last executing test programs:

59.977344331s ago: executing program 0 (id=4603):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @local}}, [0x7, 0x5, 0x8, 0x8000000000000001, 0x75c1, 0x7fff, 0x5, 0x5, 0x2, 0xffffffff, 0x2, 0x1, 0xc3, 0x5, 0x9]}, &(0x7f0000000540)=0x100)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000e108000140000000130500020094000000080006400000000208000440000000140900010073797a30000000000900020073797a"], 0x94}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f00000000c0)={0x1, 0x1, 0x36})
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x40004)
pipe(&(0x7f0000000040))
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x807, @broadcast, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r5, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r6, 0x29, 0x3, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/19, 0x13}, 0xe0000003}], 0x1, 0x102, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000540)=ANY=[@ANYBLOB="320400000000000001080000000000000000c24b6b3409840cee4104c20400000005c20400000000a513bb67f4b4d83ee034d33bf2d8605fee05c7e67bee38cde2a1c375178cc80c2e69ba0cb30e0f93fa91fde093b2590a3916e367e6efe61dae2fc1e1f3a32f0d7162001c86419722acb2f3508b52a57cb2"], 0x28)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc235f740}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @alu={0x4, 0x1, 0x3, 0x0, 0x3, 0x100, 0x8}], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x18)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd7000000000000400"], 0x328}}, 0x84)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)

59.147321037s ago: executing program 0 (id=4611):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f0000000580)="051a00000e80006558f2878f0200000000000020", 0x14}], 0x2)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0)

59.004953828s ago: executing program 0 (id=4614):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0) (async)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback}, 0xc)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000210000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x18)
bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50)
socket(0x10, 0x3, 0x0) (async)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8}]}, 0x30}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) (async)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r10 = openat$cgroup_devices(r9, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESOCT=0x0], 0xa)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

58.927731286s ago: executing program 0 (id=4615):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'hsr0\x00', {0x7}, 0xe}) (async)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'rose0\x00', 0x8001})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, <r1=>0x0}})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000480)={r1, 0x2, 0x6, 0xb3fa49800a6ea441}) (async)
r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000880)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f00000008c0)=[{r2, 0x1002}, {r0, 0x4c0}, {r0, 0x200}], 0x3, &(0x7f0000000900)={0x0, 0x989680}, &(0x7f0000000940)={[0x6]}, 0x8) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x9c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x96}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfa7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f379792}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, 0x9c}}, 0x20000000) (async)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000b00))
socket$rds(0x15, 0x5, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000b40)={0x2, 0xd, 0x5, 0x3, 0xfffffff8, 0x9}) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$FIONCLEX(r0, 0x5450) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', <r5=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c40)={'syztnl1\x00', &(0x7f0000000c00)={'gretap0\x00', <r6=>0x0, 0x700, 0x8, 0x724, 0x2319, {{0x8, 0x4, 0x1, 0x1, 0x20, 0x64, 0x0, 0x1, 0x4, 0x0, @remote, @empty, {[@timestamp={0x44, 0xc, 0x7b, 0x0, 0x6, [0x7, 0xd]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c80)={'gretap0\x00', <r7=>0x0, 0x10, 0x7800, 0x0, 0x4, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x67, 0x0, 0x1, 0x4, 0x0, @empty, @remote, {[@end]}}}}})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d00)={'vcan0\x00', <r8=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e00)={'erspan0\x00', &(0x7f0000000d40)={'syztnl2\x00', <r9=>0x0, 0x20, 0x20, 0xfffffffd, 0xfff, {{0x24, 0x4, 0x0, 0x1f, 0x90, 0x64, 0x0, 0x86, 0x4, 0x0, @multicast2, @remote, {[@rr={0x7, 0x13, 0x31, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x20, 0x1, 0x4, [{@empty, 0x5}, {@rand_addr=0x64010101, 0xa79}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xffffffff}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0xffffffff}, {@empty, 0x8}, {@loopback, 0xffffffff}, {@multicast2, 0xbdd4}]}, @rr={0x7, 0x1b, 0x2c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1, @private=0xa010102, @private=0xa010100, @remote]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ec0)={'syztnl0\x00', &(0x7f0000000e40)={'gre0\x00', <r10=>0x0, 0x0, 0x8, 0x4, 0x4, {{0x15, 0x4, 0x1, 0xc, 0x54, 0x68, 0x0, 0x6, 0x29, 0x0, @empty, @multicast2, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x2, [{@multicast1, 0x4}, {@rand_addr=0x64010101}, {@multicast2, 0xd7}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x2}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@loopback, 0x6}]}]}}}}})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000010c0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x150, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x440d1}, 0x4008000) (async)
r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
setsockopt$bt_BT_POWER(r11, 0x112, 0x9, &(0x7f0000001100)=0x7, 0x1) (async)
getgid() (async)
getsockopt(r0, 0x40000000, 0x2, &(0x7f0000001140)=""/13, &(0x7f0000001180)=0xd) (async)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGCHAN(r12, 0x80047437, &(0x7f00000011c0)) (async)
pselect6(0x40, &(0x7f0000001200)={0x2, 0x7fffffffffffffff, 0xfffffffffffffc01, 0x2, 0x9, 0x8, 0x5, 0x3}, &(0x7f0000001240)={0x1, 0x4, 0x0, 0x60bd47e7, 0xffffffff, 0x3, 0xc8d, 0x810000000000}, &(0x7f0000001280)={0x1, 0x7, 0xffffffffffff8001, 0x3800000000, 0x8000, 0x5, 0x10, 0x8923}, &(0x7f00000012c0)={0x77359400}, &(0x7f0000001340)={&(0x7f0000001300)={[0xfff]}, 0x8}) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000001380))

58.92627004s ago: executing program 0 (id=4616):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0xb8}}, 0x0)

58.855179585s ago: executing program 0 (id=4617):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x38, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5b}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50)
unshare(0x600)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xfe}, {0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}, {0x0, 0xfffffffffffffffb, {0x0, 0xf0, 0x2}, {0x1}, 0x0, 0xff}], 0x60)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r4}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})

29.366814692s ago: executing program 32 (id=4617):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x38, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5b}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50)
unshare(0x600)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xfe}, {0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}, {0x0, 0xfffffffffffffffb, {0x0, 0xf0, 0x2}, {0x1}, 0x0, 0xff}], 0x60)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r4}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})

2.466286696s ago: executing program 1 (id=5135):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc01000019000143ae00000001000000fe880000000000000000000000000101ac1414bb0000000000000000000000000000000000000000020000000000000025a5dedd7f2a801a384ce65399", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000004010500ac1414aa0000000000000000000000000000000033000000000000000a0101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003c0000000a000000fc000000000000000000000000000000000000000500"/372], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2b1e}, 0x2000c000)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
r5 = socket$netlink(0x10, 0x3, 0x12)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a40)={'vxcan0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'ip6_vti0\x00', <r8=>0x0, 0x4, 0x5, 0x0, 0x9, 0x5, @local, @mcast1, 0x80, 0x87e0, 0x7, 0x80000001}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, <r9=>0x0}, &(0x7f0000000b80)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d00)={'erspan0\x00', &(0x7f0000000bc0)={'syztnl2\x00', <r10=>0x0, 0x700, 0x8, 0x6, 0x80000001, {{0x39, 0x4, 0x2, 0x37, 0xe4, 0x68, 0x0, 0x6, 0x29, 0x0, @loopback, @private=0xa010101, {[@end, @timestamp_prespec={0x44, 0x1c, 0x47, 0x3, 0xb, [{@loopback, 0x4}, {@multicast1, 0x8da5}, {@loopback, 0xa}]}, @noop, @rr={0x7, 0x27, 0xa4, [@dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010101, @multicast1, @local, @multicast1, @multicast1]}, @timestamp_addr={0x44, 0x44, 0x9b, 0x1, 0xa, [{@local, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd2b}, {@private=0xa010102, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x3ff}, {@local, 0x35b}, {@multicast1, 0x2}, {@multicast2, 0x6}, {@broadcast, 0x2}]}, @noop, @ssrr={0x89, 0x1b, 0xea, [@rand_addr=0x64010100, @multicast2, @loopback, @remote, @rand_addr=0x64010100, @empty]}, @ssrr={0x89, 0xf, 0x7b, [@dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0x59, 0x3, 0x2, [{@multicast2, 0x6}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000e00)={'tunl0\x00', &(0x7f0000000d40)={'syztnl2\x00', <r11=>0x0, 0x1, 0x20, 0xa, 0x7, {{0x25, 0x4, 0x0, 0x3, 0x94, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @empty, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0xc5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1]}, @timestamp_prespec={0x44, 0x24, 0x80, 0x3, 0x3, [{@multicast2, 0x9}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xafb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7cd}]}, @rr={0x7, 0x1b, 0x93, [@remote, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010101]}, @rr={0x7, 0x2b, 0x6b, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @private=0xa010100, @multicast2, @broadcast, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000e80)=0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000018c0)={&(0x7f0000000ec0)={0x9f8, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcc}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x1c8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1138}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5b}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xef0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x24000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x568f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x9f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x850)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf13000000000000850000002a000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee87"], 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r13, @ANYBLOB="4000000017447bd3dee391c6000000000000220000000000000000003784c241a8c9b4331811cb16e2733138a1631e7227fb612a3f1494cad91e43f8ff1a40c296cea5c123d5f10109b82f3c7b68e0b361cac166acb077abafaa4d88cfc5ba8f2a1d05718e00ab8d5ce7e08a1b58fa9bacf1dd1f73aa4acd2509fd470ea6655db0530ebe4270c71ce5f2582d447d2cfa8d733332667446e02b5bada1b0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r14}, 0x38)

2.414937836s ago: executing program 1 (id=5137):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x20000044)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x103}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000080)=0x5)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x9, 0x24, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x35efc0a5, 0x0, 0x0, 0x0, 0x70}, {}, {}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x4c3b, 0x1000, &(0x7f00000007c0)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x4, 0x0, 0xbb5, 0x4}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001800)=[{0x5, 0x4, 0x10, 0xa}, {0x2, 0x1, 0xb, 0x5}, {0x3, 0x1, 0x10, 0x3}, {0x1, 0x4, 0xc, 0x8}, {0x2, 0x2, 0x4, 0xb}, {0x4, 0x4, 0xc, 0xb}, {0x0, 0x1, 0x7, 0x3}, {0x2, 0x5, 0x4, 0x4}], 0x10, 0x4e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001980)={&(0x7f0000000400)='xprtrdma_reply\x00', r8, 0x0, 0x47a}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000019c0)={'vcan0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=@getchain={0x5c, 0x66, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8, 0x7ff3}, {0xa, 0x1}, {0xb, 0x3}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xcb56}, {0x8, 0xb, 0x791}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x3c8804b9b5062156}, 0x20000000)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r7, 0x39, 0x8, 0x1, 0xb, 0x2}, &(0x7f0000000140)=0x14)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@null, 0x4, 'vlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x44}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000bc3f4b040000000000000000694ebd2c837dbf240191e55dad487a800000a4921aea1a6431478aed878faccd8395d8200c5843e7ee01fe4d5452ae3b628948a40e4671e6aa7dbcb16da8f2446b6f6e36be79a9a40c96c0accc0da8ad9b", @ANYRES32=0x0, @ANYBLOB="6a58000000000000240012800b00010062726964676500001400028005001600030000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@mpls_newroute={0xbc, 0x18, 0x10, 0x70bd29, 0x25dfdbfc, {0x1c, 0x80, 0x1fbe864fed8248c0, 0x3, 0x0, 0x0, 0x37, 0x7, 0x400}, [@RTA_NEWDST={0x84, 0x13, [{0x6, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x2}, {0x101}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xdd}, {0x9}, {0x7f, 0x0, 0x1}, {0xba7}, {0x8, 0x0, 0x1}, {0x1}, {0x4}, {0x3}, {0x1}, {0xffff, 0x0, 0x1}, {0x7}, {0x8}, {0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xd9ca}, {0xa, 0x0, 0x1}, {0xb5, 0x0, 0x1}, {0xffff9, 0x0, 0x1}, {0x3}, {0x595, 0x0, 0x1}, {0x9}, {0x7f, 0x0, 0x1}, {0x4}, {0x8}]}, @RTA_VIA={0x14, 0x12, {0x8, "ede3e03959b297e3323ce368c2f8"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24000804}, 0x49643dea468762d3)

2.187664753s ago: executing program 1 (id=5141):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c40)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0xc, 0x0, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x4, [{}, {}, {}, {}]}]}}, &(0x7f0000002b80)=""/176, 0x26, 0xb0, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000700)=0x91, 0x4)
getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f0000000200))
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x1, 0xfffffffc}}], 0x18, 0x4c00}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004441)
shutdown(r2, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_rxnfc={0x30, 0x7, 0x20000000009, {0xb, @udp_ip6_spec={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x4e23, 0x1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 0x7fff, 0x5, [0x10001, 0x6]}, @ah_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, {0x0, @remote, 0x3, 0x4, [0xfffffffa, 0x7f]}, 0x8, 0x8}}})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)={<r8=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={r8, 0x7}, 0x8)
recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7)

1.324373088s ago: executing program 1 (id=5152):
socket$netlink(0x10, 0x3, 0xc) (async)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8859}, 0x20004804) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8859}, 0x20004804)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x66, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r10, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(r10, &(0x7f0000000800)="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", 0x59d, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) (async)
sendto$inet6(r10, &(0x7f0000000800)="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", 0x59d, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xac}, 0x1, 0x0, 0x0, 0x4001}, 0x8d5)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000001010400000000000000000000000000000014000400ff0100000000000000000001000000000000000000000000000000000400"/70], 0x50}}, 0x0)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r12 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x2b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r14, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000001300)={0xdf0, r13, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0xdd4, 0x111, 0x0, 0x1, {0xdd0, 0x5, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x394, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1cc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4e}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}]}]}, {0x2f4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1d0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x78}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x93}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x18, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0xc0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x71}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x24, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}]}, {0x2fc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x44}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x122}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x200, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xac15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x27e8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x144, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33e}]}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xfda049b8f1056ce8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xba}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x334}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffb41f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x80000000}]}, 0xdf0}, 0x1, 0x0, 0x0, 0xc0c5}, 0x8004094)

1.234731101s ago: executing program 3 (id=5154):
unshare(0x6a040000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=@getlink={0x28, 0x12, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8580}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
syz_emit_ethernet(0xf6, &(0x7f0000000080)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0xb8, 0x3a, 0xff, @empty, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x87, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [@hopopts={0x3b, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x70ff}, @jumbo={0xc2, 0x4, 0xde4}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x18, {0x1, 0x4, 0xd, 0x5cf6, [0x4, 0x1]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0xc, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0xff, 0x7fff}}]}]}}}}}}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)

1.233980703s ago: executing program 1 (id=5155):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000e108000140000000130500020094000000080006400000000208000440000000140900010073797a30000000000900020073797a"], 0x94}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000000c0)={0x1, 0x1, 0x36})
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[], 0x48}}, 0x40004)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="800000000e06010400000000000000000a0000060900020073797a320000000005000100070000000900020073797a30000000000900020073797a32000000000900020073797a3100000000050001000700000005000100070000000900020073797a32000000000900020073797a31000000000900020073797a3200000000052ecad846566c906bb09575eec16ae6720dfad50809a97663c27ab88919b83e492b6c158197b168b602ecf12cf623c0daa96ed1"], 0x80}, 0x1, 0x0, 0x0, 0x20004044}, 0x4005)
pipe(&(0x7f0000000040))
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x807, @broadcast, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x3, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/19, 0x13}, 0xe0000003}], 0x1, 0x102, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000540)=ANY=[@ANYBLOB="320400000000000001080000000000000000c24b6b3409840cee4104c20400000005c20400000000a513bb67f4b4d83ee034d33bf2d8605fee05c7e67bee38cde2a1c375178cc80c2e69ba0cb30e0f93fa91fde093b2590a3916e367e6efe61dae2fc1e1f3a32f0d7162001c86419722acb2f3508b52a57cb2"], 0x28)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc235f740}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x4, 0x1, 0x3, 0x0, 0x3, 0x100, 0x8}], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18)
sendmsg$nl_generic(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd7000000000000400"], 0x328}}, 0x84)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

977.098008ms ago: executing program 3 (id=5156):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={<r1=>0x0}, &(0x7f0000000340)=0xc) (async)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff}) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3) (async)
splice(r2, 0x0, r3, 0x0, 0x3000, 0x100000000000000d)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0xa}, 0xc)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1d, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb6}, [@call={0x85, 0x0, 0x0, 0x6c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x90a, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x35}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @alu={0x7, 0x0, 0xd, 0x6, 0x7, 0x0, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x51}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x0, 0xb, 0x5, 0xa, 0x50, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0xc0, &(0x7f00000005c0)=""/192, 0x40f00, 0x2, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000680)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x9, 0x8, 0x81}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000007c0)=[0xffffffffffffffff, r4, r5], &(0x7f0000000800)=[{0x5, 0x2, 0xe, 0x8}, {0x0, 0x2, 0x10}, {0x5, 0x5, 0xe, 0x2}, {0x1, 0x4, 0x0, 0x7}, {0x4, 0x4, 0x6, 0x9}, {0x4, 0x2, 0xe}]}, 0x94)
unshare(0x6a040000) (async)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xa6}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) (async)
syz_emit_ethernet(0x8e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb88a820008100402086dd67c172f500503aff00000000000000000000ffffac1414aafe8000000000000000000000000000aa040090780000ffbf6554d03a04008801fe880000000000000000000000000001200100000000000000000000000000003a000000000000000c0100000000000007080000000200ffff7f000000000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRESOCT=r9, @ANYRES32=0x0, @ANYRESDEC=r8], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async)
r10 = socket(0x10, 0x2, 0x0)
write(r10, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)

607.328555ms ago: executing program 3 (id=5157):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000e108000140000000130500020094000000080006400000000208000440000000140900010073797a30000000000900020073797a"], 0x94}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000000c0)={0x1, 0x1, 0x36})
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x40004)
pipe(&(0x7f0000000040))
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x807, @broadcast, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r3, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/19, 0x13}, 0xe0000003}], 0x1, 0x102, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14}}, 0x48}}, 0x4000)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000540)=ANY=[@ANYBLOB="320400000000000001080000000000000000c24b6b3409840cee4104c20400000005c20400000000a513bb67f4b4d83ee034d33bf2d8605fee05c7e67bee38cde2a1c375178cc80c2e69ba0cb30e0f93fa91fde093b2590a3916e367e6efe61dae2fc1e1f3a32f0d7162001c86419722acb2f3508b52a57cb2"], 0x28)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="85200000020000008510000000000000b7080000000000007b8af8ff00000000b708000040f735c27b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="581f00000008000000003c30000108000000000000000000000000000000000046042a0ba740b55fe9b0bc1dae7a30066a8ab46a9d4fa73fe9c80cd734e91b5df6c044867bb48ae296352e59a6b0083dbc73576b7a620027017ca1072dd9eed5f754d38a05d7eb95c3b31ef88c736d561fc9581c351e37e7f97d231bbe3ffda7d0bd532e45009e3d10dd2a"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x18)

464.964552ms ago: executing program 3 (id=5158):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100008821950705080000003b810000850000006d00000007000000000000953ace1680cd0afdedcf4fff001a7268941d8fd7b9fbd3b9ee0dd3a5e800cb42dee61e12d0bf70792f6658069d2de418d5ddd3ac2554eff355f9a95a8605f2f480866943d5428c7099b0cb232c3b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
unshare(0x6a040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, 0xffffffffffffffff, 0x0)
unshare(0x40000000) (async)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x8000}, 0x2e) (async)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket(0x23, 0x803, 0xfffffffd)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
sendmsg$nl_route(r5, 0x0, 0x0) (async)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0xc855)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0x8}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x3}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x9b, 0x2}}}}]}, 0x44}}, 0x800) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(r1, 0x0, 0x275a, 0x0)

464.422412ms ago: executing program 2 (id=5159):
socketpair(0x27, 0x80000, 0x10001, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r2, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x56}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9291146d823603fd5062f4a572"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "717e87f270"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "ba459f210c706d9c92b226c80d030c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x88}}, 0x40880)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000240)=0x11, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x24048810)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x980, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x6, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000}, @call={0x85, 0x0, 0x0, 0x6f}]}, &(0x7f00000004c0)='GPL\x00', 0x6, 0x1c, &(0x7f0000000500)=""/28, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x5, 0x5, 0x5, 0x2}, {0x5, 0x3, 0xe, 0xc}, {0x4, 0x5, 0x6, 0x3}, {0x1, 0x2, 0xd, 0x4}, {0x3, 0x4, 0x7}], 0x10, 0x6e}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000700)=r5}, 0x20)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000800)={'batadv0\x00', <r9=>0x0})
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4050}, 0x20010000)
socket$nl_audit(0x10, 0x3, 0x9)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r1)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000cc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a00)={0x250, r10, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xd}, @ETHTOOL_A_LINKMODES_OURS={0x1a4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x85, 0x5, "bbe87d26c2f2807c0c96faea63784ac10ab5cc35c9c1fa8362733f169276be56a1fccb8812eae44289d0852dffce1ae4652b6af4dfd17569c20efe6e3d6b821cbca4c4eb6a081e3058d47f4681e0f4aa995d65d9686662e9d73b73627d6a875036805460ffcaf12aed4c9167208e6be2d06a7c366179c2de3fcde4b71c2f57438c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '$@\x13/&\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'(&\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd51d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '//t\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "97a7f0085efe39956d5844a0645525d7ae0e729136bed69af3ee9d888be6ac98ada4c0d279b8353dea4c26e84e810a0d8a1e65b94a5247e662b9528da5f9da306603123476650ea96933f156ac7a3ae03c4289030bf2125a0da6f81319aa3837e93ec14cd6f0249108427e4d2dd64fb498c3de72095a8613c3414607717bb75500e417811d7b5e9179f77566bfd85d0d387547b6acb67608d06311da"}]}, @ETHTOOL_A_LINKMODES_OURS={0x90, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9ee}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'H$]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd22}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#/[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_MASK={0xc, 0x5, "4528abcbce537c5d"}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xf4a, '\x00', r9, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0x6, 0x2e, &(0x7f0000000d00)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x34}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f0000000e80)='GPL\x00', 0x7, 0x20, &(0x7f0000000ec0)=""/32, 0x100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000f40)={0x0, 0x10, 0x32d1, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001000)=[r4, r11, r8, r6, r7], &(0x7f0000001040)=[{0x3, 0x5, 0x10}, {0x1, 0x1, 0x3, 0xa}], 0x10, 0x8}, 0x94)
r12 = epoll_create(0x8001)
write(r12, &(0x7f0000001140)="64ff920372b5471116bd2699697399f5be44342afac6c39ed40302eb1e5d370dd00ca6aceadedf14207ec70b421941091f47d3697fe6fb5db7f5001580e3165cd24a0d8f117bc4ed1d158193f3c1ae20a52bd43b", 0x54)
r13 = gettid()
r14 = accept$alg(r1, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000001980)=<r15=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000019c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000001ac0)=0xe8)
r17 = getgid()
sendmsg$netlink(r1, &(0x7f0000001b80)={&(0x7f00000011c0)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001940)=[{&(0x7f0000001200)={0x78, 0x25, 0x200, 0x70bd26, 0x25dfdbfd, "", [@generic="083f916f9219cfe2e84787abe419633a1b690f6fe138720c65705b60328a320bf4d8b4b5fc418ab2866fe7c1c56a158b4a3befd71d7da87dbf8da08fa4cf674776b34110723de6056da1b27dd36f302280df4557186a3f8e67afd58a48a0b50572d3920dcb"]}, 0x78}, {&(0x7f0000001280)={0x13c, 0x21, 0x300, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x5, 0x0, 0x0, @fd=r8}, @generic="f4c01865d7fb6e3e4896bfa6acd876928b9a55c83faad7655da9b166ac29f48b43cf1e796ffcea7915590ccc00d23fb6e0af8e44f59c5490211d2d024fa9d4014236cb119c26dbc194350b961de689abf10a168e07fe83ae5b21a6b2e90d336f6e993c6d2eb26e927328d85165234cf62bfff5e0b85b0fcdbc8428a00c215c03798a5829d70a4be7cc20bdc1071fd4399e80a08371", @nested={0x68, 0xf, 0x0, 0x1, [@generic="9cad542a7aaad03554fa2579beab262faabf611902b5bdd15606a20c405e97baea9b3f23e5e3a682b18f5c2dded2e5e8cb61d2cfd1870f162bc34d543b9a81857c58098fd1d23259abc38b8556fda374de9461f1dee145b1b83277a7", @nested={0x4, 0xc9}, @nested={0x4, 0x9d}]}, @nested={0x8, 0x8c, 0x0, 0x1, [@nested={0x4, 0x14c}]}, @typed={0x8, 0x11f, 0x0, 0x0, @pid=r13}, @typed={0x4, 0x2a}, @generic="b9a0a955895e2829a2edfa295d62707e"]}, 0x13c}, {&(0x7f00000013c0)={0x2f4, 0x1d, 0x100, 0x70bd29, 0x25dfdbff, "", [@generic="fbe6b017c69c76e0e5fa8edc999a0e804c34a7c962823aa19113e3761e9647d49ddc9d79d0ccad1e1cd1e9fe801979c77d00e0cf0ebeca3b5be5f8102e6e3b2ff433d297a518ddb18726a498b323f90a205c58f00cf30cef8eb810ded9c18017cf115c3a9686138413be5025ccc16b2f270c794ff1e64c523055bd451a2720a5d42fc5e7b2526aaf4a16df23c2e6dcee0cae74a86c2d1ae96e4018609d0ecd38e29e0bc693b7cf24c8148e2966869c75bbfd1e7796a226844d386bb985789045287f9bc8125f61b543074d1f8ee3e0b3860b56d0e55a5dd0bcf151b5ded3268659505f4f0262d5", @nested={0xcd, 0x88, 0x0, 0x1, [@nested={0x4, 0xea}, @typed={0x8, 0x107, 0x0, 0x0, @ipv4=@broadcast}, @generic="33909bbe0984091814b2676f7078231cc5a079bf75cf1482403ee6490ce6939b2a727e1c1af52fbf824f63dd001c8db50e562d33880b3aa5d83134310ac0675adbd8c88a7e09eb785c73a3c774e02a127fcd70be6ee1d741191af82cc8468e0f59944fa5370df62b51a09a41363b671dbeadc2791596aad2ddafa4ec0bc611db7bedefda8939a889ec963db8f577f0a8ae990d5d26ffd4f054f759fb8a48c84025012cffe09d0a6aad22f256042360639614a6bf902b478d2f7723592d"]}, @nested={0xb0, 0x13a, 0x0, 0x1, [@generic="44d60964444955b725d723e8a010d4164480fd33171c8cf009eb33a6b336c365ae9f555c9b1cec92cf8891ef6c81a6a6a93f0aeb691ac2504df305f601b42e21e0fbc600cd2b0609ba5523d8c90a46b7a138a1b274239d58c2d02e6fbdd8ca9d0e73aed38ec588d4ee9a85a0e9981e02636b17a2592195d1eaf773629bebc605", @generic="64b300fc8dbb717aef9c90220f1aa75adab9ee18677e3ebb", @typed={0xc, 0xfa, 0x0, 0x0, @u64=0x3452}, @nested={0x4, 0xd5}, @nested={0x4, 0x123}]}, @generic="6c7a2091af1a6a7c9d944062bd0668475c2ce061ea66eb1800d91effc2ac16afae67a543a805db18e1b08962d512eeb837c1dd215e6fac5e01988ff607b8bfafb0e9f0779feaf3211f43670b3c9313e4d25d487d02302eee3d4c77b99abd42cdd1b17aca7a35d2686aebc483722e45438e0ee31848cd2d8d4357229f3b"]}, 0x2f4}, {&(0x7f00000016c0)={0x26c, 0x18, 0x800, 0x70bd2a, 0x25dfdbff, "", [@generic="7f49297fcf0dda2c72c927eb15512e900ec47699fb081de3a9ee3cfd469efc193721d0b7c6c9318518dd40d597439bba96407b92044ef7918093cb76a05967d8dd4d523e56bdf1c6a91861f584e40494468da9946ce308fe6d65ee081ba649724e467c386fbcd61c772e8fc187e2b434db", @typed={0x14, 0xab, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="8db3ac7927596e6ea4faba0ddbff083f85df404335a05d4bdbeaa8988a1470810d6a36be3a7c857ed190f267389c802d2f9462e4c9cedd74696393e7d42654a2798c78f72e624da3b97b5a4d387fd36c217f5833cb00ff6b4203598dd1bd850771767908d82036baba1662b62549de490b638cfa8317a4a4e0c10d567b4003b0332112a50caf901a0b5cb2efddb6937388ccc826c20701e3fd199fb4e21aa2afc723b4daa51708ee490c3d17d16cf5ea1281dfdd0d019e4c5610ba19449c4a0599ca22453f993eb129a80cbd1016205bff3957ebefbb0cb9f2", @generic, @typed={0x8, 0x75, 0x0, 0x0, @fd=r14}, @typed={0x4, 0xce, 0x0, 0x0, @binary}, @typed={0xc, 0xbf, 0x0, 0x0, @str='ethtool\x00'}, @typed={0xe3, 0x10d, 0x0, 0x0, @binary="24861c7d3f222cffddf036d1e1c82626e1a9db0e5ee2582e2f489a11ff780a309a7bd2aaef14b5873f0864a579d04c621050d02a09b5ddc27c71fd973ae35462d57d30bb904eafdee4761ed57ba068173d7379c513a015c17e34ff84ab3eeb23e037f3a5dfb4c4bd05e0620f4ff283692ad84e2a84a058800ea85b343311878a7412435d2dc2c633ea7cf4b1f831c8b743cfdc28c2aa9b32826ea8c0ad2cfabc8836c4ecea48df8ceb1b0bbfb549689baf3172d28b8c1ef04dcdc961420140e99cc7b7a564299b496e9059a6814ee526cbaf553a7970e155bbd9e1a5652b85"}]}, 0x26c}], 0x4, &(0x7f0000001b00)=[@rights={{0x14, 0x1, 0x1, [r12]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0x50, 0x80}, 0x2040001)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001c40)={'ip6_vti0\x00'})
sendmsg$nl_route(r0, &(0x7f0000001e80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)=@bridge_getlink={0x20, 0x12, 0x2, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x40410}}, 0x20}, 0x1, 0x0, 0x0, 0x36761e6defe17ed5}, 0x0)

377.331752ms ago: executing program 2 (id=5160):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000380)=0x840, 0x4)
write$tun(r2, &(0x7f0000000040)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x8, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}, {"7302ae64596acd1b0c85f79e959ba407dfe2680a9f3a5624b94b05eb30a8db4c40"}}}}}, 0x57)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r4}, 0x18)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond0\x00', <r5=>0x0})
sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, r5, 0x3, {0x1, 0x0, 0x1}, 0x2}, 0x18, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x20040091)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[], 0x138}}, 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xdc, r9, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xb8, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x64, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}]}, 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x4e, 0x0, 0x8}, 0x28)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0)

317.30148ms ago: executing program 1 (id=5161):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000e108000140000000130500020094000000080006400000000208000440000000140900010073797a30000000000900020073797a"], 0x94}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x36})
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x40004)
pipe(&(0x7f0000000040))
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x807, @broadcast, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r3, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x3, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/19, 0x13}, 0xe0000003}], 0x1, 0x102, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000540)=ANY=[@ANYBLOB="320400000000000001080000000000000000c24b6b3409840cee4104c20400000005c20400000000a513bb67f4b4d83ee034d33bf2d8605fee05c7e67bee38cde2a1c375178cc80c2e69ba0cb30e0f93fa91fde093b2590a3916e367e6efe61dae2fc1e1f3a32f0d7162001c86419722acb2f3508b52a57cb2"], 0x28)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000180), &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd7000000000000400"], 0x328}}, 0x84)

175.920536ms ago: executing program 2 (id=5162):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r1 = socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0)
close(0x4)
connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0xff, 0x100, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x8, 0x80, 0xfffffffe, 0xffffffff}})
setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000000)=0x2, 0x4)

67.36818ms ago: executing program 2 (id=5163):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$ax25(0x3, 0x2, 0x7)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0xf6, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x30, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x80000000, 0x2, 0x54}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000000000001400000005000c000027fa1700000018000180140002006e657464657673696d300000000000000500180000000000080011000700000005000c0001"], 0x4c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111a90000000000851000000000000000009500a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10}, 0x94)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d004100100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xc, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})
r11 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000600)={'ipvlan0\x00', &(0x7f0000000680)=@ethtool_channels={0x3d, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2}})

16.427582ms ago: executing program 3 (id=5164):
r0 = socket(0x8, 0xa, 0x7)
ioctl$SIOCPNENABLEPIPE(r0, 0x5411, 0x1000000000000)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "2eef3323a979292753eb9570163edd2b"})
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x480c0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xd76}, 0x18)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYRESOCT=r1, @ANYBLOB="f31b7cad7afc52eef7f8d7d849f6e07efd4a7d62fd4b29e53cdf233ebd74283eb516a6830e7647af2d73750c98593da61c3a7b57c268bc82be684d72a6e47ad88c8e66635f27c13ba93e83d93ca15ae832914f7441aea8bab97c5760e1d055e20bf299fb77c58bb04dce2d6fccb58653c28809519cb98c54fa21ab463108a75930e1e0b558e785271b6864f101f0f7cf9904f90f38c3dd99c96c0dc92a7759cadfb1a24be3b7e4dd2af3f75a4c7361a0a16dcaccafab83196d822eaad719f145d029c3da6146bab70e6c57bbbaac01ad091401a0861ec7b15a9de4c8261bd76c2a6b5df53fab6866a76fe1", @ANYRES8=r1, @ANYRES8=r2, @ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sys_enter\x00', r3, 0x0, 0x6}, 0x18)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r6 = accept(r4, 0x0, 0x0)
recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)=""/215, 0xd7, 0x10020, 0x0, 0x0)
shutdown(r6, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000003a00), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0)

15.518356ms ago: executing program 2 (id=5165):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000080)) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$kcm(0x2, 0x5, 0x84) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r3, 0x8) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket(0x1, 0x803, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000791100000000000095000000000000007b54df60b83651347bac7ad610cdc62b25715057f9bd9ba39a703d0c3bccd5d27dfde0a938c09032b0c219bf54337a82225a089bba9353c7322070a21577a61131229430d1161b20a4c2ba6c47b977a73ab1e11f2ab2087661103678a177220aed5ce3baccdb0f29c083d597eda53eac2001efec0652435a4448a2282787bb405dd102250a090772def11e5934a92149e197fa10a783678848795658fa36ab832d44a0abce33147aaed4a3b7df44873976002161078692afc8ad18967e3bf35ddf5e59103568a7f1bde2354b4e65966bfb1aa436fca6138a6092714bd687387290f72bd88658b96a"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt}, 0x94) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) (async)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000000)={0x1, 0x5, 0x8bd}) (async)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, &(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, [0x7, 0xfffffffffffffff7, 0x86, 0xffff, 0x7fffffffffffffff, 0x8, 0x3, 0x7, 0x3, 0xfffffffffffffff8, 0x9, 0x4, 0x8, 0x5, 0x8]}, &(0x7f00000000c0)=0x100)

339.444µs ago: executing program 3 (id=5166):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x168, r3, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf35, 0x7b}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}]}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0xd0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xc7, 0x3, "28cf51a3cb85a4f88f4d49c5e89e97ef84fdc3981e1cc781bad720765b3cd18404a9975e8bc47f9159758de91f0ab8356fdee853d406a26dfddc8a59426c15ded05cffa8a73855860bf69f0c80d0d2a490ad8f11e39064978e1a359d7c117bff43bc2b482c756bb723f7f4492b817c96054a6cd98bc50cc7971cfbe678e565c5f121a04bb1956578b98c575074bf0741cd38b833794f538569c857328a700a2ce1b0e75c3790ca2faacda70764c13dc01d75f6bd34901a257865d6e00e8017203a414e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xc}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "5370f3fcf1a41c70"}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xf8f}]}, 0x168}}, 0x4004081)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000005600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003"], 0x80}}, 0x0)

0s ago: executing program 2 (id=5167):
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r3 = accept4(r2, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x8927, &(0x7f0000000140)={0x23a, 0xfffffffe, 0x0, 0x0, 0x3, [0x0, 0xffffffff, 0x4000097]})
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x68, 0x0, 0x1, 0x0, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}]}, 0x68}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

kernel console output (not intermixed with test programs):

rsing attributes in process `syz.0.2885'.
[  276.163878][T16087] netlink: 'syz.1.2886': attribute type 21 has an invalid length.
[  276.172182][T16087] netlink: 'syz.1.2886': attribute type 6 has an invalid length.
[  276.175783][T16087] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2886'.
[  276.179610][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2886'.
[  276.182992][T16087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2886'.
[  276.187400][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2886'.
[  276.223703][T16091] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  276.227279][T16090] IPVS: stopping backup sync thread 16091 ...
[  276.230032][T16085] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2885'.
[  276.261365][T16090] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2887'.
[  276.263698][T16086] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2885'.
[  276.273854][T16090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2887'.
[  276.294274][T16093] netlink: 'syz.2.2888': attribute type 1 has an invalid length.
[  276.519685][T16112] netlink: 'syz.0.2895': attribute type 1 has an invalid length.
[  276.568572][T16115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  277.284505][T16136] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  277.284699][T16135] IPVS: stopping backup sync thread 16136 ...
[  278.073594][T16149] netlink: 'syz.1.2906': attribute type 3 has an invalid length.
[  278.245288][T16160] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  278.248674][T16159] IPVS: stopping backup sync thread 16160 ...
[  278.285801][T16167] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  278.288996][T16165] IPVS: stopping backup sync thread 16167 ...
[  278.643882][T16204] netlink: 'syz.0.2923': attribute type 2 has an invalid length.
[  278.965165][T16210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  279.689823][T16227] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  279.731207][T16228] netlink: 'syz.1.2927': attribute type 1 has an invalid length.
[  280.035897][T16266] IPVS: set_ctl: invalid protocol: 3 100.1.1.1:20000
[  280.194688][T16286] 8021q: VLANs not supported on ip6_vti0
[  280.254734][T16291] netlink: 'syz.1.2945': attribute type 15 has an invalid length.
[  281.161123][T16305] netlink: 'syz.1.2949': attribute type 2 has an invalid length.
[  281.511128][T16313] netlink: 'syz.0.2951': attribute type 2 has an invalid length.
[  281.606525][T16323] nla_validate_range_unsigned: 74 callbacks suppressed
[  281.606580][T16323] netlink: 'syz.0.2952': attribute type 11 has an invalid length.
[  281.620602][T16323] netlink: 'syz.0.2952': attribute type 11 has an invalid length.
[  281.623901][T16323] netlink: 'syz.0.2952': attribute type 11 has an invalid length.
[  281.626951][T16323] netlink: 'syz.0.2952': attribute type 11 has an invalid length.
[  281.633824][T16323] netlink: 'syz.0.2952': attribute type 11 has an invalid length.
[  281.637215][T16323] netlink: 'syz.0.2952': attribute type 11 has an invalid length.
[  281.641771][T16323] netlink: 'syz.0.2952': attribute type 11 has an invalid length.
[  281.644808][T16323] netlink: 'syz.0.2952': attribute type 11 has an invalid length.
[  281.647816][T16323] netlink: 'syz.0.2952': attribute type 11 has an invalid length.
[  281.652530][T16323] netlink: 'syz.0.2952': attribute type 11 has an invalid length.
[  281.655637][T16323] __nla_validate_parse: 40 callbacks suppressed
[  281.655645][T16323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2952'.
[  281.745825][T16327] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  281.749656][T16326] IPVS: stopping backup sync thread 16327 ...
[  281.756541][T16326] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2954'.
[  282.057610][T16336] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2957'.
[  282.588683][T16351] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2962'.
[  282.596169][T16351] netlink: 'syz.0.2962': attribute type 1 has an invalid length.
[  282.638611][T16351] 8021q: adding VLAN 0 to HW filter on device bond13
[  282.648409][T16351] veth27: entered promiscuous mode
[  282.652848][T16351] bond13: (slave veth27): Enslaving as a backup interface with a down link
[  282.661304][T16351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2962'.
[  282.746780][T16366] netlink: 'syz.0.2969': attribute type 2 has an invalid length.
[  282.756494][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2969'.
[  282.759476][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2966'.
[  282.878007][T16388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2976'.
[  282.912760][T16392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2977'.
[  282.924742][T16394] netlink: 'syz.0.2978': attribute type 4 has an invalid length.
[  282.938259][T16394] netlink: 'syz.0.2978': attribute type 4 has an invalid length.
[  282.948508][T16394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2978'.
[  283.258606][T16403] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  283.262137][T16402] IPVS: stopping backup sync thread 16403 ...
[  283.559810][T16419] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  283.564874][T16418] IPVS: stopping backup sync thread 16419 ...
[  283.828786][T16432] netlink: 'syz.0.2988': attribute type 1 has an invalid length.
[  284.006594][T16447] netlink: 'syz.1.2993': attribute type 2 has an invalid length.
[  284.252758][T16473] tun0: tun_chr_ioctl cmd 2148553947
[  284.900829][T16506] sock: sock_timestamping_bind_phc: sock not bind to device
[  285.532338][T16516] pim6reg9: entered allmulticast mode
[  285.537367][T16516] netlink: 'syz.2.3013': attribute type 1 has an invalid length.
[  285.707022][T16537] IPVS: stopping backup sync thread 16538 ...
[  285.711007][T16537] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  285.844273][T16548] vlan0: left allmulticast mode
[  285.845898][T16548] veth0_vlan: left allmulticast mode
[  285.851932][T16548] team0: Port device vlan0 removed
[  285.858682][T16548] bond12: (slave veth25): Releasing active interface
[  285.875228][T16548] bond13: (slave veth27): Releasing backup interface
[  285.883935][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.897638][T11021] tipc: Resetting bearer <eth:team0>
[  286.218320][T16577] : renamed from bond_slave_0
[  286.230975][  T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.515760][T16596] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  286.521204][T16595] IPVS: stopping backup sync thread 16596 ...
[  286.733641][T16609] __nla_validate_parse: 33 callbacks suppressed
[  286.733650][T16609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3037'.
[  286.739169][T16609] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3037'.
[  286.808208][T16623] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3041'.
[  286.815556][T16623] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3041'.
[  286.824384][T16623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3041'.
[  286.889703][T16629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3044'.
[  286.894900][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3044'.
[  286.898536][T16629] nbd: must specify at least one socket
[  286.991185][T16642] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3049'.
[  287.045709][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'.
[  287.072102][T16649] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3051'.
[  287.205125][T16661] sctp: [Deprecated]: syz.2.3055 (pid 16661) Use of struct sctp_assoc_value in delayed_ack socket option.
[  287.205125][T16661] Use struct sctp_sack_info instead
[  287.874363][T16694] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  287.884947][T16696] sock: sock_timestamping_bind_phc: sock not bind to device
[  287.887742][T16696] netlink: 'syz.2.3067': attribute type 6 has an invalid length.
[  287.967180][T16708] bond0: (slave veth0_to_hsr): Device is not bonding slave
[  287.969637][T16708] bond0: option active_slave: invalid value (veth0_to_hsr)
[  288.458124][T16748] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  288.462423][T16747] IPVS: stopping backup sync thread 16748 ...
[  288.471350][T16749] IPVS: length: 148 != 24
[  288.474995][T16749] sock: sock_timestamping_bind_phc: sock not bind to device
[  289.066961][T16759] netlink: 'syz.0.3083': attribute type 1 has an invalid length.
[  289.078022][T16759] netlink: 'syz.0.3083': attribute type 2 has an invalid length.
[  289.207117][T16769] netlink: 'syz.2.3085': attribute type 12 has an invalid length.
[  289.445008][T16784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  289.504983][T16790] team0: Unable to change to the same mode the team is in
[  289.548753][T16796] netlink: 'syz.2.3096': attribute type 1 has an invalid length.
[  289.663849][T16809] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.669738][T16809] bond0: (slave rose0): Enslaving as an active interface with an up link
[  289.995610][T16829] netlink: 'syz.0.3100': attribute type 12 has an invalid length.
[  290.004280][T16829] netlink: 'syz.0.3100': attribute type 2 has an invalid length.
[  290.577704][T16865] netlink: 'syz.1.3112': attribute type 1 has an invalid length.
[  291.454384][T16892] netlink: 'syz.0.3118': attribute type 21 has an invalid length.
[  291.459539][T16892] netlink: 'syz.0.3118': attribute type 6 has an invalid length.
[  291.582492][T16909] netlink: 'syz.1.3125': attribute type 1 has an invalid length.
[  291.633315][T16917] sctp: [Deprecated]: syz.2.3127 (pid 16917) Use of struct sctp_assoc_value in delayed_ack socket option.
[  291.633315][T16917] Use struct sctp_sack_info instead
[  291.827191][T16943] __nla_validate_parse: 51 callbacks suppressed
[  291.827204][T16943] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.3136'.
[  291.865868][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3135'.
[  291.884601][T16951] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3137'.
[  291.963953][T16959] IPVS: stopping backup sync thread 16960 ...
[  291.974622][T16959] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3141'.
[  291.979238][T16959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3141'.
[  291.982463][T16959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3141'.
[  292.036095][T16955] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  292.105862][T16971] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  292.110158][T16972] IPVS: stopping backup sync thread 16971 ...
[  292.165875][T16978] IPVS: stopping backup sync thread 16979 ...
[  292.168451][T16979] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  292.173308][T16978] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3145'.
[  292.177679][T16978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3145'.
[  292.181709][T16978] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3145'.
[  292.376262][T16992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3148'.
[  292.443214][T16996] gtp1: entered promiscuous mode
[  292.445042][T16996] gtp1: entered allmulticast mode
[  292.606721][ T5921] IPVS: starting estimator thread 0...
[  292.820848][T17006] IPVS: using max 38 ests per chain, 91200 per kthread
[  292.897706][T17024] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  292.901406][T17023] IPVS: stopping backup sync thread 17024 ...
[  292.926256][T14496] IPVS: stop unused estimator thread 0...
[  293.356928][T17075] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  294.173472][T17146] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  294.202263][T17151] openvswitch: netlink: Unknown key attributes 2
[  294.584327][T17184] validate_nla: 4 callbacks suppressed
[  294.584336][T17184] netlink: 'syz.0.3190': attribute type 2 has an invalid length.
[  294.755748][T17211] netlink: 'syz.0.3199': attribute type 1 has an invalid length.
[  294.795996][T17213] bond6: (slave ip6gretap3): Releasing active interface
[  294.799081][T17213] bond6: (slave ip6gretap3): the permanent HWaddr of slave - 96:42:af:f6:7f:ef - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  294.809648][T17213] bond6: (slave veth11): Releasing active interface
[  294.830302][T17213] team0: Unable to change to the same mode the team is in
[  294.833019][T17213] vlan0: left allmulticast mode
[  294.835379][T17213] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  295.863908][T17265] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  295.897340][T17270] netlink: 'syz.0.3215': attribute type 2 has an invalid length.
[  295.918881][T17273] netlink: 'syz.2.3216': attribute type 1 has an invalid length.
[  296.088375][T17285] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  296.091584][T17284] IPVS: stopping backup sync thread 17285 ...
[  296.152814][T17288] netlink: 'syz.2.3220': attribute type 3 has an invalid length.
[  296.287260][T17296] openvswitch: netlink: IP tunnel dst address not specified
[  296.376920][T17302] batadv2: entered allmulticast mode
[  296.379551][T17302] 8021q: adding VLAN 0 to HW filter on device batadv2
[  296.409451][T17304] netlink: 'syz.0.3226': attribute type 1 has an invalid length.
[  297.196296][T17337] netlink: 'syz.2.3237': attribute type 3 has an invalid length.
[  297.505487][T17351] __nla_validate_parse: 50 callbacks suppressed
[  297.505502][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3240'.
[  297.627799][T17358] netlink: 'syz.1.3243': attribute type 1 has an invalid length.
[  297.630627][T17358] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3243'.
[  297.872683][T17368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3246'.
[  298.090996][T17371] netlink: 'syz.0.3247': attribute type 1 has an invalid length.
[  298.093879][T17371] nbd: error processing sock list
[  298.095921][T17371] block nbd1: shutting down sockets
[  298.133949][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3248'.
[  298.242927][T17385] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3250'.
[  298.287406][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'.
[  298.292846][T17389] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3251'.
[  298.405591][T17402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3256'.
[  298.412677][T17402] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3256'.
[  298.448103][T17409] netlink: 'syz.2.3258': attribute type 1 has an invalid length.
[  298.453120][T17409] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3258'.
[  298.873782][T17435] IPVS: stopping backup sync thread 17437 ...
[  298.876263][T17437] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  300.011333][T17462] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  300.062493][T17495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.198121][T17507] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  300.200370][T17503] delete_channel: no stack
[  300.203597][T17506] IPVS: stopping backup sync thread 17507 ...
[  300.307669][T17515] netlink: 'syz.0.3288': attribute type 1 has an invalid length.
[  300.373515][T17524] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  300.376751][T17523] IPVS: stopping backup sync thread 17524 ...
[  300.385170][T17519] team0: Unable to change to the same mode the team is in
[  300.523315][T17550] netlink: 'syz.2.3299': attribute type 1 has an invalid length.
[  300.626099][T17559] netlink: 'syz.1.3303': attribute type 4 has an invalid length.
[  300.646028][T17559] netlink: 'syz.1.3303': attribute type 4 has an invalid length.
[  301.060637][T17599] netlink: 'syz.2.3312': attribute type 23 has an invalid length.
[  301.064137][T17599] netlink: 'syz.2.3312': attribute type 3 has an invalid length.
[  301.225199][T17620] netlink: 'syz.2.3318': attribute type 1 has an invalid length.
[  301.256888][T17622] netlink: 'syz.2.3319': attribute type 1 has an invalid length.
[  301.293440][T17629] netlink: 'syz.0.3322': attribute type 6 has an invalid length.
[  301.427907][T17648] netlink: 'syz.0.3330': attribute type 1 has an invalid length.
[  301.938777][T17666] sch_tbf: burst 12 is lower than device syzkaller0 mtu (313) !
[  301.988810][T17668] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  302.017466][T17670] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.093370][T17675] tipc: Resetting bearer <eth:team0>
[  302.099343][T17675] team0: Unable to change to the same mode the team is in
[  302.106106][T17675] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  302.159131][T17680] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  302.162459][T17680] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  302.166093][T17681] tipc: Resetting bearer <eth:syzkaller0>
[  302.416196][T17700] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  302.416295][T17699] IPVS: stopping backup sync thread 17700 ...
[  302.666665][T17710] __nla_validate_parse: 200 callbacks suppressed
[  302.666674][T17710] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3355'.
[  302.673041][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3355'.
[  302.677539][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3355'.
[  302.775763][T17719] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3357'.
[  302.805385][T17721] C: renamed from team_slave_0
[  302.809338][T17721] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3358'.
[  302.814751][T17721] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  302.822814][T17721] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3358'.
[  302.910158][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3359'.
[  303.196066][T17736] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  303.199739][T17735] IPVS: stopping backup sync thread 17736 ...
[  303.205267][T17735] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3362'.
[  303.248757][T17735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3362'.
[  303.251898][T17735] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3362'.
[  303.561531][T17754] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  303.563014][T17762] sock: sock_timestamping_bind_phc: sock not bind to device
[  304.045210][T17786] unsupported nla_type 52263
[  304.482101][T17814] openvswitch: netlink: Tunnel attr 16352 out of range max 16
[  305.343348][T17823] validate_nla: 10 callbacks suppressed
[  305.343362][T17823] netlink: 'syz.1.3390': attribute type 1 has an invalid length.
[  305.434069][  T793] IPVS: starting estimator thread 0...
[  305.540472][T17825] IPVS: using max 80 ests per chain, 192000 per kthread
[  305.627005][T17846] bond0 (unregistering): Released all slaves
[  305.864065][T17867] netlink: 'syz.1.3403': attribute type 1 has an invalid length.
[  305.867391][T17867] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  305.923145][T17865] nla_validate_range_unsigned: 53 callbacks suppressed
[  305.923156][T17865] netlink: 'syz.2.3402': attribute type 11 has an invalid length.
[  305.945780][T17865] netlink: 'syz.2.3402': attribute type 11 has an invalid length.
[  305.948443][T17865] netlink: 'syz.2.3402': attribute type 11 has an invalid length.
[  305.955343][T17865] netlink: 'syz.2.3402': attribute type 11 has an invalid length.
[  305.987076][T17865] netlink: 'syz.2.3402': attribute type 11 has an invalid length.
[  306.007934][T17865] netlink: 'syz.2.3402': attribute type 11 has an invalid length.
[  306.020587][T17865] netlink: 'syz.2.3402': attribute type 11 has an invalid length.
[  306.023482][T17865] netlink: 'syz.2.3402': attribute type 11 has an invalid length.
[  306.026036][T17865] netlink: 'syz.2.3402': attribute type 11 has an invalid length.
[  306.028811][T17865] netlink: 'syz.2.3402': attribute type 11 has an invalid length.
[  306.143344][T17883] IPVS: stopping backup sync thread 17884 ...
[  306.143901][T17884] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  306.182799][T17888] netlink: 'syz.1.3406': attribute type 8 has an invalid length.
[  306.543647][T17901] team0: Refused to change device type
[  306.745395][T17914] netlink: 'syz.0.3416': attribute type 4 has an invalid length.
[  306.763772][T17914] netlink: 'syz.0.3416': attribute type 4 has an invalid length.
[  306.934432][T17932] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20003
[  306.958820][T17936] netlink: 'syz.2.3423': attribute type 4 has an invalid length.
[  306.962981][T17936] netlink: 'syz.2.3423': attribute type 4 has an invalid length.
[  307.252473][T17953] netlink: 'syz.2.3428': attribute type 4 has an invalid length.
[  307.256451][T17953] netlink: 'syz.2.3428': attribute type 4 has an invalid length.
[  307.954460][T17965] __nla_validate_parse: 40 callbacks suppressed
[  307.954470][T17965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3432'.
[  308.037392][T17971] netlink: 'syz.0.3434': attribute type 1 has an invalid length.
[  308.097798][T17978] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3436'.
[  308.116585][T17981] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3437'.
[  308.122400][T17981] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3437'.
[  308.142997][T17987] RDS: rds_bind could not find a transport for ::ffff:0.0.0.7, load rds_tcp or rds_rdma?
[  308.151585][T17989] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  308.156854][T17989] macvlan1: left promiscuous mode
[  308.158780][T17989] macvlan1: left allmulticast mode
[  308.177725][T17989] dvmrp0: mtu greater than device maximum
[  308.204156][T17996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3441'.
[  308.217384][T17997] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3441'.
[  308.250422][T18002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3440'.
[  308.504007][T18027] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  308.504107][T18026] IPVS: stopping backup sync thread 18027 ...
[  308.522718][T18026] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3449'.
[  308.528531][T18026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3449'.
[  308.532596][T18026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3449'.
[  310.203021][T18095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.480433][T18110] nbd1: detected capacity change from 0 to 127
[  310.786001][T18114] validate_nla: 3 callbacks suppressed
[  310.786015][T18114] netlink: 'syz.1.3469': attribute type 7 has an invalid length.
[  310.846870][T18119] netlink: 'syz.1.3471': attribute type 1 has an invalid length.
[  310.879578][T18121] netlink: 'syz.1.3472': attribute type 1 has an invalid length.
[  310.879623][T18122] netlink: 'syz.1.3472': attribute type 1 has an invalid length.
[  311.092745][T18128] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  311.092844][T18127] IPVS: stopping backup sync thread 18128 ...
[  311.135128][   T56] block nbd1: Receive control failed (result -104)
[  311.218621][T18140] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  311.223465][T18139] IPVS: stopping backup sync thread 18140 ...
[  311.288279][T18143] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  311.293952][T18146] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.300370][T18143] bridge6: entered promiscuous mode
[  311.302255][T18143] bridge6: entered allmulticast mode
[  311.305897][T18143] team0: Port device bridge6 added
[  311.308274][T18146] syzkaller0: entered promiscuous mode
[  311.315182][T18146] syzkaller0: entered allmulticast mode
[  311.358194][T18146] tipc: Resetting bearer <eth:syzkaller0>
[  311.376433][T18145] tipc: Resetting bearer <eth:syzkaller0>
[  311.386309][T18145] tipc: Disabling bearer <eth:syzkaller0>
[  311.543227][T18163] netlink: 'syz.0.3487': attribute type 1 has an invalid length.
[  311.592081][T18173] netlink: 'syz.2.3489': attribute type 2 has an invalid length.
[  311.680440][T18185] netlink: 'syz.1.3492': attribute type 1 has an invalid length.
[  311.687425][T18186] netlink: 'syz.1.3492': attribute type 1 has an invalid length.
[  311.739152][T18185] 8021q: adding VLAN 0 to HW filter on device bond12
[  311.752111][T18187] veth19: entered promiscuous mode
[  311.755540][T18187] bond12: (slave veth19): Enslaving as a backup interface with a down link
[  311.778193][T18186] veth21: entered promiscuous mode
[  311.782487][T18186] bond12: (slave veth21): Enslaving as a backup interface with a down link
[  312.066939][T18214] sit0: entered promiscuous mode
[  312.074559][T18214] netlink: 'syz.0.3503': attribute type 1 has an invalid length.
[  312.177470][T18229] netlink: 'syz.2.3508': attribute type 2 has an invalid length.
[  313.042875][T18299] __nla_validate_parse: 93 callbacks suppressed
[  313.042884][T18299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3521'.
[  313.048408][T18299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3521'.
[  313.051851][T18299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3521'.
[  313.085382][T18302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'.
[  313.088386][T18302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'.
[  313.353772][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3528'.
[  313.368698][T18329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3529'.
[  313.398075][T18329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3529'.
[  313.411379][T18329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3529'.
[  313.438182][T18335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3531'.
[  313.554689][T18353] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  313.562501][T18353] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  313.791608][T18368] nla_validate_range_unsigned: 96 callbacks suppressed
[  313.791641][T18368] netlink: 'syz.1.3540': attribute type 11 has an invalid length.
[  313.796687][T18368] netlink: 'syz.1.3540': attribute type 11 has an invalid length.
[  313.799361][T18368] netlink: 'syz.1.3540': attribute type 11 has an invalid length.
[  313.810440][ T1119] block nbd1: Connection timed out, retrying (0/1 alive)
[  313.813595][ T1119] block nbd1: Connection timed out, retrying (0/1 alive)
[  313.815993][ T1119] block nbd1: Connection timed out, retrying (0/1 alive)
[  313.818514][ T1119] block nbd1: Connection timed out, retrying (0/1 alive)
[  313.822899][ T1119] block nbd1: Dead connection, failed to find a fallback
[  313.825706][ T1119] block nbd1: shutting down sockets
[  313.827790][ T1119] blk_print_req_error: 27 callbacks suppressed
[  313.827797][ T1119] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.831008][T18368] netlink: 'syz.1.3540': attribute type 11 has an invalid length.
[  313.833181][ T1119] buffer_io_error: 27 callbacks suppressed
[  313.833189][ T1119] Buffer I/O error on dev nbd1, logical block 3, async page read
[  313.835516][T18368] netlink: 'syz.1.3540': attribute type 11 has an invalid length.
[  313.837638][ T1119] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.843880][T18368] netlink: 'syz.1.3540': attribute type 11 has an invalid length.
[  313.847399][ T1119] Buffer I/O error on dev nbd1, logical block 2, async page read
[  313.852401][ T1119] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.854036][T18368] netlink: 'syz.1.3540': attribute type 11 has an invalid length.
[  313.855486][ T1119] Buffer I/O error on dev nbd1, logical block 1, async page read
[  313.858785][T18368] netlink: 'syz.1.3540': attribute type 11 has an invalid length.
[  313.862855][ T1119] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.867872][ T1119] Buffer I/O error on dev nbd1, logical block 0, async page read
[  313.871528][T15835] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.874608][T15835] Buffer I/O error on dev nbd1, logical block 0, async page read
[  313.877441][T15835] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.887082][T15835] Buffer I/O error on dev nbd1, logical block 1, async page read
[  313.887536][T18368] netlink: 'syz.1.3540': attribute type 11 has an invalid length.
[  313.890215][T15835] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.897079][T15835] Buffer I/O error on dev nbd1, logical block 2, async page read
[  313.901405][T18368] netlink: 'syz.1.3540': attribute type 11 has an invalid length.
[  313.902290][T15835] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.908097][T15835] Buffer I/O error on dev nbd1, logical block 3, async page read
[  313.911375][T15835] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.914444][T15835] Buffer I/O error on dev nbd1, logical block 0, async page read
[  313.917242][T15835] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.923100][T15835] Buffer I/O error on dev nbd1, logical block 1, async page read
[  313.926866][T15835] ldm_validate_partition_table(): Disk read failed.
[  313.930229][T15835] Dev nbd1: unable to read RDB block 0
[  313.932952][T15835]  nbd1: unable to read partition table
[  313.939096][T15835] ldm_validate_partition_table(): Disk read failed.
[  313.943610][T15835] Dev nbd1: unable to read RDB block 0
[  313.946276][T15835]  nbd1: unable to read partition table
[  314.995524][T18438] veth0_to_bridge: left allmulticast mode
[  315.006194][T18438] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  315.006334][T18439] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  315.113688][T18457] sctp: [Deprecated]: syz.0.3558 (pid 18457) Use of struct sctp_assoc_value in delayed_ack socket option.
[  315.113688][T18457] Use struct sctp_sack_info instead
[  315.454645][T18484] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  315.458839][T18483] IPVS: stopping backup sync thread 18484 ...
[  315.887168][T18451] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  316.029616][T18518] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  316.033392][T18517] IPVS: stopping backup sync thread 18518 ...
[  316.128494][T18520] validate_nla: 14 callbacks suppressed
[  316.128504][T18520] netlink: 'syz.0.3577': attribute type 1 has an invalid length.
[  316.672137][T18543] netlink: 'syz.1.3584': attribute type 1 has an invalid length.
[  317.044103][T18557] netlink: 'syz.2.3588': attribute type 1 has an invalid length.
[  317.224648][T18561] sock: sock_timestamping_bind_phc: sock not bind to device
[  317.255973][T18568] vlan3: entered promiscuous mode
[  317.257877][T18568] bridge0: entered promiscuous mode
[  318.007205][T18585] IPVS: Unknown mcast interface: bond0
[  318.105860][T18592] __nla_validate_parse: 63 callbacks suppressed
[  318.105869][T18592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3599'.
[  318.243474][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3603'.
[  318.250179][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3603'.
[  318.271673][T18603] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.3602'.
[  318.275302][T18603] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  318.279164][T18605] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3604'.
[  318.284044][T18605] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3604'.
[  318.287423][T18605] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3604'.
[  318.359364][T18608] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3605'.
[  318.409062][T18615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3608'.
[  318.495206][T18624] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  318.499179][T18623] IPVS: stopping backup sync thread 18624 ...
[  318.509575][T18623] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3611'.
[  318.568377][T18630] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  318.573831][T18631] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  318.578822][T18631] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  318.744649][T18649] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.896110][T18662] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  318.896177][T18661] IPVS: stopping backup sync thread 18662 ...
[  319.238903][T18687] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  319.244482][T18687] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  319.327490][T18691] Bluetooth: MGMT ver 1.23
[  319.496849][T18703] netlink: 'syz.0.3632': attribute type 1 has an invalid length.
[  319.767418][T18728] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  319.973159][T18746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  319.976153][T18746] IPv6: NLM_F_CREATE should be set when creating new route
[  319.978937][T18746] IPv6: NLM_F_CREATE should be set when creating new route
[  320.157989][T18759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  320.675375][T18791] nla_validate_range_unsigned: 53 callbacks suppressed
[  320.675385][T18791] netlink: 'syz.1.3655': attribute type 11 has an invalid length.
[  320.680958][T18791] netlink: 'syz.1.3655': attribute type 11 has an invalid length.
[  320.683659][T18791] netlink: 'syz.1.3655': attribute type 11 has an invalid length.
[  320.686675][T18791] netlink: 'syz.1.3655': attribute type 11 has an invalid length.
[  320.689675][T18791] netlink: 'syz.1.3655': attribute type 11 has an invalid length.
[  320.692801][T18791] netlink: 'syz.1.3655': attribute type 11 has an invalid length.
[  320.695701][T18791] netlink: 'syz.1.3655': attribute type 11 has an invalid length.
[  320.698391][T18791] netlink: 'syz.1.3655': attribute type 11 has an invalid length.
[  320.701887][T18791] netlink: 'syz.1.3655': attribute type 11 has an invalid length.
[  320.704446][T18791] netlink: 'syz.1.3655': attribute type 11 has an invalid length.
[  321.233270][T18810] team0: Port device bridge6 removed
[  321.238450][T18810] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  321.337301][T18832] netlink: 'syz.0.3668': attribute type 4 has an invalid length.
[  321.963390][T18867] sock: sock_timestamping_bind_phc: sock not bind to device
[  322.778717][T18880] IPVS: stopping backup sync thread 18883 ...
[  322.778721][T18883] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  323.002008][T18890] sock: sock_timestamping_bind_phc: sock not bind to device
[  323.220911][T18900] __nla_validate_parse: 68 callbacks suppressed
[  323.220921][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3687'.
[  323.582846][T18925] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3697'.
[  323.614772][T18923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3696'.
[  323.618888][T18923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3696'.
[  323.647395][T18925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3697'.
[  323.653834][T18925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3697'.
[  323.657601][T18925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3697'.
[  323.665684][T18925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3697'.
[  323.727522][T18933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3699'.
[  323.920319][T18949] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3703'.
[  325.002153][T18992] netlink: 'syz.0.3714': attribute type 6 has an invalid length.
[  325.158694][T19022] netlink: 'syz.2.3721': attribute type 16 has an invalid length.
[  325.365604][T19043] netlink: 'syz.0.3727': attribute type 21 has an invalid length.
[  325.383969][T19043] netlink: 'syz.0.3727': attribute type 6 has an invalid length.
[  325.389670][T19042] delete_channel: no stack
[  325.517116][T19056] syzkaller0: entered promiscuous mode
[  325.519298][T19056] syzkaller0: entered allmulticast mode
[  326.672400][T19068] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  326.792417][T19070] delete_channel: no stack
[  327.010113][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.075226][T19100] netlink: 'syz.1.3747': attribute type 2 has an invalid length.
[  328.393604][T19145] __nla_validate_parse: 47 callbacks suppressed
[  328.393618][T19145] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3758'.
[  328.406765][T19145] sock: sock_timestamping_bind_phc: sock not bind to device
[  328.426249][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3759'.
[  328.511314][T19149] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3759'.
[  328.726191][T19154] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  328.838582][T19157] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3761'.
[  329.099689][T19167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3764'.
[  329.314693][T19178] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3768'.
[  329.477714][T19187] sock: sock_timestamping_bind_phc: sock not bind to device
[  329.593438][T19201] Unsupported ieee802154 address type: 0
[  329.652888][T19213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3775'.
[  329.758798][T19221] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3775'.
[  329.996321][T19241] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3778'.
[  330.163380][T19253] netlink: 'syz.1.3780': attribute type 1 has an invalid length.
[  330.166360][T19253] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3780'.
[  330.314140][T19262] IPVS: stopping backup sync thread 19154 ...
[  330.520856][   T33] audit: type=1800 audit(1755296144.818:7): pid=19279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3789" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6575 res=0 errno=0
[  330.532159][   T33] audit: type=1800 audit(1755296144.838:8): pid=19279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3789" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6575 res=0 errno=0
[  330.595668][T19288] netlink: 'syz.1.3792': attribute type 1 has an invalid length.
[  330.596802][T19287] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  330.604834][T19285] IPVS: stopping backup sync thread 19287 ...
[  330.705054][T19297] netlink: 'syz.0.3794': attribute type 1 has an invalid length.
[  330.753541][T19303] netem: incorrect gi model size
[  330.761813][T19303] netem: change failed
[  330.795540][T19310] netlink: 'syz.1.3798': attribute type 6 has an invalid length.
[  330.798873][T19310] netlink: 'syz.1.3798': attribute type 4 has an invalid length.
[  330.813319][ T5886] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  330.820189][ T5886] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  330.827139][ T5886] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  330.832144][ T5886] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  330.966249][T19320] netlink: 'syz.0.3801': attribute type 2 has an invalid length.
[  331.006908][T19332] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  331.007065][T19331] IPVS: stopping master sync thread 19332 ...
[  331.223441][T19347] nla_validate_range_unsigned: 11 callbacks suppressed
[  331.223455][T19347] netlink: 'syz.0.3808': attribute type 11 has an invalid length.
[  331.229696][T19347] netlink: 'syz.0.3808': attribute type 11 has an invalid length.
[  331.233730][T19347] netlink: 'syz.0.3808': attribute type 11 has an invalid length.
[  331.236718][T19347] netlink: 'syz.0.3808': attribute type 11 has an invalid length.
[  331.239846][T19347] netlink: 'syz.0.3808': attribute type 11 has an invalid length.
[  331.242749][T19347] netlink: 'syz.0.3808': attribute type 11 has an invalid length.
[  331.245577][T19347] netlink: 'syz.0.3808': attribute type 11 has an invalid length.
[  331.248607][T19347] netlink: 'syz.0.3808': attribute type 11 has an invalid length.
[  331.251802][T19347] netlink: 'syz.0.3808': attribute type 11 has an invalid length.
[  331.254752][T19347] netlink: 'syz.0.3808': attribute type 11 has an invalid length.
[  331.425224][T19356] netlink: 'syz.0.3812': attribute type 1 has an invalid length.
[  331.702874][T19375] netlink: 'syz.2.3819': attribute type 5 has an invalid length.
[  332.189438][T19405] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.194570][T19405] syzkaller0: entered promiscuous mode
[  332.196543][T19405] syzkaller0: entered allmulticast mode
[  332.208574][T19405] tipc: Resetting bearer <eth:syzkaller0>
[  332.213251][T19404] tipc: Resetting bearer <eth:syzkaller0>
[  332.224048][T19404] tipc: Disabling bearer <eth:syzkaller0>
[  333.143489][T19446] netlink: 'syz.0.3842': attribute type 2 has an invalid length.
[  333.244756][T19453] netlink: 'syz.0.3845': attribute type 6 has an invalid length.
[  333.247388][T19453] netlink: 'syz.0.3845': attribute type 4 has an invalid length.
[  333.539761][T19464] netlink: 'syz.0.3849': attribute type 1 has an invalid length.
[  333.543562][T19464] netlink: 'syz.0.3849': attribute type 2 has an invalid length.
[  333.873243][T19471] __nla_validate_parse: 93 callbacks suppressed
[  333.873253][T19471] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3851'.
[  333.891939][T19475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3850'.
[  334.023969][T19484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3854'.
[  334.163379][T19487] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  334.172793][T19487] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  334.576200][T19492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3855'.
[  334.701226][T19497] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3856'.
[  334.908545][T19504] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  334.968548][T19503] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3858'.
[  334.984518][T19503] veth0_to_team: entered promiscuous mode
[  334.989062][T19503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3858'.
[  334.996614][T19503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3858'.
[  335.302384][T19516] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3861'.
[  335.363865][T19523] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3865'.
[  336.782362][T11027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.787551][T11027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.817161][T19569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.175933][T19582] netlink: 'syz.0.3882': attribute type 2 has an invalid length.
[  337.482193][T19589] netlink: 'syz.1.3885': attribute type 13 has an invalid length.
[  337.486685][T19589] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  338.260881][T19613] nla_validate_range_unsigned: 11 callbacks suppressed
[  338.260892][T19613] netlink: 'syz.1.3890': attribute type 11 has an invalid length.
[  338.266209][T19613] netlink: 'syz.1.3890': attribute type 11 has an invalid length.
[  338.269004][T19613] netlink: 'syz.1.3890': attribute type 11 has an invalid length.
[  338.273200][T19613] netlink: 'syz.1.3890': attribute type 11 has an invalid length.
[  338.276234][T19613] netlink: 'syz.1.3890': attribute type 11 has an invalid length.
[  338.279160][T19613] netlink: 'syz.1.3890': attribute type 11 has an invalid length.
[  338.282422][T19613] netlink: 'syz.1.3890': attribute type 11 has an invalid length.
[  338.285247][T19613] netlink: 'syz.1.3890': attribute type 11 has an invalid length.
[  338.288094][T19613] netlink: 'syz.1.3890': attribute type 11 has an invalid length.
[  338.291554][T19613] netlink: 'syz.1.3890': attribute type 11 has an invalid length.
[  338.418016][T19617] netlink: 'syz.1.3892': attribute type 5 has an invalid length.
[  338.652309][T19632] IPVS: set_ctl: invalid protocol: 43 172.20.20.50:20004
[  339.224546][T19645] netlink: 'syz.1.3899': attribute type 1 has an invalid length.
[  339.227553][T19645] __nla_validate_parse: 83 callbacks suppressed
[  339.227560][T19645] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3899'.
[  339.233629][T19645] netlink: 'syz.1.3899': attribute type 1 has an invalid length.
[  339.448066][T19657] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3901'.
[  339.585014][T19659] netlink: zone id is out of range
[  339.587405][T19659] netlink: zone id is out of range
[  339.598121][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3902'.
[  339.602246][T19659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3902'.
[  339.740522][T19671] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3905'.
[  339.845537][T19681] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3908'.
[  339.989578][T19691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3910'.
[  340.220913][T19708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3912'.
[  340.412205][T19719] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3914'.
[  340.433868][T19719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3914'.
[  341.157441][T19757] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96
[  341.319665][T19736] netlink: 'syz.2.3916': attribute type 1 has an invalid length.
[  341.513757][T19775] netlink: 'syz.2.3921': attribute type 2 has an invalid length.
[  341.525799][T19775] netlink: 'syz.2.3921': attribute type 2 has an invalid length.
[  341.756115][T19793] netlink: 'syz.2.3925': attribute type 1 has an invalid length.
[  342.242466][T19834] sctp: [Deprecated]: syz.0.3933 (pid 19834) Use of struct sctp_assoc_value in delayed_ack socket option.
[  342.242466][T19834] Use struct sctp_sack_info instead
[  342.421072][T19838] netlink: 'syz.2.3937': attribute type 2 has an invalid length.
[  343.628952][ T5869] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.639433][ T5869] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.642995][ T5869] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.646919][ T5869] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  343.742691][T19879] netlink: 'syz.0.3951': attribute type 1 has an invalid length.
[  344.237757][T19902] netlink: 'syz.1.3955': attribute type 21 has an invalid length.
[  344.245927][T19902] netlink: 'syz.1.3955': attribute type 6 has an invalid length.
[  344.249146][T19902] __nla_validate_parse: 26 callbacks suppressed
[  344.249160][T19902] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3955'.
[  344.261835][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3955'.
[  344.267345][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3955'.
[  344.361679][T19911] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3958'.
[  344.398806][T19912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3960'.
[  344.404076][T19907] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.460005][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3959'.
[  344.915241][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3963'.
[  344.956015][T19925] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3964'.
[  345.247156][T12148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.257129][T12148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.538628][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'.
[  345.543912][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'.
[  346.087556][T19960] netlink: 'syz.2.3971': attribute type 3 has an invalid length.
[  346.118399][T19960] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000
[  346.122033][T19960] netlink: 'syz.2.3971': attribute type 3 has an invalid length.
[  346.870389][T19996] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  346.873396][T19996] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  346.883246][T19996] macsec1: entered promiscuous mode
[  347.026473][T20005] tipc: Resetting bearer <eth:team0>
[  347.083309][T10605] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  347.086464][T10605] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  347.089279][T10605] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  347.103016][T10605] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  347.808455][T20038] netlink: 'syz.0.3994': attribute type 1 has an invalid length.
[  348.909607][T20059] netlink: 'syz.0.4001': attribute type 6 has an invalid length.
[  348.912544][T20059] netlink: 'syz.0.4001': attribute type 5 has an invalid length.
[  348.916205][T20061] netlink: 'syz.0.4001': attribute type 6 has an invalid length.
[  348.919235][T20061] netlink: 'syz.0.4001': attribute type 5 has an invalid length.
[  349.107758][T20078] syzkaller1: entered promiscuous mode
[  349.109686][T20078] syzkaller1: entered allmulticast mode
[  349.282829][T20104] __nla_validate_parse: 54 callbacks suppressed
[  349.282845][T20104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4012'.
[  349.848951][T20117] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4015'.
[  349.872110][T20120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4016'.
[  349.875134][T20120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4016'.
[  349.878095][T20120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4016'.
[  349.921248][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4018'.
[  349.924964][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4018'.
[  350.219565][T20136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4020'.
[  350.238682][T20141] netlink: 'syz.2.4022': attribute type 1 has an invalid length.
[  350.244586][T20141] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4022'.
[  350.254439][T20141] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4022'.
[  350.283286][T20148] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  350.286311][T20145] IPVS: stopping backup sync thread 20148 ...
[  350.386426][T20159] netlink: 'syz.0.4027': attribute type 6 has an invalid length.
[  350.499782][T20168] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  350.503021][T20167] IPVS: stopping backup sync thread 20168 ...
[  351.125050][T20187] netlink: 'syz.1.4036': attribute type 1 has an invalid length.
[  351.991668][T20204] netlink: 'syz.2.4040': attribute type 1 has an invalid length.
[  352.418766][T20222] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  352.420662][T20221] IPVS: stopping backup sync thread 20222 ...
[  352.986937][T20258] netlink: 'syz.1.4052': attribute type 21 has an invalid length.
[  353.004057][T20258] netlink: 'syz.1.4052': attribute type 6 has an invalid length.
[  353.244275][T20276] nla_validate_range_unsigned: 32 callbacks suppressed
[  353.244286][T20276] netlink: 'syz.0.4054': attribute type 11 has an invalid length.
[  353.249013][T20276] netlink: 'syz.0.4054': attribute type 11 has an invalid length.
[  353.258355][T20276] netlink: 'syz.0.4054': attribute type 11 has an invalid length.
[  353.265675][T20276] netlink: 'syz.0.4054': attribute type 11 has an invalid length.
[  353.268404][T20276] netlink: 'syz.0.4054': attribute type 11 has an invalid length.
[  353.272799][T20276] netlink: 'syz.0.4054': attribute type 11 has an invalid length.
[  353.276014][T20276] netlink: 'syz.0.4054': attribute type 11 has an invalid length.
[  353.278655][T20276] netlink: 'syz.0.4054': attribute type 11 has an invalid length.
[  353.283901][T20276] netlink: 'syz.0.4054': attribute type 11 has an invalid length.
[  353.286563][T20276] netlink: 'syz.0.4054': attribute type 11 has an invalid length.
[  354.038167][T20334] IPVS: stopping backup sync thread 19504 ...
[  354.137221][T20344] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  354.144900][T20343] IPVS: stopping backup sync thread 20344 ...
[  354.203749][T20347] veth0_to_bond: left allmulticast mode
[  354.205889][T20347] veth0_to_team: left promiscuous mode
[  354.208837][T20347] vlan0: left promiscuous mode
[  354.212542][T20347] geneve2: left promiscuous mode
[  354.214599][T20347] bond1: left promiscuous mode
[  354.217827][T20347] veth3: left promiscuous mode
[  354.219816][T20347] veth5: left promiscuous mode
[  354.222984][T20347] xfrm1: left allmulticast mode
[  354.224829][T20347] veth9: left promiscuous mode
[  354.226646][T20347] veth11: left promiscuous mode
[  354.228403][T20347] gretap1: left promiscuous mode
[  354.230207][T20347] veth13: left promiscuous mode
[  354.233760][T20347] veth15: left promiscuous mode
[  354.235855][T20347] veth17: left promiscuous mode
[  354.237728][T20347] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  354.240188][T20347] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  354.243880][T20347] veth19: left promiscuous mode
[  354.245632][T20347] veth21: left promiscuous mode
[  354.565794][T20368] validate_nla: 36 callbacks suppressed
[  354.565804][T20368] netlink: 'syz.1.4078': attribute type 2 has an invalid length.
[  354.570584][T20368] __nla_validate_parse: 77 callbacks suppressed
[  354.570590][T20368] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4078'.
[  354.598022][T20324] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  354.654666][T20375] netlink: 'syz.0.4080': attribute type 9 has an invalid length.
[  354.657338][T20375] netlink: 209940 bytes leftover after parsing attributes in process `syz.0.4080'.
[  354.743912][T20377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4081'.
[  354.804078][T20379] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4082'.
[  354.808552][T20379] netlink: 'syz.0.4082': attribute type 10 has an invalid length.
[  355.056074][T20409] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  355.056652][T20407] IPVS: stopping backup sync thread 20409 ...
[  355.062869][T20407] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4088'.
[  355.066610][T20407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4088'.
[  355.069555][T20407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4088'.
[  355.127742][T20414] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4090'.
[  355.187503][T20422] netlink: 'syz.0.4092': attribute type 1 has an invalid length.
[  355.192198][T20422] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4092'.
[  355.197838][T20422] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4092'.
[  355.433025][T20442] gretap0: entered promiscuous mode
[  355.439141][T20446] netlink: 'syz.1.4101': attribute type 4 has an invalid length.
[  355.440759][T20442] 0{X: renamed from gretap0
[  355.446421][T20442] 0{X: left promiscuous mode
[  355.448120][T20442] 0{X: entered allmulticast mode
[  355.452382][T20442] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  355.463517][T20446] netlink: 'syz.1.4101': attribute type 4 has an invalid length.
[  355.486992][T20446] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.161819][T20494] netlink: 'syz.2.4114': attribute type 9 has an invalid length.
[  357.233224][T20500] netlink: 'syz.2.4117': attribute type 1 has an invalid length.
[  357.261863][T20500] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.280534][T20500] veth15: entered promiscuous mode
[  357.285489][T20500] bond0: (slave veth15): Enslaving as a backup interface with a down link
[  357.383210][T20510] netlink: 'syz.2.4119': attribute type 2 has an invalid length.
[  357.386379][T20510] netlink: 'syz.2.4119': attribute type 2 has an invalid length.
[  357.604852][T20527] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  358.657410][T20571] IPVS: stopping backup sync thread 20574 ...
[  358.657557][T20574] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  359.091139][T20625] openvswitch: netlink: Message has 4 unknown bytes.
[  359.229549][T20637] 8021q: adding VLAN 0 to HW filter on device bond15
[  359.251197][T20638] veth31: entered promiscuous mode
[  359.261356][T20638] bond15: (slave veth31): Enslaving as a backup interface with a down link
[  359.285351][T20637] veth33: entered promiscuous mode
[  359.295955][T20637] bond15: (slave veth33): Enslaving as a backup interface with a down link
[  359.316738][T20644] tipc: Resetting bearer <eth:team0>
[  359.343593][T20644] bond15: (slave veth31): Releasing backup interface
[  359.346604][T20644] bond15: (slave veth31): the permanent HWaddr of slave - da:ad:e0:ef:bc:b6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  359.363970][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.372958][T20644] bond15: (slave veth33): Releasing backup interface
[  359.383159][T20638] tipc: Resetting bearer <eth:team0>
[  359.423620][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.560704][T20659] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  359.560765][T20658] IPVS: stopping backup sync thread 20659 ...
[  359.573690][T20656] nla_validate_range_unsigned: 53 callbacks suppressed
[  359.573700][T20656] netlink: 'syz.2.4158': attribute type 11 has an invalid length.
[  359.578468][T20656] netlink: 'syz.2.4158': attribute type 11 has an invalid length.
[  359.581903][T20658] __nla_validate_parse: 38 callbacks suppressed
[  359.581911][T20658] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4159'.
[  359.586889][T20656] netlink: 'syz.2.4158': attribute type 11 has an invalid length.
[  359.588530][T20658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4159'.
[  359.590678][T20656] netlink: 'syz.2.4158': attribute type 11 has an invalid length.
[  359.595700][T20658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4159'.
[  359.596057][T20656] netlink: 'syz.2.4158': attribute type 11 has an invalid length.
[  359.602616][T20656] netlink: 'syz.2.4158': attribute type 11 has an invalid length.
[  359.605408][T20656] netlink: 'syz.2.4158': attribute type 11 has an invalid length.
[  359.607949][T20656] netlink: 'syz.2.4158': attribute type 11 has an invalid length.
[  359.611298][T20656] netlink: 'syz.2.4158': attribute type 11 has an invalid length.
[  359.613783][T20656] netlink: 'syz.2.4158': attribute type 11 has an invalid length.
[  359.616295][T20656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4158'.
[  359.698631][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4162'.
[  359.731803][T20663] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4160'.
[  359.734745][T20663] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4160'.
[  359.737735][T20663] validate_nla: 9 callbacks suppressed
[  359.737741][T20663] netlink: 'syz.2.4160': attribute type 6 has an invalid length.
[  359.743625][T20663] netlink: 'syz.2.4160': attribute type 5 has an invalid length.
[  359.746306][T20663] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4160'.
[  359.772968][T20671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4163'.
[  359.920964][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4166'.
[  360.074350][T20689] block nbd0: NBD_DISCONNECT
[  360.076095][T20689] block nbd0: Send disconnect failed -107
[  360.360247][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.374736][T20699] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  361.116939][T20739] netlink: 'syz.2.4184': attribute type 5 has an invalid length.
[  362.159342][T20781] netlink: 'syz.0.4198': attribute type 3 has an invalid length.
[  362.194918][T20784] netlink: 'syz.2.4199': attribute type 10 has an invalid length.
[  362.198359][T20784] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  362.314294][T20790] bond16: entered allmulticast mode
[  362.316302][T20790] 8021q: adding VLAN 0 to HW filter on device bond16
[  362.379768][T20797] veth1_to_team: left promiscuous mode
[  362.385626][T20797] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  362.742104][T20809] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  362.776745][T20816] netlink: 'syz.2.4207': attribute type 1 has an invalid length.
[  363.133904][T20841] bond12: (slave veth19): Releasing backup interface
[  363.136632][T20841] bond12: (slave veth19): the permanent HWaddr of slave - 2a:45:cd:15:23:02 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  363.149663][T20841] bond12: (slave veth21): Releasing backup interface
[  363.154391][T20841] team0: Unable to change to the same mode the team is in
[  363.157421][T20841] vlan0: entered promiscuous mode
[  363.160362][T20841] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  363.438713][T20867] netlink: 'syz.1.4221': attribute type 9 has an invalid length.
[  363.444975][T20867] netlink: 'syz.1.4221': attribute type 7 has an invalid length.
[  363.450132][T20867] netlink: 'syz.1.4221': attribute type 8 has an invalid length.
[  363.486216][T20873] netlink: 'syz.2.4223': attribute type 1 has an invalid length.
[  363.494068][T20873] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  363.712367][T20898] IPVS: stopping backup sync thread 20900 ...
[  363.814565][T20893] dvmrp8: entered allmulticast mode
[  363.818347][T20910] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  363.824684][T20893] IPVS: stopping backup sync thread 20910 ...
[  363.830162][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.840985][T20891] dvmrp8: left allmulticast mode
[  364.057290][T20921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.186988][T20927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.320352][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.749422][T20946] 8021q: adding VLAN 0 to HW filter on device bond14
[  364.830357][T20958] __nla_validate_parse: 54 callbacks suppressed
[  364.830372][T20958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4243'.
[  364.843851][T20958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4243'.
[  364.905380][T20963] team0: Unable to change to the same mode the team is in
[  364.952190][T20970] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  364.955797][T20968] IPVS: stopping backup sync thread 20970 ...
[  364.962607][T20968] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4245'.
[  364.969243][T20968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4245'.
[  364.974531][T20968] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4245'.
[  365.058093][T20976] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4246'.
[  365.079638][T20978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4247'.
[  365.155394][T20989] bridge5: the hash_elasticity option has been deprecated and is always 16
[  365.158372][T20989] bridge5: entered allmulticast mode
[  365.163887][T20991] netlink: 788 bytes leftover after parsing attributes in process `syz.1.4247'.
[  365.169828][T20993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4251'.
[  365.183747][T20988] bridge6: the hash_elasticity option has been deprecated and is always 16
[  365.187331][T20988] bridge6: entered allmulticast mode
[  365.273721][T20997] netlink: 788 bytes leftover after parsing attributes in process `syz.2.4251'.
[  365.644502][T21006] nla_validate_range_unsigned: 11 callbacks suppressed
[  365.644516][T21006] netlink: 'syz.0.4255': attribute type 11 has an invalid length.
[  365.650821][T21006] netlink: 'syz.0.4255': attribute type 11 has an invalid length.
[  365.654059][T21006] netlink: 'syz.0.4255': attribute type 11 has an invalid length.
[  365.657486][T21006] netlink: 'syz.0.4255': attribute type 11 has an invalid length.
[  365.661393][T21006] netlink: 'syz.0.4255': attribute type 11 has an invalid length.
[  365.664668][T21006] netlink: 'syz.0.4255': attribute type 11 has an invalid length.
[  365.668053][T21006] netlink: 'syz.0.4255': attribute type 11 has an invalid length.
[  365.671809][T21006] netlink: 'syz.0.4255': attribute type 11 has an invalid length.
[  365.675097][T21006] netlink: 'syz.0.4255': attribute type 11 has an invalid length.
[  365.678435][T21006] netlink: 'syz.0.4255': attribute type 11 has an invalid length.
[  366.557443][T21049] validate_nla: 8 callbacks suppressed
[  366.557457][T21049] netlink: 'syz.1.4269': attribute type 1 has an invalid length.
[  366.718008][T21056] netlink: 'syz.1.4272': attribute type 21 has an invalid length.
[  366.721155][T21056] netlink: 'syz.1.4272': attribute type 6 has an invalid length.
[  366.885798][T21076] netlink: 'syz.0.4274': attribute type 21 has an invalid length.
[  366.889409][T21076] netlink: 'syz.0.4274': attribute type 6 has an invalid length.
[  367.258628][T21101] netlink: 'syz.1.4280': attribute type 2 has an invalid length.
[  367.559401][T21120] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.563816][T21120] veth1_virt_wifi: entered promiscuous mode
[  367.566419][T21120] veth1_virt_wifi: entered allmulticast mode
[  367.587717][T21120] tipc: Resetting bearer <eth:syzkaller0>
[  367.783111][T21125] netlink: 'syz.2.4290': attribute type 4 has an invalid length.
[  367.798411][T21125] netlink: 'syz.2.4290': attribute type 4 has an invalid length.
[  367.834052][T21125] bridge_slave_1: default FDB implementation only supports local addresses
[  368.053949][T21147] netlink: 'syz.0.4297': attribute type 6 has an invalid length.
[  368.057366][T21147] netlink: 'syz.0.4297': attribute type 4 has an invalid length.
[  368.086699][T21149] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  368.150060][T21154] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  368.153754][T21153] IPVS: stopping backup sync thread 21154 ...
[  368.562974][T21172] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.567883][T21176] 8021q: adding VLAN 0 to HW filter on device bond16
[  368.849241][T21197] sctp: [Deprecated]: syz.1.4313 (pid 21197) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.849241][T21197] Use struct sctp_sack_info instead
[  369.979392][T21267] sock: sock_timestamping_bind_phc: sock not bind to device
[  370.078533][T21294] __nla_validate_parse: 350 callbacks suppressed
[  370.078543][T21294] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4333'.
[  370.084150][T21294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4333'.
[  370.087154][T21294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4333'.
[  370.291014][T21303] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4335'.
[  370.298121][T21303] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4335'.
[  370.409022][T21308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4337'.
[  370.512323][T21309] netlink: 788 bytes leftover after parsing attributes in process `syz.0.4337'.
[  371.048772][T21335] nla_validate_range_unsigned: 11 callbacks suppressed
[  371.048786][T21335] netlink: 'syz.2.4343': attribute type 11 has an invalid length.
[  371.054828][T21335] netlink: 'syz.2.4343': attribute type 11 has an invalid length.
[  371.057509][T21335] netlink: 'syz.2.4343': attribute type 11 has an invalid length.
[  371.060554][T21335] netlink: 'syz.2.4343': attribute type 11 has an invalid length.
[  371.063361][T21335] netlink: 'syz.2.4343': attribute type 11 has an invalid length.
[  371.065939][T21335] netlink: 'syz.2.4343': attribute type 11 has an invalid length.
[  371.068655][T21335] netlink: 'syz.2.4343': attribute type 11 has an invalid length.
[  371.071849][T21335] netlink: 'syz.2.4343': attribute type 11 has an invalid length.
[  371.074500][T21335] netlink: 'syz.2.4343': attribute type 11 has an invalid length.
[  371.077433][T21335] netlink: 'syz.2.4343': attribute type 11 has an invalid length.
[  371.080569][T21335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4343'.
[  371.176473][T21339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4345'.
[  371.406955][T21345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4347'.
[  371.712271][T21373] validate_nla: 5 callbacks suppressed
[  371.712280][T21373] netlink: 'syz.1.4356': attribute type 3 has an invalid length.
[  371.724792][T21373] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  371.733210][T21373] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  372.146627][T21421] syzkaller1: entered promiscuous mode
[  372.148547][T21421] syzkaller1: entered allmulticast mode
[  372.152859][T21421] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  372.262021][T21428] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  372.262079][T21426] IPVS: stopping backup sync thread 21428 ...
[  372.571628][T21464] netlink: 'syz.2.4379': attribute type 3 has an invalid length.
[  372.687955][T21476] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  372.692028][T21475] IPVS: stopping backup sync thread 21476 ...
[  372.947887][T21484] delete_channel: no stack
[  372.992889][T21497] tipc: Resetting bearer <eth:team0>
[  373.003976][T21503] dvmrp8: entered allmulticast mode
[  373.006659][T21505] netlink: 'syz.2.4392': attribute type 5 has an invalid length.
[  373.060858][T21502] dvmrp8: left allmulticast mode
[  373.135450][T21515] netlink: 'syz.2.4394': attribute type 29 has an invalid length.
[  373.138726][T21518] netlink: 'syz.2.4394': attribute type 29 has an invalid length.
[  373.384098][T21543] netlink: 'syz.2.4401': attribute type 1 has an invalid length.
[  373.407370][T21543] veth17: entered promiscuous mode
[  374.163246][T21576] IPVS: stopping backup sync thread 21577 ...
[  374.165409][T21577] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  374.172970][T21576] tipc: Trying to set illegal importance in message
[  374.319548][T21590] netlink: 'syz.1.4417': attribute type 1 has an invalid length.
[  374.757433][T21626] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  374.762267][T21626] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  374.765463][T21626] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  374.962591][T21656] netlink: 'syz.2.4433': attribute type 6 has an invalid length.
[  374.965630][T21656] netlink: 'syz.2.4433': attribute type 5 has an invalid length.
[  396.453681][T21674] 8021q: VLANs not supported on wg1
[  396.456811][T21674] __nla_validate_parse: 96 callbacks suppressed
[  396.457182][T21674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4440'.
[  396.470295][T21674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4440'.
[  396.478913][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4440'.
[  396.640236][T21702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4446'.
[  396.797252][T21718] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  396.813432][T21718] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  396.824376][T21718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4449'.
[  396.835414][T21718] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4449'.
[  396.948934][T21734] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4454'.
[  397.067080][T21747] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4457'.
[  397.073703][T21746] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4457'.
[  397.143028][T21758] netlink: 'syz.1.4458': attribute type 1 has an invalid length.
[  397.145789][T21758] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4458'.
[  397.216392][T21768] netlink: 'syz.2.4459': attribute type 1 has an invalid length.
[  397.341406][T21781] netlink: 'syz.0.4465': attribute type 1 has an invalid length.
[  397.344261][T21781] netlink: 'syz.0.4465': attribute type 2 has an invalid length.
[  397.347013][T21781] netlink: 'syz.0.4465': attribute type 2 has an invalid length.
[  397.347252][T21787] netlink: 'syz.2.4466': attribute type 1 has an invalid length.
[  397.349686][T21781] netlink: 'syz.0.4465': attribute type 2 has an invalid length.
[  397.349704][T21781] netlink: 'syz.0.4465': attribute type 2 has an invalid length.
[  397.349708][T21781] netlink: 'syz.0.4465': attribute type 2 has an invalid length.
[  397.384218][T21788] netlink: 'syz.2.4466': attribute type 1 has an invalid length.
[  397.442810][T21798] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  397.447158][T21796] IPVS: stopping backup sync thread 21798 ...
[  398.426177][T21867] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  399.765488][T21958] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.768286][T21958] syzkaller0: entered promiscuous mode
[  399.774449][T21958] syzkaller0: entered allmulticast mode
[  399.805453][T21957] tipc: Resetting bearer <eth:syzkaller0>
[  399.821299][T21956] tipc: Resetting bearer <eth:syzkaller0>
[  399.835297][T21956] tipc: Disabling bearer <eth:syzkaller0>
[  400.163558][T21973] dvmrp0: entered allmulticast mode
[  400.563053][   T33] audit: type=1800 audit(1755296214.868:9): pid=21985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4527" name=CB dev="tmpfs" ino=7751 res=0 errno=0
[  400.921096][T22015] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20002
[  400.971038][T22019] tipc: Can't bind to reserved service type 2
[  401.549501][T22059] __nla_validate_parse: 73 callbacks suppressed
[  401.549516][T22059] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4552'.
[  401.599064][T22067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4554'.
[  401.603200][T22067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4554'.
[  401.611527][T22067] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.620835][T22068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4555'.
[  401.633442][T22068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4555'.
[  401.665999][T22072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4557'.
[  401.773257][T22077] netlink: 788 bytes leftover after parsing attributes in process `syz.0.4557'.
[  401.883161][T22082] nla_validate_range_unsigned: 53 callbacks suppressed
[  401.883171][T22082] netlink: 'syz.2.4560': attribute type 11 has an invalid length.
[  401.888415][T22082] netlink: 'syz.2.4560': attribute type 11 has an invalid length.
[  401.891609][T22082] netlink: 'syz.2.4560': attribute type 11 has an invalid length.
[  401.894298][T22082] netlink: 'syz.2.4560': attribute type 11 has an invalid length.
[  401.897258][T22082] netlink: 'syz.2.4560': attribute type 11 has an invalid length.
[  401.902079][T22082] netlink: 'syz.2.4560': attribute type 11 has an invalid length.
[  401.904788][T22082] netlink: 'syz.2.4560': attribute type 11 has an invalid length.
[  401.907420][T22082] netlink: 'syz.2.4560': attribute type 11 has an invalid length.
[  401.910629][T22082] netlink: 'syz.2.4560': attribute type 11 has an invalid length.
[  401.913859][T22082] netlink: 'syz.2.4560': attribute type 11 has an invalid length.
[  401.917130][T22082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4560'.
[  401.975600][T22084] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  402.016421][T22090] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4563'.
[  402.017482][T22088] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4562'.
[  402.459763][T22105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.994958][T22124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.377860][T22167] Unsupported ieee802154 address type: 0
[  404.411695][T22169] validate_nla: 18 callbacks suppressed
[  404.411708][T22169] netlink: 'syz.2.4587': attribute type 1 has an invalid length.
[  404.530590][T22179] netlink: 'syz.2.4590': attribute type 9 has an invalid length.
[  404.698705][T22194] sit0: entered promiscuous mode
[  404.704602][T22194] netlink: 'syz.1.4594': attribute type 1 has an invalid length.
[  404.828109][T22205] netlink: 'syz.2.4596': attribute type 1 has an invalid length.
[  405.005563][T22217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.009788][T22217] netlink: 'syz.1.4599': attribute type 1 has an invalid length.
[  405.034868][T22219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.846689][T22245] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  405.852780][T22245] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  405.960751][T22251] netlink: 'syz.2.4608': attribute type 21 has an invalid length.
[  405.972014][T22251] netlink: 'syz.2.4608': attribute type 6 has an invalid length.
[  406.043497][T22260] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  406.122927][T22263] netlink: 'syz.0.4614': attribute type 4 has an invalid length.
[  406.127460][T22264] netlink: 'syz.0.4614': attribute type 4 has an invalid length.
[  406.132216][T22263] netlink: 'syz.0.4614': attribute type 4 has an invalid length.
[  406.313428][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  406.316110][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.318982][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.321835][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.325143][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.328287][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.331588][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.334767][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.337997][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.341086][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.343945][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.346757][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.350194][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.352971][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.356317][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.359181][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.362253][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.365558][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.368961][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.371853][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.374584][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.377563][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.380943][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.383660][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.386408][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.389319][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.392577][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.395853][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.399124][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.402398][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.405619][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.408496][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.411309][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.413810][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.416451][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.419005][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.422035][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.425656][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.428583][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.431258][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.433851][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.436424][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.439786][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.443116][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.445778][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.448390][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.451329][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.454158][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.457138][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.460068][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.463289][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.466196][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.469355][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  406.472656][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  406.987666][T22301] __nla_validate_parse: 155 callbacks suppressed
[  406.987677][T22301] netlink: 788 bytes leftover after parsing attributes in process `syz.1.4623'.
[  407.078432][T22303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4624'.
[  407.224679][T22307] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4625'.
[  407.316591][T22313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4627'.
[  407.320205][T22313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4627'.
[  408.264332][T22326] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  408.272152][T22329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4633'.
[  408.280600][T22329] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4633'.
[  408.285723][T22329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4633'.
[  408.408926][T22334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4634'.
[  408.543164][T22344] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  408.547048][T22343] IPVS: stopping backup sync thread 22344 ...
[  408.550245][T22343] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4638'.
[  408.756141][T22362] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  409.248531][T22397] IPVS: stopping backup sync thread 22398 ...
[  409.254433][T22398] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  409.725654][T22423] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  409.729591][T22422] IPVS: stopping backup sync thread 22423 ...
[  409.828053][T22425] validate_nla: 4 callbacks suppressed
[  409.828066][T22425] netlink: 'syz.2.4660': attribute type 1 has an invalid length.
[  409.874586][T22427] openvswitch: netlink: Missing key (keys=40, expected=80)
[  410.446662][T22448] netlink: 'syz.1.4668': attribute type 83 has an invalid length.
[  410.753066][T22454] netlink: 'syz.1.4670': attribute type 1 has an invalid length.
[  412.197152][T22506] __nla_validate_parse: 34 callbacks suppressed
[  412.197165][T22506] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4683'.
[  412.405963][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4686'.
[  412.409509][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4686'.
[  412.486518][T22528] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4688'.
[  412.490362][T22528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4688'.
[  412.613777][T22544] netlink: 'syz.2.4692': attribute type 2 has an invalid length.
[  412.633887][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4693'.
[  412.677928][T22554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4695'.
[  412.728010][T22559] netlink: 'syz.2.4696': attribute type 1 has an invalid length.
[  412.731833][T22559] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4696'.
[  412.735541][T22560] netlink: 'syz.2.4696': attribute type 1 has an invalid length.
[  412.738886][T22560] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4696'.
[  412.747706][T22559] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4696'.
[  413.553200][T22573] netlink: 'syz.1.4699': attribute type 1 has an invalid length.
[  413.842414][T22590] nla_validate_range_unsigned: 32 callbacks suppressed
[  413.842424][T22590] netlink: 'syz.2.4703': attribute type 11 has an invalid length.
[  413.847164][T22590] netlink: 'syz.2.4703': attribute type 11 has an invalid length.
[  413.851863][T22590] netlink: 'syz.2.4703': attribute type 11 has an invalid length.
[  413.852324][T22598] netlink: 'syz.1.4706': attribute type 2 has an invalid length.
[  413.854480][T22590] netlink: 'syz.2.4703': attribute type 11 has an invalid length.
[  413.854490][T22590] netlink: 'syz.2.4703': attribute type 11 has an invalid length.
[  413.857861][T22598] netlink: 'syz.1.4706': attribute type 2 has an invalid length.
[  413.860817][T22590] netlink: 'syz.2.4703': attribute type 11 has an invalid length.
[  413.860825][T22590] netlink: 'syz.2.4703': attribute type 11 has an invalid length.
[  413.860831][T22590] netlink: 'syz.2.4703': attribute type 11 has an invalid length.
[  413.860860][T22590] netlink: 'syz.2.4703': attribute type 11 has an invalid length.
[  413.860867][T22590] netlink: 'syz.2.4703': attribute type 11 has an invalid length.
[  413.867000][T22598] netlink: 'syz.1.4706': attribute type 2 has an invalid length.
[  413.916376][T22601] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  413.923115][T22600] IPVS: stopping backup sync thread 22601 ...
[  413.965005][T22603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.035352][T22610] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  414.136951][T22615] bridge3: entered allmulticast mode
[  435.891859][T22644] IPVS: stopping backup sync thread 22645 ...
[  435.897457][T22644] __nla_validate_parse: 14 callbacks suppressed
[  435.897472][T22644] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4720'.
[  435.922760][T22644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4720'.
[  435.926569][T22644] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4720'.
[  435.963925][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  435.966927][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  435.969795][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  435.970434][T22652] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4723'.
[  435.976823][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  435.982248][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  436.023724][T22656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4725'.
[  436.026852][T22656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4725'.
[  436.032244][T22656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4725'.
[  436.082855][T22654] nla_validate_range_unsigned: 32 callbacks suppressed
[  436.082865][T22654] netlink: 'syz.2.4724': attribute type 11 has an invalid length.
[  436.087974][T22654] netlink: 'syz.2.4724': attribute type 11 has an invalid length.
[  436.092175][T22654] netlink: 'syz.2.4724': attribute type 11 has an invalid length.
[  436.094823][T22654] netlink: 'syz.2.4724': attribute type 11 has an invalid length.
[  436.097376][T22654] netlink: 'syz.2.4724': attribute type 11 has an invalid length.
[  436.102237][T22654] netlink: 'syz.2.4724': attribute type 11 has an invalid length.
[  436.105881][T22654] netlink: 'syz.2.4724': attribute type 11 has an invalid length.
[  436.108730][T22654] netlink: 'syz.2.4724': attribute type 11 has an invalid length.
[  436.112493][T22654] netlink: 'syz.2.4724': attribute type 11 has an invalid length.
[  436.118324][T22648] chnl_net:caif_netlink_parms(): no params data found
[  436.121353][T22654] netlink: 'syz.2.4724': attribute type 11 has an invalid length.
[  436.123987][T22654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4724'.
[  436.205153][T22648] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.208508][T22648] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.212259][T22648] bridge_slave_0: entered allmulticast mode
[  436.215000][T22648] bridge_slave_0: entered promiscuous mode
[  436.219712][T22648] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.223475][T22648] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.227122][T22648] bridge_slave_1: entered allmulticast mode
[  436.231323][T22648] bridge_slave_1: entered promiscuous mode
[  436.236122][T22671] validate_nla: 31 callbacks suppressed
[  436.236130][T22671] netlink: 'syz.1.4727': attribute type 1 has an invalid length.
[  436.242025][T22671] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4727'.
[  436.245432][T22669] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4728'.
[  436.263092][T22648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.268396][T22648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.293324][T22648] team0: Port device team_slave_0 added
[  436.296743][T22648] team0: Port device team_slave_1 added
[  436.334657][T22648] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.337840][T22648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.352953][T22648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.365087][T22648] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.367445][T22648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.378256][T22648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.441559][T22648] hsr_slave_0: entered promiscuous mode
[  436.444065][T22648] hsr_slave_1: entered promiscuous mode
[  436.446928][T22648] debugfs: 'hsr0' already exists in 'hsr'
[  436.449218][T22648] Cannot create hsr debugfs directory
[  436.556819][T22648] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  436.563265][T22648] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  436.569166][T22648] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  436.573997][T22648] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  436.595517][T22648] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.598232][T22648] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.601011][T22648] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.603741][T22648] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.648456][T22648] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.660648][T11024] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.663812][T11024] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.675331][T22648] 8021q: adding VLAN 0 to HW filter on device team0
[  436.684141][T11024] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.687173][T11024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.694390][T11024] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.696759][T11024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.836632][T22648] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.863801][T22648] veth0_vlan: entered promiscuous mode
[  436.869433][T22648] veth1_vlan: entered promiscuous mode
[  436.894472][T22648] veth0_macvtap: entered promiscuous mode
[  436.898618][T22648] veth1_macvtap: entered promiscuous mode
[  436.912244][T22648] batman_adv: batadv0: Interface activated: batadv_slave_0
[  436.921904][T22648] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.929565][T10605] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.933476][T10605] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.949775][T10605] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.955975][T10605] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.026959][T11024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.033812][T11024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.077851][T11027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.093649][T11027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.120975][T22691] IPVS: stopping backup sync thread 22692 ...
[  437.123157][T22692] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  438.040261][ T5861] Bluetooth: hci3: command tx timeout
[  438.214189][T22740] netlink: 'syz.1.4742': attribute type 1 has an invalid length.
[  438.331068][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  438.731106][T22767] lo speed is unknown, defaulting to 1000
[  438.733630][T22767] lo speed is unknown, defaulting to 1000
[  438.736860][T22767] lo speed is unknown, defaulting to 1000
[  438.752270][T22767] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  438.774506][T22767] lo speed is unknown, defaulting to 1000
[  438.778047][T22767] lo speed is unknown, defaulting to 1000
[  438.781198][T22767] lo speed is unknown, defaulting to 1000
[  438.783932][T22767] lo speed is unknown, defaulting to 1000
[  438.865738][T22772] syzkaller1: entered promiscuous mode
[  438.868129][T22772] syzkaller1: entered allmulticast mode
[  439.357078][T22792] lo speed is unknown, defaulting to 1000
[  439.505627][T22791] netlink: 'syz.1.4758': attribute type 21 has an invalid length.
[  439.509312][T22791] netlink: 'syz.1.4758': attribute type 6 has an invalid length.
[  439.565892][T22811] netlink: 'syz.1.4762': attribute type 7 has an invalid length.
[  439.570113][T22811] netlink: 'syz.1.4762': attribute type 8 has an invalid length.
[  439.582877][T22811] ip6gretap0: entered promiscuous mode
[  439.585555][T22811] ip6gretap0: left promiscuous mode
[  439.794720][T22823] netlink: 'syz.1.4765': attribute type 1 has an invalid length.
[  440.120051][ T5238] Bluetooth: hci3: command tx timeout
[  440.506336][T22842] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  440.506441][T22841] IPVS: stopping backup sync thread 22842 ...
[  441.040952][T22854] netlink: 'syz.1.4773': attribute type 2 has an invalid length.
[  441.277608][T22856] lo speed is unknown, defaulting to 1000
[  441.327887][T22859] __nla_validate_parse: 40 callbacks suppressed
[  441.327901][T22859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4775'.
[  441.338953][T22859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4775'.
[  441.420997][T22863] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4776'.
[  441.464472][T22867] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4777'.
[  441.487810][T22867] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4777'.
[  441.494728][T22867] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4777'.
[  441.499542][T22867] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4777'.
[  441.618674][T22881] netlink: 'syz.2.4781': attribute type 2 has an invalid length.
[  441.619648][T22880] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4780'.
[  441.628331][T22880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4780'.
[  441.632319][T22880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4780'.
[  441.643307][T22882] netlink: 'syz.2.4781': attribute type 2 has an invalid length.
[  441.743090][T22893] netlink: 'syz.2.4784': attribute type 1 has an invalid length.
[  441.806806][T22899] lo speed is unknown, defaulting to 1000
[  441.851961][T22901] nla_validate_range_unsigned: 32 callbacks suppressed
[  441.851971][T22901] netlink: 'syz.3.4786': attribute type 11 has an invalid length.
[  441.856737][T22901] netlink: 'syz.3.4786': attribute type 11 has an invalid length.
[  441.859235][T22901] netlink: 'syz.3.4786': attribute type 11 has an invalid length.
[  441.862032][T22901] netlink: 'syz.3.4786': attribute type 11 has an invalid length.
[  441.864472][T22901] netlink: 'syz.3.4786': attribute type 11 has an invalid length.
[  441.867497][T22901] netlink: 'syz.3.4786': attribute type 11 has an invalid length.
[  441.870177][T22901] netlink: 'syz.3.4786': attribute type 11 has an invalid length.
[  441.872652][T22901] netlink: 'syz.3.4786': attribute type 11 has an invalid length.
[  441.875320][T22901] netlink: 'syz.3.4786': attribute type 11 has an invalid length.
[  441.878574][T22901] netlink: 'syz.3.4786': attribute type 11 has an invalid length.
[  442.037608][T22908] tipc: Started in network mode
[  442.040560][T22908] tipc: Node identity aa0d3d111cba, cluster identity 4711
[  442.043360][T22908] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  442.077930][T22908] syzkaller0: entered promiscuous mode
[  442.082531][T22908] syzkaller0: entered allmulticast mode
[  442.085031][T22908] tipc: Resetting bearer <eth:syzkaller0>
[  442.123482][T22906] tipc: Resetting bearer <eth:syzkaller0>
[  442.201456][ T5238] Bluetooth: hci3: command 0x040f tx timeout
[  443.131234][  T793] tipc: Node number set to 3065462033
[  443.189739][T22906] tipc: Disabling bearer <eth:syzkaller0>
[  443.328646][T22928] netlink: 'syz.3.4794': attribute type 1 has an invalid length.
[  443.334876][T22931] netlink: 'syz.2.4795': attribute type 10 has an invalid length.
[  443.453900][T22942] lo speed is unknown, defaulting to 1000
[  443.513497][T22949] lo speed is unknown, defaulting to 1000
[  443.678725][T22957] lo speed is unknown, defaulting to 1000
[  444.280267][ T5861] Bluetooth: hci3: command 0x040f tx timeout
[  444.486919][T22981] lo speed is unknown, defaulting to 1000
[  444.793484][T22988] netlink: 'syz.1.4809': attribute type 3 has an invalid length.
[  444.881821][T22994] netlink: 'syz.2.4812': attribute type 1 has an invalid length.
[  445.063974][T23011] netlink: 'syz.1.4817': attribute type 1 has an invalid length.
[  445.067651][T23011] netlink: 'syz.1.4817': attribute type 4 has an invalid length.
[  445.371876][T23027] lo speed is unknown, defaulting to 1000
[  445.386718][T23031] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  445.389997][T23030] IPVS: stopping backup sync thread 23031 ...
[  445.446085][T23035] netlink: 'syz.2.4825': attribute type 4 has an invalid length.
[  445.461174][T23027] Bluetooth: MGMT ver 1.23
[  445.487081][T23027] sock: sock_timestamping_bind_phc: sock not bind to device
[  445.606146][T23041] lo speed is unknown, defaulting to 1000
[  445.730843][T23054] sock: sock_set_timeout: `syz.3.4831' (pid 23054) tries to set negative timeout
[  446.282996][T23089] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 2, id = 0
[  446.286450][T23088] IPVS: stopping backup sync thread 23089 ...
[  446.370795][ T5238] Bluetooth: hci3: command 0x040f tx timeout
[  446.433316][T23107] __nla_validate_parse: 43 callbacks suppressed
[  446.433327][T23107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4841'.
[  446.446131][T23114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4847'.
[  446.498052][T23116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4848'.
[  446.581115][T23120] sctp: [Deprecated]: syz.2.4850 (pid 23120) Use of struct sctp_assoc_value in delayed_ack socket option.
[  446.581115][T23120] Use struct sctp_sack_info instead
[  446.694964][T23128] bond0: option active_slave: mode dependency failed, not supported in mode 802.3ad(4)
[  446.786249][T23132] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4855'.
[  446.807990][T23136] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4856'.
[  446.812297][T23136] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4856'.
[  446.815796][T23136] validate_nla: 2 callbacks suppressed
[  446.815802][T23136] netlink: 'syz.2.4856': attribute type 5 has an invalid length.
[  446.821244][T23136] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4856'.
[  446.824408][T23137] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4856'.
[  446.827740][T23137] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4856'.
[  446.831996][T23137] netlink: 'syz.2.4856': attribute type 5 has an invalid length.
[  446.835540][T23137] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4856'.
[  446.973929][T23147] lo speed is unknown, defaulting to 1000
[  447.085962][T23160] netlink: 'syz.2.4862': attribute type 30 has an invalid length.
[  447.091850][T23160] netlink: 'syz.2.4862': attribute type 1 has an invalid length.
[  447.143024][T23167] netlink: 'syz.2.4865': attribute type 26 has an invalid length.
[  447.175166][T23170] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  447.175236][T23168] IPVS: stopping backup sync thread 23170 ...
[  447.267425][T23187] netlink: 'syz.3.4869': attribute type 2 has an invalid length.
[  447.398207][T23201] lo speed is unknown, defaulting to 1000
[  447.508761][T23211] netlink: 'syz.2.4875': attribute type 1 has an invalid length.
[  447.726845][T23226] batadv0: left promiscuous mode
[  447.728660][T23226] veth0: left promiscuous mode
[  447.740912][T23226] veth1: left promiscuous mode
[  447.742856][T23226] wg0: left promiscuous mode
[  447.745072][T23226] wg1: left promiscuous mode
[  447.746772][T23226] : left promiscuous mode
[  447.748764][T23226] veth0_to_bridge: left promiscuous mode
[  447.760244][T23226] bridge_slave_0: left promiscuous mode
[  447.762139][T23226] veth1_to_bridge: left promiscuous mode
[  447.764195][T23226] bridge_slave_1: left promiscuous mode
[  447.766387][T23226] veth0_to_bond: left promiscuous mode
[  447.771818][T23226] bond_slave_0: left promiscuous mode
[  447.774117][T23226] veth1_to_bond: left promiscuous mode
[  447.776179][T23226] bond_slave_1: left promiscuous mode
[  447.778329][T23226] veth0_to_team: left promiscuous mode
[  447.782286][T23226] team_slave_0: left promiscuous mode
[  447.784183][T23226] team_slave_1: left promiscuous mode
[  447.786217][T23226] veth0_to_batadv: left promiscuous mode
[  447.788152][T23226] batadv_slave_0: left promiscuous mode
[  447.794927][T23226] veth1_to_batadv: left promiscuous mode
[  447.797961][T23226] batadv_slave_1: left promiscuous mode
[  447.800382][T23226] xfrm0: left promiscuous mode
[  447.802296][T23226] veth0_to_hsr: left promiscuous mode
[  447.811036][T23226] veth1_virt_wifi: left promiscuous mode
[  447.813507][T23226] veth0_virt_wifi: left promiscuous mode
[  447.815449][T23226] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  447.827401][T23226] vlan0: left promiscuous mode
[  447.832106][T23226] vlan1: left promiscuous mode
[  447.833812][T23226] macvlan0: left promiscuous mode
[  447.836244][T23226] ipvlan0: left promiscuous mode
[  447.838285][T23226] ipvlan1: left promiscuous mode
[  447.840976][T23226] macvtap0: left promiscuous mode
[  447.842779][T23226] macsec0: left promiscuous mode
[  447.844431][T23226] geneve0: left promiscuous mode
[  447.846096][T23226] geneve1: left promiscuous mode
[  447.847787][T23226] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  447.851345][T23226] mac80211_hwsim hwsim9 wlan2: left promiscuous mode
[  447.853651][T23226] mac80211_hwsim hwsim12 wlan3: left promiscuous mode
[  447.856344][T23226] mac80211_hwsim hwsim13 wlan4: left promiscuous mode
[  447.858780][T23226] netdevsim netdevsim2 eth0: left promiscuous mode
[  447.863050][T23226] netdevsim netdevsim2 eth1: left promiscuous mode
[  447.865358][T23226] netdevsim netdevsim2 eth2: left promiscuous mode
[  447.867746][T23226] netdevsim netdevsim2 eth3: left promiscuous mode
[  447.871076][T23226] mac80211_hwsim hwsim15 wlan1: left promiscuous mode
[  447.874318][T23226] mac80211_hwsim hwsim16 wlan5: left promiscuous mode
[  447.876735][T23226] mac80211_hwsim hwsim18 wlan6: left promiscuous mode
[  447.879054][T23226] mac80211_hwsim hwsim20 wlan7: left promiscuous mode
[  447.881773][T23226] mac80211_hwsim hwsim21 wlan8: left promiscuous mode
[  447.884151][T23226] mac80211_hwsim hwsim22 wlan9: left promiscuous mode
[  447.886498][T23226] mac80211_hwsim hwsim23 wlan10: left promiscuous mode
[  447.889150][T23226] veth2: left promiscuous mode
[  447.892664][T23226] veth3: left promiscuous mode
[  447.894411][T23226] bond1: left promiscuous mode
[  447.896171][T23226] ip6gretap1: left promiscuous mode
[  447.897973][T23226] veth4: left promiscuous mode
[  447.899843][T23226] veth5: left promiscuous mode
[  447.901974][T23226] mac80211_hwsim hwsim25 wlan11: left promiscuous mode
[  447.904746][T23226] bridge1: left promiscuous mode
[  447.906520][T23226] mac80211_hwsim hwsim29 wlan12: left promiscuous mode
[  447.908898][T23226] ipip0: left promiscuous mode
[  447.912928][T23226] macvlan2: left promiscuous mode
[  447.915122][T23226] mac80211_hwsim hwsim30 wlan13: left promiscuous mode
[  447.917983][T23226] dvmrp0: left promiscuous mode
[  447.920528][T23226] mac80211_hwsim hwsim32 wlan14: left promiscuous mode
[  447.923923][T23226] bridge2: left promiscuous mode
[  447.926111][T23226] veth6: left promiscuous mode
[  447.928184][T23226] veth7: left promiscuous mode
[  447.934026][T23226] erspan1: left promiscuous mode
[  447.936214][T23226] mac80211_hwsim hwsim37 wlan15: left promiscuous mode
[  447.941470][T23226] bridge3: left promiscuous mode
[  447.943469][T23226] team0: left promiscuous mode
[  447.945438][T23226] bond2: left promiscuous mode
[  447.947546][T23226] bridge4: left promiscuous mode
[  447.949612][T23226] mac80211_hwsim hwsim39 wlan16: left promiscuous mode
[  447.954708][T23226] mac80211_hwsim hwsim42 wlan17: left promiscuous mode
[  447.956921][T23226] macvlan3: left promiscuous mode
[  447.959295][T23226] ieee802154 phy0 wpan0: left promiscuous mode
[  447.961527][T23226] mac80211_hwsim hwsim45 wlan18: left promiscuous mode
[  447.963822][T23226] mac80211_hwsim hwsim47 wlan19: left promiscuous mode
[  447.966418][T23226] bridge5: left promiscuous mode
[  447.968099][T23226] ip6tnl1: left promiscuous mode
[  447.971421][T23226] mac80211_hwsim hwsim52 wlan20: left promiscuous mode
[  447.980786][T23226] veth9: left promiscuous mode
[  447.983841][T23226] veth11: left promiscuous mode
[  447.987094][T23226] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  447.991322][T23226] bridge6: left promiscuous mode
[  447.997654][T23226] veth15: left promiscuous mode
[  448.001470][T23226] veth17: left promiscuous mode
[  448.145951][T23269] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  448.149055][T23268] IPVS: stopping backup sync thread 23269 ...
[  448.242655][T23273] lo speed is unknown, defaulting to 1000
[  448.313925][T23280] nla_validate_range_unsigned: 11 callbacks suppressed
[  448.313941][T23280] netlink: 'syz.1.4897': attribute type 11 has an invalid length.
[  448.319081][T23280] netlink: 'syz.1.4897': attribute type 11 has an invalid length.
[  448.323501][T23280] netlink: 'syz.1.4897': attribute type 11 has an invalid length.
[  448.326194][T23280] netlink: 'syz.1.4897': attribute type 11 has an invalid length.
[  448.328854][T23280] netlink: 'syz.1.4897': attribute type 11 has an invalid length.
[  448.332253][T23280] netlink: 'syz.1.4897': attribute type 11 has an invalid length.
[  448.335536][T23280] netlink: 'syz.1.4897': attribute type 11 has an invalid length.
[  448.338518][T23280] netlink: 'syz.1.4897': attribute type 11 has an invalid length.
[  448.342052][T23281] ip6erspan0: entered promiscuous mode
[  448.344047][T23281] ip6erspan0: left allmulticast mode
[  448.345944][T23280] netlink: 'syz.1.4897': attribute type 11 has an invalid length.
[  448.348778][T23280] netlink: 'syz.1.4897': attribute type 11 has an invalid length.
[  448.441200][ T5861] Bluetooth: hci3: command 0x040f tx timeout
[  448.465290][T23288] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  449.039360][T23313] netlink: 'syz.1.4906': attribute type 6 has an invalid length.
[  449.171720][T23328] lo speed is unknown, defaulting to 1000
[  449.435130][T23343] lo speed is unknown, defaulting to 1000
[  449.524814][T23351] netlink: 'syz.2.4916': attribute type 6 has an invalid length.
[  449.527887][T23351] netlink: 'syz.2.4916': attribute type 5 has an invalid length.
[  449.655054][T23357] openvswitch: netlink: Duplicate or invalid key (type 0).
[  449.658065][T23357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.537805][T23369] lo speed is unknown, defaulting to 1000
[  450.634648][T23373] lo speed is unknown, defaulting to 1000
[  450.745264][T23377] lo speed is unknown, defaulting to 1000
[  451.347591][T23418] lo speed is unknown, defaulting to 1000
[  451.687806][T23430] __nla_validate_parse: 59 callbacks suppressed
[  451.687817][T23430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4938'.
[  451.705325][T23430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4938'.
[  451.801121][T23433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4939'.
[  451.863531][T23435] lo speed is unknown, defaulting to 1000
[  451.883154][T23442] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4942'.
[  451.913297][T23433] netlink: 788 bytes leftover after parsing attributes in process `syz.3.4939'.
[  452.043768][T23453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4944'.
[  452.046589][T23453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4944'.
[  452.068630][T23453] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4944'.
[  452.071953][T23453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4944'.
[  452.072305][T23435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4940'.
[  452.074794][T23453] netlink: 'syz.3.4944': attribute type 3 has an invalid length.
[  452.074802][T23453] netlink: 'syz.3.4944': attribute type 2 has an invalid length.
[  452.074808][T23453] netlink: 'syz.3.4944': attribute type 2 has an invalid length.
[  452.217359][T23466] syzkaller1: entered promiscuous mode
[  452.219394][T23466] syzkaller1: entered allmulticast mode
[  452.247108][T23470] netlink: 'syz.3.4950': attribute type 3 has an invalid length.
[  452.249802][T23470] netlink: 'syz.3.4950': attribute type 3 has an invalid length.
[  452.436886][T23487] netlink: 'syz.2.4956': attribute type 4 has an invalid length.
[  452.555257][T23507] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  452.558274][T23506] IPVS: stopping backup sync thread 23507 ...
[  452.609371][T23517] netlink: 'syz.2.4963': attribute type 1 has an invalid length.
[  452.613197][T23518] netlink: 'syz.2.4963': attribute type 1 has an invalid length.
[  452.801664][T23540] netlink: 'syz.1.4970': attribute type 1 has an invalid length.
[  452.851168][T23540] 8021q: adding VLAN 0 to HW filter on device bond17
[  452.905580][T23540] ipvlan2: entered allmulticast mode
[  452.907381][T23540] bond17: entered allmulticast mode
[  452.914363][T23550] lo speed is unknown, defaulting to 1000
[  452.979061][T23540] bond17: (slave gretap2): making interface the new active one
[  452.986284][T23540] gretap2: entered allmulticast mode
[  452.997923][T23565] netlink: 'syz.2.4976': attribute type 1 has an invalid length.
[  453.000082][T23540] bond17: (slave gretap2): Enslaving as an active interface with an up link
[  453.068640][T23570] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  453.072113][T23567] lo speed is unknown, defaulting to 1000
[  453.075558][T23569] IPVS: stopping backup sync thread 23570 ...
[  453.227973][T23579] lo speed is unknown, defaulting to 1000
[  453.415525][T23595] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  453.415633][T23593] IPVS: stopping backup sync thread 23595 ...
[  453.552214][T23606] nla_validate_range_unsigned: 53 callbacks suppressed
[  453.552229][T23606] netlink: 'syz.2.4983': attribute type 11 has an invalid length.
[  453.558861][T23606] netlink: 'syz.2.4983': attribute type 11 has an invalid length.
[  453.567890][T23606] netlink: 'syz.2.4983': attribute type 11 has an invalid length.
[  453.571835][T23606] netlink: 'syz.2.4983': attribute type 11 has an invalid length.
[  453.575188][T23606] netlink: 'syz.2.4983': attribute type 11 has an invalid length.
[  453.579136][T23606] netlink: 'syz.2.4983': attribute type 11 has an invalid length.
[  453.586418][T23606] netlink: 'syz.2.4983': attribute type 11 has an invalid length.
[  453.589737][T23606] netlink: 'syz.2.4983': attribute type 11 has an invalid length.
[  453.594028][T23606] netlink: 'syz.2.4983': attribute type 11 has an invalid length.
[  453.597213][T23606] netlink: 'syz.2.4983': attribute type 11 has an invalid length.
[  453.753382][T21072] lo speed is unknown, defaulting to 1000
[  453.757876][T21072] syz2: Port: 1 Link DOWN
[  453.788499][T21072] lo speed is unknown, defaulting to 1000
[  453.806985][T23625] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  453.813425][T23623] IPVS: stopping backup sync thread 23625 ...
[  453.936464][T23639] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  454.034184][T23636] tipc: Disabling bearer <eth:syzkaller0>
[  454.053418][T23653] lo speed is unknown, defaulting to 1000
[  454.223460][T23672] lo speed is unknown, defaulting to 1000
[  454.386674][T23678] lo speed is unknown, defaulting to 1000
[  454.424503][T23685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.455853][T23685] lo speed is unknown, defaulting to 1000
[  454.669607][T23706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.815860][T23715] lo speed is unknown, defaulting to 1000
[  454.833722][T23716] 8021q: VLANs not supported on ip6gre0
[  455.252193][T23744] lo speed is unknown, defaulting to 1000
[  455.684728][T23761] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  455.742327][T23767] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 1, id = 0
[  455.984312][T23787] bond0: (slave veth15): Releasing backup interface
[  456.026026][T23787] team0: Mode changed to "activebackup"
[  456.132608][T23791] lo speed is unknown, defaulting to 1000
[  456.259477][T23799] lo speed is unknown, defaulting to 1000
[  456.344887][T23796] lo speed is unknown, defaulting to 1000
[  456.463887][T23808] lo speed is unknown, defaulting to 1000
[  456.624639][T23815] lo speed is unknown, defaulting to 1000
[  456.758154][T23827] __nla_validate_parse: 75 callbacks suppressed
[  456.758163][T23827] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5043'.
[  456.774364][T23831] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  456.774365][T23828] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  456.828669][T23830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5044'.
[  456.892914][T23834] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5045'.
[  456.896631][T23834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5045'.
[  456.903397][T23834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5045'.
[  456.970768][T23841] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5047'.
[  456.983835][T23841] ip6erspan0: left promiscuous mode
[  456.989122][T23841] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  457.002080][T23841] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  457.036307][T23843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5046'.
[  457.036697][T23845] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5048'.
[  457.043134][T23845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5048'.
[  457.051592][T23841] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5047'.
[  457.480763][T11023] wlan1: Trigger new scan to find an IBSS to join
[  457.793026][T23886] validate_nla: 13 callbacks suppressed
[  457.793041][T23886] netlink: 'syz.2.5060': attribute type 3 has an invalid length.
[  458.069092][T23905] netlink: 'syz.1.5065': attribute type 2 has an invalid length.
[  458.115186][T23910] lo speed is unknown, defaulting to 1000
[  458.252451][T23920] lo speed is unknown, defaulting to 1000
[  458.302130][T23920] netlink: 'syz.3.5071': attribute type 21 has an invalid length.
[  458.337794][T23920] netlink: 'syz.3.5071': attribute type 6 has an invalid length.
[  458.912639][T23956] lo speed is unknown, defaulting to 1000
[  459.036427][T23962] lo speed is unknown, defaulting to 1000
[  459.587204][T23993] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  459.694544][T24008] nla_validate_range_unsigned: 74 callbacks suppressed
[  459.694558][T24008] netlink: 'syz.1.5095': attribute type 11 has an invalid length.
[  459.712765][T24008] netlink: 'syz.1.5095': attribute type 11 has an invalid length.
[  459.716116][T24008] netlink: 'syz.1.5095': attribute type 11 has an invalid length.
[  459.719394][T24008] netlink: 'syz.1.5095': attribute type 11 has an invalid length.
[  459.724754][T24008] netlink: 'syz.1.5095': attribute type 11 has an invalid length.
[  459.728055][T24008] netlink: 'syz.1.5095': attribute type 11 has an invalid length.
[  459.733523][T24004] lo speed is unknown, defaulting to 1000
[  459.740080][T24008] netlink: 'syz.1.5095': attribute type 11 has an invalid length.
[  459.743543][T24008] netlink: 'syz.1.5095': attribute type 11 has an invalid length.
[  459.750672][T24008] netlink: 'syz.1.5095': attribute type 11 has an invalid length.
[  459.754678][T24008] netlink: 'syz.1.5095': attribute type 11 has an invalid length.
[  459.944394][T24021] netlink: 'syz.2.5099': attribute type 1 has an invalid length.
[  459.991903][T24021] erspan0: entered promiscuous mode
[  459.994229][T24021] macvtap2: entered promiscuous mode
[  459.996665][T24021] macvtap2: entered allmulticast mode
[  459.998950][T24021] erspan0: entered allmulticast mode
[  460.182412][T24042] lo speed is unknown, defaulting to 1000
[  460.186591][T24045] lo speed is unknown, defaulting to 1000
[  460.530139][T12150] wlan1: Trigger new scan to find an IBSS to join
[  460.731370][T24081] lo speed is unknown, defaulting to 1000
[  460.846812][T24088] lo speed is unknown, defaulting to 1000
[  461.068626][T24092] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  461.384356][T24108] netlink: 'syz.1.5123': attribute type 4 has an invalid length.
[  461.401367][T24105] lo speed is unknown, defaulting to 1000
[  461.423788][T24108] netlink: 'syz.1.5123': attribute type 4 has an invalid length.
[  461.528423][T24105] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  462.093972][T24131] __nla_validate_parse: 34 callbacks suppressed
[  462.093986][T24131] netlink: 516 bytes leftover after parsing attributes in process `syz.3.5130'.
[  462.513533][T24136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5132'.
[  462.593362][T24138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5133'.
[  462.600154][T24138] openvswitch: netlink: Flow key attr not present in new flow.
[  462.696556][T24145] IPVS: stopping backup sync thread 24146 ...
[  462.697258][T24146] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  462.703933][T24145] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5135'.
[  462.708386][T24145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5135'.
[  462.715493][T24145] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5135'.
[  462.733641][T24148] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5136'.
[  462.737297][T24148] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5136'.
[  462.749293][T24148] netlink: 'syz.2.5136': attribute type 5 has an invalid length.
[  462.754834][T24148] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5136'.
[  462.926050][T24163] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5140'.
[  463.480592][T11024] wlan1: Trigger new scan to find an IBSS to join
[  463.603200][T24196] lo speed is unknown, defaulting to 1000
[  463.849726][T24208] netlink: 'syz.3.5153': attribute type 2 has an invalid length.
[  463.854315][T24210] netlink: 'syz.3.5153': attribute type 2 has an invalid length.
[  463.904490][T24212] lo speed is unknown, defaulting to 1000
[  464.187183][T24221] lo speed is unknown, defaulting to 1000
[  464.361714][T11024] wlan1: Creating new IBSS network, BSSID 0a:da:96:57:08:31
[  464.699848][T24232] lo speed is unknown, defaulting to 1000
[  464.752249][T24230] lo speed is unknown, defaulting to 1000
[  465.067659][T24246] netlink: 'syz.2.5163': attribute type 1 has an invalid length.
[  465.173958][T24256] netlink: 'syz.2.5167': attribute type 32 has an invalid length.
[  465.177466][T24256] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  465.187642][T11024] 
[  465.188474][T11024] ============================================
[  465.190405][T11024] WARNING: possible recursive locking detected
[  465.192325][T11024] 6.17.0-rc1-syzkaller-00201-g88250d40ed59-dirty #0 Not tainted
[  465.195349][T11024] --------------------------------------------
[  465.198161][T11024] kworker/u10:19/11024 is trying to acquire lock:
[  465.200411][T11024] ffffe8ffffc878a8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80
[  465.203788][T11024] 
[  465.203788][T11024] but task is already holding lock:
[  465.206529][T11024] ffffe8ffffc882a0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80
[  465.209702][T11024] 
[  465.209702][T11024] other info that might help us debug this:
[  465.212359][T11024]  Possible unsafe locking scenario:
[  465.212359][T11024] 
[  465.214656][T11024]        CPU0
[  465.215711][T11024]        ----
[  465.216802][T11024]   lock(&pd_list->lock);
[  465.218191][T11024]   lock(&pd_list->lock);
[  465.219814][T11024] 
[  465.219814][T11024]  *** DEADLOCK ***
[  465.219814][T11024] 
[  465.222708][T11024]  May be due to missing lock nesting notation
[  465.222708][T11024] 
[  465.225559][T11024] 3 locks held by kworker/u10:19/11024:
[  465.227546][T11024]  #0: ffff88801dbcd948 ((wq_completion)pdecrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  465.231435][T11024]  #1: ffffc90002b8fbc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  465.235531][T11024]  #2: ffffe8ffffc882a0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80
[  465.238623][T11024] 
[  465.238623][T11024] stack backtrace:
[  465.240459][T11024] CPU: 1 UID: 0 PID: 11024 Comm: kworker/u10:19 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59-dirty #0 PREEMPT(full) 
[  465.240469][T11024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  465.240474][T11024] Workqueue: pdecrypt_parallel padata_parallel_worker
[  465.240485][T11024] Call Trace:
[  465.240488][T11024]  <TASK>
[  465.240492][T11024]  dump_stack_lvl+0x189/0x250
[  465.240502][T11024]  ? __pfx_dump_stack_lvl+0x10/0x10
[  465.240510][T11024]  ? __pfx__printk+0x10/0x10
[  465.240519][T11024]  ? print_lock_name+0xde/0x100
[  465.240528][T11024]  print_deadlock_bug+0x28b/0x2a0
[  465.240536][T11024]  validate_chain+0x1a3f/0x2140
[  465.240545][T11024]  ? __queue_work+0x102/0xfb0
[  465.240552][T11024]  ? look_up_lock_class+0x74/0x170
[  465.240562][T11024]  ? register_lock_class+0x51/0x320
[  465.240570][T11024]  ? __queue_work+0xc56/0xfb0
[  465.240577][T11024]  __lock_acquire+0xab9/0xd20
[  465.240587][T11024]  ? padata_do_serial+0x73e/0xb80
[  465.240594][T11024]  lock_acquire+0x120/0x360
[  465.240603][T11024]  ? padata_do_serial+0x73e/0xb80
[  465.240611][T11024]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  465.240620][T11024]  _raw_spin_lock+0x2e/0x40
[  465.240627][T11024]  ? padata_do_serial+0x73e/0xb80
[  465.240635][T11024]  padata_do_serial+0x73e/0xb80
[  465.240644][T11024]  ? padata_parallel_worker+0x44/0x1d0
[  465.240652][T11024]  padata_parallel_worker+0x75/0x1d0
[  465.240660][T11024]  ? process_scheduled_works+0x9ef/0x17b0
[  465.240666][T11024]  process_scheduled_works+0xae1/0x17b0
[  465.240678][T11024]  ? __pfx_process_scheduled_works+0x10/0x10
[  465.240687][T11024]  worker_thread+0x8a0/0xda0
[  465.240696][T11024]  ? __kthread_parkme+0x7b/0x200
[  465.240705][T11024]  kthread+0x711/0x8a0
[  465.240713][T11024]  ? __pfx_worker_thread+0x10/0x10
[  465.240719][T11024]  ? __pfx_kthread+0x10/0x10
[  465.240726][T11024]  ? _raw_spin_unlock_irq+0x23/0x50
[  465.240733][T11024]  ? lockdep_hardirqs_on+0x9c/0x150
[  465.240741][T11024]  ? __pfx_kthread+0x10/0x10
[  465.240748][T11024]  ret_from_fork+0x3fc/0x770
[  465.240756][T11024]  ? __pfx_ret_from_fork+0x10/0x10
[  465.240763][T11024]  ? __switch_to_asm+0x39/0x70
[  465.240771][T11024]  ? __switch_to_asm+0x33/0x70
[  465.240778][T11024]  ? __pfx_kthread+0x10/0x10
[  465.240786][T11024]  ret_from_fork_asm+0x1a/0x30
[  465.240796][T11024]  </TASK>

VM DIAGNOSIS:
22:17:59  Registers:
info registers vcpu 0

CPU#0
RAX=ffff8881057181f8 RBX=0000000000000003 RCX=dffffc0000000001 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc900035b78c0 RBP=ffff888021a8c898 RSP=ffffc900035b79d0
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff520006b6f18
R12=ffff88801eff3e88 R13=ffff888133636b40 R14=1ffff11003e838e0 R15=ffff88801f41c700
RIP=ffffffff84d01d02 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9579b6a6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2ae294 CR3=000000011213c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0004000000000070 bd270009002d0000
XMM02=3ed8b4f467bb13a5 0000000004c20500 XMM03=cd38ee7be6c705ee 5f60d8f23bd334e0
XMM04=b27ca5528b50f3b2 ac229741861c0062 XMM05=710d2fa3f3e1c12f ae1de6efe667e316
XMM06=390a59b293e0fd91 fa930f0eb30cba69 XMM07=2e0cc88c1775c3a1 e2cd38ee7be6c705
XMM08=0000000000000000 00007fe482812ee7 XMM09=0000000000000000 00007fe482812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bdc05 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffc90002b8f2b0 RSP=ffffc90002b8f0d8
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854efde0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efe57 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9ac7774c40 CR3=000000012e3c0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffff00 ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f9ac84ed100 00007f9ac7987460 XMM05=00007f9ac7987478 00007f9ac79874c0
XMM06=00007f9ac79874b8 00007f9ac79874b0 XMM07=00007f9ac79874a8 00007f9ac79874a0
XMM08=0000000000000000 00007f9ac7812ee7 XMM09=0000000000000000 00007f9ac7812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
