][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.694'.
[   97.805162][ T7993] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.808019][ T7993] syzkaller0: entered promiscuous mode
[   97.810182][ T7993] syzkaller0: entered allmulticast mode
[   97.829578][ T7992] tipc: Resetting bearer <eth:syzkaller0>
[   97.846968][ T7992] tipc: Disabling bearer <eth:syzkaller0>
[   97.993013][ T8005] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   98.021527][ T8005] tipc: Resetting bearer <eth:team0>
[   98.035470][    T9] lo speed is unknown, defaulting to 1000
[   98.044973][ T8005] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   98.048757][   T90] wlan1: Selected IBSS BSSID b2:4e:c0:1d:28:17 based on configured SSID
[   98.053076][ T8005] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   98.069159][ T8005] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   98.072119][ T8005] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   98.164627][ T8008] netlink: 128 bytes leftover after parsing attributes in process `syz.0.701'.
[   98.167878][ T8008] netlink: 3 bytes leftover after parsing attributes in process `syz.0.701'.
[   98.206275][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'.
[   98.235750][ T8020] syz_tun: entered allmulticast mode
[   98.239280][ T8019] syz_tun: left allmulticast mode
[   98.300309][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'.
[   98.538392][ T8047] sctp: [Deprecated]: syz.0.716 (pid 8047) Use of int in maxseg socket option.
[   98.538392][ T8047] Use struct sctp_assoc_value instead
[   98.871307][ T8083] validate_nla: 9 callbacks suppressed
[   98.871321][ T8083] netlink: 'syz.2.727': attribute type 7 has an invalid length.
[   98.876481][ T8083] netlink: 'syz.2.727': attribute type 8 has an invalid length.
[   98.886797][ T8083] gretap0: entered promiscuous mode
[   98.889524][ T8083] batadv_slave_1: entered promiscuous mode
[   98.891918][ T8083] erspan0: entered promiscuous mode
[   98.905880][    T9] tipc: Node number set to 2823100252
[   99.024903][ T8094] netlink: 'syz.2.729': attribute type 2 has an invalid length.
[   99.041647][ T8094] : entered promiscuous mode
[   99.076808][ T8098] netlink: 'syz.0.732': attribute type 3 has an invalid length.
[   99.079620][ T8098] netlink: 'syz.0.732': attribute type 3 has an invalid length.
[   99.406284][ T8121] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   99.552914][ T8129] lo speed is unknown, defaulting to 1000
[  100.118853][ T8162] macsec1: entered promiscuous mode
[  100.120683][ T8162] macvlan1: entered promiscuous mode
[  100.122520][ T8162] macsec1: entered allmulticast mode
[  100.126035][ T8162] macvlan1: entered allmulticast mode
[  100.129605][ T8162] macvlan1: left allmulticast mode
[  100.131388][ T8162] macvlan1: left promiscuous mode
[  100.294629][ T8179] netlink: 'syz.0.757': attribute type 3 has an invalid length.
[  100.297232][ T8179] netlink: 'syz.0.757': attribute type 3 has an invalid length.
[  100.335442][ T8187] Bluetooth: MGMT ver 1.23
[  100.494256][ T8209] syz_tun: entered allmulticast mode
[  100.498669][ T8208] syz_tun: left allmulticast mode
[  100.534980][ T8213] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  100.579073][ T8213] netlink: 'syz.1.766': attribute type 10 has an invalid length.
[  100.586637][ T8213] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  100.598859][ T8213] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  100.618573][ T8213] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  100.621502][ T8213] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.655369][ T8225] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  101.639417][ T8250] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  101.705364][ T8256] netlink: 'syz.1.780': attribute type 2 has an invalid length.
[  101.720093][ T8258] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  101.724702][ T8258] bridge_slave_0: left allmulticast mode
[  101.727115][ T8258] bridge_slave_0: left promiscuous mode
[  101.729668][ T8258] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.744539][ T8258] bridge_slave_1: left allmulticast mode
[  101.746446][ T8258] bridge_slave_1: left promiscuous mode
[  101.748386][ T8258] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.759408][ T8258] bond0: (slave bond_slave_0): Releasing backup interface
[  101.762503][ T8258] bond_slave_0: left promiscuous mode
[  101.766226][ T8258] bond0: (slave bond_slave_1): Releasing backup interface
[  101.769505][ T8258] bond_slave_1: left promiscuous mode
[  101.778836][ T8258] team0: Port device team_slave_0 removed
[  101.783728][ T8258] team0: Port device team_slave_1 removed
[  101.787996][ T8258] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.792390][ T8258] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.799860][ T8262] netlink: 'syz.1.785': attribute type 3 has an invalid length.
[  101.813013][ T8258] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  101.817961][ T8258] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  101.820633][ T8258] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  101.831014][ T8258] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  101.840757][ T8258] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  102.037887][ T8279] __nla_validate_parse: 10 callbacks suppressed
[  102.037905][ T8279] netlink: 44 bytes leftover after parsing attributes in process `syz.2.794'.
[  102.047631][ T8279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.058756][ T8279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.794'.
[  102.071195][ T8279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.794'.
[  102.075241][ T8280] netlink: 44 bytes leftover after parsing attributes in process `syz.2.794'.
[  102.080686][ T8280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.114972][ T8284] syz_tun: entered allmulticast mode
[  102.117955][ T8283] syz_tun: left allmulticast mode
[  102.296901][ T8295] netlink: 132 bytes leftover after parsing attributes in process `syz.2.798'.
[  102.661588][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'.
[  102.669431][ T8310] erspan0: entered promiscuous mode
[  102.679406][ T8310] netlink: 36 bytes leftover after parsing attributes in process `syz.1.802'.
[  102.741603][ T8316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.805'.
[  102.747979][ T8315] netlink: 56 bytes leftover after parsing attributes in process `syz.2.804'.
[  102.928422][ T8334] netem: change failed
[  103.211172][ T8360] syz_tun: entered allmulticast mode
[  103.215742][ T8354] syz_tun: left allmulticast mode
[  103.383157][ T8376] netlink: 380 bytes leftover after parsing attributes in process `syz.1.825'.
[  103.630984][ T8393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.982106][ T8421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.078850][ T8433] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  104.214410][ T8444] syz_tun: entered allmulticast mode
[  104.217438][ T8443] syz_tun: left allmulticast mode
[  104.353611][ T8453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.797599][ T8495] validate_nla: 8 callbacks suppressed
[  104.797613][ T8495] netlink: 'syz.0.870': attribute type 10 has an invalid length.
[  104.804624][ T8495] team0: Port device dummy0 added
[  104.807112][ T8495] netlink: 'syz.0.870': attribute type 10 has an invalid length.
[  104.834211][ T8495] team0: Port device dummy0 removed
[  104.838235][ T8495] dummy0: entered promiscuous mode
[  104.840605][ T8495] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  104.843205][ T8503] netlink: 'syz.2.873': attribute type 1 has an invalid length.
[  104.851483][ T8503] netlink: 'syz.2.873': attribute type 2 has an invalid length.
[  104.859053][ T8495] syz.0.870 (8495) used greatest stack depth: 18744 bytes left
[  104.964445][ T8517] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  105.105064][ T8530] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  105.232926][ T8550] syz_tun: entered allmulticast mode
[  105.238877][ T8549] syz_tun: left allmulticast mode
[  105.335570][ T8562] netlink: 'syz.1.901': attribute type 4 has an invalid length.
[  105.337335][ T8563] smc: net device bond0 applied user defined pnetid SYZ
[  105.338036][ T8562] netlink: 'syz.1.901': attribute type 1 has an invalid length.
[  105.469275][ T8577] vlan2: entered promiscuous mode
[  105.471473][ T8577] vlan2: entered allmulticast mode
[  105.512102][ T8580] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  105.691783][ T8590] netlink: 'syz.2.912': attribute type 6 has an invalid length.
[  106.098350][ T8639] syz_tun: entered allmulticast mode
[  106.100754][ T8638] syz_tun: left allmulticast mode
[  106.386731][ T8661] netlink: 'syz.2.935': attribute type 3 has an invalid length.
[  106.389811][ T8661] netlink: 'syz.2.935': attribute type 3 has an invalid length.
[  106.436673][ T8665] netlink: 'syz.0.937': attribute type 1 has an invalid length.
[  106.664490][   T90] wlan1: Trigger new scan to find an IBSS to join
[  106.778445][ T8696] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  106.787732][ T8696] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  106.882183][ T8705] syz_tun: entered allmulticast mode
[  106.892627][ T8703] syz_tun: left allmulticast mode
[  107.280592][ T8744] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  107.326241][ T8745] __nla_validate_parse: 21 callbacks suppressed
[  107.326256][ T8745] netlink: 830 bytes leftover after parsing attributes in process `syz.1.966'.
[  107.328463][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'.
[  107.345682][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'.
[  107.516958][ T8764] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.971'.
[  107.521425][ T8764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.971'.
[  107.556097][ T8767] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.971'.
[  107.626493][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'.
[  107.669714][ T8778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.762118][ T8790] syz_tun: entered allmulticast mode
[  107.766352][ T8789] syz_tun: left allmulticast mode
[  107.806709][ T8792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.981'.
[  107.982176][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.990'.
[  108.017033][ T8819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.991'.
[  108.224915][ T8835] 0{X: left allmulticast mode
[  108.246255][ T8835] bond0: left promiscuous mode
[  108.248238][ T8835] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  108.251055][ T8835] dummy0: left promiscuous mode
[  108.259263][ T8835] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.265070][ T8835] 8021q: adding VLAN 0 to HW filter on device team0
[  108.270210][ T8835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.285470][ T8840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.310113][    T9] lo speed is unknown, defaulting to 1000
[  108.312437][    T9] syz0: Port: 1 Link DOWN
[  108.314810][    T9] lo speed is unknown, defaulting to 1000
[  108.502378][ T8854] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  108.629084][ T8861] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  108.632108][ T8861] IPv6: NLM_F_CREATE should be set when creating new route
[  108.634984][ T8861] IPv6: NLM_F_CREATE should be set when creating new route
[  108.830740][ T8880] syz_tun: entered allmulticast mode
[  108.835463][ T8878] syz_tun: left allmulticast mode
[  108.957558][ T8888] tipc: Cannot configure node identity twice
[  108.960684][ T8888] tipc: Cannot configure node identity twice
[  109.157203][ T8908] openvswitch: netlink: Unknown nsh attribute 0
[  109.159873][ T8908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.350192][ T8927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.365518][ T8927] syzkaller0: entered promiscuous mode
[  109.367877][ T8927] syzkaller0: entered allmulticast mode
[  109.375768][ T8931] tipc: Resetting bearer <eth:syzkaller0>
[  109.395103][ T8926] tipc: Resetting bearer <eth:syzkaller0>
[  109.409729][ T8926] tipc: Disabling bearer <eth:syzkaller0>
[  109.568815][ T8945] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  109.618426][ T8945] syzkaller0: entered promiscuous mode
[  109.620852][ T8945] syzkaller0: entered allmulticast mode
[  109.628126][ T4530] wlan1: Trigger new scan to find an IBSS to join
[  110.657865][ T8956] bond3: entered allmulticast mode
[  110.813331][ T8971] syzkaller1: entered promiscuous mode
[  110.815263][ T8971] syzkaller1: entered allmulticast mode
[  110.827581][ T8976] syz_tun: entered allmulticast mode
[  110.842714][ T8975] syz_tun: left allmulticast mode
[  110.913184][ T8984] validate_nla: 12 callbacks suppressed
[  110.913198][ T8984] netlink: 'syz.1.1054': attribute type 6 has an invalid length.
[  111.201481][ T9015] openvswitch: netlink: IP tunnel dst address not specified
[  111.649648][ T5880] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.653466][ T5880] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.661611][ T5880] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.673956][ T5880] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.710357][ T9045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.770213][ T9052] netlink: 'syz.1.1075': attribute type 6 has an invalid length.
[  111.844953][ T9058] syz_tun: entered allmulticast mode
[  111.847340][ T9057] syz_tun: left allmulticast mode
[  111.928505][ T9061] veth1_macvtap: left promiscuous mode
[  112.141491][ T9083] netlink: 'syz.1.1084': attribute type 6 has an invalid length.
[  112.215333][ T9091] openvswitch: netlink: Message has 4 unknown bytes.
[  112.218720][ T9091] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.237282][ T9094] netlink: 'syz.2.1087': attribute type 13 has an invalid length.
[  112.244129][ T9094] netlink: 'syz.2.1087': attribute type 17 has an invalid length.
[  112.339032][ T9094] tipc: Resetting bearer <eth:team0>
[  112.342113][ T9094] tipc: Resetting bearer <eth:team0>
[  112.346504][ T9094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.352274][    T9] lo speed is unknown, defaulting to 1000
[  112.352688][ T9108] __nla_validate_parse: 26 callbacks suppressed
[  112.352698][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'.
[  112.355489][    T9] syz0: Port: 1 Link ACTIVE
[  112.362138][    T9] lo speed is unknown, defaulting to 1000
[  112.399632][ T9112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1091'.
[  112.542123][ T9125] netlink: 'syz.2.1097': attribute type 10 has an invalid length.
[  112.555351][ T9125] syz_tun: entered promiscuous mode
[  112.568500][ T9125] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  112.638036][ T9130] bridge3: entered allmulticast mode
[  112.815711][ T9140] syz_tun: entered allmulticast mode
[  112.818361][ T9139] syz_tun: left allmulticast mode
[  112.850916][ T9142] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1104'.
[  112.898685][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'.
[  112.902308][ T9148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.987872][ T9153] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  113.120300][ T9160] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1112'.
[  113.340549][ T9180] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1120'.
[  113.458274][ T9182] lo speed is unknown, defaulting to 1000
[  113.492463][ T9189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.504080][ T9189] syzkaller0: entered promiscuous mode
[  113.507880][ T9189] syzkaller0: entered allmulticast mode
[  113.519459][ T9189] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  113.537920][ T9189] tipc: Resetting bearer <eth:syzkaller0>
[  113.541954][ T9188] tipc: Resetting bearer <eth:syzkaller0>
[  113.556091][ T9188] tipc: Disabling bearer <eth:syzkaller0>
[  113.627389][ T9192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1125'.
[  113.729486][ T9197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1127'.
[  113.788122][ T9199] netlink: 'syz.1.1129': attribute type 3 has an invalid length.
[  113.916023][ T9207] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1131'.
[  114.015595][ T9212] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1133'.
[  114.108776][ T9214] netlink: 'syz.1.1134': attribute type 13 has an invalid length.
[  114.111956][ T9214] netlink: 'syz.1.1134': attribute type 17 has an invalid length.
[  114.176570][ T9214] 8021q: adding VLAN 0 to HW filter on device team0
[  114.191683][ T9214] net_ratelimit: 2 callbacks suppressed
[  114.191694][ T9214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.215836][ T9216] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  114.280510][ T9214] netlink: 'syz.1.1134': attribute type 10 has an invalid length.
[  114.283141][ T9214] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  114.307741][ T9214] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  114.329336][ T9214] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  114.562241][ T9228] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  114.626358][ T9229] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  114.784827][ T9235] bridge4: entered promiscuous mode
[  114.787023][ T9235] bridge4: entered allmulticast mode
[  115.011221][ T9249] IPVS: set_ctl: invalid protocol: 103 172.30.0.2:20003
[  115.249216][ T9267] syz_tun: left promiscuous mode
[  115.252724][ T9267] tipc: Resetting bearer <eth:team0>
[  115.255355][ T9267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.271185][ T9267] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  115.285227][ T9267] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  115.290866][ T9267] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  115.294459][ T9267] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  116.261134][ T9294] validate_nla: 5 callbacks suppressed
[  116.261162][ T9294] netlink: 'syz.2.1164': attribute type 1 has an invalid length.
[  116.474146][ T4135] wlan1: Selected IBSS BSSID b2:4e:c0:1d:28:17 based on configured SSID
[  116.591429][ T9332] netlink: 'syz.2.1179': attribute type 1 has an invalid length.
[  116.921251][   T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.924070][ T9347] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.926545][   T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.001783][ T9355] team0: entered promiscuous mode
[  117.114509][ T9355] team0 (unregistering): left promiscuous mode
[  117.129582][ T9359] netlink: 'syz.2.1189': attribute type 3 has an invalid length.
[  117.266078][ T9371] netlink: 'syz.0.1195': attribute type 10 has an invalid length.
[  117.269459][ T9371] bond0: (slave dummy0): Releasing backup interface
[  117.274979][ T9371] netlink: 'syz.0.1195': attribute type 10 has an invalid length.
[  117.282669][ T9371] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  117.288422][ T9374] syz_tun: entered allmulticast mode
[  117.290512][ T9373] netlink: 'syz.2.1193': attribute type 1 has an invalid length.
[  117.295650][ T9372] syz_tun: left allmulticast mode
[  117.372879][ T9380] __nla_validate_parse: 21 callbacks suppressed
[  117.372922][ T9380] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1199'.
[  117.394471][ T9380] bond0: (slave wlan1): Releasing backup interface
[  117.407525][ T9384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1201'.
[  117.426608][ T9380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1199'.
[  117.437685][ T9380] bond0: entered promiscuous mode
[  117.441615][ T9380] bond0: left promiscuous mode
[  117.588734][ T9394] tap0: tun_chr_ioctl cmd 1074025678
[  117.591159][ T9394] tap0: group set to 0
[  117.595413][ T9394] trusted_key: syz.0.1204 sent an empty control message without MSG_MORE.
[  117.829703][ T9406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1208'.
[  118.077404][ T9419] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1213'.
[  118.134593][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'.
[  118.184718][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1218'.
[  118.289721][ T9435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  118.379921][ T9454] netlink: 'syz.2.1223': attribute type 3 has an invalid length.
[  118.547112][ T9469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1229'.
[  118.601733][ T9470] tipc: Resetting bearer <eth:team0>
[  118.712848][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'.
[  118.728108][ T9478] pim6reg: entered allmulticast mode
[  118.731207][ T9478] pim6reg: left allmulticast mode
[  118.777581][ T9478] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1233'.
[  118.845220][ T9486] sch_fq: defrate 0 ignored.
[  118.894578][ T9490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.897508][ T9490] syzkaller0: entered promiscuous mode
[  118.899328][ T9490] syzkaller0: entered allmulticast mode
[  118.920898][ T9490] tipc: Resetting bearer <eth:syzkaller0>
[  118.924984][ T9489] tipc: Resetting bearer <eth:syzkaller0>
[  118.940284][ T9489] tipc: Disabling bearer <eth:syzkaller0>
[  118.990544][ T9495] unknown channel width for channel at 909000KHz?
[  119.257371][ T9514] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  119.260646][ T9514] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  119.634661][ T4530] wlan1: Trigger new scan to find an IBSS to join
[  120.051049][ T9522] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.064302][ T9522] syzkaller0: entered promiscuous mode
[  120.066570][ T9522] syzkaller0: entered allmulticast mode
[  120.089759][ T9521] tipc: Resetting bearer <eth:syzkaller0>
[  120.108236][ T9521] tipc: Disabling bearer <eth:syzkaller0>
[  120.120909][ T9526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.174289][ T9528] netlink: 'syz.0.1251': attribute type 3 has an invalid length.
[  120.335177][ T9552] netlink: 'syz.0.1259': attribute type 1 has an invalid length.
[  120.357574][ T9552] 8021q: adding VLAN 0 to HW filter on device bond4
[  120.388690][ T9552] 8021q: adding VLAN 0 to HW filter on device bond4
[  120.390979][ T9552] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[  120.395354][ T9552] bond4: (slave vxcan1): Error -95 calling set_mac_address
[  120.430244][ T9561] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  120.449213][   T33] audit: type=1800 audit(1755196512.086:2): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1264" name="memory.events" dev="tmpfs" ino=2168 res=0 errno=0
[  120.459238][   T33] audit: type=1804 audit(1755196512.096:3): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1264" name="/newroot/423/memory.events" dev="tmpfs" ino=2168 res=1 errno=0
[  120.468464][ T9552] veth27: entered promiscuous mode
[  120.483599][ T9564] syz_tun: entered promiscuous mode
[  120.486634][ T9564] syz_tun: entered allmulticast mode
[  120.507319][ T9561] erspan0: entered allmulticast mode
[  120.667327][ T9581] Driver unsupported XDP return value 0 on prog  (id 246) dev N/A, expect packet loss!
[  121.079364][ T9618] netlink: 'syz.1.1282': attribute type 1 has an invalid length.
[  121.108786][ T9618] 8021q: adding VLAN 0 to HW filter on device bond4
[  121.132004][ T9612] vlan2: entered allmulticast mode
[  121.134529][ T9612] macvtap0: entered allmulticast mode
[  121.136798][ T9612] veth0_macvtap: entered allmulticast mode
[  121.146664][ T9612] bond4: (slave vlan2): making interface the new active one
[  121.153748][ T9612] bond4: (slave vlan2): Enslaving as an active interface with an up link
[  121.608529][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  121.611351][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  121.633468][    T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  121.954361][    T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  122.157008][ T9670] lo speed is unknown, defaulting to 1000
[  122.327382][ T9675] openvswitch: netlink: Flow actions attr not present in new flow.
[  122.435100][    T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  122.522490][ T9675] __nla_validate_parse: 6 callbacks suppressed
[  122.522527][ T9675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1302'.
[  122.555568][ T9682] netlink: 'syz.1.1304': attribute type 12 has an invalid length.
[  122.558353][ T9682] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1304'.
[  122.583430][ T1092] wlan1: Trigger new scan to find an IBSS to join
[  122.742889][ T9697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1308'.
[  122.864643][ T9709] syzkaller1: entered promiscuous mode
[  122.867208][ T9709] syzkaller1: entered allmulticast mode
[  122.950377][ T9716] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  123.099063][ T5901] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  123.109379][ T5901] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  123.115174][ T5901] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  123.306915][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'.
[  123.379670][ T9748] netlink: 'syz.1.1323': attribute type 3 has an invalid length.
[  123.497433][ T9752] bond0: (slave dummy0): Releasing backup interface
[  123.518562][ T9752] bond0: (slave wlan1): Releasing backup interface
[  123.557354][ T9760] lo speed is unknown, defaulting to 1000
[  123.757450][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'.
[  123.824135][ T9762] vlan3: entered allmulticast mode
[  123.825988][ T9762] bond0: entered allmulticast mode
[  123.914964][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1338'.
[  123.952493][ T9792] syz_tun: entered allmulticast mode
[  123.956246][ T9791] syz_tun: left allmulticast mode
[  123.999894][ T9789] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1340'.
[  124.199752][ T9808] Dead loop on virtual device ip6_vti0, fix it urgently!
[  124.202165][ T9808] Dead loop on virtual device ip6_vti0, fix it urgently!
[  124.204610][ T9808] Dead loop on virtual device ip6_vti0, fix it urgently!
[  124.207086][ T9808] Dead loop on virtual device ip6_vti0, fix it urgently!
[  124.209516][ T9808] Dead loop on virtual device ip6_vti0, fix it urgently!
[  124.212084][ T9808] Dead loop on virtual device ip6_vti0, fix it urgently!
[  124.279316][ T9815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1349'.
[  124.350121][ T9827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1354'.
[  124.683789][ T9865] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1368'.
[  124.796891][ T9880] macsec1: entered promiscuous mode
[  124.798712][ T9880] ip6gretap0: entered promiscuous mode
[  124.800791][ T9880] macsec1: entered allmulticast mode
[  124.802654][ T9880] ip6gretap0: entered allmulticast mode
[  124.960758][ T9894] !: renamed from dummy0 (while UP)
[  125.090186][ T9902] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.092974][ T9902] syzkaller0: entered promiscuous mode
[  125.095092][ T9902] syzkaller0: entered allmulticast mode
[  125.115004][ T9902] openvswitch: netlink: IPv6 tunnel dst address is zero
[  125.122644][ T9902] tipc: Resetting bearer <eth:syzkaller0>
[  125.127667][ T9901] tipc: Resetting bearer <eth:syzkaller0>
[  125.142142][ T9901] tipc: Disabling bearer <eth:syzkaller0>
[  125.447058][ T9926] Dead loop on virtual device ip6_vti0, fix it urgently!
[  125.450467][ T9926] Dead loop on virtual device ip6_vti0, fix it urgently!
[  125.453787][ T9926] Dead loop on virtual device ip6_vti0, fix it urgently!
[  125.456766][ T9914] netlink: 'syz.0.1386': attribute type 1 has an invalid length.
[  125.456968][ T9926] Dead loop on virtual device ip6_vti0, fix it urgently!
[  125.462977][ T9926] Dead loop on virtual device ip6_vti0, fix it urgently!
[  125.480559][ T9927] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  125.538228][ T9931] netlink: 'syz.2.1393': attribute type 1 has an invalid length.
[  126.004630][ T9989] netlink: 'syz.0.1415': attribute type 14 has an invalid length.
[  126.049883][ T9989] syzkaller0: entered promiscuous mode
[  126.051840][ T9989] syzkaller0: entered allmulticast mode
[  127.688580][T10035] netlink: 'syz.1.1430': attribute type 3 has an invalid length.
[  127.737008][ T5901] hid-generic 0005:0C45:5505.0003: item fetching failed at offset 0/1
[  127.746577][ T5901] hid-generic 0005:0C45:5505.0003: probe with driver hid-generic failed with error -22
[  127.755971][T10040] __nla_validate_parse: 15 callbacks suppressed
[  127.755988][T10040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1433'.
[  127.875679][T10050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1437'.
[  127.902651][T10050] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1437'.
[  127.910240][T10054] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1439'.
[  127.939072][T10054] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003
[  127.942399][T10054] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003
[  128.056278][T10067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.058803][T10067] syzkaller0: entered promiscuous mode
[  128.060639][T10067] syzkaller0: entered allmulticast mode
[  128.067676][T10067] tipc: Resetting bearer <eth:syzkaller0>
[  128.072231][T10067] tipc: Resetting bearer <eth:syzkaller0>
[  128.085713][T10067] tipc: Disabling bearer <eth:syzkaller0>
[  128.292218][T10091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1452'.
[  128.399411][T10104] openvswitch: netlink: Multiple metadata blocks provided
[  128.454985][T10108] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1459'.
[  128.468671][T10112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1460'.
[  128.472379][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'.
[  128.478572][T10112] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  128.520565][T10114] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1462'.
[  128.599418][T10126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1466'.
[  128.788459][T10143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.807717][T10138] lo speed is unknown, defaulting to 1000
[  128.828362][T10143] syzkaller0: mtu greater than device maximum
[  128.835033][T10147] netlink: 'syz.1.1475': attribute type 6 has an invalid length.
[  128.838464][T10141] tipc: Disabling bearer <eth:syzkaller0>
[  128.941220][T10153] IPVS: Error connecting to the multicast addr
[  129.026071][T10159] bridge0: port 1(30{X) entered blocking state
[  129.028361][T10159] bridge0: port 1(30{X) entered disabled state
[  129.030938][T10159] 0{X: entered allmulticast mode
[  129.036621][T10159] 0{X: entered promiscuous mode
[  129.232370][T10175] sch_tbf: burst 88 is lower than device veth21 mtu (1514) !
[  129.259959][T10179] netlink: 'syz.1.1488': attribute type 2 has an invalid length.
[  129.262702][T10179] netlink: 'syz.1.1488': attribute type 1 has an invalid length.
[  129.264668][T10177] netlink: 'syz.0.1487': attribute type 3 has an invalid length.
[  129.270274][T10179] netlink: 'syz.1.1488': attribute type 4 has an invalid length.
[  129.308076][T10179] netlink: 'syz.1.1488': attribute type 4 has an invalid length.
[  129.422716][T10184] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  129.611567][T10198] netlink: 'syz.2.1496': attribute type 3 has an invalid length.
[  130.561211][T10222] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  130.848273][T10248] bond4: (slave vlan2): Releasing active interface
[  130.998606][ T5880] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  131.001574][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  131.005400][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  131.008463][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  131.850581][T10280] syz_tun: entered allmulticast mode
[  131.854988][T10277] syz_tun: left allmulticast mode
[  131.989665][T10294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.007978][T10294] team0: Device gtp0 is up. Set it down before adding it as a team port
[  132.252651][T10316] Dead loop on virtual device ip6_vti0, fix it urgently!
[  132.255246][T10316] Dead loop on virtual device ip6_vti0, fix it urgently!
[  132.257724][T10316] Dead loop on virtual device ip6_vti0, fix it urgently!
[  132.260254][T10316] Dead loop on virtual device ip6_vti0, fix it urgently!
[  132.263446][T10316] Dead loop on virtual device ip6_vti0, fix it urgently!
[  132.266500][T10316] Dead loop on virtual device ip6_vti0, fix it urgently!
[  132.594142][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.596737][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.838835][T10351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.842580][T10351] syzkaller0: entered promiscuous mode
[  132.845044][T10351] syzkaller0: entered allmulticast mode
[  132.851193][T10350] tipc: Resetting bearer <eth:syzkaller0>
[  132.871067][T10350] tipc: Disabling bearer <eth:syzkaller0>
[  132.888733][T10353] netlink: 'syz.1.1556': attribute type 3 has an invalid length.
[  133.345691][T10394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.402880][T10394] __nla_validate_parse: 20 callbacks suppressed
[  133.402894][T10394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1570'.
[  133.535246][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'.
[  133.538345][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'.
[  133.555120][T10411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1578'.
[  133.699425][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'.
[  133.832586][T10436] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1587'.
[  133.886470][T10436] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1587'.
[  133.975539][T10455] netlink: 'syz.2.1593': attribute type 3 has an invalid length.
[  134.149133][   T47] hid-generic 0005:0C45:1010.0004: item fetching failed at offset 10/12
[  134.152151][   T47] hid-generic 0005:0C45:1010.0004: probe with driver hid-generic failed with error -22
[  134.503454][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  134.548138][T10478] syz_tun: entered allmulticast mode
[  134.551304][T10477] syz_tun: left allmulticast mode
[  134.832313][T10486] ieee802154 phy0 wpan0: encryption failed: -22
[  134.985201][T10491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1606'.
[  135.107546][T10497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.110247][T10498] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  135.114244][T10497] syzkaller0: entered promiscuous mode
[  135.116752][T10497] syzkaller0: entered allmulticast mode
[  135.132085][T10496] tipc: Resetting bearer <eth:syzkaller0>
[  135.145776][T10496] tipc: Disabling bearer <eth:syzkaller0>
[  135.190463][T10504] batadv_slave_0: entered promiscuous mode
[  135.214756][T10506] batadv_slave_0: left promiscuous mode
[  135.278781][T10515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1616'.
[  135.281897][T10517] netlink: 'syz.2.1617': attribute type 4 has an invalid length.
[  135.297856][ T5914] lo speed is unknown, defaulting to 1000
[  135.300720][ T5914] syz0: Port: 1 Link DOWN
[  135.306212][ T5914] lo speed is unknown, defaulting to 1000
[  135.374210][T10524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1620'.
[  135.378674][T10524] bridge0: entered promiscuous mode
[  135.430833][T10528] ip6tnl1: entered promiscuous mode
[  135.433181][T10528] ip6tnl1: entered allmulticast mode
[  135.440795][T10528] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[  135.636266][T10544] lo speed is unknown, defaulting to 1000
[  135.869024][T10561] tap0: tun_chr_ioctl cmd 1074025676
[  135.870999][T10561] tap0: owner set to 0
[  135.901813][T10558] lo speed is unknown, defaulting to 1000
[  135.975742][T10569] syz_tun: entered allmulticast mode
[  135.978055][T10568] syz_tun: left allmulticast mode
[  136.538376][T10607] pim6reg1: entered promiscuous mode
[  136.540351][T10607] pim6reg1: entered allmulticast mode
[  137.080837][T10617] Dead loop on virtual device ip6_vti0, fix it urgently!
[  137.083932][T10617] Dead loop on virtual device ip6_vti0, fix it urgently!
[  137.086842][T10617] Dead loop on virtual device ip6_vti0, fix it urgently!
[  137.089718][T10617] Dead loop on virtual device ip6_vti0, fix it urgently!
[  137.092667][T10617] Dead loop on virtual device ip6_vti0, fix it urgently!
[  137.095756][T10617] Dead loop on virtual device ip6_vti0, fix it urgently!
[  137.137202][T10619] openvswitch: netlink: IP tunnel dst address not specified
[  137.401776][T10626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.428170][T10629] netlink: 'syz.1.1660': attribute type 3 has an invalid length.
[  138.137004][T10654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.141135][T10654] syzkaller0: entered promiscuous mode
[  138.144013][T10654] syzkaller0: entered allmulticast mode
[  138.180994][T10654] tipc: Resetting bearer <eth:syzkaller0>
[  138.187912][T10653] tipc: Resetting bearer <eth:syzkaller0>
[  138.205817][T10653] tipc: Disabling bearer <eth:syzkaller0>
[  138.236925][T10657] netlink: 'syz.0.1670': attribute type 10 has an invalid length.
[  138.237038][T10656] netlink: 'syz.0.1670': attribute type 10 has an invalid length.
[  138.241727][T10657] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  138.578863][T10690] __nla_validate_parse: 13 callbacks suppressed
[  138.578875][T10690] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1683'.
[  138.585294][T10690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1683'.
[  138.670968][T10701] netlink: 'syz.2.1688': attribute type 3 has an invalid length.
[  138.679529][T10700] veth0_to_bridge: entered promiscuous mode
[  138.694536][T10700] veth0_to_bridge: left promiscuous mode
[  138.826351][T10719] netlink: 'syz.2.1691': attribute type 9 has an invalid length.
[  138.828883][T10719] netlink: 'syz.2.1691': attribute type 6 has an invalid length.
[  139.182959][T10735] can: request_module (can-proto-0) failed.
[  139.295325][T10740] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1701'.
[  139.298410][T10740] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1701'.
[  139.669610][T10762] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  139.675034][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'.
[  139.733164][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1711'.
[  139.921742][T10777] netlink: 'syz.2.1716': attribute type 1 has an invalid length.
[  139.991992][T10780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1717'.
[  139.995676][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'.
[  140.128551][T10786] lo speed is unknown, defaulting to 1000
[  140.401171][T10801] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1724'.
[  140.468148][T10803] netlink: 'syz.1.1725': attribute type 3 has an invalid length.
[  140.548608][T10805] _Z`Ԁ@: entered promiscuous mode
[  140.559697][T10805] openvswitch: netlink: IPv4 tun info is not correct
[  141.918963][T10871] ieee802154 phy0 wpan0: encryption failed: -22
[  142.422237][T10913] netlink: 'syz.0.1764': attribute type 2 has an invalid length.
[  142.949852][T10939] netlink: 'syz.1.1773': attribute type 5 has an invalid length.
[  143.366803][T10961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.373800][T10961] tipc: Resetting bearer <eth:syzkaller0>
[  143.383711][T10960] tipc: Disabling bearer <eth:syzkaller0>
[  143.878450][T10981] netlink: 'syz.0.1790': attribute type 1 has an invalid length.
[  143.881282][T10981] __nla_validate_parse: 15 callbacks suppressed
[  143.881291][T10981] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1790'.
[  143.906131][T10989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1791'.
[  143.937238][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'.
[  144.691536][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1796'.
[  144.707600][T11003] 8021q: adding VLAN 0 to HW filter on device bond2
[  144.911799][T11018] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  144.938180][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1800'.
[  144.938757][T11018] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1801'.
[  145.086710][T11028] Dead loop on virtual device ip6_vti0, fix it urgently!
[  145.090140][T11028] Dead loop on virtual device ip6_vti0, fix it urgently!
[  145.093488][T11028] Dead loop on virtual device ip6_vti0, fix it urgently!
[  145.096768][T11028] Dead loop on virtual device ip6_vti0, fix it urgently!
[  145.100002][T11028] Dead loop on virtual device ip6_vti0, fix it urgently!
[  145.103139][T11028] Dead loop on virtual device ip6_vti0, fix it urgently!
[  145.196650][T11036] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[  145.231052][T11040] netlink: 'syz.2.1808': attribute type 3 has an invalid length.
[  145.442431][T11057] netlink: 184104 bytes leftover after parsing attributes in process `syz.2.1813'.
[  145.765994][T11061] netlink: 'syz.0.1815': attribute type 10 has an invalid length.
[  145.768555][T11061] macvlan0: entered promiscuous mode
[  145.772587][T11061] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  145.801647][T11063] syz_tun: entered allmulticast mode
[  145.806924][T11062] syz_tun: left allmulticast mode
[  146.023721][T11069] nbd0: detected capacity change from 0 to 63
[  146.027850][T11075] block nbd0: NBD_DISCONNECT
[  146.029687][T11075] block nbd0: Disconnected due to user request.
[  146.032067][T11075] block nbd0: shutting down sockets
[  146.035339][T11021] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.038638][T11021] Buffer I/O error on dev nbd0, logical block 0, async page read
[  146.041630][T11021] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.056774][T11021] Buffer I/O error on dev nbd0, logical block 1, async page read
[  146.063462][   T61] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[  146.076452][   T61] Buffer I/O error on dev nbd0, logical block 2, async page read
[  146.079260][   T61] Buffer I/O error on dev nbd0, logical block 3, async page read
[  146.086538][T11021] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.089479][T11021] Buffer I/O error on dev nbd0, logical block 0, async page read
[  146.092194][T11021] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.099740][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1820'.
[  146.119821][T11021] Buffer I/O error on dev nbd0, logical block 1, async page read
[  146.122606][T11021] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.126825][T11021] Buffer I/O error on dev nbd0, logical block 2, async page read
[  146.130083][T11021] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.137903][T11021] Buffer I/O error on dev nbd0, logical block 3, async page read
[  146.143600][T11021] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.146553][T11021] Buffer I/O error on dev nbd0, logical block 0, async page read
[  146.149353][T11021] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.152348][T11021] Buffer I/O error on dev nbd0, logical block 1, async page read
[  146.166421][T11021] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.173468][T11021] ldm_validate_partition_table(): Disk read failed.
[  146.186545][T11021] Dev nbd0: unable to read RDB block 0
[  146.190915][T11021]  nbd0: unable to read partition table
[  146.210920][T11021] ldm_validate_partition_table(): Disk read failed.
[  146.215756][T11021] Dev nbd0: unable to read RDB block 0
[  146.218913][T11021]  nbd0: unable to read partition table
[  146.419918][T11108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1830'.
[  146.552663][   T90] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  146.598001][T11127] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1835'.
[  146.703467][ T5880] ==================================================================
[  146.705986][ T5880] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  146.708445][ T5880] Read of size 1 at addr ffff888032bb0330 by task kworker/u8:4/5880
[  146.711666][ T5880] 
[  146.712983][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  146.712997][ T5880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.713004][ T5880] Workqueue: ipv6_addrconf addrconf_dad_work
[  146.713019][ T5880] Call Trace:
[  146.713035][ T5880]  <TASK>
[  146.713049][ T5880]  dump_stack_lvl+0x189/0x250
[  146.713061][ T5880]  ? __kasan_check_byte+0x12/0x40
[  146.713075][ T5880]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.713083][ T5880]  ? lock_release+0x4b/0x3e0
[  146.713095][ T5880]  ? __virt_addr_valid+0x4a5/0x5c0
[  146.713107][ T5880]  print_report+0xca/0x240
[  146.713115][ T5880]  ? xfrm_state_find+0x2cf2/0x5400
[  146.713126][ T5880]  kasan_report+0x118/0x150
[  146.713137][ T5880]  ? xfrm_state_find+0x2cf2/0x5400
[  146.713148][ T5880]  xfrm_state_find+0x2cf2/0x5400
[  146.713163][ T5880]  ? xfrm_state_find+0x1da/0x5400
[  146.713174][ T5880]  ? __pfx_xfrm_state_find+0x10/0x10
[  146.713188][ T5880]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  146.713202][ T5880]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  146.713231][ T5880]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  146.713240][ T5880]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  146.713249][ T5880]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  146.713257][ T5880]  ? process_scheduled_works+0xae1/0x17b0
[  146.713272][ T5880]  ? __lock_acquire+0xab9/0xd20
[  146.713281][ T5880]  ? xfrm_expand_policies+0x41f/0x6a0
[  146.713290][ T5880]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  146.713299][ T5880]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.713311][ T5880]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  146.713319][ T5880]  ? do_raw_spin_unlock+0x4d/0x240
[  146.713328][ T5880]  ? icmp6_dst_alloc+0x3a5/0x420
[  146.713338][ T5880]  ? icmp6_dst_alloc+0x3a5/0x420
[  146.713346][ T5880]  ndisc_send_skb+0x41f/0x1440
[  146.713359][ T5880]  ? ndisc_send_skb+0x20c/0x1440
[  146.713370][ T5880]  ? __pfx_ndisc_send_skb+0x10/0x10
[  146.713380][ T5880]  ? ndisc_ns_create+0x4ea/0x650
[  146.713390][ T5880]  ? __asan_memcpy+0x40/0x70
[  146.713401][ T5880]  ? mod_delayed_work_on+0x128/0x200
[  146.713412][ T5880]  ndisc_send_ns+0xcb/0x150
[  146.713422][ T5880]  ? __pfx_ndisc_send_ns+0x10/0x10
[  146.713440][ T5880]  ? addrconf_dad_work+0xa04/0x14b0
[  146.713449][ T5880]  addrconf_dad_work+0xaae/0x14b0
[  146.713463][ T5880]  ? __lock_acquire+0xab9/0xd20
[  146.713474][ T5880]  ? __pfx_addrconf_dad_work+0x10/0x10
[  146.713482][ T5880]  ? process_scheduled_works+0x9ef/0x17b0
[  146.713492][ T5880]  ? _raw_spin_unlock_irq+0x23/0x50
[  146.713504][ T5880]  ? process_scheduled_works+0x9ef/0x17b0
[  146.713510][ T5880]  ? process_scheduled_works+0x9ef/0x17b0
[  146.713517][ T5880]  process_scheduled_works+0xae1/0x17b0
[  146.713530][ T5880]  ? __pfx_process_scheduled_works+0x10/0x10
[  146.713540][ T5880]  worker_thread+0x8a0/0xda0
[  146.713549][ T5880]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  146.713559][ T5880]  ? __kthread_parkme+0x7b/0x200
[  146.713569][ T5880]  kthread+0x711/0x8a0
[  146.713578][ T5880]  ? __pfx_worker_thread+0x10/0x10
[  146.713585][ T5880]  ? __pfx_kthread+0x10/0x10
[  146.713594][ T5880]  ? _raw_spin_unlock_irq+0x23/0x50
[  146.713602][ T5880]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.713610][ T5880]  ? __pfx_kthread+0x10/0x10
[  146.713618][ T5880]  ret_from_fork+0x3fc/0x770
[  146.713628][ T5880]  ? __pfx_ret_from_fork+0x10/0x10
[  146.713636][ T5880]  ? __switch_to_asm+0x39/0x70
[  146.713645][ T5880]  ? __switch_to_asm+0x33/0x70
[  146.713654][ T5880]  ? __pfx_kthread+0x10/0x10
[  146.713662][ T5880]  ret_from_fork_asm+0x1a/0x30
[  146.713674][ T5880]  </TASK>
[  146.713677][ T5880] 
[  146.820450][ T5880] Allocated by task 7055:
[  146.821814][ T5880]  kasan_save_track+0x3e/0x80
[  146.823247][ T5880]  __kasan_slab_alloc+0x6c/0x80
[  146.824696][ T5880]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  146.826379][ T5880]  xfrm_state_alloc+0x24/0x2f0
[  146.827833][ T5880]  __find_acq_core+0x8a7/0x1c00
[  146.829330][ T5880]  xfrm_find_acq+0x78/0xa0
[  146.830673][ T5880]  xfrm_alloc_userspi+0x6b3/0xc90
[  146.832201][ T5880]  xfrm_user_rcv_msg+0x7a3/0xab0
[  146.833814][ T5880]  netlink_rcv_skb+0x208/0x470
[  146.835270][ T5880]  xfrm_netlink_rcv+0x79/0x90
[  146.836722][ T5880]  netlink_unicast+0x82f/0x9e0
[  146.838218][ T5880]  netlink_sendmsg+0x805/0xb30
[  146.839697][ T5880]  __sock_sendmsg+0x21c/0x270
[  146.841166][ T5880]  ____sys_sendmsg+0x505/0x830
[  146.842650][ T5880]  ___sys_sendmsg+0x21f/0x2a0
[  146.844092][ T5880]  __x64_sys_sendmsg+0x19b/0x260
[  146.845598][ T5880]  do_syscall_64+0xfa/0x3b0
[  146.847013][ T5880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.848959][ T5880] 
[  146.849725][ T5880] Freed by task 5914:
[  146.851031][ T5880]  kasan_save_track+0x3e/0x80
[  146.852513][ T5880]  kasan_save_free_info+0x46/0x50
[  146.854131][ T5880]  __kasan_slab_free+0x5b/0x80
[  146.855638][ T5880]  kmem_cache_free+0x18f/0x400
[  146.857157][ T5880]  xfrm_state_gc_task+0x52d/0x6b0
[  146.858711][ T5880]  process_scheduled_works+0xae1/0x17b0
[  146.860399][ T5880]  worker_thread+0x8a0/0xda0
[  146.861811][ T5880]  kthread+0x711/0x8a0
[  146.863053][ T5880]  ret_from_fork+0x3fc/0x770
[  146.864432][ T5880]  ret_from_fork_asm+0x1a/0x30
[  146.865898][ T5880] 
[  146.866620][ T5880] The buggy address belongs to the object at ffff888032bb0000
[  146.866620][ T5880]  which belongs to the cache xfrm_state of size 928
[  146.870757][ T5880] The buggy address is located 816 bytes inside of
[  146.870757][ T5880]  freed 928-byte region [ffff888032bb0000, ffff888032bb03a0)
[  146.874856][ T5880] 
[  146.875600][ T5880] The buggy address belongs to the physical page:
[  146.877565][ T5880] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032bb3a80 pfn:0x32bb0
[  146.880703][ T5880] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  146.883325][ T5880] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  146.885929][ T5880] page_type: f5(slab)
[  146.887176][ T5880] raw: 00fff00000000240 ffff888104df43c0 ffffea000081c110 ffffea0000a8dd10
[  146.889788][ T5880] raw: ffff888032bb3a80 00000000000e0000 00000000f5000000 0000000000000000
[  146.892406][ T5880] head: 00fff00000000240 ffff888104df43c0 ffffea000081c110 ffffea0000a8dd10
[  146.895066][ T5880] head: ffff888032bb3a80 00000000000e0000 00000000f5000000 0000000000000000
[  146.897695][ T5880] head: 00fff00000000002 ffffea0000caec01 00000000ffffffff 00000000ffffffff
[  146.900329][ T5880] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  146.902901][ T5880] page dumped because: kasan: bad access detected
[  146.904812][ T5880] page_owner tracks the page as allocated
[  146.906545][ T5880] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7055, tgid 7054 (syz.1.395), ts 86711108263, free_ts 86584163525
[  146.912146][ T5880]  post_alloc_hook+0x240/0x2a0
[  146.913631][ T5880]  get_page_from_freelist+0x21e4/0x22c0
[  146.915296][ T5880]  __alloc_frozen_pages_noprof+0x181/0x370
[  146.917273][ T5880]  alloc_pages_mpol+0x232/0x4a0
[  146.918805][ T5880]  allocate_slab+0x8a/0x370
[  146.920213][ T5880]  ___slab_alloc+0xbeb/0x1410
[  146.921657][ T5880]  kmem_cache_alloc_noprof+0x283/0x3c0
[  146.923361][ T5880]  xfrm_state_alloc+0x24/0x2f0
[  146.924833][ T5880]  __find_acq_core+0x8a7/0x1c00
[  146.926337][ T5880]  xfrm_find_acq+0x78/0xa0
[  146.927715][ T5880]  xfrm_alloc_userspi+0x6b3/0xc90
[  146.929312][ T5880]  xfrm_user_rcv_msg+0x7a3/0xab0
[  146.930803][ T5880]  netlink_rcv_skb+0x208/0x470
[  146.932271][ T5880]  xfrm_netlink_rcv+0x79/0x90
[  146.933705][ T5880]  netlink_unicast+0x82f/0x9e0
[  146.935143][ T5880]  netlink_sendmsg+0x805/0xb30
[  146.936602][ T5880] page last free pid 0 tgid 0 stack trace:
[  146.938372][ T5880]  __free_frozen_pages+0xbc4/0xd30
[  146.939941][ T5880]  stack_depot_save_flags+0x436/0x860
[  146.941552][ T5880]  kasan_save_track+0x4f/0x80
[  146.942966][ T5880]  __kasan_slab_alloc+0x6c/0x80
[  146.944464][ T5880]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  146.946129][ T5880]  skb_clone+0x212/0x3a0
[  146.947422][ T5880]  tipc_disc_timeout+0x53e/0x6d0
[  146.948924][ T5880]  call_timer_fn+0x17e/0x5f0
[  146.950514][ T5880]  __run_timer_base+0x61a/0x860
[  146.952107][ T5880]  run_timer_softirq+0xb7/0x180
[  146.953601][ T5880]  handle_softirqs+0x286/0x870
[  146.955089][ T5880]  __irq_exit_rcu+0xca/0x1f0
[  146.956516][ T5880]  irq_exit_rcu+0x9/0x30
[  146.957863][ T5880]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  146.959550][ T5880]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  146.961357][ T5880] 
[  146.962094][ T5880] Memory state around the buggy address:
[  146.963781][ T5880]  ffff888032bb0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.966260][ T5880]  ffff888032bb0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.968705][ T5880] >ffff888032bb0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.971139][ T5880]                                      ^
[  146.972875][ T5880]  ffff888032bb0380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  146.975269][ T5880]  ffff888032bb0400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  146.977786][ T5880] ==================================================================
[  146.991963][ T5880] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  146.994305][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  146.998300][ T5880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.001622][ T5880] Workqueue: ipv6_addrconf addrconf_dad_work
[  147.003534][ T5880] Call Trace:
[  147.004564][ T5880]  <TASK>
[  147.005494][ T5880]  dump_stack_lvl+0x99/0x250
[  147.006937][ T5880]  ? __asan_memcpy+0x40/0x70
[  147.008399][ T5880]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.009991][ T5880]  ? __pfx__printk+0x10/0x10
[  147.011382][ T5880]  vpanic+0x281/0x750
[  147.012743][ T5880]  ? preempt_schedule+0xae/0xc0
[  147.014291][ T5880]  ? __pfx_vpanic+0x10/0x10
[  147.015815][ T5880]  ? preempt_schedule_common+0x83/0xd0
[  147.017664][ T5880]  ? preempt_schedule+0xae/0xc0
[  147.019144][ T5880]  ? __pfx_preempt_schedule+0x10/0x10
[  147.020798][ T5880]  panic+0xb9/0xc0
[  147.021980][ T5880]  ? __pfx_panic+0x10/0x10
[  147.023332][ T5880]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  147.025098][ T5880]  ? xfrm_state_find+0x2cf2/0x5400
[  147.026682][ T5880]  check_panic_on_warn+0x89/0xb0
[  147.028270][ T5880]  ? xfrm_state_find+0x2cf2/0x5400
[  147.029878][ T5880]  end_report+0x78/0x160
[  147.031235][ T5880]  kasan_report+0x129/0x150
[  147.032610][ T5880]  ? xfrm_state_find+0x2cf2/0x5400
[  147.034230][ T5880]  xfrm_state_find+0x2cf2/0x5400
[  147.035747][ T5880]  ? xfrm_state_find+0x1da/0x5400
[  147.037283][ T5880]  ? __pfx_xfrm_state_find+0x10/0x10
[  147.038943][ T5880]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  147.040850][ T5880]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  147.042628][ T5880]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  147.044598][ T5880]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  147.046416][ T5880]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  147.048236][ T5880]  ? process_scheduled_works+0xae1/0x17b0
[  147.049915][ T5880]  ? __lock_acquire+0xab9/0xd20
[  147.051370][ T5880]  ? xfrm_expand_policies+0x41f/0x6a0
[  147.053026][ T5880]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  147.054609][ T5880]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.056186][ T5880]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  147.057953][ T5880]  ? do_raw_spin_unlock+0x4d/0x240
[  147.059498][ T5880]  ? icmp6_dst_alloc+0x3a5/0x420
[  147.061052][ T5880]  ? icmp6_dst_alloc+0x3a5/0x420
[  147.062533][ T5880]  ndisc_send_skb+0x41f/0x1440
[  147.063964][ T5880]  ? ndisc_send_skb+0x20c/0x1440
[  147.065463][ T5880]  ? __pfx_ndisc_send_skb+0x10/0x10
[  147.067056][ T5880]  ? ndisc_ns_create+0x4ea/0x650
[  147.068532][ T5880]  ? __asan_memcpy+0x40/0x70
[  147.069973][ T5880]  ? mod_delayed_work_on+0x128/0x200
[  147.071570][ T5880]  ndisc_send_ns+0xcb/0x150
[  147.072979][ T5880]  ? __pfx_ndisc_send_ns+0x10/0x10
[  147.074524][ T5880]  ? addrconf_dad_work+0xa04/0x14b0
[  147.076061][ T5880]  addrconf_dad_work+0xaae/0x14b0
[  147.077581][ T5880]  ? __lock_acquire+0xab9/0xd20
[  147.079266][ T5880]  ? __pfx_addrconf_dad_work+0x10/0x10
[  147.081080][ T5880]  ? process_scheduled_works+0x9ef/0x17b0
[  147.082863][ T5880]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.084791][ T5880]  ? process_scheduled_works+0x9ef/0x17b0
[  147.086794][ T5880]  ? process_scheduled_works+0x9ef/0x17b0
[  147.088542][ T5880]  process_scheduled_works+0xae1/0x17b0
[  147.090590][ T5880]  ? __pfx_process_scheduled_works+0x10/0x10
[  147.092472][ T5880]  worker_thread+0x8a0/0xda0
[  147.094046][ T5880]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.096401][ T5880]  ? __kthread_parkme+0x7b/0x200
[  147.098028][ T5880]  kthread+0x711/0x8a0
[  147.099392][ T5880]  ? __pfx_worker_thread+0x10/0x10
[  147.101050][ T5880]  ? __pfx_kthread+0x10/0x10
[  147.102637][ T5880]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.104536][ T5880]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.106583][ T5880]  ? __pfx_kthread+0x10/0x10
[  147.108506][ T5880]  ret_from_fork+0x3fc/0x770
[  147.110364][ T5880]  ? __pfx_ret_from_fork+0x10/0x10
[  147.112311][ T5880]  ? __switch_to_asm+0x39/0x70
[  147.114230][ T5880]  ? __switch_to_asm+0x33/0x70
[  147.115890][ T5880]  ? __pfx_kthread+0x10/0x10
[  147.117556][ T5880]  ret_from_fork_asm+0x1a/0x30
[  147.119500][ T5880]  </TASK>
[  147.121436][ T5880] Kernel Offset: disabled
[  147.122867][ T5880] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:35:38  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bdc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dee630 RSP=ffffc900032ae830
R8 =ffff888021258237 R9 =1ffff1100424b046 R10=dffffc0000000000 R11=ffffffff854efde0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efe57 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5b134e56c0 CR3=0000000028f92000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f134b012e53
XMM06=0000000000000000 00007f134b012e4d XMM07=0000000000000000 00007f134b012e61
XMM08=0000000000000000 00007f134b012ee7 XMM09=0000000000000000 00007f134b012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44d4b RBX=1ffff11009608341 RCX=ffff888033768000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000384f700 RSP=ffffc9000384f580
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d33 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3ddca0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=006d6166635f6469 6c61766e695f6576
XMM02=4002000800000000 4001000880030014 XMM03=00000b0001010a16 0000005000000000
XMM04=307a797300020009 0000000100000000 XMM05=0700080000000000 000000000000306d
XMM06=6165740001001480 03001d8003001c00 XMM07=000000307a797300 0100090000b0ea30
XMM08=7a79730002000900 0000010000000000 XMM09=0000000000000000 00007f134b012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
