last executing test programs:

4.157050868s ago: executing program 2 (id=3614):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf253e00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x23e}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r7)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="428e22f8", @ANYRES16=r8, @ANYBLOB="01000000000003000000010000001400020077673000000000000000000000000000060006004e23000004000880080007003db70000"], 0x3c}}, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6)
ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000200))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004800)=@newtaction={0x12ac, 0x30, 0x10, 0x70bd27, 0x25dfdbfb, {}, [{0x1298, 0x1, [@m_xt={0x1294, 0x3ffe, 0x0, 0x0, {{0x7}, {0x240, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0xae, 0x6, {0xffff, 'nat\x00', 0x0, 0x4b7, "3b8199347e6ea5a83c399147a60acf11ea21608208c91dce52645a0b974132850cd16d89408626efcf4a0201218452761a380c62586afec6b594f4c1c5c299e5111062d7fc48a33e5785c6169a0e2c7a3c758ff1c1e96afc49e9debedf2de1aa087c429bf2eefa2687861a5dab58d2a72f99f81e52d9b91b07725bbadd6c3ca1b4bd8777"}}, @TCA_IPT_TARG={0x125, 0x6, {0x1, 'security\x00', 0x5, 0x2, "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"}}, @TCA_IPT_TARG={0x2e, 0x6, {0x0, 'nat\x00', 0x4, 0x4, "19cfbbf1"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xd}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x1030, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4a81db9d6e36d78d, 0x1}}}}]}]}, 0x12ac}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000100000005000500000000000800030000000000"], 0x24}}, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r10, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000227bd7000ff23faad1712ad1cfedc4d3143522d35dbdd2502000000140001002001000000000000000000000000000008000300010000000800ff4e77ba00000500060001000000180004000300000005"], 0x58}, 0x1, 0x0, 0x0, 0x8081}, 0x20000001)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

3.879503621s ago: executing program 0 (id=3616):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000236f6e6e6c696d69740000000c0002800800014000000000140000001000010000000000000000000000000a"], 0xa4}}, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r2=>0x0})
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, 0xfffffffffffffffd, &(0x7f0000000340)=0x33)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000b80)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 'syzkaller1\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = socket(0x8, 0x4, 0x3)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000140))
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x2, &(0x7f0000000180)=[0x8d, 0xf], 0x1c, 0x2, 0x1})
connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r1, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="ba0806f7974098b7201514a5e6f35395a8a7edcda4309e5a638a81366c5d0f119a231a5462c06cda314dbd3b5437fc61a3153d140a4d0c9c59cbe1a8b3bf5e564de1cad214b8431ae21aed41a2cde48a12f29c20d7a214c24d2bdbbc4421f6908b5ee9fe755168be5deb9e16613a8c215e2b44e8d06be4b6d0bf30868765fe1a1a05def3639bd2b89ede6975868d70fcac2de92e6661b6a33c3f3c0dee05295baca225b7e3e8985b217328cacfaa945e0221d3a76e1177a420c7daaa142ce546ca3ff6e8b91197f7a94e98d072e8d9b348591d9fca29dd6b9ec352d74edd1ce0c63ad64caaa1e30e24ac0305c5999b5545194ec572ba27fe4b543e3f7633b2d8d9639a30138f1efaade9f82fc877cf51130c8570f56fb41c0f5515cc9df80e2cd543be16799866ba259062726d99a5a6d7bda02334035b126c1ab323e2f820b050c9773a1098a1b9817f1a408dee2a2f7c91a5cebba6ace07171ce236ec47bce5dcd81bc685d4cb3bfcfbc24774aedf1f388df7db5aa5a572b086371a74d9f470da1f57ca8cb2ecb017c001f64723146442c217f3c91e2bbe4bc7610a1909048488fed84295b058272f42d812c7e5738a90f017bd49d5c849e42e18e1670a89fd20db5e1d6529c9cec7f44318e2a478f3b81375f72414e076646b6726de3e78438df63d631d0354d90e9de003320ffabb2c81576a6c5d2a769b83cb85c23a91ee49f607c8059932f3cbbf78a6d9edd2261101fb3176a6a4e2f9ac5f02144076c24ff2233104df6d53b553d19389eb4c48bc6eb88f3f950e9d27681502390eb01ccae9e9b730fdca1c55a7255b71a33191ac570ad056254e1a69ad5554b9380e53883883d0e535ecdf58516b416c15a24754b9a25ec06b8af3e40052881865b87150edd413e22858ba4e943b7a8a3ae435c4bb600c9b5678896e224b4dfc3c97e270fff363880acc4d6d2fd18de851ba33ae4afc4263e1e53ae4eb071a3230ee296930d76cd3d5bb96f3c5942c9a29207ca16f5854dba086d5c1c05cc968c4561941a749bfb44f9ede6d0bb3c00dedf93b1210eca37e873718ccdf7cc055d7bab4dd77ff95f3f20f41a92830c62f182ac3fb847ce8df7fdb3f616660bb752e4a86157f8d8c5ae61139cc76b38d9fbf84fc6429fed5deeb995998d2d8cf6547e7bff62129629d7087495d57b47e9bfe5301a1a7311569b0e28f5049ae88869f20c7cb4f6833d235c02cb9fca9ecc1be493f2bef37eadc3706e220b52b4ad24ee2f68346114be52c1dd3fa1b373c2272d3344b63111459934f1a6580d26b0c854fe0cd485c6996b6fe807b122b1a30af24610cdddbbdde5601d35a4f66cdd5a547870bca1182273f2dd236b7227bc9015026a7610c321279487c1d3ad009069eaa0a8c0939e507b8609ea5d3c6a3fc8d28a8eb599b12dddffdeaa5ce05ccd902627239ea537253d6be666b94f244a5c9525bb4f535496bbc3bf37fb20997d0b9054b9f59a1d202a94e9333a47f436fee2202999b76a1914b6c8595339d91bc07f302f2918d1bd933b497f778d61acf6ff304314d9b95cfc7e722dd28dd86a92ddcad07b96f46ae9ca4ae3ed8f0786668b531d9b680eeda7728b9d918febe3d387099314f104cba399acc360248a5262e97af554bd550e0e3c9353c1f1d603ad28f9e1e351a420223bfa4c18adc440e3e16ec47c818a28ed4c1683dd076e4424ef2bc9980aec0e3cb255a34b590c2e387ecac30be18e1fda22311e2993f4ae17172a1048b84ee5a7b33970058b55a43eac46eb5ec05d53b7031cec0e121b2e0947fa998eecd231daa2d5b1a875bee2e834610cd363cc7644911a34162bf247593e2cb8c8c62091f17532fb903eea3b10135b6aaf7ae7d82998f1063907de807b60763a9d34b3af13019d99148f3ab7fa5430523df350ba3105c717764392be28a24c08c20e38f87cf19904b0dff0c9ec3f1d83184923ec679dc06149f8465a6b0eedab15742ebd4fba0e5308c968e7db234d4c33024ff28439323af1ec1bded0dde9dd08ebe72c1782d269cf08db95e9dd431355f4a7402e4a31fee601362d32f05e23ba00bfae85f018b54d7cd38929b8e1e9bd16b7b07faad560f5ff07311d68e7fe25209fe1e0b862d2d19d551cdb4a5ce04159fde81a995a927d2b3b1ef83db81b71255ac8c2a00bce0fc0b525214f57c77749c9b791f8d779a71453183661a41dadec853f6922b485a73ee7835d5ba9a2c88be84826793706a991ce5326b0bb1cfe4dca625e32824e42a347a65305ee2cd44f6291aef2acf979705ccbdd2277cff875198d26176b81669a8eef544d5d9b5b16a4f4bb3b2895254a5dfc5a40f8121d366a4e8150d0fba93e2f443c8b378763808e42731814618de1e428660b527764", 0x6a2}], 0x2}}], 0x1, 0xf5)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18)
connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a80)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB='&\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="b8d7e1fd9396b9e02ebf0b305313824059cd00ed03d3e6e3039da2d72340023c3af3292a343668e116ee5a45f238f7aca683ee34bb718a0a44f0e824637db25a2516e963172cf08ef9d0d50bbf9938ba453f312eee62ce87f1f89cde697564ea5f19fe376fa9e9c5eb5e521ca0835f39c26533012abb0f69917c85c42110d3ee42994cb0e2d9c8565e9ed14b6b04bba6b82eca2df2cee1e9dfa2db63a40dc87caf31188c2b56f5a9a34079d6c5e982fcf27080184f45d1ecf767b3c8c5d2fb38eafba36aa2fdb8af662f9860f8dec2b60d9aa7805d85621ba8e9e58fe598b9", @ANYRES64=0x0], 0x10)
sendmmsg(r6, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="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", 0x6a2}], 0x2}}], 0x1, 0xf5)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40880)

3.765883982s ago: executing program 1 (id=3618):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @remote}}}, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet(0xa, 0x801, 0x84)
listen(r5, 0x8)
readv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
tee(r6, r9, 0x8f5, 0x100000000000000)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
r11 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x3, 0x5c3, @vifc_lcl_addr=@local, @empty}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4f1, 0x6, 0x101, 0x200, r0, 0x7ff, '\x00', r12, r7, 0x0, 0x2, 0x5, 0x8}, 0x50)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}}, 0x8000)

3.740540416s ago: executing program 2 (id=3619):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x4048002, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x4004084, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000080)=0x8000, 0x4)
poll(&(0x7f0000000000)=[{r0, 0x1221}], 0x1, 0x8)

3.546838185s ago: executing program 2 (id=3622):
syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @loopback, @mcast2={0xe}}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x40010)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r5, @ANYRES8=0x0, @ANYRES32=r4], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

3.392742118s ago: executing program 2 (id=3625):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084)

3.274318241s ago: executing program 4 (id=3626):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123402, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x2}], "f841"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1}, 0x20) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x2}], "f841"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1}, 0x20)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x6, 0x1, 0x1, 0x96f, 0xfffff0fa}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x8010)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="20000000280e0400280012800b0001006d6163736563000018000280050003000800000d0c00040001000001000280"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0)
socket(0x28, 0x5, 0x0) (async)
r8 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r8, 0x0, 0x0)
listen(r8, 0x0) (async)
listen(r8, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@deltfilter={0x34, 0x2d, 0x300, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x8, 0xd}, {0xfff3, 0xffeb}, {0x6, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x41d6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r9, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x42014)
socket$rds(0x15, 0x5, 0x0) (async)
r11 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r11, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r11, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0) (async)
sendmsg$inet(r11, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0)
sendmsg$rds(r11, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r11, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)

3.267978272s ago: executing program 2 (id=3627):
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd2f, 0x10b52c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10002, 0x40, 0x20000000, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
close(r7)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)="27030200dc0f14000e000f00fdc6c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003000000", 0x2e}], 0x1}, 0x4005)

3.129445024s ago: executing program 0 (id=3628):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x31a39, 0x59629}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xce26, 0x200000, @loopback, 0x800}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

2.936286409s ago: executing program 0 (id=3631):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x81, 0x0, &(0x7f0000001200))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x23, 0x1, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000300000008000400ac1414000800020000000000080001"], 0x2c}}, 0x0)
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x8000)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800008f74ec6ce2e140b1faea2cec00", @ANYRES16=r6, @ANYBLOB="01002dbd7000feffffff03000000540001800f00010069623a6970766c616e300000110001006574683a70696d3672656731000000002c0004001400010002004e21ffffffff00000000000000001400020002004e2300"/98], 0x68}}, 0x0)

2.825570903s ago: executing program 3 (id=3632):
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b000000", @ANYRES32], 0x48)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r6=>0x0}, &(0x7f0000000080)=0x8)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000180)={<r8=>r6, 0x4, 0x80, 0x9, 0x1, 0x400}, &(0x7f0000000200)=0x14)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000340)={r8, @in6={{0xa, 0x4e23, 0x1000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}, 0x8, 0x9}, 0x90)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000040)={r6, @in6={{0x2, 0x0, 0x0, @empty}}, 0x8000}, &(0x7f0000000300)=0x90)
r9 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @empty}, {0x304, @local}, 0x5a, {0x2, 0x4e25, @private=0xa010102}})
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003580)=ANY=[@ANYBLOB="5400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000002c001a80080002800400018020007c0000000700ff0200000000000000000000000000010500080003000000deef9ad15c05df9190bec209d3600fc27c959f19ebe72c4d83a4ba5fecce6bb7b7104536bacbe0753f9ed1fc6ed969f9f49f836a5a7ceec71d23bf0af829d88fc544b21e3ad024b38a5fa712e1c792266ea95841d99f23446cb9eb11d860f08b42d2c65aa2e45b8ad11a364a8acf2f8710bca79e65a87cba38be82982b9789fcbf67e52d69c223eef3133793e10e8886"], 0x54}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r13, @ANYRES32=r12], 0x1c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r14 = openat$cgroup_devices(r10, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
splice(r0, 0x0, r14, 0x0, 0x1000, 0x0)

2.778673454s ago: executing program 4 (id=3633):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0xa, 0xfff9}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x24004000) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0xa, 0xfff9}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x24004000)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x5, {{0xa, 0x4e24, 0xde, @private1}}, 0x1, 0x4, [{{0xa, 0x4e24, 0xef9b, @mcast1, 0x3ad0}}, {{0xa, 0x4e23, 0x8, @private0, 0x8}}, {{0xa, 0x4e23, 0xe7d8, @empty, 0x7fff}}, {{0xa, 0x4e21, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}]}, 0x290)
socket$inet6(0xa, 0xa, 0x8)

2.650644018s ago: executing program 1 (id=3634):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x0, 0x0, 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0)

2.61649167s ago: executing program 0 (id=3635):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711053000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0xfffffffffffffffd, &(0x7f0000000340)=0x33) (async)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x5}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) (async)
r2 = socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x51, 0x3e]}}, 0x0, 0x38}, 0x20) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000))

2.509727663s ago: executing program 3 (id=3636):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x200000000000034d, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x2ed}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x200000000000034d, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x2ed}, 0x94)
close(r4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r5, 0x0) (async)
listen(r5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0)

2.365470954s ago: executing program 4 (id=3637):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084)

2.309624531s ago: executing program 4 (id=3638):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0xe2559bcf60da1086, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x34}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x804)
r3 = socket(0x2b, 0x1, 0x6)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x61, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffff}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
getsockname$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4800)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r10, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084)

723.683598ms ago: executing program 1 (id=3639):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00007a0200000000200012800c0001006d6163766c616e00100002800a0009000180c2000003000008000500", @ANYRES32=r1], 0x48}}, 0x0)

638.439908ms ago: executing program 0 (id=3640):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x0, 0x4, 0x12}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x339)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
pipe(&(0x7f0000000080)) (async)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r7, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r7, &(0x7f0000000180)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3}, {0xffff, 0x291e582e3a5603d6}}}, 0x24}}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000000))
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2) (async)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) (async)
write$tun(r8, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4)
socket$netlink(0x10, 0x3, 0x0)

636.296233ms ago: executing program 3 (id=3641):
socketpair(0x2, 0x6, 0x6, &(0x7f0000001380)) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) (async)
syz_emit_ethernet(0xa6, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x70, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, [{0x0, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af2602"}, {0x0, 0x1, "00000500000000002600"}, {}]}}}}}}, 0x0) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async)
write$tun(r1, &(0x7f0000000300)={@val={0x0, 0x2}, @val={0x2, 0x0, 0x57f, 0x4, 0x200, 0x8}, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@mpls_mc={0x8848, {[{0x8}, {0xff}, {}, {0xa2}, {0x4d}, {0x5, 0x0, 0x1}, {0xffffb, 0x0, 0x1}], @llc={@llc={0x0, 0x80, "ad", "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"}}}}}}}, 0x103b) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r2=>r1, 0x0, 0x6, 0x1000})
r3 = socket$kcm(0x29, 0x5, 0x0)
accept4(r3, 0x0, 0x0, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000001340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x76}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "89"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40091) (async)
socket$nl_route(0x10, 0x3, 0x0)

629.557493ms ago: executing program 2 (id=3642):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async, rerun: 64)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async, rerun: 64)
r2 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000000})

546.494355ms ago: executing program 4 (id=3643):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {}, {}, {0x6, 0x3}]})

442.63864ms ago: executing program 1 (id=3644):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000002000000041000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000008000000000000000000000000006a3d22052b523c5e2058f90048fcd4549e690ed0270d0481e6920677af7a563fdf037d43f26bba0afdd45313ef0439"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES8=r4], 0x18, 0x10}}], 0x1, 0x0)
accept(r4, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r6 = socket$tipc(0x1e, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x39)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r8}, &(0x7f0000000140), &(0x7f00000004c0), 0x8}, 0x20)

387.986489ms ago: executing program 3 (id=3645):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x7, 0xc, "090041c20949e0afc65b"}]}}}], 0x40}, 0x20002800)
writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000001000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

367.471177ms ago: executing program 1 (id=3646):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xc, @mcast1, 0x6}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x3c)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={<r1=>0x0, 0x9, 0x30, 0x9, 0x2}, &(0x7f0000000080)=0x18)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={<r2=>r1, @in6={{0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}}, 0x4, 0x1, 0x0, 0x0, 0x10, 0x7, 0x6c}, &(0x7f0000000180)=0x9c)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={<r3=>r2, 0x4}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xa14, 0x0, 0x0, 0x4, r2}, 0x10)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000280)={0x0, @adiantum})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={<r4=>r3, @in={{0x2, 0x4e22, @empty}}, 0x4, 0x6e, 0x5, 0xe, 0x12, 0x7, 0x7}, &(0x7f0000000380)=0x9c)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={<r5=>r2, 0xaef5, 0x2, 0x4}, &(0x7f0000000400)=0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800)
close(r0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x46}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x8000)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000700)={<r10=>r5, 0x9}, &(0x7f0000000740)=0x8)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000dc0)=@broute={'broute\x00', 0x20, 0x4, 0x5f0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000007c0], 0x0, &(0x7f0000000780), &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x30, 0x8808, 'vxcan1\x00', 'dvmrp1\x00', 'dvmrp0\x00', 'ipvlan0\x00', @empty, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x7, {0x6}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x9, 0x40, 0x88a2, 'bridge_slave_0\x00', 'veth0\x00', 'vlan0\x00', 'vlan1\x00', @random="6675916caefc", [0x0, 0xff, 0x0, 0x1c96c5c1e0552a25, 0x0, 0xff], @multicast, [0x0, 0xff, 0x0, 0xff, 0xff], 0x12e, 0x12e, 0x176, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xff000000, 0xffffff00], [0x0, 0xff000000, 0xff], 0x91, 0x3a, 0x50, 0x2, 0x4e24, 0x4e24, 0x4e21, 0x4e22}}}, @limit={{'limit\x00', 0x0, 0x20}, {{0x7, 0x0, 0x7, 0x8, 0x40, 0x2}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3, 0x6, {0x2}}}}}, {0x3, 0x34, 0x892f, 'macvtap0\x00', 'veth1_to_bond\x00', 'netpci0\x00', 'nicvf0\x00', @random="17f0d43039f6", [0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0xff], 0xfe, 0x1a6, 0x1ee, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0xff}, {0x9}], 0x0, 0x1}}}, @helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'syz0\x00'}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x78f}}}, @common=@nflog={'nflog\x00', 0x50, {{0xfffffffc, 0x7, 0x2, 0x0, 0x0, "6ce36ddaabb74920e66a5cbaceca1b619c7838ffaf1f7aeed9d9a468653c4c0e3142e018053a2b5139a5709cd4c890a3cfdcae5deb295cd57d5e3eb6c49b434d"}}}], @common=@ERROR={'ERROR\x00', 0x20, {"b677be3521ea5ede464e6fe29ea92cc6858a7d45b85fb0be5e2493dac17a"}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0xa, 0x88b5, 'vxcan1\x00', 'ip_vti0\x00', 'ip_vti0\x00', 'veth0_to_bond\x00', @remote, [0x0, 0xff, 0xff, 0xff], @random="7b2441587c94", [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xf6, 0x13e, [], [@common=@dnat={'dnat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x3, {0x8}}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xa, 0xf8, {0x3271}}}}}]}]}, 0x668)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001380)=@broute={'broute\x00', 0x20, 0x4, 0x4e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000e80], 0x0, &(0x7f0000000e40), &(0x7f0000000e80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x59, 0x88b5, 'vxcan1\x00', 'wg2\x00', 'veth1\x00', 'erspan0\x00', @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0xae, 0xae, 0xf6, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x9, 0x3, 0x2, 0x1}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x2, 0x5, {0xafe9}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x60, 0x15, 'ip6gretap0\x00', 'ip6gre0\x00', 'wg1\x00', 'veth0_to_bridge\x00', @remote, [0xff, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x9e, 0xe6, 0x116, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x1, 0x1}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"ad9eda71ffee8a1bf167ad6945994f8abe3f3ff1f3e26fc88fd2c9223da1"}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x5, 0x1, 0x88b5, 'bridge_slave_0\x00', 'veth0_to_bridge\x00', 'ip_vti0\x00', 'pimreg\x00', @link_local, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x1fe, 0x0, 0xff], 0xbe, 0xee, 0x11e, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@private=0xa010100, [0xff, 0x0, 0xff000000, 0xffffffff], 0x4e21, 0x46, 0x6, 0x4e21, 0x2, 0x2}}}], [@common=@AUDIT={'AUDIT\x00', 0x8}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{0x11, 0x10, 0x88be, 'macvlan1\x00', 'pim6reg1\x00', 'veth1_to_batadv\x00', 'bond_slave_0\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff], 0xce, 0xce, 0xfe, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x0, 0x1, 0x8906, 0x4, 0x2}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x9cd}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}}]}]}, 0x560)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000001400)={r10, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001440)={0x9, 0x840c, 0x10001, 0x7, r4}, 0x10)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(xtea-generic)\x00'}, 0x58)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r6)
sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x6c, r12, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xc, 0x1, @device_b, 0x3, @value=@broadcast, 0x1000, 0x4, @device_a, 0x3}}]}, @NL80211_ATTR_FILS_KEK={0x1e, 0xf2, "f21628f3a714ea7bac2ebe1938da21276930b0dc61bcde22c6ab"}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24044050}, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000001680)={r2, 0x6}, &(0x7f00000016c0)=0x8)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000002300)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000022c0)={&(0x7f0000001740)={0xb78, r8, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x40d, 0x39}}}}, [@NL80211_ATTR_TID_CONFIG={0xa98, 0x11d, 0x0, 0x1, [{0x4}, {0x3e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x190, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x155a, 0x9, 0x7735, 0x40, 0x8001, 0x9, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9be3, 0x9, 0x3e10, 0x0, 0xfe01, 0x4, 0x7, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xaef, 0x74a0, 0x7, 0xffff, 0x8, 0x7, 0x9, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x1}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0x4}, {0x3, 0xa}, {0x2, 0x5}, {0x4, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x5}, {0x0, 0x3}, {0x1, 0xa}, {0x3, 0xa}, {0x3, 0x5}, {0x1, 0x8}, {0x5}, {0x7, 0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x4, 0x5}, {0x7, 0x8}, {0x1, 0x9}, {0x4, 0x9}, {0x2, 0x8}, {0x0, 0x5}, {0x5, 0x7}, {0x3, 0x3}, {0x3, 0x4}, {0x2}, {0x5, 0x7}, {0x3, 0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0xa}, {0x2, 0x7}, {0x7}, {0x1}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x5}, {0x5, 0x6}, {0x5, 0x6}, {}, {0x5, 0xa}, {0x6, 0xa}, {0x3, 0x9}, {0x1, 0x5}, {0x1, 0x9}, {0x0, 0x5}, {0x1, 0xa}, {0x5, 0x1}, {0x6, 0x7}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x9}, {0x5, 0x8}, {0x6, 0x9}, {}, {0x2, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x7, 0x1, 0xf338, 0x7, 0x4, 0xc3f, 0x98ff]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x12, 0x4, 0x5, 0x5, 0x6, 0x9, 0x7fff, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x1}, {0x1, 0x7}, {0x6, 0x1}, {0x6, 0x3}, {0x0, 0x7}, {0x0, 0x5}, {0x6, 0x8}, {0x4, 0x9}, {0x1, 0x9}, {0x2, 0x7}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x2}, {0x7, 0x8}, {0x1, 0x4}, {0x5, 0x9}, {0x0, 0x7}, {0x7, 0x2}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x2, 0x36, 0x1, 0x3, 0x36, 0x0, 0x6, 0x36, 0x6, 0x5346f378b2dad663, 0x2, 0x4, 0x9, 0x3, 0x36, 0x9, 0x1b, 0x12, 0x24, 0x2, 0x30, 0x9, 0x16, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x0, 0x9, 0xd83, 0xe9, 0x6, 0xd000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x8, 0x3a, 0x3, 0x6, 0x3, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x238, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x9}, {0x1, 0x6}, {0x7, 0x7}, {0x5, 0x7}, {0x2, 0xa}, {0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x1}, {0x0, 0x4}, {0x7, 0x3}, {0x5, 0x1}, {0x3, 0x5}, {0x7, 0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x4}, {0x1, 0x1}, {0x6, 0x7}, {0x4, 0xa}, {0x4, 0x9}, {0x2, 0x7}, {0x5, 0x8}, {0x6}, {0x2, 0x2}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x7}, {0x2, 0x8}, {0x2, 0x4}, {0x1, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x2}, {}, {0x7}, {0x0, 0x4}, {0x7, 0x1}, {0x1, 0x6}, {0x1}, {}, {0x7, 0xa}, {0x4, 0x3}, {0x1, 0x7}, {0x6, 0x5}, {0x5, 0x7}, {}, {0x1, 0x5}, {0x7, 0x2}, {0x4}, {0x7, 0x7}, {0x3, 0x1}, {0x7, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x1}, {0x2, 0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x5, 0x8}, {0x7, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x3}, {0x4, 0x2}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0x3}, {0x3, 0x6}, {0x3}, {0x1, 0x8}, {0x2, 0x4}, {0x2, 0x6}, {0x7, 0x5}, {0x3, 0xa}, {0x4, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x3, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x2, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x2}, {0x6, 0x7}, {0x5, 0x3}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0x4}, {0x6, 0x4}, {0x0, 0x6}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x9, 0x0, 0x7, 0x61f, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfffa, 0x5, 0xa08, 0x2, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x8, 0x67, 0x18c6, 0x8, 0x385a, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x5}, {0x1, 0x1}, {0x3, 0x5}, {0x1, 0xa}, {0x3, 0x6}, {0x7, 0x6}, {0x3, 0x2}, {0x6, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x6, 0x8}, {0x5, 0xa}, {0x4, 0x9}, {0x7, 0xa}, {0x2, 0xa}, {0x0, 0x7}, {0x2, 0x9}, {0x1, 0x9}, {0x0, 0x4}, {0x6, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x4, 0x6}, {0x2}, {0x4, 0x9}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x1}, {0x0, 0x9}, {0x3, 0xa}, {0x4, 0x6}, {0x4, 0x5}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x4}, {0x3, 0x2}, {0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x8}, {0x6, 0x9}, {0x1, 0x9}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0x5}, {0x2, 0x5}, {0x7, 0x8}, {0x3, 0x7}, {0x2, 0x2}, {0x0, 0x2}, {0x5, 0x7}, {0x4, 0x2}, {0x1, 0x7}, {0x7}, {0x2, 0x2}, {0x3, 0xa}, {0x5, 0x8}, {0x7, 0x5}, {0x1, 0x9}, {0x4}, {0x3, 0x8}, {0x1, 0x2}, {0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x6, 0x9}, {}, {0x0, 0x4}, {0x1, 0x2}, {0x2, 0x3}, {0x1, 0x3}, {}, {}, {0x3, 0x1}, {0x7, 0x3}, {0x6, 0x7}, {0x5, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x6}, {0x2, 0x8}, {}, {0x6, 0x2}, {0x1, 0xa}, {0x0, 0xa}, {}, {0x7, 0x1}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfd4, 0xa136, 0x8, 0x4, 0x4, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x9, 0x7, 0xe35a, 0x4380, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7ff, 0x80, 0x53, 0x7f, 0x4, 0x2, 0x1]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x3, 0x9, 0x3, 0x6c, 0x30, 0xc, 0x4, 0x4, 0x6, 0x12, 0x6c, 0x1, 0x2, 0x1, 0x30, 0x48, 0x12, 0x18, 0x6c]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x2}, {0x2, 0x5}, {0x5, 0x7}, {0x4, 0x4}, {0x0, 0x8}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0x5}, {0x3, 0x7}, {0x6, 0x5}, {0x0, 0x3}, {0x2, 0x5}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x9}, {0x4}, {0x3, 0x4}, {0x5, 0x6}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0x3}, {0x0, 0x1}, {0x7, 0x8}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x26e, 0x200, 0x3, 0x0, 0x2, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x88}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xbc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7f, 0x5737, 0x2, 0x9a, 0x8, 0xf800, 0xd]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x9, 0xc, 0x2, 0x6, 0x2, 0x1, 0x48, 0x4, 0x3, 0x9, 0x36, 0x60, 0x36, 0x60, 0x48, 0x36, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x1}, {0x2, 0x6}, {0x4, 0x2}, {0x2, 0x9}, {0x7, 0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x1, 0x4}, {0x2, 0x3}, {0x5, 0x6}, {0x6, 0x9}, {0x5, 0xa}, {0x4, 0x6}, {0x1, 0x5}, {0x1, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x6}, {0x1, 0x2}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x1}, {0x2, 0x6}, {0x2, 0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x6, 0x1}, {0x7, 0x3}, {0x7, 0x4}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x5, 0x8, 0x9b32, 0xc, 0x0, 0xfffb, 0x9]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x8, 0x1, 0x0, 0x2, 0x2, 0x9]}}]}]}]}, {0x198, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x98}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x15c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x6, 0x3d, 0x9, 0x1c, 0x58, 0x4, 0x4, 0x16, 0x18, 0x6, 0x1, 0x60, 0x5, 0xb, 0x36, 0x4c]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x0, 0x2, 0x6, 0x5, 0x2, 0xff81]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x1}, {0x1, 0xa}, {0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x0, 0x4}, {0x3, 0x1}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x7, 0x6}, {}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x4}, {0x6, 0xa}, {0x6, 0x7}, {0x5, 0x5}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6, 0xa}, {0x3, 0x6}, {0x5, 0x1}, {0x2, 0x2}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x2}, {0x3, 0x9}, {0x2, 0x4}, {0x7, 0x2}, {0x5, 0x2}, {0x5, 0x9}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x5}, {0x3, 0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x3, 0x3}, {0x1, 0x8}, {0x5, 0x3}, {0x4, 0x9}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x1}, {0x0, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x4}, {0x1, 0x2}, {0x0, 0x2}, {0x2, 0xa}, {0x0, 0x4}, {0x1, 0x4}, {0x2, 0x3}, {0x7, 0x7}, {0x6, 0x3}, {0x4, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x1}, {0x4, 0x5}, {0x6, 0x9}, {0x7, 0x4}, {0x4, 0x1}, {0x2, 0x6}, {0x6, 0x5}, {0x4, 0x1}, {0x1, 0x2}, {0x5, 0x4}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x8}, {0x1, 0x2}, {0x6, 0xa}, {0x4, 0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x2, 0x9}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0xa}, {0x4, 0x6}, {0x5, 0xa}, {0x2, 0x4}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x3}, {0x0, 0x6}, {0x4, 0x7}, {0x4, 0x3}, {0x2, 0x2}, {0x0, 0x3}, {0x4, 0x1}, {0x6, 0x8}, {0x4, 0x3}, {0x3, 0x2}, {0x7, 0x6}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x7}, {0x2, 0x5}, {0x1, 0xa}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x6}, {0x0, 0x7}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x6, 0x1}, {0x1, 0x8}, {0x4, 0x4}, {0x3, 0x4}, {0x6, 0x1}, {0x7, 0x6}, {0x0, 0x6}, {0x2, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {}, {0x0, 0x3}, {0x3, 0x5}, {0x4, 0x8}, {0x1, 0x8}, {0x7, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x0, 0x7}, {0x7, 0x6}, {0x2, 0x3}, {0x6, 0x7}, {0x1, 0x3}, {0x1, 0x4}, {0x7, 0x7}, {0x0, 0x1}, {0x2, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x8}, {0x4, 0x8}, {0x3, 0x5}, {0x0, 0x9}, {0x3, 0x9}, {0x7, 0x1}, {0x6, 0x3}, {0x2, 0x8}, {0x2, 0x5}, {0x7, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x2, 0x4}, {0x5, 0x3}, {0x7, 0x9}, {0x3, 0x4}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, {0x2d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x8, 0x7fff, 0x3, 0x0, 0x2, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8001, 0x6, 0x80, 0x6, 0x3, 0x9, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x2, 0x5}, {0x6, 0x2}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x6, 0xa}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x4}, {0x4, 0x6}, {0x1, 0x3}, {0x3, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x9}, {0x5, 0x4}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x6}, {0x7, 0x2}, {0x4, 0x7}, {0x7, 0x6}, {0x2, 0x4}, {0x2, 0xa}, {0x0, 0xa}, {0x3}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x4}, {0x4, 0x6}, {0x5, 0x8}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x6}, {0x4, 0x7}, {0x1, 0x1}, {0x3, 0x8}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x3}, {0x7, 0x6}, {0x3, 0x1}, {0x1, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x1}, {0x6, 0x9}, {0x1, 0x3}, {0x3, 0x6}, {0x6, 0x7}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x8}, {0x3, 0x3}, {0x5}, {0x4, 0x8}, {0x2, 0xa}, {0x0, 0x6}, {0x5, 0x9}, {0x7, 0x6}, {0x0, 0x3}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x4}, {0x2}, {}, {0x1}, {0x5, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x6, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0xb, 0x9, 0x6, 0x30, 0x4, 0x5, 0x16, 0x5, 0x18, 0x48, 0x16, 0x48, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xab5, 0x2, 0x8, 0xa7, 0x7, 0x4, 0xb1d, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x200, 0x4, 0x4, 0x80, 0x3ff, 0x200, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x40, 0x70, 0x922f, 0x9, 0x4, 0x834, 0xe]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x7, 0xf0, 0x7, 0x0, 0xa, 0xb7]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x1}, {0x7, 0x4}, {0x3, 0x7}, {0x4, 0x1}, {0x1, 0x5}, {0x1, 0x2}, {0x1}, {}, {0x1, 0x6}, {0x7, 0x3}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x4, 0x3}, {0x2}, {0x2, 0x2}, {0x1, 0x1}, {0x7}, {0x6}, {0x0, 0x3}, {0x3, 0x5}, {0x2}, {0x0, 0x7}, {0x5, 0x5}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x8}, {0x6}, {0x3, 0x2}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0x7}, {}, {0x0, 0x7}, {0x2}, {0x6, 0x6}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0x11}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x4, 0x3}, {0x0, 0x2}, {0x0, 0x6}, {0x4, 0x2}, {0x7, 0x8}, {0x4}, {0x1, 0x7}, {0x5, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x3, 0xa}, {0x7}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x5}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x60d788a0d0faffb9, 0xc, 0x2, 0x9, 0x2, 0x2, 0x2, 0x0, 0x1c, 0x30, 0x6, 0x6c, 0x0, 0x48, 0x15a446c3954feffc, 0xc, 0xc, 0x1b, 0x16, 0x2, 0x16, 0x60, 0x9, 0xb, 0x36]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x0, 0x7, 0x9, 0x2, 0x0, 0xfc00, 0x3]}}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x6c11, 0x4, 0x4, 0xd29, 0x87, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x800, 0x8, 0xce7, 0x7fff, 0xfff7, 0x401, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1000, 0x4, 0x9, 0x9, 0x6, 0x4, 0x1]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x7}, {0x3, 0x7}, {0x1, 0x5}, {0x2, 0x5}, {0x7, 0x3}, {0x5}, {0x6, 0x8}, {0x7, 0x2}, {0x5, 0x1}, {0x4, 0xa}, {0x7, 0x5}, {0x7, 0x9}, {0x6, 0x4}, {0x2, 0x3}, {0x1, 0xa}, {0x1, 0x5}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0xa}, {0x6, 0x7}, {}, {0x3, 0xa}, {0x6, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x5, 0x1}, {0x1, 0x6}, {0x7, 0x9}, {0x0, 0x6}, {0x1, 0x4}, {0x5, 0x4}, {0x2, 0x1}, {0x3, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x1}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x5}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x4f, 0x30, 0x4, 0x48, 0x0, 0x77, 0x1b, 0x1b, 0x2, 0x6, 0x5, 0x16, 0x2, 0x3, 0x2b, 0x16, 0x12, 0x1, 0x16, 0x48, 0x1a, 0x30, 0x18, 0x30, 0x48, 0x69, 0x48]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1ff, 0xb9, 0x10, 0xfff8, 0x4, 0x6391, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x9}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0xa}, {0x3}, {0x0, 0x8}, {0x5, 0x5}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x3}, {0x5, 0x6}, {0x1, 0x4}, {0x7}, {0x6, 0x9}, {0x5, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x4, 0x8}, {0x1, 0x3}, {0x3, 0x7}, {0x7, 0x8}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0xa}, {0x3, 0x9}, {0x7, 0x7}, {0x4, 0xa}, {0x2, 0xa}, {0x5, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x6}, {0x3, 0x7}, {0x7, 0x4}, {0x3, 0x8}, {0x0, 0x3}, {0x1}, {0x4}, {0x0, 0x4}, {0x7, 0x9}, {0x0, 0x7}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0xa}, {0x4, 0x5}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0x1}, {0x7, 0x7}, {0x5, 0x6}, {0x0, 0xa}, {0x7, 0x4}, {0x6, 0x9}, {0x5, 0x4}, {0x6, 0xa}, {0x0, 0x5}, {0x1, 0x4}, {0x2, 0x1}, {0x4, 0x4}, {0x1, 0x5}, {0x1, 0xa}, {0x4, 0x8}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x16, 0x1b, 0x6, 0xb, 0xb, 0x48, 0x6, 0xc, 0x1b, 0xb, 0x4, 0xb, 0x6, 0xc, 0x6c, 0x6c, 0x9, 0x60, 0x4, 0x33]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x36, 0xc, 0x24, 0xc, 0x12, 0x36, 0x0, 0x36, 0x12, 0x3, 0x36, 0x60, 0x6c, 0x4, 0x60, 0x5, 0x0, 0x16, 0x24, 0x3c, 0x6c, 0x5, 0x30, 0x60, 0x16, 0x48, 0x18, 0x18, 0x13, 0x1]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0xd}, {0x1, 0xa}, {0x4, 0x1}, {0x6, 0x2}, {0x2, 0x5}, {0x5, 0x5}, {0x5, 0x1}, {0x6, 0xa}, {0x2, 0x7}, {0x7, 0x8}, {0x3, 0xa}, {0x4}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x6}, {0x1, 0x4}, {0x4, 0x6}, {0x6, 0x5}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0x7}, {0x7, 0xa}, {0x6, 0x9}, {0x1, 0x7}, {0x2, 0x7}, {0x7, 0x4}, {0x3, 0x9}, {0x2, 0x8}, {0x7}, {0x3, 0x3}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x7}, {0x4, 0x4}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x2}, {}, {0x0, 0x4}, {0x0, 0x5}, {0x5, 0x5}, {0x6, 0x9}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc6, 0xd09, 0x3, 0x4, 0x101, 0x3112, 0x4, 0xff]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x1, 0x9, 0x16, 0x3c, 0x0, 0xb, 0x30, 0x9, 0x2, 0x3, 0x1b, 0x24, 0x9, 0x1b, 0x18, 0x4, 0xc, 0x6, 0x60, 0x60, 0xc, 0x1, 0xb, 0x4, 0x30, 0x2, 0x9, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x69}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc0, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x85}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x10}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x44}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000001}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x63}]}]}]}, 0xb78}, 0x1, 0x0, 0x0, 0x4000800}, 0x200008c8)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_BALANCE_V2(r11, 0xc4009420, &(0x7f00000025c0)={0x12, 0x0, {0x7fffffff, @usage=0xf, <r14=>0x0, 0x80, 0x55c, 0xfffffffffffffff9, 0x4, 0x29c4, 0x10, @struct={0x4, 0xb5}, 0x3f72c496, 0x2, [0x5, 0x7fffffff, 0xcf7, 0xfffffffffffffff9, 0x346, 0x5]}, {0x7f, @struct={0x4, 0x3}, 0x0, 0x9, 0x326e, 0x40000, 0x8000000000, 0x7, 0x4c7, @struct={0x6, 0x8}, 0x1, 0x1, [0xb4f, 0x0, 0x5, 0x6, 0x7, 0x7ff]}, {0x0, @usage=0xa2, 0x0, 0xb, 0x80000000, 0x9ef5, 0x839, 0x9, 0xc, @struct={0x3, 0x3ff}, 0x9, 0x4, [0x7714, 0x1, 0x81, 0xfffffffffffffff9, 0x7f00000000000000, 0x3]}, {0x5, 0x3, 0x4}})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000029c0)={{r0}, r13, 0x1a, @inherit={0x70, &(0x7f0000002540)={0x1, 0x5, 0x2, 0x3, {0x1a, 0x2, 0x520, 0x7, 0x4}, [0x2, 0xffffffffffffff81, 0x6, 0x3, 0x1]}}, @devid=r14})

222.653024ms ago: executing program 4 (id=3647):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2d24d, 0x11f04}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x401, 0xce4d}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
write$nci(r1, 0x0, 0xffffffa3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"})
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x2000000)

221.888811ms ago: executing program 3 (id=3648):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084)

221.503074ms ago: executing program 0 (id=3649):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x98, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6857fb95}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x176f}]}, @CTA_LABELS={0x4}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x488}]}]}, 0x98}}, 0x40000)
r1 = socket(0x80000000000000a, 0x2, 0x0)
close(r1)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
close(r1)
r3 = epoll_create1(0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0xe4ee7000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e2a, 0xfffffffb, @local, 0x80009}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0xe325, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820)

51.147764ms ago: executing program 1 (id=3650):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000700)={'syztnl1\x00', <r2=>0x0, 0x4, 0xe6, 0x7, 0x7fff, 0x23, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x8000, 0xfffffff8, 0x10}})
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x4008}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x4c}}, 0x0)
accept$alg(r0, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @multicast1, @loopback}, "ffffff7f00000000"}}}}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
unshare(0x22020600)
setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000040)=0xffffff01, 0x4)
r4 = socket(0x2b, 0x80801, 0x1)
accept4$tipc(r4, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000006c00000128bd7000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x6, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000868673000006100000140012800b000100627269646765110004000280"], 0x34}}, 0x4000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'})
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x4a, 0x0, &(0x7f00000002c0))
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="165f9026a8cbb8c00669ddee3416b0d47f92c6a95fdfcc5c4f20a247caac0ac4c3318e788baba6905c5ea4840c8c7efe6157ebf949962a9dc78c42171d11e5b77a6bd22d7fafce3d6cec15cd9b4a8c9dbb92166dc37ef98754edde28be1af9d25920f0737cf7fa9e310dee47eae3c58839f0defc6e5348346bd445ee10f5561badbe5a900b4bf2bc540901519a8ed202ac311c14031d194805be591af0b8641966f2629f013e6c631773f873cea571b5", @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r7, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9fe0307681f5c8c989a14f088a8657988a8", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 3 (id=3651):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='vcan0\x00', 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffe37, 0x7, 0x3}]}}]}, 0x48}}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf253a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b000600650005000000b845145aebf8156e0b62c956810c9506897caa9eb1ce49bb7cfc45cd65"], 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r8, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c4000001a00fbbe00000000000000000a00000000000000000000004947ee29c853495c38b05458f51d1edd6b0b4174dfcada22896121e58c384614294ea4af831613d51c08c872c424b83845ee582c51b4899a4e15fe86401a48ca0900000000000000aba6a109c47f85258ea00a2d47def9c78a99b1ceb7b90a5c7f7c0923a93a7b9d0a8cc552"], 0x1c}}, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r9, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0001000200"], 0x8)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r11, &(0x7f0000000840)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe)
getpeername$l2tp6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x20)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r13)
r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r13)
sendmsg$NL802154_CMD_NEW_INTERFACE(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40)

kernel console output (not intermixed with test programs):

aa:aa:aa:aa:17, vlan:0)
[  332.406518][    C0] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  378.476692][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  378.483512][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  379.931445][T14296] netlink: 'syz.1.2384': attribute type 1 has an invalid length.
[  379.960675][T14302] __nla_validate_parse: 7 callbacks suppressed
[  379.960691][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2386'.
[  379.980343][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2386'.
[  380.004497][T14296] 8021q: adding VLAN 0 to HW filter on device bond18
[  380.037759][T14308] netlink: 'syz.0.2388': attribute type 1 has an invalid length.
[  380.094592][T14308] 8021q: adding VLAN 0 to HW filter on device bond15
[  380.210778][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2386'.
[  380.240710][T14302] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2386'.
[  380.276261][T14321] netlink: 'syz.1.2390': attribute type 10 has an invalid length.
[  380.373200][T14321] 8021q: adding VLAN 0 to HW filter on device team0
[  380.386179][T14330] netlink: 'syz.0.2393': attribute type 2 has an invalid length.
[  380.414234][T14321] team0: entered promiscuous mode
[  380.419331][T14321] team_slave_0: entered promiscuous mode
[  380.425173][T14321] team_slave_1: entered promiscuous mode
[  380.431138][T14321] team0: entered allmulticast mode
[  380.436277][T14321] team_slave_0: entered allmulticast mode
[  380.442033][T14321] team_slave_1: entered allmulticast mode
[  380.448554][T14321] bond0: (slave team0): Enslaving as an active interface with an up link
[  380.477868][T14330] : entered promiscuous mode
[  380.483748][T14321] xt_ipcomp: unknown flags 1D
[  380.505643][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2390'.
[  380.813230][T14354] netlink: 'syz.2.2401': attribute type 9 has an invalid length.
[  380.925452][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2404'.
[  380.978932][T14362] x_tables: duplicate underflow at hook 2
[  381.131108][T14369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2408'.
[  381.423141][T14391] netlink: 'syz.2.2415': attribute type 9 has an invalid length.
[  381.496646][T14400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  381.629745][T14430] bond0: option miimon: invalid value (18446744071829782528)
[  381.645945][T14430] bond0: option miimon: allowed values 0 - 2147483647
[  381.683027][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2418'.
[  381.706199][T14436] netlink: 'syz.3.2419': attribute type 2 has an invalid length.
[  381.721675][T14436] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2419'.
[  381.832477][T14448] netlink: 'syz.4.2422': attribute type 1 has an invalid length.
[  381.886453][T14448] 8021q: adding VLAN 0 to HW filter on device bond13
[  382.127106][T14466] macsec2: entered promiscuous mode
[  382.336581][T14473] netlink: 'syz.2.2428': attribute type 9 has an invalid length.
[  382.372628][T14475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2429'.
[  382.587166][T14485] netlink: 'syz.2.2434': attribute type 1 has an invalid length.
[  382.643224][T14485] 8021q: adding VLAN 0 to HW filter on device bond13
[  382.652000][T14479] syzkaller1: entered promiscuous mode
[  382.657510][T14479] syzkaller1: entered allmulticast mode
[  382.762574][T14494] syzkaller1: entered promiscuous mode
[  382.768419][T14494] syzkaller1: entered allmulticast mode
[  383.561685][T14534] syzkaller0: entered promiscuous mode
[  383.568844][T14534] syzkaller0: entered allmulticast mode
[  383.650733][T14540] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  383.667788][T14535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.786896][T14551] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  383.806174][ T5633] Bluetooth: hci4: command 0x0406 tx timeout
[  383.840457][T14551] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.279260][T14581] xt_NFQUEUE: number of total queues is 0
[  384.310888][T14577] syzkaller0: entered promiscuous mode
[  384.327717][T14577] syzkaller0: entered allmulticast mode
[  384.497240][T14533] tipc: Resetting bearer <eth:syzkaller0>
[  384.527298][T14533] tipc: Disabling bearer <eth:syzkaller0>
[  384.554504][T14598] tipc: Enabling <eth:lo> not permitted
[  384.560208][T14598] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  384.826401][T14602] x_tables: duplicate underflow at hook 2
[  384.826777][T14611] x_tables: duplicate underflow at hook 2
[  384.840761][T14610] Bluetooth: MGMT ver 1.23
[  384.958954][T14614] openvswitch: netlink: Port 856954028 exceeds max allowable 65535
[  385.050330][T14619] __nla_validate_parse: 12 callbacks suppressed
[  385.050349][T14619] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2478'.
[  385.172440][T14628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2479'.
[  385.222986][T14630] validate_nla: 4 callbacks suppressed
[  385.223000][T14630] netlink: 'syz.3.2480': attribute type 4 has an invalid length.
[  385.318069][T14635] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2482'.
[  385.481325][T14641] xt_hashlimit: size too large, truncated to 1048576
[  385.590045][T14644] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.617343][T14644] bridge_slave_0 (unregistering): left promiscuous mode
[  385.624426][T14644] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.637837][T14650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2488'.
[  385.664723][T14653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  385.723215][T14652] pimreg: left allmulticast mode
[  385.813807][T14658] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2488'.
[  385.856974][T14650] bond12: (slave bridge9): Enslaving as an active interface with an up link
[  385.867396][T14650] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2488'.
[  385.877303][T14650] bond12: entered promiscuous mode
[  385.882448][T14650] bridge9: entered promiscuous mode
[  385.887905][T14650] bond12: entered allmulticast mode
[  385.893134][T14650] bridge9: entered allmulticast mode
[  385.917833][T14650] 8021q: adding VLAN 0 to HW filter on device bond12
[  385.993869][T14661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2491'.
[  386.004091][T14661] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2491'.
[  386.020659][T14661] bridge: RTM_NEWNEIGH with invalid ether address
[  386.194081][T14674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2495'.
[  386.301697][T14678] openvswitch: netlink: Missing valid actions attribute.
[  386.308818][T14678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.528420][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2502'.
[  386.537322][T14696] openvswitch: netlink: Flow actions attr not present in new flow.
[  386.941309][ T5631] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  386.948686][ T5631] Bluetooth: hci2: command 0x0406 tx timeout
[  387.053720][T14722] openvswitch: netlink: Key type 31 is not supported
[  387.060585][T14722] openvswitch: netlink: Key type 31 is not supported
[  388.113152][T14793] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.189318][T14795] sit0: entered promiscuous mode
[  388.199100][T14795] netlink: 'syz.1.2530': attribute type 1 has an invalid length.
[  388.266875][T14797] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  388.274277][T14797] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  388.290976][T14802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  388.295135][T14801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.298217][T14802] IPv6: NLM_F_CREATE should be set when creating new route
[  388.564477][T14815] sch_tbf: burst 19872 is lower than device lo mtu (32783) !
[  388.623393][T14818] netlink: 'syz.4.2537': attribute type 1 has an invalid length.
[  388.624703][T14819] netlink: 'syz.4.2537': attribute type 1 has an invalid length.
[  388.658421][T14818] 8021q: adding VLAN 0 to HW filter on device bond14
[  388.669328][T14818] bond2: (slave veth0_to_bond): Releasing active interface
[  388.717483][T14823] netlink: 'syz.1.2538': attribute type 1 has an invalid length.
[  388.727011][T14818] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  388.751775][T14823] 8021q: adding VLAN 0 to HW filter on device bond19
[  388.766035][T14818] macvlan2: entered promiscuous mode
[  388.771367][T14818] macvlan2: entered allmulticast mode
[  388.777284][T14818] bond14: entered promiscuous mode
[  388.783097][T14818] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  388.814789][T14818] bond14: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  388.831126][T14818] bond14: left promiscuous mode
[  388.944298][T14828] syz.1.2540: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  388.960164][T14828] CPU: 0 UID: 0 PID: 14828 Comm: syz.1.2540 Not tainted syzkaller #0 PREEMPT(full) 
[  388.960206][T14828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  388.960226][T14828] Call Trace:
[  388.960235][T14828]  <TASK>
[  388.960243][T14828]  dump_stack_lvl+0xe8/0x150
[  388.960280][T14828]  warn_alloc+0x24c/0x270
[  388.960310][T14828]  ? stack_depot_save_flags+0x33/0x800
[  388.960346][T14828]  ? __pfx_warn_alloc+0x10/0x10
[  388.960374][T14828]  ? kasan_save_track+0x3e/0x80
[  388.960399][T14828]  ? __kasan_kmalloc+0x93/0xb0
[  388.960426][T14828]  ? xsk_setsockopt+0x52a/0x960
[  388.960456][T14828]  ? do_sock_setsockopt+0x17c/0x1b0
[  388.960480][T14828]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  388.960503][T14828]  ? do_syscall_64+0x174/0x580
[  388.960523][T14828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.960554][T14828]  __vmalloc_node_range_noprof+0x12c/0x1730
[  388.960609][T14828]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  388.960638][T14828]  ? __kasan_kmalloc+0x93/0xb0
[  388.960670][T14828]  ? __kmalloc_cache_noprof+0x32d/0x660
[  388.960703][T14828]  ? __kmalloc_cache_noprof+0x150/0x660
[  388.960733][T14828]  vmalloc_user_noprof+0xad/0xe0
[  388.960759][T14828]  ? xskq_create+0xbf/0x170
[  388.960780][T14828]  xskq_create+0xbf/0x170
[  388.960822][T14828]  xsk_init_queue+0x8a/0xe0
[  388.960859][T14828]  xsk_setsockopt+0x52a/0x960
[  388.960890][T14828]  ? __fget_files+0x2a/0x420
[  388.960931][T14828]  ? __pfx_xsk_setsockopt+0x10/0x10
[  388.960961][T14828]  ? __pfx_aa_sk_perm+0x10/0x10
[  388.960992][T14828]  ? aa_sock_opt_perm+0xff/0x1a0
[  388.961023][T14828]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  388.961044][T14828]  ? __pfx_xsk_setsockopt+0x10/0x10
[  388.961076][T14828]  do_sock_setsockopt+0x17c/0x1b0
[  388.961105][T14828]  __x64_sys_setsockopt+0x13d/0x1b0
[  388.961132][T14828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.961154][T14828]  do_syscall_64+0x174/0x580
[  388.961175][T14828]  ? trace_irq_disable+0x3b/0x140
[  388.961202][T14828]  ? clear_bhb_loop+0x40/0x90
[  388.961228][T14828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.961249][T14828] RIP: 0033:0x7f98c5d9de59
[  388.961268][T14828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  388.961286][T14828] RSP: 002b:00007f98c6d3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  388.961307][T14828] RAX: ffffffffffffffda RBX: 00007f98c6025fa0 RCX: 00007f98c5d9de59
[  388.961322][T14828] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  388.961334][T14828] RBP: 00007f98c5e33e6f R08: 0000000000000004 R09: 0000000000000000
[  388.961347][T14828] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  388.961360][T14828] R13: 00007f98c6026038 R14: 00007f98c6025fa0 R15: 00007ffcb68f1b58
[  388.961394][T14828]  </TASK>
[  388.961509][T14828] Mem-Info:
[  389.310236][T14828] active_anon:5815 inactive_anon:2 isolated_anon:0
[  389.310236][T14828]  active_file:257 inactive_file:43002 isolated_file:0
[  389.310236][T14828]  unevictable:768 dirty:70 writeback:0
[  389.310236][T14828]  slab_reclaimable:10683 slab_unreclaimable:105037
[  389.310236][T14828]  mapped:29433 shmem:1280 pagetables:1364
[  389.310236][T14828]  sec_pagetables:0 bounce:0
[  389.310236][T14828]  kernel_misc_reclaimable:0
[  389.310236][T14828]  free:1317756 free_pcp:10144 free_cma:0
[  389.355427][T14828] Node 0 active_anon:23260kB inactive_anon:8kB active_file:1028kB inactive_file:171788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117732kB dirty:280kB writeback:0kB shmem:3584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16592kB pagetables:5308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  389.491649][T14828] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  389.545394][T14838] syzkaller0: entered promiscuous mode
[  389.550996][T14838] syzkaller0: entered allmulticast mode
[  389.573694][T14828] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  389.609666][T14828] lowmem_reserve[]: 0 2489 2489 2489 2489
[  389.615866][T14828] Node 0 DMA32 free:1305036kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23360kB inactive_anon:8kB active_file:1028kB inactive_file:171788kB unevictable:1536kB writepending:280kB zspages:0kB present:3129332kB managed:2548888kB mlocked:0kB bounce:0kB free_pcp:40212kB local_pcp:19168kB free_cma:0kB
[  389.684680][T14828] lowmem_reserve[]: 0 0 0 0 0
[  389.689681][T14828] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  389.725313][T14828] lowmem_reserve[]: 0 0 0 0 0
[  389.730313][T14828] Node 1 Normal free:3950628kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  389.763038][T14828] lowmem_reserve[]: 0 0 0 0 0
[  389.767896][T14828] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  389.791797][T14828] Node 0 DMA32: 1467*4kB (UME) 1422*8kB (UME) 579*16kB (UME) 522*32kB (UME) 65*64kB (UE) 9*128kB (UE) 50*256kB (UM) 11*512kB (UM) 7*1024kB (UME) 7*2048kB (UM) 297*4096kB (UM) = 1304972kB
[  389.817358][T14828] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  389.829705][T14828] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 5*16kB (UM) 8*32kB (UM) 5*64kB (UM) 3*128kB (UM) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 963*4096kB (UM) = 3950628kB
[  389.847767][T14828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  389.858718][T14828] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  389.868591][T14828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  389.878725][T14828] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  389.890224][T14828] 44535 total pagecache pages
[  389.897934][T14828] 0 pages in swap cache
[  389.902635][T14828] Free swap  = 124996kB
[  389.921062][T14828] Total swap = 124996kB
[  389.953017][T14828] 2097051 pages RAM
[  389.964971][T14828] 0 pages HighMem/MovableOnly
[  389.978182][T14828] 428147 pages reserved
[  389.989387][T14828] 0 pages cma reserved
[  390.028920][T14852] xt_bpf: check failed: parse error
[  392.810506][T14895] __nla_validate_parse: 14 callbacks suppressed
[  392.810524][T14895] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.2550'.
[  392.826118][T14895] 0ªX¹¦Dö»: renamed from gretap0
[  392.894813][T14899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2551'.
[  392.960769][T14901] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2555'.
[  393.224562][T14908] netlink: 41 bytes leftover after parsing attributes in process `syz.0.2556'.
[  393.233578][T14908] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2556'.
[  393.314074][T14910] bond14: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  393.349773][T14910] bond14 (unregistering): Released all slaves
[  393.397549][T14908] netlink: 41 bytes leftover after parsing attributes in process `syz.0.2556'.
[  393.593682][T14937] openvswitch: netlink: Key type 71 is out of range max 32
[  393.726621][T14946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2568'.
[  394.075813][T14962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2572'.
[  394.105863][T14961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2572'.
[  394.440510][T14980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2578'.
[  395.230751][T15016] nbd0: detected capacity change from 0 to 63
[  395.260659][T15027] xt_policy: output policy not valid in PREROUTING and INPUT
[  395.289911][T15024] block nbd0: NBD_DISCONNECT
[  395.305893][T15024] block nbd0: Disconnected due to user request.
[  395.314897][T15024] block nbd0: shutting down sockets
[  395.331815][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  395.341165][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  395.348975][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  395.356809][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  395.364676][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  395.386646][ T1677] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  395.401382][ T1677] Buffer I/O error on dev nbd0, logical block 0, async page read
[  395.409306][ T1677] Buffer I/O error on dev nbd0, logical block 1, async page read
[  395.418262][ T1677] Buffer I/O error on dev nbd0, logical block 2, async page read
[  395.426216][ T1677] Buffer I/O error on dev nbd0, logical block 3, async page read
[  395.435008][ T1677] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  395.444194][ T1677] Buffer I/O error on dev nbd0, logical block 0, async page read
[  395.452131][ T1677] Buffer I/O error on dev nbd0, logical block 1, async page read
[  395.462560][ T1677] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  395.472137][ T1677] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  395.487724][ T1677] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  395.497429][ T1677] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  395.507078][ T1677] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  395.516508][T14329] ldm_validate_partition_table(): Disk read failed.
[  395.524765][ T1677] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  395.534106][ T1677] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  395.545180][T14329] Dev nbd0: unable to read RDB block 0
[  395.556252][T14329]  nbd0: unable to read partition table
[  395.599945][T14329] ldm_validate_partition_table(): Disk read failed.
[  395.622044][T14329] Dev nbd0: unable to read RDB block 0
[  395.634281][T14329]  nbd0: unable to read partition table
[  395.795015][T15035] 8021q: adding VLAN 0 to HW filter on device bond13
[  395.842677][T15037] macvlan2: entered promiscuous mode
[  395.848025][T15037] macvlan2: entered allmulticast mode
[  395.854517][T15037] bond13: entered promiscuous mode
[  395.860398][T15037] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  395.869352][T15037] bond13: left promiscuous mode
[  396.307446][T15061] netlink: 'syz.3.2597': attribute type 2 has an invalid length.
[  396.342936][T15059] batadv0: entered promiscuous mode
[  396.348652][T15059] macsec2: entered promiscuous mode
[  396.388491][T15059] 8021q: adding VLAN 0 to HW filter on device macsec2
[  396.767063][T15086] netlink: 'syz.2.2609': attribute type 23 has an invalid length.
[  396.986445][T15099] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  397.186014][T15113] macsec2: entered promiscuous mode
[  397.191880][T15113] batadv0: entered promiscuous mode
[  397.198328][T15113] 8021q: adding VLAN 0 to HW filter on device macsec2
[  397.206053][T15113] batadv0: left promiscuous mode
[  397.346281][T15127] netlink: 'syz.3.2622': attribute type 1 has an invalid length.
[  397.354278][T15127] netlink: 'syz.3.2622': attribute type 1 has an invalid length.
[  397.366797][T15127] netlink: 'syz.3.2622': attribute type 1 has an invalid length.
[  397.503506][T15133] netlink: 'syz.2.2623': attribute type 2 has an invalid length.
[  397.533683][T15133] netlink: 'syz.2.2623': attribute type 1 has an invalid length.
[  397.609034][T15135] xt_cgroup: invalid path, errno=-2
[  398.327794][T15178] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1
[  398.487919][T15188] __nla_validate_parse: 14 callbacks suppressed
[  398.487936][T15188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2646'.
[  398.540882][T15188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.550607][T15190] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2644'.
[  398.615066][T15192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2648'.
[  398.666408][T15196] netlink: 'syz.1.2647': attribute type 1 has an invalid length.
[  398.794389][T15196] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2647'.
[  398.818171][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2652'.
[  398.868216][T15211] syzkaller0: entered promiscuous mode
[  398.886559][T15211] syzkaller0: entered allmulticast mode
[  399.060539][T15206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.396100][T15240] bridge8: entered promiscuous mode
[  399.401464][T15240] bridge8: entered allmulticast mode
[  399.428617][T15240] team0: Port device bridge8 added
[  399.498779][T15249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2666'.
[  399.517461][T15249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2666'.
[  399.857550][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2670'.
[  399.939439][T15272] bridge_slave_0: Caught tx_queue_len zero misconfig
[  399.959603][T15274] nbd: couldn't find a device at index 3
[  399.978965][T15270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.981657][T15276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.129201][T15282] syzkaller0: entered promiscuous mode
[  400.134695][T15282] syzkaller0: entered allmulticast mode
[  400.156610][T15280] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2676'.
[  400.299034][T15282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2677'.
[  400.457332][T15289] netlink: 'syz.4.2679': attribute type 2 has an invalid length.
[  401.125177][T15327] bridge11: port 1(veth9) entered blocking state
[  401.135980][T15327] bridge11: port 1(veth9) entered disabled state
[  401.143791][T15327] veth9: entered allmulticast mode
[  401.151270][T15327] veth9: entered promiscuous mode
[  401.176831][T15335] bond0: (slave veth0_to_bond): Releasing backup interface
[  401.191723][T15335] veth0_to_bond: left promiscuous mode
[  401.198952][T15335] veth0_to_bond: left allmulticast mode
[  401.213773][T15335] bridge11: port 2(veth0_to_bond) entered blocking state
[  401.221630][T15335] bridge11: port 2(veth0_to_bond) entered disabled state
[  401.229022][T15335] veth0_to_bond: entered allmulticast mode
[  401.240214][T15335] veth0_to_bond: entered promiscuous mode
[  401.562913][T15352] syzkaller0: entered promiscuous mode
[  401.588321][T15352] syzkaller0: entered allmulticast mode
[  401.620648][T15360] netlink: 'syz.2.2701': attribute type 11 has an invalid length.
[  401.628697][T15360] netlink: 'syz.2.2701': attribute type 4 has an invalid length.
[  401.742960][T15365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  401.778541][T15366] netlink: 'syz.1.2703': attribute type 1 has an invalid length.
[  401.859978][T15366] 8021q: adding VLAN 0 to HW filter on device bond20
[  402.012936][T15369] netlink: 'syz.3.2704': attribute type 2 has an invalid length.
[  402.483223][T15397] netlink: 'syz.1.2714': attribute type 1 has an invalid length.
[  403.376068][T15425] netlink: 'syz.2.2720': attribute type 5 has an invalid length.
[  403.388804][T15427] netlink: 'syz.2.2720': attribute type 5 has an invalid length.
[  403.541176][T15434] __nla_validate_parse: 18 callbacks suppressed
[  403.541193][T15434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2726'.
[  403.646598][T15435] vlan1: entered promiscuous mode
[  403.651690][T15435] bridge0: entered promiscuous mode
[  403.942361][T15455] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2731'.
[  403.951491][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2732'.
[  403.970752][T15457] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2732'.
[  404.056897][T15461] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component
[  404.418650][T15477] ieee802154 phy0 wpan0: encryption failed: -22
[  404.564342][T15494] netlink: 'syz.3.2746': attribute type 13 has an invalid length.
[  404.583607][T15494] netlink: 'syz.3.2746': attribute type 58 has an invalid length.
[  404.602738][T15494] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2746'.
[  404.623422][T15498] netlink: 'syz.1.2745': attribute type 1 has an invalid length.
[  404.641551][T15498] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2745'.
[  404.664341][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2747'.
[  404.748361][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2749'.
[  404.905012][   T29] audit: type=1800 audit(1783046435.374:7): pid=15510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2749" name="memory.events" dev="tmpfs" ino=2923 res=0 errno=0
[  405.002871][T15516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2752'.
[  405.021337][T15516] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2752'.
[  405.123827][T15518] netlink: 'syz.0.2753': attribute type 1 has an invalid length.
[  405.206427][T15518] 8021q: adding VLAN 0 to HW filter on device bond16
[  405.426671][T15529] ieee802154 phy0 wpan0: encryption failed: -22
[  405.497368][T15539] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16)
[  405.508771][T15539] openvswitch: netlink: Message has 512 unknown bytes.
[  407.162771][T15608] --map-set only usable from mangle table
[  407.962924][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  407.977138][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  407.985064][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  407.994564][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  408.002761][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  408.527356][T15684] validate_nla: 2 callbacks suppressed
[  408.527375][T15684] netlink: 'syz.1.2801': attribute type 23 has an invalid length.
[  408.666638][ T5630] bond8: (slave syz_tun): Removing an active aggregator
[  408.712939][ T5630] bond8: (slave syz_tun): Releasing backup interface
[  408.764884][T15689] netlink: 'syz.3.2803': attribute type 10 has an invalid length.
[  408.772836][T15689] __nla_validate_parse: 14 callbacks suppressed
[  408.772852][T15689] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2803'.
[  408.809143][T15689] geneve1: entered promiscuous mode
[  408.850463][T15689] geneve1: entered allmulticast mode
[  408.857106][T15689] team0: Port device geneve1 added
[  408.862784][T14441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.881833][T14441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.894293][T14441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.015851][T15700] netlink: 'syz.1.2805': attribute type 49 has an invalid length.
[  409.061615][T15700] erspan2: entered allmulticast mode
[  409.124784][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2808'.
[  409.133715][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2808'.
[  409.291909][T15709] netlink: 'syz.0.2809': attribute type 2 has an invalid length.
[  409.521973][T15724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2815'.
[  409.625565][T15726] 8021q: adding VLAN 0 to HW filter on device bond17
[  409.650461][T15726] bond0: (slave bond17): Enslaving as an active interface with a down link
[  409.792768][T15736] 8021q: adding VLAN 0 to HW filter on device bond15
[  409.804888][T15736] bond14: (slave bond15): Enslaving as an active interface with an up link
[  409.833945][T15740] veth1_virt_wifi: mtu less than device minimum
[  409.883064][T15747] bond21: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  409.909038][T15747] bond21 (unregistering): Released all slaves
[  410.074496][ T5633] Bluetooth: hci5: command tx timeout
[  410.154939][T15655] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.162974][T15655] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.170479][T15655] bridge_slave_0: entered allmulticast mode
[  410.179009][T15655] bridge_slave_0: entered promiscuous mode
[  410.188230][T15655] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.195521][T15655] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.203665][T15655] bridge_slave_1: entered allmulticast mode
[  410.211477][T15655] bridge_slave_1: entered promiscuous mode
[  410.254918][T15655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  410.267645][T15655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  410.317258][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2824'.
[  410.381626][T15655] team0: Port device team_slave_0 added
[  410.456431][T15655] team0: Port device team_slave_1 added
[  410.484602][T15774] netlink: 'syz.0.2829': attribute type 20 has an invalid length.
[  410.517623][T15774] IPv6: NLM_F_CREATE should be specified when creating new route
[  410.590945][T15655] batman_adv: batadv0: Adding interface: batadv_slave_0
[  410.597959][T15655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  410.649701][T15655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  410.662186][T15655] batman_adv: batadv0: Adding interface: batadv_slave_1
[  410.669213][T15655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  410.696338][T15655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  410.775699][T15784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2831'.
[  410.808504][T15655] hsr_slave_0: entered promiscuous mode
[  410.836749][T15655] hsr_slave_1: entered promiscuous mode
[  410.876372][T15655] debugfs: 'hsr0' already exists in 'hsr'
[  410.882139][T15655] Cannot create hsr debugfs directory
[  410.950721][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'.
[  410.975256][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'.
[  411.121188][T15795] xt_l2tp: invalid flags combination: 8
[  411.358505][T15800] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2837'.
[  411.392253][T15655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  411.426766][T15655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.595244][T15810] netlink: 'syz.0.2841': attribute type 1 has an invalid length.
[  411.689933][T15810] 8021q: adding VLAN 0 to HW filter on device bond18
[  411.943329][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2845'.
[  412.056409][T15655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  412.103163][T15655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.152003][ T5633] Bluetooth: hci5: command tx timeout
[  412.450848][T15845] syzkaller1: tun_chr_ioctl cmd 1074025678
[  412.462441][T15845] syzkaller1: group set to 0
[  412.504332][T15655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  412.519293][T15655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.678718][T15845] IPVS: Scheduler module ip_vs_sip not found
[  413.496330][T15655] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  413.521152][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  413.560083][T15655] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  413.589537][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  413.597667][T15655] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  413.609503][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  413.679480][T15655] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  413.691533][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  413.910731][T15889] __nla_validate_parse: 4 callbacks suppressed
[  413.910751][T15889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2862'.
[  413.970718][T15893] sctp: [Deprecated]: syz.3.2863 (pid 15893) Use of int in max_burst socket option.
[  413.970718][T15893] Use struct sctp_assoc_value instead
[  413.972672][T15655] 8021q: adding VLAN 0 to HW filter on device bond0
[  414.035973][T15655] 8021q: adding VLAN 0 to HW filter on device team0
[  414.049929][T14440] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.057239][T14440] bridge0: port 1(bridge_slave_0) entered forwarding state
[  414.070330][T15893] sctp: [Deprecated]: syz.3.2863 (pid 15893) Use of int in maxseg socket option.
[  414.070330][T15893] Use struct sctp_assoc_value instead
[  414.146700][T14441] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.153950][T14441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.344879][ T5633] Bluetooth: hci5: command tx timeout
[  414.376849][T15902] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2865'.
[  414.401498][T15901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2866'.
[  414.468351][T15909] netlink: 'syz.3.2867': attribute type 10 has an invalid length.
[  414.483085][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2867'.
[  414.490688][T15901] 8021q: adding VLAN 0 to HW filter on device bond16
[  414.595290][T15913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2868'.
[  414.990799][T15932] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2873'.
[  415.047804][T15935] netlink: 'syz.0.2874': attribute type 7 has an invalid length.
[  415.094274][T14454] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  415.103083][T14454] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  415.160765][T14445] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  415.179284][T14446] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  415.325271][T15655] 8021q: adding VLAN 0 to HW filter on device batadv0
[  415.617638][T15963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2878'.
[  415.876276][T15655] veth0_vlan: entered promiscuous mode
[  415.927968][T15655] veth1_vlan: entered promiscuous mode
[  416.025409][T15986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2884'.
[  416.051965][T15655] veth0_macvtap: entered promiscuous mode
[  416.100287][T15990] netlink: 'syz.3.2887': attribute type 1 has an invalid length.
[  416.150737][T15993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'.
[  416.170121][T15990] 8021q: adding VLAN 0 to HW filter on device bond14
[  416.177905][T15655] veth1_macvtap: entered promiscuous mode
[  416.185413][T15988] veth1_to_bond: entered allmulticast mode
[  416.198800][T15985] ieee802154 phy0 wpan0: encryption failed: -22
[  416.290061][T15993] veth1_to_bond (unregistering): left allmulticast mode
[  416.315136][T15993] bond0: (slave bond_slave_1): Releasing backup interface
[  416.358004][T15655] batman_adv: batadv0: Interface activated: batadv_slave_0
[  416.388965][T15655] batman_adv: batadv0: Interface activated: batadv_slave_1
[  416.401063][T15997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2889'.
[  416.430892][T14446] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.450901][T14446] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.467952][ T5633] Bluetooth: hci5: command tx timeout
[  416.486599][T15997] netlink: 'syz.3.2889': attribute type 22 has an invalid length.
[  416.495020][T15997] netlink: 'syz.3.2889': attribute type 22 has an invalid length.
[  416.502786][T14446] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.505219][T14441] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.777078][T16017] bridge0: port 3(bond0) entered disabled state
[  416.802896][T16019] netlink: 'syz.3.2894': attribute type 1 has an invalid length.
[  416.868462][T14441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.896398][T14441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.973594][T14454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.981557][T14454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.026355][T16026] netlink: 'syz.0.2898': attribute type 1 has an invalid length.
[  417.177838][T16026] 8021q: adding VLAN 0 to HW filter on device bond19
[  417.466107][T16054] netlink: 'syz.3.2901': attribute type 1 has an invalid length.
[  417.658441][T16059] xt_policy: too many policy elements
[  417.717439][T16054] bond15: entered promiscuous mode
[  417.736270][T16054] 8021q: adding VLAN 0 to HW filter on device bond15
[  417.749395][T16063] xt_policy: too many policy elements
[  417.768843][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  417.780603][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  417.789173][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  417.809770][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  417.822751][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  417.948113][T16061] 8021q: adding VLAN 0 to HW filter on device bond15
[  417.977907][T16061] bond15: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  418.044494][T16061] bond15: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  418.068652][T16061] bond15: (slave ip6gre2): making interface the new active one
[  418.086361][T16061] ip6gre2: entered promiscuous mode
[  418.100444][T16061] bond15: (slave ip6gre2): Enslaving as an active interface with an up link
[  418.157156][T16076] netlink: 'syz.2.2911': attribute type 1 has an invalid length.
[  418.331186][T16076] 8021q: adding VLAN 0 to HW filter on device bond17
[  418.660243][    C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff888067413000: connection exists (00 00). last cmd: 10
[  419.220142][T16120] netlink: 'syz.3.2919': attribute type 64 has an invalid length.
[  419.604447][T16126] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537
[  419.655938][T16132] validate_nla: 1 callbacks suppressed
[  419.655955][T16132] netlink: 'syz.3.2923': attribute type 21 has an invalid length.
[  419.669784][T16132] netlink: 'syz.3.2923': attribute type 22 has an invalid length.
[  419.678527][T16132] netlink: 'syz.3.2923': attribute type 23 has an invalid length.
[  419.686443][T16132] netlink: 'syz.3.2923': attribute type 25 has an invalid length.
[  419.793825][T16132] __nla_validate_parse: 7 callbacks suppressed
[  419.793841][T16132] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2923'.
[  419.835691][T16135] netlink: 'syz.4.2922': attribute type 1 has an invalid length.
[  419.914728][ T5631] Bluetooth: hci3: command tx timeout
[  420.089696][T16062] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.096966][T16062] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.104201][T16062] bridge_slave_0: entered allmulticast mode
[  420.112026][T16062] bridge_slave_0: entered promiscuous mode
[  420.121263][T16062] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.128418][T16062] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.135611][T16062] bridge_slave_1: entered allmulticast mode
[  420.163280][T16062] bridge_slave_1: entered promiscuous mode
[  420.394617][T16141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2924'.
[  420.438508][T16143] netlink: 'syz.2.2925': attribute type 1 has an invalid length.
[  420.642713][T16143] 8021q: adding VLAN 0 to HW filter on device bond18
[  420.678736][T16062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.692584][T16062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.911095][T16062] team0: Port device team_slave_0 added
[  420.919594][T16062] team0: Port device team_slave_1 added
[  421.036207][T16154] netlink: 'syz.4.2929': attribute type 2 has an invalid length.
[  421.323855][T16062] batman_adv: batadv0: Adding interface: batadv_slave_0
[  421.330887][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  421.356791][T16062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  421.378082][T16062] batman_adv: batadv0: Adding interface: batadv_slave_1
[  421.415266][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  421.441539][T16062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  421.481036][T16165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2927'.
[  421.690283][T16062] hsr_slave_0: entered promiscuous mode
[  421.697152][T16062] hsr_slave_1: entered promiscuous mode
[  421.703566][T16062] debugfs: 'hsr0' already exists in 'hsr'
[  421.709330][T16062] Cannot create hsr debugfs directory
[  421.789440][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2934'.
[  421.798454][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2934'.
[  421.877249][T16165] netlink: 'syz.3.2927': attribute type 10 has an invalid length.
[  421.885379][T16165] team0: left allmulticast mode
[  421.890273][T16165] team_slave_0: left allmulticast mode
[  421.895756][T16165] team_slave_1: left allmulticast mode
[  421.901237][T16165] geneve1: left allmulticast mode
[  421.906288][T16165] team0: left promiscuous mode
[  421.911090][T16165] team_slave_0: left promiscuous mode
[  421.916717][T16165] team_slave_1: left promiscuous mode
[  421.964533][T16165] geneve1: left promiscuous mode
[  421.969945][T16165] bridge0: port 3(team0) entered disabled state
[  421.995156][T16165] 8021q: adding VLAN 0 to HW filter on device team0
[  422.017598][T16165] team0: entered promiscuous mode
[  422.024007][T16165] team_slave_0: entered promiscuous mode
[  422.030613][T16165] team_slave_1: entered promiscuous mode
[  422.041299][T16165] geneve1: entered promiscuous mode
[  422.050266][T16165] team0: entered allmulticast mode
[  422.055414][T16165] team_slave_0: entered allmulticast mode
[  422.114019][ T5631] Bluetooth: hci3: command tx timeout
[  422.166680][T16165] team_slave_1: entered allmulticast mode
[  422.172575][T16165] geneve1: entered allmulticast mode
[  422.222762][T16165] bond0: (slave team0): Enslaving as an active interface with an up link
[  422.365160][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2937'.
[  422.424239][T16182] batadv_slave_0: Caught tx_queue_len zero misconfig
[  422.685221][T16193] netlink: 'syz.3.2939': attribute type 1 has an invalid length.
[  422.767231][T16194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.981358][T16178] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  422.988272][T16178] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  423.022117][T16178] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  423.028069][T16178] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  423.122084][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'.
[  423.280774][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'.
[  423.436966][T16193] 8021q: adding VLAN 0 to HW filter on device bond16
[  423.460622][T16178] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  423.466604][T16178] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  423.495920][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'.
[  424.024383][T16178] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  424.043558][T16178] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  424.358641][T16062] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  424.445522][T16062] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.592294][T16244] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2951'.
[  428.593632][T16062] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.603957][T16062] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.679135][T16261] bridge9: entered promiscuous mode
[  428.684402][T16261] bridge9: entered allmulticast mode
[  428.733776][T16261] team0: Port device bridge9 added
[  428.739368][T16262] bridge0: port 1(team0) entered blocking state
[  428.886016][T16262] bridge0: port 1(team0) entered disabled state
[  428.892486][T16262] team0: entered allmulticast mode
[  428.916528][T16262] team_slave_0: entered allmulticast mode
[  428.922313][T16262] team_slave_1: entered allmulticast mode
[  429.151703][T16062] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.162021][T16062] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.521523][T16284] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  429.561553][T16062] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.578399][T16062] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.697607][T16293] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2967'.
[  430.461683][T16062] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  430.555473][T16307] netlink: 'syz.2.2973': attribute type 1 has an invalid length.
[  430.572879][T16062] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  430.591952][    C0] sched: DL replenish lagged too much
[  430.707193][T16307] 8021q: adding VLAN 0 to HW filter on device bond19
[  430.714816][T16062] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  430.747029][T16311] block nbd0: not configured, cannot reconfigure
[  430.754639][T16062] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  430.859786][T16062] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  430.959432][T16062] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  431.028642][T16062] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  431.251081][T16317] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2977'.
[  431.279006][T16062] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  431.847137][T16062] 8021q: adding VLAN 0 to HW filter on device bond0
[  432.487555][T16341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2980'.
[  432.499062][T16062] 8021q: adding VLAN 0 to HW filter on device team0
[  432.541994][T16062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  432.721044][T16062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  433.032731][T14445] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.039917][T14445] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.049824][T14445] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.056962][T14445] bridge0: port 2(bridge_slave_1) entered forwarding state
[  433.074417][T16354] team0: Caught tx_queue_len zero misconfig
[  433.948138][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2990'.
[  433.975704][  T808] IPVS: starting estimator thread 0...
[  434.104696][T16381] 8021q: adding VLAN 0 to HW filter on device macsec1
[  434.172471][T16385] vlan2: entered allmulticast mode
[  434.177669][T16385] bond0: entered allmulticast mode
[  434.186835][T16385] bond_slave_0: entered allmulticast mode
[  434.192609][T16385] bond_slave_1: entered allmulticast mode
[  434.198724][  T808] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  434.240127][T16382] IPVS: using max 29 ests per chain, 69600 per kthread
[  434.657056][T16062] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.957306][T16398] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  435.139348][T16412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2997'.
[  435.400509][T16062] veth0_vlan: entered promiscuous mode
[  435.420311][T16062] veth1_vlan: entered promiscuous mode
[  435.448485][T16062] veth0_macvtap: entered promiscuous mode
[  435.494587][T16415] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2998'.
[  435.743303][T14454] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  435.752085][T14454] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  435.760865][T14454] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  435.769589][T14454] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  435.816427][T16422] ksmbd: Unknown IPC event: 1, ignore.
[  435.876645][T16062] veth1_macvtap: entered promiscuous mode
[  435.884562][T16427] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3003'.
[  436.084735][T16062] batman_adv: batadv0: Interface activated: batadv_slave_0
[  436.096183][T16062] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.321655][T14454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.335971][T14454] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.344809][T14454] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.353536][T14454] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.685012][T16441] tap0: tun_chr_ioctl cmd 1074025676
[  436.690374][T16441] tap0: owner set to 0
[  436.981424][T16452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3009'.
[  437.404444][T16457] netlink: 'syz.3.3010': attribute type 15 has an invalid length.
[  438.209465][T16440] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.219945][T16440] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.367428][T16448] bond21 (unregistering): Released all slaves
[  439.064904][T16465] netlink: 'syz.4.3011': attribute type 6 has an invalid length.
[  439.087937][T16467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3013'.
[  439.398299][T16469] netlink: 29 bytes leftover after parsing attributes in process `syz.2.3014'.
[  439.414561][T16477] xt_hashlimit: size too large, truncated to 1048576
[  439.691607][T16484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3019'.
[  439.753366][T16440] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.763762][T16440] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.881393][T14441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.889259][T14441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.223832][T14445] veth5: left allmulticast mode
[  440.228982][T14445] veth5: left promiscuous mode
[  440.234391][T14445] bridge5: port 1(veth5) entered disabled state
[  440.327153][T14445] veth7: left allmulticast mode
[  440.332161][T14445] veth7: left promiscuous mode
[  440.338191][T14445] bridge6: port 1(veth7) entered disabled state
[  440.351642][T16493] netlink: zone id is out of range
[  440.410537][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  440.416944][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  440.441218][T14445] pim6reg527: left allmulticast mode
[  440.446710][T14445] pimreg: left allmulticast mode
[  441.365004][T14445] bond8 (unregistering): (slave gretap0): Releasing backup interface
[  441.456304][T14445] bond0 (unregistering): (slave geneve3): Releasing active interface
[  441.464437][T14445] bond0 (unregistering): (slave geneve3): the permanent HWaddr of slave - 92:79:91:e3:c2:7d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  441.483114][T14445] geneve3 (unregistering): left allmulticast mode
[  441.652859][T14445] bond1 (unregistering): Released all slaves
[  441.772628][T14445] bond0 (unregistering): (slave bond17): Releasing active interface
[  441.783418][T14445] bond0 (unregistering): Released all slaves
[  441.803659][T14445] bond2 (unregistering): Released all slaves
[  441.823228][T14445] bond3 (unregistering): Released all slaves
[  441.884504][T14445] bond4 (unregistering): Released all slaves
[  441.905091][T14445] bond5 (unregistering): Released all slaves
[  441.924181][T14445] bond6 (unregistering): Released all slaves
[  441.978853][T14445] bond7 (unregistering): Released all slaves
[  442.009374][T14445] bond8 (unregistering): (slave bond9): Releasing backup interface
[  442.019659][T14445] bond8 (unregistering): Released all slaves
[  442.038952][T14445] bond9 (unregistering): Released all slaves
[  442.058010][T14445] bond10 (unregistering): Released all slaves
[  442.119095][T14445] bond11 (unregistering): (slave veth9): Releasing active interface
[  442.139486][T14445] bond11 (unregistering): Released all slaves
[  442.158545][T14445] bond12 (unregistering): Released all slaves
[  442.177580][T14445] bond13 (unregistering): Released all slaves
[  442.210505][T14445] bond14 (unregistering): Released all slaves
[  442.229444][T14445] bond15 (unregistering): Released all slaves
[  442.271658][T14445] bond16 (unregistering): Released all slaves
[  442.295749][T14445] bond17 (unregistering): Released all slaves
[  442.373467][T14445] bond18 (unregistering): Released all slaves
[  442.399984][T14445] bond19 (unregistering): Released all slaves
[  442.510302][T16440] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.522371][T16440] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.718897][T16495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  442.849657][T14442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.857535][T14442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.061297][T14445] : left promiscuous mode
[  443.375120][T16530] x_tables: unsorted entry at hook 2
[  444.286485][T16440] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.296813][T16440] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.730044][T14445] tipc: Left network mode
[  445.111968][T16555] netlink: 'syz.0.3036': attribute type 10 has an invalid length.
[  445.302036][T16555] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3036'.
[  445.344156][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3037'.
[  445.536678][T16555] team0: Port device geneve1 added
[  445.543730][T14454] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  445.551932][T14454] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.758746][T16567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3040'.
[  445.846695][T14449] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  445.854928][T14449] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  445.909101][T16560] IPv6: sit1: Disabled Multicast RS
[  446.019460][T16560] sit1: entered allmulticast mode
[  446.076058][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3041'.
[  446.084996][T16573] netlink: 'syz.0.3041': attribute type 10 has an invalid length.
[  446.092832][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3041'.
[  446.216958][T16576] netlink: 400 bytes leftover after parsing attributes in process `syz.3.3043'.
[  446.422772][T14449] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  446.454121][T14449] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.462428][T14449] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  446.470620][T14449] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.138731][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3046'.
[  447.504427][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  447.521804][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  447.531548][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  447.542635][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  447.562797][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  448.963477][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3057'.
[  448.976105][T16626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  448.992256][T16623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3056'.
[  449.027352][T16623] openvswitch: netlink: EtherType 0 is less than min 600
[  449.357144][T14445] batman_adv: batadv0: Removing interface: wlan0
[  449.716602][ T5646] Bluetooth: hci1: command tx timeout
[  449.756025][T16632] netlink: 'syz.4.3058': attribute type 4 has an invalid length.
[  449.771595][T16633] netlink: 'syz.4.3058': attribute type 4 has an invalid length.
[  449.780009][T16637] netlink: 'syz.3.3060': attribute type 1 has an invalid length.
[  450.422500][T16642] bond17: (slave geneve4): making interface the new active one
[  450.432714][T16642] bond17: (slave geneve4): Enslaving as an active interface with an up link
[  450.446403][T14439] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  450.455241][T14439] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  450.464059][T14439] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  450.686763][T16642] syz.3.3060 (16642) used greatest stack depth: 19648 bytes left
[  451.084436][T16662] syzkaller0: entered promiscuous mode
[  451.089978][T16662] syzkaller0: entered allmulticast mode
[  451.450905][T16673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3070'.
[  451.857286][ T5646] Bluetooth: hci1: command tx timeout
[  452.249919][T16689] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3075'.
[  452.267694][T14445] batman_adv: batadv0: Removing interface: batadv_slave_0
[  452.424608][T16692] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3075'.
[  452.571700][T16697] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  452.578220][T16697] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  452.610221][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3075'.
[  452.673030][T16696] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  452.786777][T14445] team0 (unregistering): Port device team_slave_1 removed
[  452.809224][T14445] team0 (unregistering): Port device team_slave_0 removed
[  453.258764][T16689] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.266118][T16689] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.332439][T16697] hsr_slave_0: left promiscuous mode
[  453.344147][T16697] hsr_slave_1: left promiscuous mode
[  453.987518][ T5646] Bluetooth: hci1: command tx timeout
[  456.068528][T16721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3081'.
[  456.105905][ T5646] Bluetooth: hci1: command tx timeout
[  456.468020][T16727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3083'.
[  456.671359][T16731] veth1_virt_wifi: entered allmulticast mode
[  456.843646][T14449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.851520][T14449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.949117][T16590] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.956386][T16590] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.963569][T16590] bridge_slave_0: entered allmulticast mode
[  456.971393][T16590] bridge_slave_0: entered promiscuous mode
[  457.048145][T16590] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.062660][T16590] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.069881][T16590] bridge_slave_1: entered allmulticast mode
[  457.157352][T16590] bridge_slave_1: entered promiscuous mode
[  457.423938][T16590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  457.538465][T16590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  457.748990][T16762] FAULT_INJECTION: forcing a failure.
[  457.748990][T16762] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  457.762453][T16762] CPU: 1 UID: 0 PID: 16762 Comm: syz.2.3093 Not tainted syzkaller #0 PREEMPT(full) 
[  457.762479][T16762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  457.762492][T16762] Call Trace:
[  457.762500][T16762]  <TASK>
[  457.762509][T16762]  dump_stack_lvl+0xe8/0x150
[  457.762546][T16762]  should_fail_ex+0x40c/0x560
[  457.762590][T16762]  _copy_to_user+0x31/0xb0
[  457.762619][T16762]  simple_read_from_buffer+0xe1/0x170
[  457.762653][T16762]  proc_fail_nth_read+0x1bb/0x230
[  457.762684][T16762]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  457.762716][T16762]  ? rw_verify_area+0x24a/0x4c0
[  457.762760][T16762]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  457.762785][T16762]  vfs_read+0x213/0xa80
[  457.762819][T16762]  ? __pfx___mutex_lock+0x10/0x10
[  457.762842][T16762]  ? __pfx_vfs_read+0x10/0x10
[  457.762873][T16762]  ? __fget_files+0x2a/0x420
[  457.762902][T16762]  ? __fget_files+0x3a2/0x420
[  457.762926][T16762]  ? __fget_files+0x2a/0x420
[  457.762959][T16762]  ksys_read+0x150/0x270
[  457.762989][T16762]  ? __pfx_ksys_read+0x10/0x10
[  457.763025][T16762]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.763047][T16762]  do_syscall_64+0x174/0x580
[  457.763068][T16762]  ? trace_irq_disable+0x3b/0x140
[  457.763093][T16762]  ? clear_bhb_loop+0x40/0x90
[  457.763118][T16762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.763137][T16762] RIP: 0033:0x7f132dd5e68e
[  457.763156][T16762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  457.763173][T16762] RSP: 002b:00007f132ec3bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  457.763193][T16762] RAX: ffffffffffffffda RBX: 00007f132ec3c6c0 RCX: 00007f132dd5e68e
[  457.763208][T16762] RDX: 000000000000000f RSI: 00007f132ec3c0a0 RDI: 0000000000000004
[  457.763220][T16762] RBP: 00007f132ec3c090 R08: 0000000000000000 R09: 0000000000000000
[  457.763232][T16762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.763261][T16762] R13: 00007f132e026038 R14: 00007f132e025fa0 R15: 00007fffd0e0ca48
[  457.763295][T16762]  </TASK>
[  458.047774][T16590] team0: Port device team_slave_0 added
[  458.056191][T16590] team0: Port device team_slave_1 added
[  458.093637][T16590] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.100614][T16590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.140581][T16590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.153579][T16590] batman_adv: batadv0: Adding interface: batadv_slave_1
[  458.160540][T16590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.186419][T16590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  458.255625][T16590] hsr_slave_0: entered promiscuous mode
[  458.262288][T16590] hsr_slave_1: entered promiscuous mode
[  458.268574][T16590] debugfs: 'hsr0' already exists in 'hsr'
[  458.274333][T16590] Cannot create hsr debugfs directory
[  458.590252][T16768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  458.607710][T16768] Cannot find del_set index 3 as target
[  458.780003][T16774] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3098'.
[  459.212019][T16779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3100'.
[  459.467916][T16590] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  459.645428][T16590] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.765940][T14445] IPVS: stop unused estimator thread 0...
[  459.965166][T16790] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3104'.
[  460.312434][T16590] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  460.322341][T16590] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.687077][T16801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3109'.
[  460.696087][T16801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3109'.
[  460.739691][T16804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3111'.
[  461.034625][T16590] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.189434][T16590] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.303058][T16820] netlink: 'syz.0.3115': attribute type 2 has an invalid length.
[  461.537778][T16827] xfrm1: entered allmulticast mode
[  461.783021][T16831] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  461.808447][T16831] bond1 (unregistering): Released all slaves
[  461.930008][T16839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3121'.
[  461.966271][T16832] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  462.011405][T16590] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  462.036151][T16590] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.242842][T16843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3122'.
[  462.512995][T16844] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3124'.
[  462.798286][T14442] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  462.887045][T16853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  462.908948][T16861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3125'.
[  462.917976][T16861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3125'.
[  463.442301][T16877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3131'.
[  464.125281][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'.
[  464.235453][T16899] Dead loop on virtual device ip6_vti0 (net 134), fix it urgently!
[  464.657144][T16885] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  464.667658][T16885] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.787739][T16911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3142'.
[  466.661995][T16912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3140'.
[  466.670917][T16912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3140'.
[  467.041072][T16917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3144'.
[  467.236111][T16590] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  467.296240][T16590] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  467.481454][T16929] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3147'.
[  467.611852][T16931] nbd: must specify an index to disconnect
[  467.720972][T16885] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  467.731277][T16885] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.751857][T16590] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  467.786397][T16590] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  467.810587][T14439] bond0: left allmulticast mode
[  467.815479][T14439] bond_slave_0: left allmulticast mode
[  467.820985][T14439] team0: left allmulticast mode
[  467.825979][T14439] team_slave_0: left allmulticast mode
[  467.831524][T14439] team_slave_1: left allmulticast mode
[  467.837362][T14439] bond0: left promiscuous mode
[  467.842149][T14439] bond_slave_0: left promiscuous mode
[  467.847716][T14439] team0: left promiscuous mode
[  467.852516][T14439] team_slave_0: left promiscuous mode
[  467.858093][T14439] team_slave_1: left promiscuous mode
[  467.865971][T14439] bridge0: port 3(bond0) entered disabled state
[  467.975051][T14439] bridge_slave_1: left allmulticast mode
[  467.980747][T14439] bridge_slave_1: left promiscuous mode
[  468.014925][T14439] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.039590][T14439] veth3: left allmulticast mode
[  468.044495][T14439] veth3: left promiscuous mode
[  468.049460][T14439] bridge4: port 1(veth3) entered disabled state
[  468.067186][T14439] veth5: left allmulticast mode
[  468.072165][T14439] veth5: left promiscuous mode
[  468.077142][T14439] bridge5: port 1(veth5) entered disabled state
[  468.116206][T16936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3150'.
[  468.140959][T14439] veth0_to_bond: left allmulticast mode
[  468.146647][T14439] veth0_to_bond: left promiscuous mode
[  468.152288][T14439] bridge11: port 2(veth0_to_bond) entered disabled state
[  468.167706][T14439] veth9: left allmulticast mode
[  468.172599][T14439] veth9: left promiscuous mode
[  468.177565][T14439] bridge11: port 1(veth9) entered disabled state
[  468.609597][T14439] bond4 (unregistering): (slave ip6gre1): Releasing backup interface
[  468.617740][T14439] ip6gre1 (unregistering): left promiscuous mode
[  468.821774][T14439] bond6 (unregistering): (slave geneve2): Releasing active interface
[  468.931178][T14439] bond5 (unregistering): (slave bridge3): Releasing active interface
[  468.965189][T14439] bond11 (unregistering): (slave bridge6): Releasing backup interface
[  468.973410][T14439] bridge6 (unregistering): left promiscuous mode
[  469.067864][T14439] bond16 (unregistering): (slave bridge10): Releasing active interface
[  469.105075][T14439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  469.150523][T14439] bond0 (unregistering): (slave team0): Releasing backup interface
[  469.162338][T14439] bond0 (unregistering): Released all slaves
[  469.175538][T14439] bond1 (unregistering): Released all slaves
[  469.195543][T14439] bond2 (unregistering): Released all slaves
[  469.215693][T14439] bond3 (unregistering): Released all slaves
[  469.256512][T14439] bond4 (unregistering): Released all slaves
[  469.281044][T14439] bond5 (unregistering): Released all slaves
[  469.305956][T14439] bond6 (unregistering): Released all slaves
[  469.329614][T14439] bond7 (unregistering): Released all slaves
[  469.414647][T14439] bond8 (unregistering): Released all slaves
[  469.433667][T14439] bond9 (unregistering): Released all slaves
[  469.452643][T14439] bond10 (unregistering): Released all slaves
[  469.501187][T14439] bond11 (unregistering): Released all slaves
[  469.521152][T14439] bond12 (unregistering): Released all slaves
[  469.540441][T14439] bond13 (unregistering): Released all slaves
[  469.561356][T14439] bond14 (unregistering): Released all slaves
[  469.603325][T14439] bond15 (unregistering): Released all slaves
[  469.626173][T14439] bond16 (unregistering): Released all slaves
[  469.648403][T14439] bond17 (unregistering): Released all slaves
[  469.714884][T14439] bond18 (unregistering): Released all slaves
[  469.738386][T14439] bond19 (unregistering): Released all slaves
[  469.761560][T14439] bond20 (unregistering): Released all slaves
[  469.875810][T16590] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  469.902954][T16590] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  469.966743][T16590] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  469.995004][T16590] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  470.188943][T16943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3152'.
[  470.348286][T16885] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.358620][T16885] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.419772][T16945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3154'.
[  470.567961][T16953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3155'.
[  471.329264][T16885] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.339588][T16885] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.436882][T14439] : left promiscuous mode
[  471.669144][T14441] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  471.685640][T16974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3160'.
[  471.694847][T14441] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.760706][T14439] tipc: Left network mode
[  471.765491][T16972] 8021q: VLANs not supported on ip_vti0
[  471.894588][T14439] IPVS: stopping backup sync thread 6528 ...
[  472.036483][T14440] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  472.071283][T16974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3160'.
[  472.121085][T14440] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.209994][T14440] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  472.218308][T14440] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.310207][T16590] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.320834][T16984] netlink: 'syz.0.3163': attribute type 1 has an invalid length.
[  472.419533][T14445] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  472.427751][T14445] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.485327][T16590] 8021q: adding VLAN 0 to HW filter on device team0
[  472.796349][T16590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  472.807192][T16590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  472.890243][T14442] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.897487][T14442] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.919359][T14442] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.926501][T14442] bridge0: port 2(bridge_slave_1) entered forwarding state
[  473.001573][T16995] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3166'.
[  473.337302][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3169'.
[  474.551851][T14439] hsr_slave_0: left promiscuous mode
[  474.558361][T17028] netlink: 524 bytes leftover after parsing attributes in process `syz.2.3175'.
[  474.592967][T14439] hsr_slave_1: left promiscuous mode
[  474.673934][T17036] SET target dimension over the limit!
[  474.694890][T14439] batadv0: left promiscuous mode
[  474.716248][T14439] veth0_vlan: left promiscuous mode
[  474.794002][T17043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3179'.
[  474.813122][T17043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3179'.
[  475.357045][T14439] team0 (unregistering): Port device team_slave_1 removed
[  475.390498][T14439] team0 (unregistering): Port device team_slave_0 removed
[  476.079845][T17084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3187'.
[  476.128652][T17084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3187'.
[  476.146540][T14439] IPVS: stop unused estimator thread 0...
[  476.390140][T17109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3191'.
[  476.762616][T17126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3195'.
[  476.854351][T16590] 8021q: adding VLAN 0 to HW filter on device batadv0
[  477.008398][T17135] netlink: 'syz.0.3197': attribute type 1 has an invalid length.
[  477.198102][T17139] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.205992][T17139] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.418908][T17139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  477.433507][T17139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  477.593895][T17139] xfrm1: left allmulticast mode
[  477.640721][T17150] team0: Device wg2 is of different type
[  477.670412][T14445] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  477.698038][T14445] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  477.789462][T14445] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  477.825487][T14445] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  477.884264][T17173] __nla_validate_parse: 2 callbacks suppressed
[  477.884293][T17173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3204'.
[  477.918173][T17171] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3203'.
[  477.954060][T16590] veth0_vlan: entered promiscuous mode
[  477.960775][T17173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3204'.
[  477.987501][T16590] veth1_vlan: entered promiscuous mode
[  478.008608][T17179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3206'.
[  478.071166][T17184] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3205'.
[  478.115011][T16590] veth0_macvtap: entered promiscuous mode
[  478.177348][T16590] veth1_macvtap: entered promiscuous mode
[  478.267702][T17188] netlink: 'syz.3.3208': attribute type 1 has an invalid length.
[  478.315492][T16590] batman_adv: batadv0: Interface activated: batadv_slave_0
[  478.386086][T17188] 8021q: adding VLAN 0 to HW filter on device bond19
[  478.417273][T16590] batman_adv: batadv0: Interface activated: batadv_slave_1
[  478.460345][T14445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.520362][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3212'.
[  478.567821][T14445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.596328][T14445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.621825][T14445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.692877][T17216] netlink: 'syz.0.3213': attribute type 1 has an invalid length.
[  478.823486][T17216] 8021q: adding VLAN 0 to HW filter on device bond1
[  478.929772][T17231] openvswitch: netlink: IP tunnel dst address not specified
[  478.967445][T17232] openvswitch: netlink: IP tunnel dst address not specified
[  479.004851][T14454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.040333][T14454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.170997][T17246] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3218'.
[  479.224241][T14445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.243508][T14445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.618778][T17270] netlink: 'syz.4.3222': attribute type 16 has an invalid length.
[  479.655994][T17270] netlink: 'syz.4.3222': attribute type 17 has an invalid length.
[  479.721382][T17276] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3222'.
[  480.060027][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  480.078275][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  480.088674][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  480.099828][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  480.108863][T17287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3227'.
[  480.118424][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  480.129652][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3228'.
[  480.199081][T17270] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.206501][T17270] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.358639][T17270] veth1_virt_wifi: left allmulticast mode
[  480.415184][T17270] vlan2: left allmulticast mode
[  480.420153][T17270] bond0: left allmulticast mode
[  480.427317][T17270] bond_slave_0: left allmulticast mode
[  480.435457][T17270] bond_slave_1: left allmulticast mode
[  480.510509][T17289] batman_adv: batadv0: Removing interface: batadv_slave_0
[  480.575009][T14441] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.582323][T14441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.869847][T17303] netlink: 'syz.0.3230': attribute type 10 has an invalid length.
[  480.970742][T14433] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.983081][T14433] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.037114][T17308] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  481.357831][T14433] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.409191][T14433] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.109602][T14433] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  482.140565][T14433] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.232754][ T5646] Bluetooth: hci2: command tx timeout
[  482.305551][T17363] ip_vti0: Master is either lo or non-ether device
[  482.342357][T14433] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  482.389383][T14433] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.992691][T17383] __nla_validate_parse: 6 callbacks suppressed
[  482.992720][T17383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3249'.
[  483.003114][T17386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3248'.
[  483.456281][T17412] Cannot find add_set index 65532 as target
[  483.515608][T14433] team0: left allmulticast mode
[  483.533941][T14433] team_slave_0: left allmulticast mode
[  483.548686][T14433] team_slave_1: left allmulticast mode
[  483.560981][T14433] bridge0: port 1(team0) entered disabled state
[  483.599362][T14433] veth7: left allmulticast mode
[  483.610316][T14433] veth7: left promiscuous mode
[  483.618801][T14433] bridge6: port 1(veth7) entered disabled state
[  484.173139][T14433] bond3 (unregistering): (slave geneve3): Releasing active interface
[  484.322440][ T5646] Bluetooth: hci2: command tx timeout
[  484.420506][T14433] team0: Port device bridge8 removed
[  484.456584][T14433] team0: Port device bridge9 removed
[  484.529671][T14433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  484.559737][T14433] bond0 (unregistering): Released all slaves
[  484.597441][T14433] bond1 (unregistering): Released all slaves
[  484.628881][T14433] bond2 (unregistering): Released all slaves
[  484.649453][T14433] bond3 (unregistering): Released all slaves
[  484.673504][T14433] bond4 (unregistering): Released all slaves
[  484.694873][T14433] bond5 (unregistering): Released all slaves
[  484.726804][T14433] bond6 (unregistering): Released all slaves
[  484.747850][T14433] bond7 (unregistering): Released all slaves
[  484.768986][T14433] bond8 (unregistering): Released all slaves
[  484.793348][T14433] bond9 (unregistering): Released all slaves
[  484.818569][T14433] bond10 (unregistering): Released all slaves
[  484.850448][T14433] bond11 (unregistering): Released all slaves
[  484.873578][T14433] bond12 (unregistering): Released all slaves
[  484.896941][T14433] bond13 (unregistering): Released all slaves
[  484.921418][T14433] bond14 (unregistering): (slave bond15): Releasing backup interface
[  484.935282][T14433] bond14 (unregistering): Released all slaves
[  484.959465][T14433] bond15 (unregistering): Released all slaves
[  484.981183][T14433] bond16 (unregistering): Released all slaves
[  485.006915][T14433] bond17 (unregistering): Released all slaves
[  485.030170][T14433] bond18 (unregistering): Released all slaves
[  485.054190][T14433] bond19 (unregistering): Released all slaves
[  485.148107][T17284] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.171558][T17284] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.189655][T17284] bridge_slave_0: entered allmulticast mode
[  485.215517][T17284] bridge_slave_0: entered promiscuous mode
[  485.260129][T17284] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.288381][T17284] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.323616][T17284] bridge_slave_1: entered allmulticast mode
[  485.360544][T17284] bridge_slave_1: entered promiscuous mode
[  485.492163][T14433] tipc: Disabling bearer <udp:syz2>
[  485.500389][T14433] tipc: Left network mode
[  485.505745][T17449] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3260'.
[  485.545782][T17284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.576616][T17284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.794498][T17459] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3263'.
[  485.806760][T17459] netlink: 'syz.0.3263': attribute type 9 has an invalid length.
[  485.821650][T17284] team0: Port device team_slave_0 added
[  485.859921][T17284] team0: Port device team_slave_1 added
[  485.955673][T17463] macsec1: entered allmulticast mode
[  485.961096][T17463] bond0: entered allmulticast mode
[  485.971789][T17463] bond_slave_0: entered allmulticast mode
[  485.978785][T17463] bond_slave_1: entered allmulticast mode
[  485.985240][T17463] bond_slave_0: entered promiscuous mode
[  485.996083][T17463] bond_slave_1: entered promiscuous mode
[  486.005235][T17463] 8021q: adding VLAN 0 to HW filter on device macsec1
[  486.024815][T17463] bond0: left allmulticast mode
[  486.037831][T17466] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3264'.
[  486.051035][T17463] bond_slave_0: left allmulticast mode
[  486.065732][T17463] bond_slave_1: left allmulticast mode
[  486.196423][T17456] bond20: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  486.220987][T17456] bond20 (unregistering): Released all slaves
[  486.360932][ T7230] bond_slave_0: left promiscuous mode
[  486.367137][ T7230] bond_slave_1: left promiscuous mode
[  486.383353][T17458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3261'.
[  486.398230][ T5646] Bluetooth: hci2: command tx timeout
[  486.551819][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1
[  486.576871][T17284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.586563][T17458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3261'.
[  486.598710][T17284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.651996][T17284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  486.683909][T17284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  486.690891][T17284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.729684][T17284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.809116][T17485] smc: net device team0 applied user defined pnetid SYZ2
[  486.981811][T17490] netlink: 'syz.0.3269': attribute type 9 has an invalid length.
[  487.040427][T17492] bond0: entered promiscuous mode
[  487.056474][T17492] bond_slave_0: entered promiscuous mode
[  487.067125][T17492] bond_slave_1: entered promiscuous mode
[  487.085855][T17492] batadv0: entered promiscuous mode
[  487.106353][T17492] 8021q: adding VLAN 0 to HW filter on device hsr1
[  487.134459][T17492] bond0: left promiscuous mode
[  487.149856][T17492] bond_slave_0: left promiscuous mode
[  487.177310][T17492] bond_slave_1: left promiscuous mode
[  487.215255][T17492] batadv0: left promiscuous mode
[  488.051617][T17284] hsr_slave_0: entered promiscuous mode
[  488.070833][T17284] hsr_slave_1: entered promiscuous mode
[  488.087622][T17284] debugfs: 'hsr0' already exists in 'hsr'
[  488.094468][T17284] Cannot create hsr debugfs directory
[  488.288159][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2
[  488.472043][ T5646] Bluetooth: hci2: command tx timeout
[  488.564341][T14433] hsr_slave_0: left promiscuous mode
[  488.587577][T14433] hsr_slave_1: left promiscuous mode
[  488.621267][T14433] veth1_macvtap: left promiscuous mode
[  488.651939][T14433] veth0_macvtap: left promiscuous mode
[  488.658128][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3284'.
[  488.686767][T17550] netlink: 'syz.4.3283': attribute type 9 has an invalid length.
[  489.037644][T17558] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3286'.
[  489.133481][T17561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3287'.
[  489.305525][T14433] team_slave_1 (unregistering): left promiscuous mode
[  489.316252][T14433] team0 (unregistering): Port device team_slave_1 removed
[  489.336982][T14433] team_slave_0 (unregistering): left promiscuous mode
[  489.345311][T14433] team0 (unregistering): Port device team_slave_0 removed
[  489.499565][T17551] syzkaller0: entered promiscuous mode
[  489.508071][T17551] syzkaller0: entered allmulticast mode
[  489.577919][T17561] 8021q: adding VLAN 0 to HW filter on device bond20
[  489.654970][T17562] bond20: entered promiscuous mode
[  489.673417][T17562] bond20: entered allmulticast mode
[  490.352622][T17589] netlink: 'syz.1.3297': attribute type 27 has an invalid length.
[  490.932654][T17589] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.940299][T17589] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.188043][T17589] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.221669][T17589] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.740679][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3
[  491.773049][T14439] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  491.796269][T14439] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  491.946502][T17625] syzkaller0: entered promiscuous mode
[  491.952265][T17625] syzkaller0: entered allmulticast mode
[  491.964213][T14439] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  493.827291][T14439] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  493.873924][T14433] IPVS: stop unused estimator thread 0...
[  493.890046][T17641] netlink: 'syz.1.3307': attribute type 4 has an invalid length.
[  494.616149][T17684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3319'.
[  494.839891][T17696] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  494.868086][T17696] bond1 (unregistering): Released all slaves
[  495.231051][T17695] syzkaller0: entered promiscuous mode
[  495.239203][T17695] syzkaller0: entered allmulticast mode
[  495.317643][T17725] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes.
[  495.373692][T17727] xt_hashlimit: size too large, truncated to 1048576
[  497.885483][T17284] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  497.934904][T17284] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  497.954283][T17284] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  498.010746][T17284] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  498.017044][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3330'.
[  498.030682][T17284] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  498.055864][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3330'.
[  498.065992][T17284] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  498.157092][T17284] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  498.199925][T17284] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  498.260221][T17805] syzkaller0: entered promiscuous mode
[  498.280194][T17805] syzkaller0: entered allmulticast mode
[  498.425956][T17793] tipc: Started in network mode
[  498.442062][T17793] tipc: Node identity 36626be4f923, cluster identity 4711
[  498.459779][T17793] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  498.494747][T17790] tipc: Resetting bearer <eth:syzkaller0>
[  498.584109][T17790] tipc: Disabling bearer <eth:syzkaller0>
[  498.904289][T17284] 8021q: adding VLAN 0 to HW filter on device bond0
[  498.927374][T17837] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  499.005106][T17284] 8021q: adding VLAN 0 to HW filter on device team0
[  499.055196][T14440] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.062406][T14440] bridge0: port 1(bridge_slave_0) entered forwarding state
[  499.170796][T14442] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.178019][T14442] bridge0: port 2(bridge_slave_1) entered forwarding state
[  499.462957][T17854] syzkaller0: entered promiscuous mode
[  499.488660][T17854] syzkaller0: entered allmulticast mode
[  499.701535][T17872] dvmrp0: left allmulticast mode
[  499.752401][T17878] netlink: 'syz.1.3348': attribute type 12 has an invalid length.
[  499.818221][T17878] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3348'.
[  499.975322][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3349'.
[  500.032876][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3349'.
[  500.232207][T17888] syzkaller0: entered promiscuous mode
[  500.249677][T17888] syzkaller0: entered allmulticast mode
[  501.359180][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  501.366257][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  502.870276][T17979] syzkaller0: entered promiscuous mode
[  502.901976][T17979] syzkaller0: entered allmulticast mode
[  503.030433][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3362'.
[  503.064968][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3362'.
[  503.100029][T17284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  503.215928][T17284] veth0_vlan: entered promiscuous mode
[  503.259157][T17284] veth1_vlan: entered promiscuous mode
[  503.366000][T17284] veth0_macvtap: entered promiscuous mode
[  503.412945][T17284] veth1_macvtap: entered promiscuous mode
[  503.461717][T17284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  503.488770][T17284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  503.519807][T18014] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3369'.
[  503.550029][T18014] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3369'.
[  503.559376][T14449] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  503.575388][T14449] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  503.588889][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3370'.
[  503.603985][T18018] netlink: 'syz.0.3371': attribute type 10 has an invalid length.
[  503.618266][T14449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  503.618513][T18018] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3371'.
[  503.634380][T14449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  503.675328][T18018] syzkaller0: entered promiscuous mode
[  503.680904][T18018] syzkaller0: entered allmulticast mode
[  503.923323][T14433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.958400][T14433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.133816][T18035] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3373'.
[  504.166791][T14433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.183542][T14433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.214578][T18044] netlink: 'syz.4.3377': attribute type 9 has an invalid length.
[  504.253151][T18037] syzkaller0: entered promiscuous mode
[  504.258696][T18037] syzkaller0: entered allmulticast mode
[  504.364762][T18048] netlink: 'syz.2.3225': attribute type 1 has an invalid length.
[  504.881631][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  504.893580][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  504.912881][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  504.922622][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  504.930357][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  505.090146][T18079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  505.206955][T18087] __nla_validate_parse: 1 callbacks suppressed
[  505.206972][T18087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3388'.
[  505.233754][T18088] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3389'.
[  505.389493][T18092] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  505.497143][T14449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  505.536098][T18102] IPv6: NLM_F_REPLACE set, but no existing node found!
[  505.540401][T14449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.584053][T14449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  505.661057][T18109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'.
[  505.895662][T14449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  505.941537][T14449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.987450][T14449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  506.224358][T14449] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  506.266586][T14449] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.298459][T14449] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  506.319546][T18143] xt_CT: You must specify a L4 protocol and not use inversions on it
[  506.337352][T18147] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3401'.
[  507.033372][ T5646] Bluetooth: hci0: command tx timeout
[  507.330062][T14449] batadv1: left allmulticast mode
[  507.351301][T14449] batadv1: left promiscuous mode
[  507.384466][T14449] bridge0: port 6(batadv1) entered disabled state
[  507.431316][T14449] batadv0: left allmulticast mode
[  507.469288][T14449] batadv0: left promiscuous mode
[  507.487527][T14449] bridge0: port 5(batadv0) entered disabled state
[  507.517526][T14449] bond0: left allmulticast mode
[  507.527638][T14449] bond_slave_0: left allmulticast mode
[  507.538844][T14449] bond_slave_1: left allmulticast mode
[  507.556317][T14449] team0: left allmulticast mode
[  507.572951][T14449] team_slave_0: left allmulticast mode
[  507.589076][T14449] team_slave_1: left allmulticast mode
[  507.609442][T14449] geneve1: left allmulticast mode
[  507.640885][T14449] bond0: left promiscuous mode
[  507.657444][T14449] bond_slave_0: left promiscuous mode
[  507.670955][T14449] bond_slave_1: left promiscuous mode
[  507.695457][T14449] team0: left promiscuous mode
[  507.710042][T18231] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3416'.
[  507.715104][T14449] team_slave_0: left promiscuous mode
[  507.749226][T14449] team_slave_1: left promiscuous mode
[  507.772844][T14449] geneve1: left promiscuous mode
[  507.796085][T14449] bridge0: port 4(bond0) entered disabled state
[  507.837714][T14449] bridge_slave_1: left promiscuous mode
[  507.854341][T14449] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.877002][T14449] bridge_slave_0: left allmulticast mode
[  507.884837][T14449] bridge_slave_0: left promiscuous mode
[  507.896846][T14449] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.981068][T14449] veth5: left allmulticast mode
[  507.986031][T14449] veth5: left promiscuous mode
[  507.990985][T14449] bridge8: port 1(veth5) entered disabled state
[  508.019542][T14449] pimreg3: left allmulticast mode
[  508.218996][T14449] bond15 (unregistering): (slave ip6gre2): Releasing backup interface
[  508.227500][T14449] ip6gre2 (unregistering): left promiscuous mode
[  508.417230][T14449] bond9 (unregistering): (slave gretap3): Releasing backup interface
[  508.461382][T14449] bond17 (unregistering): (slave geneve4): Releasing active interface
[  508.485495][T14449] bond3 (unregistering): (slave geneve3): Releasing active interface
[  508.506974][T14449] team0: Port device geneve1 removed
[  508.562964][T14449] bond2 (unregistering): (slave bridge2): Releasing backup interface
[  508.596826][T14449] team0: Port device bridge5 removed
[  508.611346][T14449] bond8 (unregistering): (slave bridge7): Releasing active interface
[  508.627810][T14449] bond12 (unregistering): (slave bridge9): Releasing backup interface
[  508.636779][T14449] bridge9 (unregistering): left promiscuous mode
[  508.643788][T14449] bridge9 (unregistering): left allmulticast mode
[  508.672601][T14449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.683604][T14449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.693982][T14449] bond0 (unregistering): (slave team0): Releasing backup interface
[  508.703574][T14449] bond0 (unregistering): Released all slaves
[  508.717821][T14449] bond1 (unregistering): Released all slaves
[  508.744630][T14449] bond2 (unregistering): Released all slaves
[  508.763848][T14449] bond3 (unregistering): Released all slaves
[  508.779806][T14449] bond4 (unregistering): Released all slaves
[  508.794968][T14449] bond5 (unregistering): Released all slaves
[  508.810077][T14449] bond6 (unregistering): Released all slaves
[  508.832949][T14449] bond7 (unregistering): Released all slaves
[  508.848583][T14449] bond8 (unregistering): Released all slaves
[  508.868650][T14449] bond9 (unregistering): (slave bond10): Releasing backup interface
[  508.878238][T14449] bond9 (unregistering): Released all slaves
[  508.894540][T14449] bond10 (unregistering): Released all slaves
[  508.909295][T14449] bond11 (unregistering): Released all slaves
[  508.924337][T14449] bond12 (unregistering): Released all slaves
[  508.945171][T14449] bond13 (unregistering): Released all slaves
[  508.960499][T14449] bond14 (unregistering): Released all slaves
[  508.976789][T14449] bond15 (unregistering): Released all slaves
[  508.992060][T14449] bond16 (unregistering): Released all slaves
[  509.007052][T14449] bond17 (unregistering): Released all slaves
[  509.027988][T14449] bond18 (unregistering): Released all slaves
[  509.047217][T14449] bond19 (unregistering): Released all slaves
[  509.063426][T14449] bond20 (unregistering): Released all slaves
[  509.111950][ T5646] Bluetooth: hci0: command tx timeout
[  509.138126][T18232] kthread_run failed with err -4
[  509.170766][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1
[  509.266866][T18244] sctp: [Deprecated]: syz.0.3417 (pid 18244) Use of struct sctp_assoc_value in delayed_ack socket option.
[  509.266866][T18244] Use struct sctp_sack_info instead
[  509.340966][T18244] batman_adv: batadv0: Adding interface: dummy0
[  509.397554][T18244] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  509.442487][T18244] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  509.457720][T18251] netlink: 'syz.1.3421': attribute type 83 has an invalid length.
[  509.524600][T18070] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.533356][T18070] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.558024][T18070] bridge_slave_0: entered allmulticast mode
[  509.574468][T18259] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3420'.
[  509.591376][T18070] bridge_slave_0: entered promiscuous mode
[  509.609917][T14449] tipc: Disabling bearer <udp:syz2>
[  509.622326][T18263] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3420'.
[  509.635419][T14449] tipc: Left network mode
[  509.673832][T18070] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.699290][T18070] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.729437][T18070] bridge_slave_1: entered allmulticast mode
[  509.786987][T18070] bridge_slave_1: entered promiscuous mode
[  509.890609][T18268] raw_sendmsg: syz.0.3423 forgot to set AF_INET. Fix it!
[  510.027401][T18070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  510.079119][T18070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  510.142605][T18276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3425'.
[  510.303890][T18284] netlink: 'syz.2.3428': attribute type 1 has an invalid length.
[  510.325428][T18284] netlink: 'syz.2.3428': attribute type 11 has an invalid length.
[  510.333552][T18284] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3428'.
[  510.343041][T18294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3425'.
[  510.358209][   T29] audit: type=1800 audit(1783046540.834:8): pid=18289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3429" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=635 res=0 errno=0
[  510.440254][T18278] vlan0: entered promiscuous mode
[  510.445633][T18278] hsr0: entered promiscuous mode
[  510.459164][T18278] vlan0: entered allmulticast mode
[  510.488030][T18278] hsr0: entered allmulticast mode
[  510.493335][T18278] hsr_slave_0: entered allmulticast mode
[  510.524467][T18278] hsr_slave_1: entered allmulticast mode
[  510.541227][T18303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3428'.
[  510.670145][T18285] 8021q: adding VLAN 0 to HW filter on device bond3
[  510.715273][T18310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3431'.
[  510.725713][T18311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3431'.
[  510.736890][T18310] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3431'.
[  510.741096][T18285] bond3 (unregistering): Released all slaves
[  510.753784][T18311] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3431'.
[  510.864296][T18070] team0: Port device team_slave_0 added
[  510.891006][T18314] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3432'.
[  510.917676][T18070] team0: Port device team_slave_1 added
[  511.107040][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2
[  511.126898][T18320] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3433'.
[  511.137165][T18070] batman_adv: batadv0: Adding interface: batadv_slave_0
[  511.147421][T18320] Bluetooth: MGMT ver 1.23
[  511.152004][T18070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  511.198361][ T5646] Bluetooth: hci0: command tx timeout
[  511.210649][T18070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  511.248591][T18070] batman_adv: batadv0: Adding interface: batadv_slave_1
[  511.267894][T18070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  511.357770][T18070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  511.623223][T18070] hsr_slave_0: entered promiscuous mode
[  511.656903][T18070] hsr_slave_1: entered promiscuous mode
[  511.673024][T18070] debugfs: 'hsr0' already exists in 'hsr'
[  511.685768][T18070] Cannot create hsr debugfs directory
[  512.366195][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3444'.
[  512.538985][T14449] team0 (unregistering): Port device team_slave_1 removed
[  512.569784][T14449] team0 (unregistering): Port device team_slave_0 removed
[  512.720344][T18372] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  512.767803][T18377] team0: entered promiscuous mode
[  512.774446][T18377] team_slave_0: entered promiscuous mode
[  512.780485][T18377] team_slave_1: entered promiscuous mode
[  512.791674][T18377] team0: left promiscuous mode
[  512.798251][T18377] team_slave_0: left promiscuous mode
[  512.804187][T18377] team_slave_1: left promiscuous mode
[  512.825961][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3
[  513.025546][T18402] nbd: must specify a device to reconfigure
[  513.087150][T18404] netlink: 'syz.0.3450': attribute type 1 has an invalid length.
[  513.134883][T18407] netlink: 'syz.4.3452': attribute type 5 has an invalid length.
[  513.245566][T18404] 8021q: adding VLAN 0 to HW filter on device bond3
[  513.272166][ T5646] Bluetooth: hci0: command tx timeout
[  513.354557][T18409] bond3: (slave geneve2): making interface the new active one
[  513.369425][T18409] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  513.416451][T14433] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  513.459807][T14433] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.553439][T14433] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.587157][T14433] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.628764][T14449] IPVS: stop unused estimator thread 0...
[  513.761758][T18432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  514.015406][T18449] netlink: 'syz.2.3458': attribute type 1 has an invalid length.
[  514.286869][T18462] netlink: 'syz.2.3461': attribute type 1 has an invalid length.
[  514.308116][T18463] x_tables: duplicate underflow at hook 1
[  514.457095][T18462] 8021q: adding VLAN 0 to HW filter on device bond1
[  514.556925][T18464] bond1: (slave geneve2): making interface the new active one
[  514.591072][T18464] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  514.637611][T18473] openvswitch: netlink: IPv4 tunnel dst address is zero
[  514.646307][T18473] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  514.918815][T18070] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  514.959790][T18070] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  514.983693][T18070] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  515.007320][T18070] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  515.043004][T18070] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  515.071674][T18070] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  515.100954][T18070] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  515.141680][T18070] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  515.406309][T18070] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.441710][T18522] netlink: 'syz.2.3474': attribute type 1 has an invalid length.
[  515.678886][T18522] 8021q: adding VLAN 0 to HW filter on device bond2
[  515.758341][T18533] macsec1: entered promiscuous mode
[  515.772062][T18533] batadv0: entered promiscuous mode
[  515.779493][T18533] 8021q: adding VLAN 0 to HW filter on device macsec1
[  515.803398][T18533] batadv0: left promiscuous mode
[  515.912117][T18524] bond2: (slave geneve3): making interface the new active one
[  515.933662][T18524] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  515.954166][T18070] 8021q: adding VLAN 0 to HW filter on device team0
[  516.068105][T14445] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.075323][T14445] bridge0: port 1(bridge_slave_0) entered forwarding state
[  516.128356][T14445] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.135586][T14445] bridge0: port 2(bridge_slave_1) entered forwarding state
[  516.278408][T18547] batman_adv: batadv0: Removing interface: batadv_slave_1
[  516.299706][T18547] batman_adv: batadv0: Removing interface: dummy0
[  516.338037][   T29] audit: type=1804 audit(1783046546.814:9): pid=18552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3480" name="/newroot/65/cgroup.controllers" dev="tmpfs" ino=345 res=1 errno=0
[  516.386054][T18557] __nla_validate_parse: 3 callbacks suppressed
[  516.386087][T18557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3479'.
[  516.403103][   T29] audit: type=1800 audit(1783046546.814:10): pid=18552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3480" name="cgroup.controllers" dev="tmpfs" ino=345 res=0 errno=0
[  516.433200][T18557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3479'.
[  516.453516][T18557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3479'.
[  516.465110][   T29] audit: type=1800 audit(1783046546.814:11): pid=18553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3480" name="cgroup.controllers" dev="tmpfs" ino=345 res=0 errno=0
[  516.498259][T18555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'.
[  516.636348][T18557] geneve3: entered promiscuous mode
[  517.476876][T18592] netlink: 6212 bytes leftover after parsing attributes in process `syz.4.3484'.
[  517.526765][T18594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3484'.
[  517.609740][T18600] netlink: 'syz.0.3485': attribute type 23 has an invalid length.
[  517.633442][T18602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3486'.
[  518.175700][T18070] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.189080][T18622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3489'.
[  518.334809][T18070] veth0_vlan: entered promiscuous mode
[  518.369949][T18070] veth1_vlan: entered promiscuous mode
[  518.427683][T18070] veth0_macvtap: entered promiscuous mode
[  518.464241][T18070] veth1_macvtap: entered promiscuous mode
[  518.527564][T18637] netlink: 'syz.0.3492': attribute type 1 has an invalid length.
[  518.625037][T18637] bond4: entered promiscuous mode
[  518.647873][T18637] 8021q: adding VLAN 0 to HW filter on device bond4
[  518.741673][T18070] batman_adv: batadv0: Interface activated: batadv_slave_0
[  518.805616][T18070] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.937494][T14439] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  518.966642][T14439] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.037438][T14439] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  519.077291][T14439] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.396303][T14445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.426689][T14445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.509904][T14446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.537339][T14446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.562241][T18682] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  519.750799][T18694] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3380'.
[  520.196755][T18699] syzkaller0: entered promiscuous mode
[  520.217052][T18718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3509'.
[  520.220433][T18699] syzkaller0: entered allmulticast mode
[  520.627010][T18741] netlink: 'syz.3.3515': attribute type 1 has an invalid length.
[  520.678564][T18741] netlink: 'syz.3.3515': attribute type 11 has an invalid length.
[  520.715784][T18741] ieee802154 phy0 wpan0: encryption failed: -22
[  520.722626][T18743] ieee802154 phy0 wpan0: encryption failed: -22
[  522.567309][T18724] syzkaller0: entered promiscuous mode
[  522.573022][T18724] syzkaller0: entered allmulticast mode
[  522.819677][T18783] __nla_validate_parse: 5 callbacks suppressed
[  522.819696][T18783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3523'.
[  523.028948][T18802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3524'.
[  523.069954][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3524'.
[  523.335380][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'.
[  523.345095][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'.
[  524.876767][T18811] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.896527][T18811] batman_adv: batadv0: Removing interface: batadv_slave_0
[  524.915891][T18811] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.928124][T18816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3532'.
[  524.945399][T18811] batman_adv: batadv0: Removing interface: batadv_slave_1
[  525.007977][T18825] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3531'.
[  525.041323][T18828] syzkaller0: entered promiscuous mode
[  525.049965][T18828] syzkaller0: entered allmulticast mode
[  525.319602][T18850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3542'.
[  525.330043][T18848] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.3540'.
[  525.362508][T18850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3542'.
[  525.374121][T18850] netlink: 'syz.3.3542': attribute type 7 has an invalid length.
[  525.402346][T18850] netlink: 'syz.3.3542': attribute type 8 has an invalid length.
[  525.420667][T18858] netlink: 'syz.3.3542': attribute type 1 has an invalid length.
[  528.245196][T18843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  528.465100][T18897] syzkaller0: entered promiscuous mode
[  528.470820][T18897] syzkaller0: entered allmulticast mode
[  528.490608][T18900] __nla_validate_parse: 5 callbacks suppressed
[  528.490624][T18900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3556'.
[  529.028473][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3562'.
[  529.181693][T18941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3568'.
[  530.020367][T18973] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3577'.
[  530.078797][T18976] xt_CT: You must specify a L4 protocol and not use inversions on it
[  530.092662][T18974] netlink: 'syz.3.3578': attribute type 21 has an invalid length.
[  530.112249][T18974] netlink: 'syz.3.3578': attribute type 6 has an invalid length.
[  530.129914][T18974] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3578'.
[  530.244638][T18983] netlink: 'syz.1.3581': attribute type 9 has an invalid length.
[  530.404703][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3585'.
[  530.463762][T18994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3586'.
[  530.621305][T19010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3590'.
[  530.643268][T19010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3590'.
[  530.661983][T19010] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3590'.
[  530.772825][T19010] veth3: entered promiscuous mode
[  530.960416][T19019] x_tables: duplicate underflow at hook 1
[  531.002186][T19025] netlink: 'syz.3.3597': attribute type 9 has an invalid length.
[  531.217759][T19031] xt_hashlimit: invalid interval
[  532.295701][T19059] team0: Port device syz_tun added
[  532.465629][T19064] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  532.501064][T19066] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes.
[  532.540609][T19066] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  532.571418][T19066] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  532.586175][T19066] gretap1: entered promiscuous mode
[  532.610156][T19066] gretap1: entered allmulticast mode
[  532.662922][T19069] syzkaller0: entered promiscuous mode
[  532.673597][T19069] syzkaller0: entered allmulticast mode
[  532.792566][T14445] wlan0: Trigger new scan to find an IBSS to join
[  533.106612][T19092] netlink: 'syz.4.3620': attribute type 10 has an invalid length.
[  533.150425][T19092] netlink: 'syz.4.3620': attribute type 9 has an invalid length.
[  533.361422][T19101] nbd: must specify an index to disconnect
[  533.859716][   T29] audit: type=1804 audit(1783046564.334:12): pid=19129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3630" name="/newroot/38/cgroup.controllers" dev="tmpfs" ino=212 res=1 errno=0
[  533.885089][T19116] syzkaller0: entered promiscuous mode
[  533.890597][T19116] syzkaller0: entered allmulticast mode
[  533.900162][   T29] audit: type=1800 audit(1783046564.334:13): pid=19129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3630" name="cgroup.controllers" dev="tmpfs" ino=212 res=0 errno=0
[  534.331326][T19154] __nla_validate_parse: 13 callbacks suppressed
[  534.331344][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3636'.
[  535.752670][T14441] wlan0: Trigger new scan to find an IBSS to join
[  536.003521][T19148] bridge2: entered promiscuous mode
[  536.008841][T19148] bridge2: entered allmulticast mode
[  536.132417][T19168] netlink: 'syz.1.3639': attribute type 9 has an invalid length.
[  536.635522][T19198] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  536.639017][T14434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.685345][T19206] sock: sock_timestamping_bind_phc: sock not bind to device
[  536.730731][    C0] ------------[ cut here ]------------
[  536.736306][    C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  536.746221][    C0] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#0: kworker/0:10/7230
[  536.757093][    C0] Modules linked in:
[  536.761333][    C0] CPU: 0 UID: 0 PID: 7230 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) 
[  536.770866][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  536.780988][    C0] Workqueue: mld mld_ifc_work
[  536.785755][    C0] RIP: 0010:__rate_control_send_low+0x638/0x8a0
[  536.792089][    C0] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
[  536.811779][    C0] RSP: 0018:ffffc90000007918 EFLAGS: 00010246
[  536.817922][    C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  536.825970][    C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90697180
[  536.834032][    C0] RBP: ffff888047a10f40 R08: 0000000000000000 R09: 0000000000000000
[  536.842090][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff8880203a1ca8
[  536.850145][    C0] R13: dffffc0000000000 R14: ffffffff90697180 R15: ffff888047a13258
[  536.858202][    C0] FS:  0000000000000000(0000) GS:ffff888124f60000(0000) knlGS:0000000000000000
[  536.867232][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  536.873880][    C0] CR2: 00007fbd71b556b8 CR3: 0000000056714000 CR4: 00000000003526f0
[  536.881913][    C0] Call Trace:
[  536.885237][    C0]  <IRQ>
[  536.888124][    C0]  rate_control_send_low+0x1a7/0x7b0
[  536.893487][    C0]  rate_control_get_rate+0x20b/0x5d0
[  536.898827][    C0]  ieee80211_beacon_get_finish+0x385/0x6c0
[  536.904709][    C0]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  536.910840][    C0]  ? local_lock_release+0x9c/0x160
[  536.916054][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  536.922467][    C0]  ? __ieee80211_beacon_get+0xdcc/0x1920
[  536.928143][    C0]  ? __ieee80211_beacon_get+0x36/0x1920
[  536.933779][    C0]  __ieee80211_beacon_get+0xe2b/0x1920
[  536.939288][    C0]  ? __lock_acquire+0x683/0x2cf0
[  536.944316][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  536.949828][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  536.955979][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  536.961584][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  536.968871][    C0]  __iterate_interfaces+0x2af/0x5a0
[  536.974153][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  536.980281][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  536.987550][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  536.993712][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  537.000810][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  537.006720][    C0]  mac80211_hwsim_beacon+0xaf/0x240
[  537.011994][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  537.017853][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  537.023155][    C0]  hrtimer_run_softirq+0x17a/0x240
[  537.028326][    C0]  handle_softirqs+0x225/0x840
[  537.033172][    C0]  ? do_softirq+0x76/0xd0
[  537.037560][    C0]  ? ip6t_do_table+0x1d1/0x15b0
[  537.042510][    C0]  do_softirq+0x76/0xd0
[  537.046715][    C0]  </IRQ>
[  537.049683][    C0]  <TASK>
[  537.052685][    C0]  __local_bh_enable_ip+0xf8/0x130
[  537.057851][    C0]  ip6t_do_table+0x13c4/0x15b0
[  537.062698][    C0]  ? __kmalloc_cache_noprof+0x32d/0x660
[  537.068294][    C0]  ? dst_cow_metrics_generic+0x56/0x1c0
[  537.073948][    C0]  ? ip6t_do_table+0x1d1/0x15b0
[  537.078857][    C0]  ? __pfx_ip6t_do_table+0x10/0x10
[  537.084109][    C0]  ? NF_HOOK+0x21b/0x4f0
[  537.088418][    C0]  ? NF_HOOK+0x21b/0x4f0
[  537.092764][    C0]  ? __pfx_ip6t_do_table+0x10/0x10
[  537.097932][    C0]  nf_hook_slow+0xc5/0x220
[  537.102446][    C0]  ? NF_HOOK+0x21b/0x4f0
[  537.106743][    C0]  NF_HOOK+0x399/0x4f0
[  537.110868][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  537.115562][    C0]  ? icmp6_dst_alloc+0x39b/0x430
[  537.120600][    C0]  ? __pfx_dst_output+0x10/0x10
[  537.125579][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  537.130913][    C0]  ? icmp6_dst_alloc+0x39b/0x430
[  537.135959][    C0]  ? icmp6_dst_alloc+0x39b/0x430
[  537.140956][    C0]  mld_sendpack+0x890/0xe10
[  537.145580][    C0]  ? mld_sendpack+0x206/0xe10
[  537.150305][    C0]  ? __pfx_mld_sendpack+0x10/0x10
[  537.155452][    C0]  mld_ifc_work+0x839/0xe70
[  537.160012][    C0]  ? rcu_is_watching+0x15/0xb0
[  537.164911][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  537.170677][    C0]  process_scheduled_works+0xa8e/0x14e0
[  537.176328][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  537.182439][    C0]  ? assign_work+0x3cf/0x5d0
[  537.187082][    C0]  worker_thread+0xa47/0xfb0
[  537.191751][    C0]  kthread+0x388/0x470
[  537.195917][    C0]  ? __pfx_worker_thread+0x10/0x10
[  537.201077][    C0]  ? __pfx_kthread+0x10/0x10
[  537.205760][    C0]  ret_from_fork+0x514/0xb70
[  537.210415][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  537.215613][    C0]  ? __switch_to+0xc89/0x1420
[  537.220343][    C0]  ? __pfx_kthread+0x10/0x10
[  537.225038][    C0]  ret_from_fork_asm+0x1a/0x30
[  537.229865][    C0]  </TASK>
[  537.232995][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  537.240307][    C0] CPU: 0 UID: 0 PID: 7230 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) 
[  537.249795][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  537.259903][    C0] Workqueue: mld mld_ifc_work
[  537.264661][    C0] Call Trace:
[  537.267975][    C0]  <IRQ>
[  537.270854][    C0]  vpanic+0x56c/0xa60
[  537.274907][    C0]  ? __pfx__printk+0x10/0x10
[  537.279544][    C0]  ? __pfx_vpanic+0x10/0x10
[  537.284100][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  537.289435][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  537.294704][    C0]  panic+0xc5/0xd0
[  537.298481][    C0]  ? __pfx_panic+0x10/0x10
[  537.302962][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  537.307949][    C0]  __warn+0x315/0x4c0
[  537.311968][    C0]  ? __rate_control_send_low+0x60c/0x8a0
[  537.317658][    C0]  ? __rate_control_send_low+0x60c/0x8a0
[  537.323344][    C0]  __report_bug+0x331/0x530
[  537.327891][    C0]  ? __rate_control_send_low+0x60c/0x8a0
[  537.333573][    C0]  ? __pfx___report_bug+0x10/0x10
[  537.338640][    C0]  ? stack_trace_save+0xa9/0x100
[  537.343638][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  537.349056][    C0]  report_bug_entry+0x19a/0x290
[  537.353945][    C0]  ? __rate_control_send_low+0x638/0x8a0
[  537.359629][    C0]  ? __rate_control_send_low+0x63d/0x8a0
[  537.365321][    C0]  handle_bug+0xce/0x200
[  537.369614][    C0]  exc_invalid_op+0x1a/0x50
[  537.374171][    C0]  asm_exc_invalid_op+0x1a/0x20
[  537.379062][    C0] RIP: 0010:__rate_control_send_low+0x638/0x8a0
[  537.385364][    C0] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
[  537.405008][    C0] RSP: 0018:ffffc90000007918 EFLAGS: 00010246
[  537.411129][    C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  537.419156][    C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90697180
[  537.427153][    C0] RBP: ffff888047a10f40 R08: 0000000000000000 R09: 0000000000000000
[  537.435182][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff8880203a1ca8
[  537.443188][    C0] R13: dffffc0000000000 R14: ffffffff90697180 R15: ffff888047a13258
[  537.451217][    C0]  ? __rate_control_send_low+0x600/0x8a0
[  537.456912][    C0]  rate_control_send_low+0x1a7/0x7b0
[  537.462344][    C0]  rate_control_get_rate+0x20b/0x5d0
[  537.467701][    C0]  ieee80211_beacon_get_finish+0x385/0x6c0
[  537.473553][    C0]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  537.479680][    C0]  ? local_lock_release+0x9c/0x160
[  537.484850][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  537.491241][    C0]  ? __ieee80211_beacon_get+0xdcc/0x1920
[  537.496917][    C0]  ? __ieee80211_beacon_get+0x36/0x1920
[  537.502499][    C0]  __ieee80211_beacon_get+0xe2b/0x1920
[  537.508004][    C0]  ? __lock_acquire+0x683/0x2cf0
[  537.512997][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  537.518508][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  537.524739][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  537.530357][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  537.537601][    C0]  __iterate_interfaces+0x2af/0x5a0
[  537.542861][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  537.548984][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  537.556250][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  537.562371][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  537.569441][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  537.575290][    C0]  mac80211_hwsim_beacon+0xaf/0x240
[  537.580535][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  537.586382][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  537.591653][    C0]  hrtimer_run_softirq+0x17a/0x240
[  537.596813][    C0]  handle_softirqs+0x225/0x840
[  537.601628][    C0]  ? do_softirq+0x76/0xd0
[  537.606012][    C0]  ? ip6t_do_table+0x1d1/0x15b0
[  537.610898][    C0]  do_softirq+0x76/0xd0
[  537.615095][    C0]  </IRQ>
[  537.618035][    C0]  <TASK>
[  537.620986][    C0]  __local_bh_enable_ip+0xf8/0x130
[  537.626144][    C0]  ip6t_do_table+0x13c4/0x15b0
[  537.630968][    C0]  ? __kmalloc_cache_noprof+0x32d/0x660
[  537.636557][    C0]  ? dst_cow_metrics_generic+0x56/0x1c0
[  537.642179][    C0]  ? ip6t_do_table+0x1d1/0x15b0
[  537.647070][    C0]  ? __pfx_ip6t_do_table+0x10/0x10
[  537.652211][    C0]  ? NF_HOOK+0x21b/0x4f0
[  537.656533][    C0]  ? NF_HOOK+0x21b/0x4f0
[  537.660793][    C0]  ? __pfx_ip6t_do_table+0x10/0x10
[  537.665923][    C0]  nf_hook_slow+0xc5/0x220
[  537.670354][    C0]  ? NF_HOOK+0x21b/0x4f0
[  537.674630][    C0]  NF_HOOK+0x399/0x4f0
[  537.678733][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  537.683332][    C0]  ? icmp6_dst_alloc+0x39b/0x430
[  537.688280][    C0]  ? __pfx_dst_output+0x10/0x10
[  537.693158][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  537.698494][    C0]  ? icmp6_dst_alloc+0x39b/0x430
[  537.703478][    C0]  ? icmp6_dst_alloc+0x39b/0x430
[  537.708446][    C0]  mld_sendpack+0x890/0xe10
[  537.712991][    C0]  ? mld_sendpack+0x206/0xe10
[  537.717681][    C0]  ? __pfx_mld_sendpack+0x10/0x10
[  537.722764][    C0]  mld_ifc_work+0x839/0xe70
[  537.727291][    C0]  ? rcu_is_watching+0x15/0xb0
[  537.732140][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  537.737938][    C0]  process_scheduled_works+0xa8e/0x14e0
[  537.743567][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  537.749577][    C0]  ? assign_work+0x3cf/0x5d0
[  537.754222][    C0]  worker_thread+0xa47/0xfb0
[  537.758883][    C0]  kthread+0x388/0x470
[  537.762995][    C0]  ? __pfx_worker_thread+0x10/0x10
[  537.768157][    C0]  ? __pfx_kthread+0x10/0x10
[  537.772794][    C0]  ret_from_fork+0x514/0xb70
[  537.777480][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  537.782649][    C0]  ? __switch_to+0xc89/0x1420
[  537.787358][    C0]  ? __pfx_kthread+0x10/0x10
[  537.791993][    C0]  ret_from_fork_asm+0x1a/0x30
[  537.796802][    C0]  </TASK>
[  537.800436][    C0] Kernel Offset: disabled
[  537.804788][    C0] Rebooting in 86400 seconds..