last executing test programs:

5.332595047s ago: executing program 2 (id=1405):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101c02, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) (async)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{0x6, 0x3, 0xd9, 0x1}]})
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
write$ppp(r0, &(0x7f0000000200)="7489", 0x2) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x800)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0)

5.250451181s ago: executing program 2 (id=1408):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004845)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = accept4$inet6(r2, &(0x7f0000000140), &(0x7f0000000180)=0x1c, 0x80800)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f0000000240)="c6ea02f506d003884c043c9a771d3870669f6b8e2db9f5a6d4e32b51f2c35051cecdfc0f33125295d8b093532e5f621f6ebc68a9e932da2680acabf3d7698b3743", &(0x7f00000002c0)=""/111, &(0x7f0000000340)="1cf7ebbc811e9d418d44e671e8f51bebf187d60d36fbceb15b275e1ffded2f173c77760528a6e787d55151ae59f74abee7cb27deb7e79acbabef636bcaf9bab0f41ecc38318126ff790adcc20d43f989b3b93579c23b891b078ae8a45f6d01e5e8e3a8054e2342303c0a69265d4dac42153a683aa019065e6b0b22359f7ec7a415761ad69085d185134ea1b66952f940aa52cf3bb469a71eedcda9085db4c6467827303d977441099112327a4b87facf13e45d621c60213c5cb144bf523c16419ca910d689", &(0x7f0000000440)="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", 0x5, 0x1, 0x4}, 0x38)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000580)=0x1, 0x4)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000005c0)=""/49, &(0x7f0000000600)=0x31)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50)
getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000006c0)={@initdev, <r6=>0x0}, &(0x7f0000000700)=0x14)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x8, [@ptr={0x1}, @union={0x10, 0x5, 0x0, 0x5, 0x0, 0x9c, [{0xe, 0x5, 0x1}, {0x3, 0x2, 0x3}, {0xb, 0x2, 0x9}, {0x3, 0x2, 0x4}, {0xd, 0x4, 0x2}]}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x5, [{0xc, 0x4, 0x7}, {0x6, 0x1, 0xffffff1b}]}, @const={0x9, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x2e, 0x61, 0x2e]}}, &(0x7f0000000800)=""/4096, 0xa4, 0x1000, 0x1, 0x7}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x1d, 0x572, 0x200, 0x8001, 0x64100, r5, 0x4, '\x00', r6, r7, 0x2, 0x0, 0x2}, 0x50)
setsockopt$inet6_opts(r2, 0x29, 0xc9249e067f2aad1e, &(0x7f00000018c0)=@routing={0x32, 0xa, 0x2, 0x3, 0x0, [@private2, @mcast2, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote]}, 0x58)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001980)='io.stat\x00', 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000001940), r8)
recvmsg$unix(r8, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)}, 0x40)
socket$inet6(0xa, 0x2, 0xfff)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000001a40)={<r9=>0x0, 0x1a, "4a4382330f085941247c6d4c62f2d8867eb5214f83f8eb38a585"}, &(0x7f0000001a80)=0x22)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000001ac0)={r9, 0x7, 0x7, 0x3, 0x4, 0x3}, &(0x7f0000001b00)=0x14)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001cc0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000001dc0)={&(0x7f0000001c40), 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x58, r10, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x2, 0x58}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x28}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "300cdf1c1bb0fa2f015142a29592be46"}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x20000001)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001e40)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000002c40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000001e80)={0xd60, r1, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x1dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x48, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x6, 0x9, 0x36, 0x30, 0x12, 0x48, 0x18, 0x48, 0x6c, 0x16, 0x6c, 0x12, 0x9, 0x2]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x5}, {0x3, 0x6}, {0x2, 0x2}, {0x5, 0x1}, {0x7, 0x1}, {0x7}, {0x1, 0xa}, {0x0, 0x4}, {0x7, 0x8}, {0x3}, {0x7, 0x9}, {}, {0x7, 0x4}, {0x4, 0x6}, {}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x3}, {0x6, 0x2}, {0x1}, {0x5, 0x3}, {0x2, 0x9}, {0x3, 0x7}, {0x4, 0x7}, {0x2, 0x2}, {0x0, 0x5}, {0x5, 0x5}, {0x1, 0x3}, {0x2, 0x2}, {0x7}, {0x2, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xad, 0x4, 0xff, 0xeab6, 0x1, 0x9, 0x7, 0x2]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x2, 0x16, 0x32, 0x3, 0x3]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x1b, 0x18, 0x30, 0x3, 0x6c, 0x1b, 0x18, 0xc, 0x9, 0x6c, 0xc, 0x1, 0x178d6659e682c3e7, 0x30, 0xb, 0x36, 0x36, 0x18, 0x1, 0xc, 0x1, 0x30, 0x24, 0x6c, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x81, 0x9, 0xfff, 0x4, 0x3, 0x9, 0xfffb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x101, 0x1, 0x8, 0x1, 0x6d4, 0x3ff, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x9, 0x5, 0x8, 0x40, 0xff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0xa}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x7}, {0x3, 0x3}, {0x6, 0x4}, {0x4}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x6}, {0x3, 0x6}, {0x7, 0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x4, 0x3}, {0x1, 0x1}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x1}, {0x6, 0x1}, {0x3, 0x4}, {0x1, 0x1}, {0x5, 0x9}, {0x1, 0xa}, {0x3, 0x2}, {0x0, 0x7}, {0x1, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0x3}, {0x1, 0x1}, {0x7, 0x6}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x7, 0x6}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x7, 0x1}, {0x5, 0x3}, {0x1}, {0x5, 0x6}, {0x3}, {0x1, 0x3}, {0x3, 0x3}, {0x4, 0x3}, {0x3, 0x1}, {0x3, 0x2}, {0x1, 0x7}, {0x5}, {0x3, 0x1}, {0x5, 0x4}, {0x4, 0x4}, {0x3, 0x2}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0x3}, {0x2, 0x5}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdd5, 0x6, 0x1, 0x5, 0x7, 0x1, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x8}, {0x4}, {0x0, 0x4}, {0x2, 0x2}, {0x2, 0x4}, {0x4}, {0x3}, {0x2, 0x4}, {0x7, 0x8}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0x8}, {0x4, 0x6}, {0x5, 0x3}, {0x4, 0x1}, {0x6}, {0x7, 0x4}, {0x4, 0x6}, {0x5, 0x6}, {0x5, 0x4}, {0x2, 0x8}, {0x4, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x80, 0x6, 0xa, 0x8, 0x4, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x308, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x2, 0x7}, {0x4, 0x4}, {0x4, 0x1}, {0x1, 0x6}, {0x7, 0x2}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0x9}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x6, 0x3}, {0x1}, {0x2, 0x8}, {0x1, 0xa}, {0x5}, {0x3, 0xa}, {0x0, 0x6}, {0x5, 0x8}, {0x0, 0xa}, {0x2, 0x1}, {0x1, 0x6}, {0x4, 0x3}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x4}, {0x7}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0x3}, {0x1, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x2}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x7}, {0x2, 0x8}, {0x7}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x6, 0x6c, 0x9, 0x16, 0x5, 0x2, 0x9, 0x30, 0x1b, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x9, 0x16, 0x1e, 0x36, 0x4b, 0x5, 0x9, 0x9, 0x1, 0xc, 0x12, 0x16, 0x5, 0x0, 0x30, 0x9, 0x5, 0xb, 0x6, 0x1, 0x1, 0x9, 0x31f1ad2038b4c188, 0x16, 0x9, 0x24, 0xc]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0xa}, {0x3, 0x4}, {0x2, 0x2}, {0x1, 0x6}, {0x7, 0x1}, {0x2, 0x8}, {0x2, 0x7}, {0x6, 0x1}, {0x1}, {0x4, 0x2}, {0x0, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x6, 0x2}, {0x5, 0x1}, {0x1, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x8}, {0x4, 0x7}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7, 0x2}, {0x2}, {0x2, 0x8}, {0x6, 0x1}, {0x6, 0x1}, {0x5, 0x7}, {0x4, 0xa}, {0x6}, {0x1, 0x3}, {0x4, 0x8}, {0x2, 0x5}, {0x3, 0x6}, {0x4, 0x8}, {0x1, 0x4}, {0x1, 0x3}, {0x4, 0x8}, {0x4, 0x9}, {0x3}, {0x2, 0x7}, {0x6, 0xa}, {0x7}, {0x1, 0x6}, {0x5, 0x2}, {0x3, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x9}, {0x5, 0x6}, {0x5, 0x6}, {0x5, 0xa}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x56d6, 0x2, 0x5, 0x0, 0x400, 0x8, 0x5]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x3, 0x9}, {0x6, 0x8}, {0x5, 0x2}, {0x4, 0x3}, {}, {0x7, 0x5}, {0x6, 0x1}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}, {0x1, 0x7}, {0x5, 0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x2, 0x8}, {0x2, 0x4}, {0x0, 0x7}, {0x4}, {0x5, 0x6}, {0x2, 0x6}, {0x1, 0x9}, {0x1}, {0x4, 0x5}, {0x6, 0x4}, {0x5, 0x9}, {0x5, 0x3}, {0x7, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x7}, {0x1, 0x3}, {0x3, 0x3}, {0x5, 0x2}, {0x3, 0x6}, {0x3, 0x9}, {0x6, 0x7}, {0x5, 0x6}, {0x2, 0x8}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7f, 0x7, 0x2, 0x2, 0x2, 0x2, 0x40]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x6}, {0x3, 0x5}, {0x5, 0xa}, {0x0, 0x8}, {0x1}, {0x5, 0x4}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x9}, {0x3, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x3, 0x8}, {0x6, 0x3}, {0x7, 0x7}, {0x5, 0x9}, {0x6, 0x5}, {0x6, 0x1}, {0x4, 0x3}, {0x3, 0xa}, {0x4}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x7}, {0x6, 0x7}]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x3d5, 0x7, 0x7, 0x7, 0x3, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc7b, 0x0, 0x3, 0xf, 0x81, 0x800, 0xc0d, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x4726, 0x800, 0x800, 0x7, 0xba7, 0x10, 0xfffd]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x3, 0x80, 0x6, 0x5, 0xff, 0x100, 0x1000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2d, 0xfbc, 0xff, 0x2, 0x9, 0x3, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x4, 0x16, 0x60, 0xb, 0x5, 0x5, 0x6, 0x5, 0x5, 0x12, 0x2, 0x4, 0x60, 0x2, 0x1, 0x6, 0x60, 0x1, 0x1, 0x3, 0x24, 0x16, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x800, 0x5, 0x6, 0x0, 0x1, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x63c9, 0x35e3, 0x4, 0x100, 0x9, 0x2d2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0xf485, 0x95, 0x9b3, 0x1, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x8}, {0x7, 0x5}, {0x7}, {0x7, 0x3}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0x7}, {0x4, 0x3}, {0x1, 0xa}, {0x6, 0x3}, {0x2, 0x6}, {0x5, 0x8}, {0x4, 0x3}]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5fe, 0x39, 0x2, 0x3, 0x8, 0x4c2f, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0xa}, {0x0, 0x4}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x9}, {0x2, 0x7}, {0x1}, {0x1}, {0x1, 0x6}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x4}, {0x1}, {0x7, 0x2}, {0x7, 0x5}, {0x7}, {0x1, 0x9}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0x1}, {0x2, 0x2}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x7}, {0x7, 0xa}, {0x6, 0x7}, {0x5, 0x3}, {0x2, 0x4}, {0x0, 0x7}, {0x4, 0x3}, {0x6, 0x8}, {0x7, 0x7}, {0x6, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0x30, 0x1b, 0x12, 0x9, 0x9, 0x3, 0x36, 0xc, 0x18, 0x60, 0x16, 0x21]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x60, 0x2, 0x36, 0x48, 0xc, 0x4, 0x16, 0x3]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x6, 0x13, 0x30, 0x30, 0xdc9429ab98f0802e, 0x6, 0x6c, 0x6, 0x4, 0x16, 0x30, 0x0, 0x36, 0x30, 0x4, 0x36, 0x12, 0x6, 0x0, 0x16, 0x1, 0x6c, 0x12, 0xb, 0xc, 0x22, 0xc, 0x9, 0x6]}]}]}, @NL80211_ATTR_TX_RATES={0x13c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x1ff, 0x8000, 0xff80, 0x5, 0x9, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x25, 0xffff, 0xa, 0x6, 0x8, 0x349e, 0x6, 0x5]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff7, 0x80, 0x7, 0x4, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x5}, {0x5, 0xa}, {0x3, 0x8}, {0x2, 0x9}, {0x4, 0x6}, {0x6, 0x4}, {0x4, 0x5}, {0x3, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x2, 0x7}, {0x4, 0x1}, {0x2, 0x7}, {0x7, 0x6}, {0x1, 0x2}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0xa}, {0x7}, {0x1, 0x3}, {0x6, 0x5}, {0x1, 0x9}, {0x1, 0x3}, {0x2, 0x9}, {0x6, 0x2}, {0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x2, 0x6}, {0x6}, {0x4, 0x3}, {0x7, 0x8}, {0x0, 0x1}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0x9}, {0x7, 0x8}, {0x2, 0x7}, {0x1, 0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x6}, {0x7, 0x7}, {0x3, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4a}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x4}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x7, 0x3}, {0x7, 0x5}, {0x5, 0x1}, {0x5, 0x5}, {0x5, 0x5}, {0x3, 0x1}, {0x2, 0x4}, {0x7, 0x2}, {0x0, 0x6}, {0x6, 0xa}, {0x6, 0x6}, {0x4, 0x7}, {0x4, 0xa}, {0x1, 0xa}, {0x7, 0x1}, {0x4, 0x7}, {0x6, 0x6}, {0x7, 0x5}, {0x0, 0x4}, {0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x1, 0x48, 0xb, 0x4, 0x60, 0xc, 0xc, 0x0, 0x5, 0xb, 0x24, 0x9, 0x48]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0xc, 0x7f, 0x1b, 0x16, 0x4, 0x6c, 0x36, 0x9, 0x60, 0x12, 0x1b, 0x18, 0x1b, 0x9, 0x9, 0x60, 0x18]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x34, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x75a5, 0x4, 0x7f, 0xfffa, 0x2, 0x9, 0x5d2, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x7}, {0x1, 0x4}, {0x1}, {0x0, 0x2}, {0x0, 0xa}, {0x7, 0x6}, {0x0, 0xa}, {0x2, 0x5}, {0x4, 0x3}, {0x6, 0xa}, {}, {0x0, 0x4}, {0x5, 0xa}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x9}, {0x0, 0x2}, {0x1, 0x7}, {0x4, 0xa}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x3}, {0x3, 0x1}, {0x3, 0x5}, {0x1}, {0x5}, {0x0, 0xa}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0xa}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0x8}, {0x1, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x1}, {0x2}, {0x7}, {0x1}, {0x3, 0x1}, {0x5, 0xa}, {0x7, 0x4}, {0x1}, {0x2, 0x19}, {0x1, 0x3}, {0x2, 0x8}, {0x6, 0xa}, {0x2, 0xa}, {0x6, 0xa}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0xf4, 0x5, 0x4, 0xe, 0x8, 0x2c39]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x1b, 0x18, 0x1, 0x0, 0x6c, 0x24, 0x1b, 0x3, 0x6, 0x1b, 0x12]}]}]}, @NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0xa}, {0x2, 0x3}, {0x3}, {0x6, 0x2}, {0x1, 0x2}, {0x6, 0xa}, {0x3, 0x4}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf1, 0x0, 0x2c9, 0x86e, 0x7e5, 0xffea, 0x6, 0x8]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x8}, {0x1, 0x9}, {0x2, 0x5}, {0x6, 0x5}, {0x2, 0x2}, {0x3}, {0x7, 0xa}, {0x3, 0x7}, {0x7, 0xa}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x8}, {0x3, 0xa}, {0x1, 0x5}, {0x4, 0x2}, {0x1}, {0x4, 0x6}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0xa}, {0x5}, {0x4, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x5}, {0x7, 0xa}, {0x4, 0x8}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x3}, {0x4, 0x2}, {0x4, 0x9}, {0x1, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x4, 0x5}, {0x4, 0x4}, {0x5, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x7, 0x8}, {0x5, 0x2}, {0x6}, {0x1, 0x6}, {0x1, 0x3}, {0x4, 0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x3, 0x8}, {0x3, 0xf}, {0x4, 0x4}, {0x3, 0x2}, {0x0, 0x9}, {0x1, 0x9}, {0x5, 0x7}, {0x4, 0x9}, {0x7, 0x2}, {0x1, 0x1}, {0x6, 0x2}, {0x0, 0x9}, {0x2, 0x5}, {0x2, 0x3}, {0x7, 0x8}, {0x0, 0x1}, {0x2, 0x9}, {0x4, 0x6}, {0x0, 0x3}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x7}, {0x5, 0x9}, {0x2, 0x8}, {0x4, 0xa}, {0x1, 0x7}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x1, 0x1}, {0x7, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x5, 0x3}, {0x7, 0x3}, {0x6, 0xa}, {0x0, 0x7}, {0x4, 0x8}, {0x7, 0x6}, {0x4}, {0x5, 0x8}, {0x2, 0x5}, {0x0, 0xa}, {0x7, 0x8}, {0x5, 0x4}, {0x0, 0x7}, {0x1, 0x1}, {0x1}, {0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x3}, {0x0, 0x9}, {0x2, 0x2}, {0x4}, {0x6, 0x2}, {0x1, 0x1}, {0x6, 0x2}, {0x4, 0x7}, {0x0, 0x8}, {0x4, 0x2}, {0x4, 0x5}, {0x4, 0x2}, {0x0, 0x2}, {0x0, 0x3}, {0x1}, {0x6, 0x7}, {0x6}, {0x0, 0x1}, {0x6, 0xa}, {0x7, 0x9}, {0x4, 0x9}, {0x7}, {0x1, 0x3}, {0x2, 0x6}, {0x4, 0x7}, {0x7, 0x3}, {0x4, 0x3}, {0x5, 0xa}, {0x5, 0x4}, {0x1, 0xa}, {0x0, 0x5}, {0x1}, {0x1, 0x5}, {0x5, 0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0x16c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xe8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x60, 0xc, 0xb927f7cb5065ceef, 0x18, 0x3f8c25149bb42d15, 0xb1, 0x6c, 0x6, 0x1, 0xc, 0x18, 0x12, 0x2, 0x9, 0x1, 0x6c, 0x4, 0x1b, 0x3, 0x30, 0x24, 0x12, 0x1b, 0xb, 0x48, 0x30, 0x24, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffc, 0x0, 0x3ff, 0xfffc, 0x7, 0x0, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x18, 0x24, 0xc, 0xb, 0xb, 0x6, 0x1b, 0x4, 0x48, 0x1, 0xb, 0x1b, 0xc, 0x1b, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x5}, {0x1, 0xa}, {0x0, 0x7}, {0x5, 0xa}, {0x3, 0x6}, {0x5, 0x8}, {0x2, 0x2}, {0x5, 0x4}, {0x4, 0x8}, {0x5, 0x6}, {0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x2}, {0x2, 0x9}, {0x5, 0x4}, {0x2, 0x4}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0xa}, {0x5, 0x9}, {0x5, 0x1}, {0x5, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x2, 0x2}, {0x2}, {0x2, 0xa}, {0x0, 0x6}, {0x7, 0x7}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0xa}, {0x1, 0x1}, {0x1, 0x5}, {0x6, 0x1}, {}, {0x3, 0x4}, {}, {0x1, 0x7}, {0x6, 0x3}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x8}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0x3}, {0x5, 0x3}, {0x7, 0x7}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x3}, {0x7, 0x11}, {0x3}, {0x7, 0x3}, {0x6, 0x4}, {0x6, 0x3}, {0x6}, {0x1, 0x5}, {0x3, 0x2}, {0x4, 0x7}, {0x4, 0x3}, {0x1, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x4}, {0x5, 0x3}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x5, 0x4}, {0x7}, {0x3, 0x1}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x7}, {0x5, 0x2}, {0x1, 0x6}, {0x6, 0x8}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {}, {0x1, 0xa}, {0x3, 0x5}, {0x3, 0x4}, {0x3, 0x2}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x7}, {0x6, 0x5}, {0x4, 0x3}, {0x0, 0x7}, {0x3, 0x7}, {0x2, 0x2}, {0x0, 0x4}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfff9, 0x0, 0x6, 0x7ff, 0xff68, 0x4, 0x19]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6c, 0x30, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x2, 0x8, 0x1, 0x4, 0x3, 0x7, 0x41]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x0, 0x6, 0xf, 0xd1, 0x9, 0x9, 0xad8c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0xff08, 0xb, 0x40, 0x2, 0xff, 0x2000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x254, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4a6, 0x34, 0x4, 0x3, 0x8, 0x5, 0x800, 0x6]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x1, 0x24, 0x1, 0x48, 0x3, 0x16, 0x0, 0x24, 0x4, 0x2, 0x4, 0x5, 0x9, 0xe2ba69871a559305, 0x5, 0x1, 0x36, 0x16, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x401, 0x1, 0x1, 0x1, 0x7, 0x7f, 0xb]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x20, 0xd8e89826fc1cfdb7, 0x18, 0x875ccca22f746ac, 0x30, 0xb, 0x6c, 0x60, 0x9, 0xb, 0xc, 0x3, 0xc, 0x1b, 0x35, 0x4c, 0x12, 0xb, 0x6c, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x2}, {0x2, 0x4}, {0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x0, 0xfff1, 0xfffa, 0x0, 0x7f, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x563, 0x4, 0x4, 0x2, 0x8, 0x8, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x1000, 0x0, 0x4, 0x0, 0x2, 0x1]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x3, 0x9}, {0x6, 0x3}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x10}, {0x1, 0x6}, {0x5, 0x2}, {0x4, 0x1}, {0x7, 0x7}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x5}, {0x2, 0x5}, {0x0, 0x8}, {0x7, 0x2}, {0x6, 0x8}, {0x6, 0xa}, {}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x1, 0x4}, {}, {0x6, 0xa}, {0x7, 0x5}, {0x3, 0x8}, {0x2}, {0x4, 0x9}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x2}, {0x1, 0x7}, {0x1, 0x8}, {0x4, 0x3}, {0x3, 0x7}, {0x6, 0x4}, {0x5, 0x2}, {}, {0x0, 0x7}, {0x2, 0x9}]}]}, @NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x1}, {0x7, 0x6}, {0x6, 0x7}, {0x2, 0x3}, {0x4, 0x8}, {0x3, 0x4}, {0x1}, {0x1, 0x3}, {0x2, 0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x5}, {0x6, 0x5}, {0x2, 0x6}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0x1}, {0x3, 0x5}, {0x0, 0x7}, {0x3, 0x8}, {0x3}, {0x2, 0x5}, {0x1, 0x2}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x3}, {0x7, 0x7}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x49, 0xff, 0x8001, 0xc9, 0x101, 0x1ff, 0x7f, 0x7]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x18, 0x18, 0x30, 0x69, 0x3, 0x20, 0x5, 0x24, 0x9, 0x5, 0x14, 0x36, 0x30, 0x6c, 0x3, 0x4, 0x16, 0x16, 0x6c, 0x6c, 0x9, 0x6, 0x1, 0x6c, 0xc, 0x6, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x10, 0x5, 0x9, 0x8000, 0xa0, 0xf1, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x3}, {0x7, 0x3}, {0x0, 0x8}, {0x2}, {0x7, 0x2}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x1, 0x9}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x4}, {0x7}, {}, {0x4}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x0, 0x8}, {0x2, 0x2}, {0x5, 0xa}, {0x7, 0x3}, {0x3, 0xa}, {}, {0x4, 0x4}, {0x1, 0x9}, {0x3, 0x7}, {0x2, 0x7}, {0x0, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x2, 0x12, 0x1b, 0x9, 0x30, 0x5, 0x4, 0x30, 0x60, 0x9, 0x12, 0x6c, 0x4, 0x36, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x8, 0xfffb, 0x1, 0x1c00, 0x4, 0x5]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x917c, 0x3ff, 0xf8d1, 0x3, 0xdcf, 0x1ff]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x5, 0x9}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0xa}, {0x5, 0x8}, {0x5, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x6, 0x8}, {0x5, 0x1c}, {0x5, 0x5}, {0x3, 0x5}, {0x2, 0x2}, {0x2, 0x5}, {}, {0x3, 0x2}, {0x1, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x60, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8918, 0x8, 0x9, 0xa9e8, 0x40, 0x1000, 0x0, 0x70]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xfff7, 0xf, 0xa1, 0x81, 0x3, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5b77, 0xff, 0xf, 0x8b25, 0x3b6, 0x40, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2dd, 0x7, 0x7f, 0x8, 0x0, 0x8, 0x53]}}]}]}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x60, 0xb, 0x30, 0x0, 0x5, 0x0, 0x60, 0x24, 0x1b, 0xb, 0x6c, 0x4c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1e2e, 0x6, 0x1, 0x2, 0x0, 0x3, 0xe, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7fff, 0x3, 0x0, 0x2, 0x5, 0xc921, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd, 0x8, 0x7, 0xf, 0xa851, 0x6, 0xff96]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x40, 0x23a98bf07748dcb7, 0x6c, 0x16, 0x48, 0x18, 0x1, 0x1b, 0x1b, 0x1, 0x48, 0x6c, 0x2, 0x6, 0x6, 0x1, 0x9, 0x58cbaba6d1fe1d5b, 0x6, 0x48, 0x2, 0x3, 0x36, 0x36, 0x9, 0x3, 0x5, 0x76]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x1}, {0x0, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x5}, {0x0, 0x4}, {0x7, 0x6}, {0x3, 0x2}, {0x2, 0x9}, {0x4, 0x4}, {}, {0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x1, 0x2}, {0x4}, {0x2, 0x9}, {0x6, 0x1}, {0x3, 0x3}, {0x4, 0x4}, {0x4, 0x1}, {0x0, 0xa}, {0x2, 0x7}, {0x6}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x3}, {0x5, 0x3}, {0x6, 0xa}, {0x6, 0x8}, {0x3, 0x7}, {0x1, 0xa}, {0x6, 0x3}, {0x7, 0x8}, {0x0, 0x2}, {0x6, 0xa}, {0x7, 0x4}, {0x2, 0x4}, {0x2, 0xa}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0x8}, {0x3}, {0x5, 0x1}, {0x4, 0x9}, {0x2, 0x2}, {0x7}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0x1}, {0x7, 0x9}, {0x1, 0x9}, {0x1, 0x4}, {0x3, 0x8}, {0x7, 0x1}, {0x3, 0x3}, {0x3, 0x1}, {0x1, 0x6}, {0x5, 0x1}, {0x6, 0x9}, {0x4, 0x4}, {0x3, 0x5}, {0x7, 0x5}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0xa}, {0x6, 0x5}, {0x5, 0x1}, {0x1, 0x8}, {0x2, 0x6}, {0x3, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x7}, {0x4, 0x6}, {0x5, 0x6}, {0x1, 0x1}, {0x3, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x6, 0x6}, {0x0, 0x6}, {0x2}, {0x4, 0x9}, {0x1, 0x8}, {0x1, 0x7}, {0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x4}, {0x4}, {0x5, 0x3}, {0x5, 0x5}, {0x3, 0x4}, {0x2, 0x8}, {0x0, 0xa}, {0x7, 0x8}, {0x4, 0x6}, {0x1, 0x8}, {0x0, 0xa}, {0x7, 0x5}, {0x2}, {0x6, 0x7}, {0x2, 0x1}, {0x7, 0x4}, {0x7, 0x6}, {}, {0x6, 0x2}, {0x4, 0x3}, {0x3}, {0x2, 0x8}, {0x1, 0x7}, {0x3, 0x6}, {0x6, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xa4, 0xc, 0x1000, 0x9, 0x3, 0x8, 0x3]}}]}]}]}, 0xd60}, 0x1, 0x0, 0x0, 0x5}, 0x40800)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002c80)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0xc, '\x00', 0x0, r8, 0x4, 0x3}, 0x50)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002d00)={'bridge_slave_0\x00'})

5.172653097s ago: executing program 2 (id=1410):
r0 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2}, 0x10)
socket$inet6(0xa, 0x400000000001, 0x100)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x2000, 0x1000, 0x1, 0x7}, 0x20)

5.171692493s ago: executing program 2 (id=1411):
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1406, 0x8, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x8004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@dev, @broadcast, <r2=>0x0}, &(0x7f0000000200)=0xc)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x6c}}, 0x4004000)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8)
sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f8, 0x10, 0x70bd2d, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x80005)
setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000480)={0x4c, 0xff, 0xfc, 0xc2, 0x6, 0xac, 0x5, 0x0, 0x1, 0x67, 0x9, 0x20, 0x4, 0x10}, 0xe)
r4 = accept4$bt_l2cap(r3, &(0x7f00000004c0)={0x1f, 0x0, @none}, &(0x7f0000000500)=0xe, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000540)={0x1f, 0x4, @none, 0x1, 0x2}, 0xe)
bind$vsock_stream(r3, &(0x7f0000000580)={0x28, 0x0, 0x2710, @hyper}, 0x10)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000640), 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r5, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20040811)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000001240)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f0000000840)={0x97c, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CSA_IES={0x958, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x41, 0x7f, [@chsw_timing={0x68, 0x4, {0x73c3, 0x5cbb}}, @ssid={0x0, 0x6, @default_ap_ssid}, @measure_req={0x26, 0x2d, {0xd6, 0x8, 0x0, "8487c80caeb977a153db948285858af56bb7c6b2a17e9c7f1bd976686920dd0dbbaab71ae331ceebc335"}}]}, @NL80211_ATTR_BEACON_TAIL={0xef, 0xf, [@gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0x1}, @gcr_ga={0xbd, 0x6, @device_b}, @random={0x81, 0x2, "a87d"}, @perr={0x84, 0x2f, {0xd, 0x3, [{{}, @device_a, 0x10000, @void, 0x2e}, {{0x0, 0x1}, @device_b, 0x132, @value=@broadcast, 0x3f}, {{}, @device_b, 0x6, @void, 0x34}]}}, @random_vendor={0xdd, 0xa1, "939e28e192aec1908b6777af8b0beee0c2ff0d2b47778d6beb6c584e76d365b55d18eacbcec8bf6b1ae950c240992d77a0b8179690ad0a1614677a0a6709cde07b234e87d9f6e2878d384c3591ca6a958cf2f3f2a82c3ab920a9a010f2043c1585fa449dea6f27a91b4631a712d2665246e7a3eb8b68565a3a20d09a11bff1d7d9f3b774208701ec9ca708eca317d0ed0cd4e8b08bba7a0acb48d8880bdc6e84f8"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x179, 0x7f, [@rann={0x7e, 0x15, {{0x1, 0x2c}, 0xff, 0x6, @device_a, 0x9, 0x6, 0x6}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6, 0x40}}, @tim={0x5, 0x15, {0x7, 0x47, 0x8, "51274950a6d3db1a4281644806aacc977da9"}}, @perr={0x84, 0x2f, {0x6, 0x3, [{{}, @device_a, 0xf, @void, 0x40}, {{0x0, 0x1}, @broadcast, 0x401, @value, 0x36}, {{}, @broadcast, 0x3, @void, 0x29}]}}, @challenge={0x10, 0x1, 0xaf}, @random={0x8, 0x26, "a55857fc28e2b8edb017f08fc4165309af8db04c0d51194b465c2234ee6cffc0ba02680c82d5"}, @link_id={0x65, 0x12, {@random="dd00e54594bd", @broadcast}}, @random={0xc, 0xcc, "c7e5849ac740cf400de5b70490ba41f7d66d98e5668ce91222dbb86befa18b5df238040db67d5d206b578a48e0d77ba7ed5f04bf911a103850bc4631fe409204dc87c6863a5e32bca07339e10426dafb859deff6360c22697d6b94f8ea20e48870bb0fbeb09c2e90d00bf61ff41294c65a72a43043d6d3e19b70f350f109a9470000eca21ce7a65ba68022ffd1caee001541fd46127d2e9b44452d80bc986c904e57e65bc3ee1e58ac15c0229363c5fd284461b5cdc5c61f557c579189d612ea863dd85cbd6891197e72bc17"}]}, @NL80211_ATTR_FTM_RESPONDER={0x12c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x93, 0x2, "2425c4e74ed2d600d93129f28df4c2c62440f917682eb3c067893dbb4d7ae3098a4203645d57e0861b81a76b7ad186b03a8054da05313929d4e53372d64cdfc837b1aff6ea282be9aba28ca84a1c553cd0f2f5406d5dfb880601607c35cb2bbb81d7045f0c08ff923583ee4b94fa34ed701dd58b421b041eb9091d0088d4864bac81b2d367c34921b77534cf39f15b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8a, 0x3, "00948ef662e2d64e524d7e84a36805be2607ef6178373ecb4edcb94f87a043d4ab19862bfc3b24bac9c04d46bb49638c32ab9ee56740f556c4c6c044df958f0c33c05c02e80edcce9d05f61ab2dc17156df230979a12ee1e189452d456063699d262f08974f1c596e08d3cafe0b649ff1e9e97b8eda032b11d6fd514be77038f4a6ef42ac7ff"}]}, @NL80211_ATTR_FTM_RESPONDER={0x140, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2b, 0x3, "2144ca63a6cbc593da29c48e423429ee0eb77ba536c45f9467e49a3f1c7870b9e0b1f9a90588de"}, @NL80211_FTM_RESP_ATTR_LCI={0x22, 0x2, "bcf46e603cefce94c803acce0746eeef6f356933df52410b141069e51bcb"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe8, 0x3, "e50c6f4d8b7cc1c0b91fc7d9dbf96d0a3dd1d6c26bfe05b5013c60205387def7a8d81286b79e5bf1571ed7d6395d7e3bb2523e16be793d0ee24e205fb9ca42a7d6a24089e6d200741f5368302215204067b0447dc76bcd099e3f97d087257dc780d67ef47cc41fdc3eb77bf7fba3a32910aa275d89aff8b1dde58188a4bc351f1881f5f13dad913f5384ef5b3fe0c5ac218b83c25ee5e44363cb1874860cc3ff745631d7ad955b3b602e16bd2bc52f1732df8f34dde9075d71ac08bb029e01ae5e1d27210e5cde124ce5dc3ac212e4ac47150bc95c8946e239ba9b194ea16246d573c0cd"}]}, @NL80211_ATTR_PROBE_RESP={0x1ff, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@ht={0x2d, 0x1a, {0x80, 0x1, 0x0, 0x0, {0x22, 0x5, 0x0, 0x6, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x408, 0x7}}, @cf={0x4, 0x6, {0x6, 0xf2, 0x3, 0xd7b}}, @cf={0x4, 0x6, {0x2, 0x8, 0x401, 0xfff1}}, @ibss={0x6, 0x2, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x7f, 0x3, @device_a, 0x7, 0x1, 0xa7d1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1ec, 0x7f, [@random_vendor={0xdd, 0xdc, "bd7234825af3ee72844f677a645ebb8f8295dfa00d20819fbc9c08ee4dd6943da306fc870e9cbfe1724d54f926fa6bd3c7965668c843f384c10d6946143971a171fddcb54f3b013dec71275cbf2eca072dc50d63f14446733ec8595ae1f11937208c59c33493ad01461cb193574cfe7d4439dd3fbd878253e2eccf0d1a9abfeb5f1427999649a98faaddbe2c9db8bd679f90c1085b42cb3bb0a4be38afb847cb7702e2c35a60336654dfdfb22f3563ce26e9b3b4cb31f1cdba1e8f50e21a9907f9a870b3e5df4712110f4259643ae13098182c1feabc950a01d51250"}, @random={0x7f, 0x87, "40360c6c9f89cd48f3c37049983d5834c06b471058f4010d7b5a4ecf3635cc6011f0a9d622a00c5e47db7b1a0a3e0d5fa2d7b9a4912bd6edc43281d6547d1a2d6c8c7e77673ca9fdae7fe81e6fc9e06d23c024c266685b49257459c3edcd785ad25273052899cb51625078385b67a96b0e44493f2d73e16771b1b339cdaebaa9930812564c6372"}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @random={0x6, 0xa, "cd68833c635271d03473"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x0, 0x3a, 0x68}}, @channel_switch={0x25, 0x3, {0x0, 0xa}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mic={0x8c, 0x18, {0x470, "6153cf92b751", @long="02a6771b63c86de5b43446a2ae9734a0"}}, @tim={0x5, 0x34, {0xda, 0x3f, 0x5, "53be4d1ec970db75d337dc2c250094fd89aba2ad4c3bb4951395725c1191d34c4223b2b234e37b2032e4ff5f25952082b7"}}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x56}]}, 0x97c}, 0x1, 0x0, 0x0, 0x4}, 0x8800)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x18, 0x5, &(0x7f0000001280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000012c0)='GPL\x00', 0x10001, 0x5c, &(0x7f0000001300)=""/92, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1, r3, 0x8, &(0x7f0000001380)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x0, 0x9, 0x10000, 0xfffffff1}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000001400)=[r3, r1, 0x1, r3], &(0x7f0000001440)=[{0x5, 0x3, 0xd, 0x6}, {0x0, 0x2, 0x5, 0xb}], 0x10, 0x3}, 0x94)
writev(r7, &(0x7f0000002640)=[{&(0x7f0000001540)="c8c7c70d57ed97e886e868a9ef786f4ecbb3c6906e3dcc71ae960ec0873495e67a6a1e3270add0527486a457db7159f77625485d84fbcd9bcbcb", 0x3a}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="6f14e2ff491cc240f1bb8c89b6690790b9b17e9b7a127032772ff6fe934356467b215ccad13cdada07594f513aff4318d1ba3935d242ef2c5f83adeae31fa97b311539c103a8069ca7cb0154e650c287c258d69f6f61e75afa0a9fee776c1d12b72dfa503fefa4d04feb94af0c123d904383dbe14517c1d325dfed7232bd65abbe2b243f3324ea9f56104a31828298169c8f09e9d6b65dcc48ba8e2cac58bd8bb4f0f1dddb84f6a2d6f7f35a0bba932a", 0xb0}], 0x3)
setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000002680)=0x7, 0x4)
sendmsg$key(r3, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000026c0)={0x2, 0xf, 0x4, 0x5, 0x29, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@multicast2, 0x27, 0x16, 0x10}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@private2, 0x1e, 0x14, 0x4}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e23, 0xfff, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_ident={0x2, 0xb, 0xdf, 0x0, 0x9}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010101, @in=@rand_addr=0x64010100, 0x11, 0x0, 0x14}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x0, 0x7f, 0x3, 0x80000001}, @sadb_ident={0x2, 0xa, 0x9, 0x0, 0x3}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x6e6bb4, 0x0, {0x6, 0x3c, 0xc7, 0x7f, 0x0, 0x9, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, @in6=@loopback}}]}, 0x148}}, 0x20000000)
r8 = socket$netlink(0x10, 0x3, 0x6)
r9 = socket$inet(0x2, 0x4, 0x1ff)
getsockopt$inet_mreqsrc(r9, 0x0, 0x25, &(0x7f00000028c0)={@multicast1, @empty}, &(0x7f0000002900)=0xc)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r10, 0x9362, 0x0)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002980), r3)
sendmsg$TIPC_NL_KEY_FLUSH(r8, &(0x7f0000002c40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c00)={&(0x7f00000029c0)={0x224, r11, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x98}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xad53}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff0001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4501}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x101, 0x3, "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"}]}]}, 0x224}, 0x1, 0x0, 0x0, 0xc0}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000002c80)=@base={0x13, 0x9, 0x83, 0x7fffffff, 0xc05a, 0xffffffffffffffff, 0x400, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x0, @value=r3}, 0x50)

5.111607498s ago: executing program 2 (id=1412):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffea8, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x2, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2c7c, 0x0, 0x6}, 0x1}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xffffffffffffff8f}}}]}]}, 0x74}}, 0x0)

1.212037967s ago: executing program 2 (id=1412):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffea8, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x2, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2c7c, 0x0, 0x6}, 0x1}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xffffffffffffff8f}}}]}]}, 0x74}}, 0x0)

468.81672ms ago: executing program 1 (id=1459):
r0 = socket(0x10, 0x4, 0x9)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x48, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1, 0x4, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7fffffff}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40014)
close(r0)

402.243078ms ago: executing program 1 (id=1460):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x8, 0x0, 0x8000}, {}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x40, "25cac521"}}]}, 0x140}}, 0x4000080)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x31, 0x101, 0x1, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x24}}, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x38}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x4, 0x1}, 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r5}, 0x38)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r9, 0x8b2c, &(0x7f0000000040))
r10 = socket(0x10, 0x3, 0x6)
r11 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)={'team0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfe, [0x0, 0x0, 0x1, 0x7, 0x6, 0xfd, 0x0, 0xfe, 0x3, 0x10], 0xfe, [0x4, 0x2, 0xfffe, 0x4e3e, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ioctl$IMCTRLREQ(r11, 0x80044945, &(0x7f0000000180)={0x4002, 0x1, 0xd6, 0x8})
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

322.308911ms ago: executing program 0 (id=1461):
socket$netlink(0x10, 0x3, 0x8000000004)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "002b228078c8"}]}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = accept4$inet6(r1, 0x0, &(0x7f0000000080), 0x800)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'gre0\x00', <r5=>0x0, 0x0, 0x7, 0x913a, 0x0, {{0x7, 0x4, 0x2, 0x38, 0x1c, 0x67, 0x0, 0x2, 0x4, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x7, 0xb4, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={@private1, 0x42, r5})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r6)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "002b228078c8"}]}}}}}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) (async)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) (async)
close(r2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
accept4$inet6(r1, 0x0, &(0x7f0000000080), 0x800) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x0, 0x7, 0x913a, 0x0, {{0x7, 0x4, 0x2, 0x38, 0x1c, 0x67, 0x0, 0x2, 0x4, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x7, 0xb4, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={@private1, 0x42, r5}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r6) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)

321.705568ms ago: executing program 1 (id=1462):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
syz_emit_ethernet(0xb9, &(0x7f00000001c0)={@random="62020db15a26", @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x1, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0xd4, 0x0, "b2f2", "c818db8efd1423cc3db357aed98ecf8fb5fac1c4df5410c263df83bc73f95d85f5218a74e8e1a69682f02508aeeb16e43a24baa8f73c27df1a6236a31e5c2df2df3aff036f501fd00a6afed88069bdd6d296b0ed2718184dafa1ab29d859ee43f5d8d44a02a35e203e941858346f7b8d66053962828a546f4eb225e6e2667d5bffa1b07ade5e8dc867831e116c177419b9417cde93267e437572c06a905649"}}}}}, &(0x7f0000000040)={0x0, 0x4, [0x3ae, 0xe3e, 0x843, 0xb1f]})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'macvlan1\x00', @local})
write$tun(r0, &(0x7f0000000040)=ANY=[], 0x3a)

262.05368ms ago: executing program 0 (id=1463):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff", 0x16}], 0x1)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), r3)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x14, &(0x7f0000000d00)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x7f, &(0x7f0000000300)=""/127, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c000000120a0101000000000000000005000005080003400000000964000000090a03000000000000000000030000090900010001007a300000000008000440"], 0xcc}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c000000120a0101000000000000000005000005080003400000000964000000090a03000000000000000000030000090900010001007a300000000008000440"], 0xcc}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000000301010100000000000000000a0000030c0019800800020017000000300002802c0001"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000780)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000780)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4851}, 0x0)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000004e00), 0x0, 0x20000010)
shutdown(0xffffffffffffffff, 0x1) (async)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x10}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x10}, 0x8)
syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd687fefc0000c11"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

131.848569ms ago: executing program 0 (id=1464):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, 0x0)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000280)=0x7, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4)
sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r7, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r3)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x90, r8, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x54}, {0x8, 0x15, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000005}, 0x10) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x90, r8, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x54}, {0x8, 0x15, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000005}, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0)
close(r6) (async)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$nl_generic(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x20, 0x19, 0x400, 0x70bd2b, 0x25dfdbfc, {0x6}, [@typed={0xc, 0x7, 0x0, 0x0, @u64}]}, 0x20}}, 0x8000)
r10 = socket$rds(0x15, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x6)
sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0xa4}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "dc"}, {0x10, 0x113}, {0x10, 0x117}], 0x38}, 0x404f444)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x58}}, 0x4020000) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x58}}, 0x4020000)

131.355194ms ago: executing program 1 (id=1465):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
r3 = socket(0x2, 0x80805, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100)=r5, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x7, @empty, 0x10000}, 0x1c) (async)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x7, @empty, 0x10000}, 0x1c)
syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000003ffffffffffff86dd6001070000641100fc010000000000000000000000000000ff02000000000000000000000000000100000e22006490"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="85000000b500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$inet(r3, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) (async)
sendmmsg$inet(r3, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000600)={r2, 0x9}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cd2040000000000140003006e657464657673696d3000000000000014001680100001800c000700090000e4060000000500110009"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40)

61.608267ms ago: executing program 1 (id=1466):
r0 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000001b40)={&(0x7f00000001c0)={0x30, r5, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r7}, @void}}}, 0x30}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r8, r9, 0x2, 0x2}, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r10}, 0x10)
r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8)
close(r12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r14, r13, 0x2, 0x6, 0x4000}, 0x10)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x2, 0x9, 0x18, 0x80}, {0xc, 0x1, 0x0, 0x1}, {0x100, 0x9, 0x2, 0xda03}, {0x9, 0x85, 0x1, 0xfffffffc}, {0x9, 0x4, 0x5, 0xffff78a8}]})
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x8004)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600156f"], 0x18}, 0x1, 0x0, 0x0, 0x810}, 0x8080)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)
recvmsg$can_j1939(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000020)
accept4$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000600)=0x1c, 0x180000)

4.907821ms ago: executing program 0 (id=1467):
syz_emit_ethernet(0x34e, &(0x7f0000000780)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1f, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc57d7b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e464a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x2002})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x40000010)

2.781403ms ago: executing program 0 (id=1468):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x880)
syz_emit_ethernet(0x81, &(0x7f0000000600)={@multicast, @random="73fd5e41e600", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x4b, 0x3a, 0xff, @remote, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x6, '\x00', {0x0, 0x6, "fd7609", 0x8, 0x32, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "37ff49a30a299d88e9d04bd0f569ddc883fe285eba17b3ff7a7498"}}}}}}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x880) (async)
syz_emit_ethernet(0x81, &(0x7f0000000600)={@multicast, @random="73fd5e41e600", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x4b, 0x3a, 0xff, @remote, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x6, '\x00', {0x0, 0x6, "fd7609", 0x8, 0x32, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "37ff49a30a299d88e9d04bd0f569ddc883fe285eba17b3ff7a7498"}}}}}}}, 0x0) (async)

2.491091ms ago: executing program 1 (id=1469):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x140, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x157}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x10}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5c7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0x1, 0x7024d5e5]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x90, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x62}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x80000000, 0x3, 0x7, 0x5, 0xbc, 0x4, 0x86e, 0x64d, 0x4, 0x4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7cc0000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x4, 0x7, 0xf, 0x1, 0x0, 0xff, 0x1, 0x9, 0x1]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x75a}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x38}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004800010000000000000000000a00806e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0)

0s ago: executing program 0 (id=1470):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x57, 0xd, 0x9})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x48}, 0x1, 0x0, 0x0, 0x4323d000f0cbdbf5}, 0x48045)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40208' (ED25519) to the list of known hosts.
syzkaller login: [   48.864652][ T5759] cgroup: Unknown subsys name 'net'
[   48.942749][ T5759] cgroup: Unknown subsys name 'cpuset'
[   48.959014][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.654169][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.479829][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.483409][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.487225][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.490413][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.491907][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.496423][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.496448][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.501530][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.505758][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.509302][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.557663][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.560471][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.564440][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.568317][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.570990][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.761937][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   54.804125][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   54.874793][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   54.879894][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.882413][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.884913][ T5831] bridge_slave_0: entered allmulticast mode
[   54.888599][ T5831] bridge_slave_0: entered promiscuous mode
[   54.892592][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.894888][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.897361][ T5831] bridge_slave_1: entered allmulticast mode
[   54.900139][ T5831] bridge_slave_1: entered promiscuous mode
[   54.961241][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.982278][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.984770][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.987815][ T5827] bridge_slave_0: entered allmulticast mode
[   54.991535][ T5827] bridge_slave_0: entered promiscuous mode
[   54.997551][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.012939][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.015706][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.019404][ T5827] bridge_slave_1: entered allmulticast mode
[   55.022189][ T5827] bridge_slave_1: entered promiscuous mode
[   55.074140][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.079324][ T5831] team0: Port device team_slave_0 added
[   55.097333][ T5831] team0: Port device team_slave_1 added
[   55.100578][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.104047][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.107778][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.110142][ T5836] bridge_slave_0: entered allmulticast mode
[   55.113217][ T5836] bridge_slave_0: entered promiscuous mode
[   55.142825][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.145915][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.150871][ T5836] bridge_slave_1: entered allmulticast mode
[   55.154885][ T5836] bridge_slave_1: entered promiscuous mode
[   55.169339][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.171562][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.179727][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.199839][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.202117][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.210327][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.215797][ T5827] team0: Port device team_slave_0 added
[   55.219819][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.236846][ T5827] team0: Port device team_slave_1 added
[   55.248285][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.285702][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.288442][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.297302][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.302179][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.304311][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.312423][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.319069][ T5831] hsr_slave_0: entered promiscuous mode
[   55.321446][ T5831] hsr_slave_1: entered promiscuous mode
[   55.350413][ T5836] team0: Port device team_slave_0 added
[   55.375482][ T5836] team0: Port device team_slave_1 added
[   55.434140][ T5827] hsr_slave_0: entered promiscuous mode
[   55.437776][ T5827] hsr_slave_1: entered promiscuous mode
[   55.439888][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.442452][ T5827] Cannot create hsr debugfs directory
[   55.448929][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.451759][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.461131][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.465616][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.468101][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.476136][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.561774][ T5836] hsr_slave_0: entered promiscuous mode
[   55.564910][ T5836] hsr_slave_1: entered promiscuous mode
[   55.569488][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.571964][ T5836] Cannot create hsr debugfs directory
[   55.739808][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.758593][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.765034][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.810825][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.861528][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.869016][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.876424][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.892929][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.942706][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.952200][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.960235][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.966398][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.078596][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.113351][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   56.129182][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.142986][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.146120][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.160424][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.163431][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.204775][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.229970][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   56.253889][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.257071][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.265295][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   56.278231][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.281236][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.297684][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.300587][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.312937][ T3981] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.315366][ T3981] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.414194][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.479868][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.511877][ T5827] veth0_vlan: entered promiscuous mode
[   56.517244][ T5827] veth1_vlan: entered promiscuous mode
[   56.549866][ T5827] veth0_macvtap: entered promiscuous mode
[   56.562530][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.567214][ T5833] Bluetooth: hci1: command tx timeout
[   56.569235][ T5833] Bluetooth: hci0: command tx timeout
[   56.576336][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.591143][ T5827] veth1_macvtap: entered promiscuous mode
[   56.621758][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.635314][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.647359][ T5224] Bluetooth: hci2: command tx timeout
[   56.652769][ T5831] veth0_vlan: entered promiscuous mode
[   56.655527][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.659630][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.662939][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.665786][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.673134][ T5836] veth0_vlan: entered promiscuous mode
[   56.683583][ T5831] veth1_vlan: entered promiscuous mode
[   56.692464][ T5836] veth1_vlan: entered promiscuous mode
[   56.730086][ T5831] veth0_macvtap: entered promiscuous mode
[   56.735089][ T5831] veth1_macvtap: entered promiscuous mode
[   56.758003][ T5836] veth0_macvtap: entered promiscuous mode
[   56.762842][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.771436][ T5836] veth1_macvtap: entered promiscuous mode
[   56.778566][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.781943][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.792741][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.804210][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.808430][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.811262][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.814039][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.828613][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.843182][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.849834][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.852699][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.864304][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.868071][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.870949][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.874413][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.919906][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.923668][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.933059][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.958546][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.961179][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.010632][ T3981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.013195][ T3981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.036058][ T3981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.039323][ T3981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.079248][ T5898] netlink: 'syz.0.1': attribute type 5 has an invalid length.
[   57.082604][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.101056][ T5898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.106266][ T5900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.107909][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.232952][ T5906] netlink: 'syz.0.6': attribute type 2 has an invalid length.
[   57.426456][ T5921] tipc: Started in network mode
[   57.428476][ T5921] tipc: Node identity 628ee677742, cluster identity 4711
[   57.431241][ T5921] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.434575][ T5921] syzkaller0: entered promiscuous mode
[   57.436395][ T5921] syzkaller0: entered allmulticast mode
[   57.453762][ T5921] tipc: Resetting bearer <eth:syzkaller0>
[   57.481007][ T5921] Zero length message leads to an empty skb
[   57.485686][ T5912] tipc: Resetting bearer <eth:syzkaller0>
[   57.492813][ T5912] tipc: Disabling bearer <eth:syzkaller0>
[   57.842678][ T5937] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15'.
[   57.845614][ T5937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.958410][ T5946] syzkaller1: entered promiscuous mode
[   57.960507][ T5946] syzkaller1: entered allmulticast mode
[   57.966383][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'.
[   57.975733][ T5946] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18'.
[   58.168974][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'.
[   58.657031][ T5833] Bluetooth: hci1: command tx timeout
[   58.659040][ T5224] Bluetooth: hci0: command tx timeout
[   58.726938][ T5224] Bluetooth: hci2: command tx timeout
[   59.178663][ T5968] warning: `syz.0.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.224836][ T5972] netlink: 80 bytes leftover after parsing attributes in process `syz.0.27'.
[   59.375338][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'.
[   59.733241][ T5986] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   59.744002][ T5986] unsupported nla_type 52263
[   59.826679][ T5991] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.832854][ T5991] netlink: 'syz.1.35': attribute type 12 has an invalid length.
[   59.836068][ T5991] netlink: 'syz.1.35': attribute type 29 has an invalid length.
[   59.845870][ T5991] netlink: 'syz.1.35': attribute type 2 has an invalid length.
[   60.003429][ T6003] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.575020][ T6032] syzkaller0: entered promiscuous mode
[   60.590724][ T6032] syzkaller0: entered allmulticast mode
[   60.727653][ T5224] Bluetooth: hci0: command tx timeout
[   60.728012][ T5833] Bluetooth: hci1: command tx timeout
[   60.808907][ T5833] Bluetooth: hci2: command tx timeout
[   61.340313][ T6048] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   61.522267][ T6056] syz.2.52 uses obsolete (PF_INET,SOCK_PACKET)
[   61.762533][ T6079] unknown channel width for channel at 909000KHz?
[   61.765136][ T6079] unknown channel width for channel at 909000KHz?
[   61.861216][ T6084] netlink: 'syz.1.61': attribute type 1 has an invalid length.
[   61.865748][ T6081] bridge1: the hash_elasticity option has been deprecated and is always 16
[   61.871494][ T6081] bridge1: entered allmulticast mode
[   61.881001][ T5880] IPVS: starting estimator thread 0...
[   61.976796][ T6087] IPVS: using max 53 ests per chain, 127200 per kthread
[   62.032905][ T6098] netlink: 'syz.0.63': attribute type 2 has an invalid length.
[   62.067560][   T33] audit: type=1800 audit(1752285926.064:2): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.66" name="memory.events" dev="tmpfs" ino=99 res=0 errno=0
[   62.189713][ T6101] xt_CT: You must specify a L4 protocol and not use inversions on it
[   62.245269][ T6109] __nla_validate_parse: 10 callbacks suppressed
[   62.245278][ T6109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.68'.
[   62.378831][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.381807][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.397751][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'.
[   62.454722][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.462598][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.491926][ T6119] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.494974][ T6119] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.499224][ T6119] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.502409][ T6119] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.520284][ T6128] netlink: 48 bytes leftover after parsing attributes in process `syz.1.71'.
[   62.800839][ T6142] netlink: 'syz.2.76': attribute type 1 has an invalid length.
[   62.807865][ T5833] Bluetooth: hci0: command tx timeout
[   62.808044][ T5224] Bluetooth: hci1: command tx timeout
[   62.862843][ T6143] gretap1: entered promiscuous mode
[   62.886739][ T5224] Bluetooth: hci2: command tx timeout
[   63.372308][ T6147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.78'.
[   63.553095][ T6153] netlink: 48 bytes leftover after parsing attributes in process `syz.1.79'.
[   63.737540][ T6161] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   63.745196][   T24] IPVS: starting estimator thread 0...
[   63.784811][ T6166] 8021q: VLANs not supported on lo
[   63.836676][ T6164] IPVS: using max 79 ests per chain, 189600 per kthread
[   63.942632][ T6177] tipc: Enabled bearer <eth:gre0>, priority 10
[   64.586334][ T6190] netlink: 'syz.2.91': attribute type 4 has an invalid length.
[   64.593222][ T6190] netlink: 'syz.2.91': attribute type 4 has an invalid length.
[   64.601136][ T6191] netlink: 'syz.2.91': attribute type 4 has an invalid length.
[   64.802574][ T6197] netlink: 56 bytes leftover after parsing attributes in process `syz.2.93'.
[   64.861518][ T6206] netlink: 'syz.0.96': attribute type 1 has an invalid length.
[   64.864158][ T6206] netlink: 236 bytes leftover after parsing attributes in process `syz.0.96'.
[   64.874733][ T6206] NCSI netlink: No device for ifindex 813332851
[   64.880508][ T6204] netlink: 'syz.1.95': attribute type 83 has an invalid length.
[   64.947276][   T10] tipc: Node number set to 380561015
[   64.949095][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'.
[   64.964052][ T6212] netlink: 9 bytes leftover after parsing attributes in process `syz.1.99'.
[   64.971922][ T6212] 0: renamed from hsr0 (while UP)
[   64.975186][ T6212] 0: entered allmulticast mode
[   64.976987][ T6212] hsr_slave_0: entered allmulticast mode
[   64.978872][ T6212] hsr_slave_1: entered allmulticast mode
[   64.981557][ T6212] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   65.173006][ T6232] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   65.178111][ T6232] Cannot find add_set index 4 as target
[   65.183050][ T6230] netlink: 392 bytes leftover after parsing attributes in process `syz.0.103'.
[   65.299885][ T6239] xt_CT: No such helper "snmp"
[   65.385510][ T6248] netlink: 'syz.0.108': attribute type 15 has an invalid length.
[   65.389404][ T6248] netlink: 'syz.0.108': attribute type 7 has an invalid length.
[   65.481140][ T6258] netlink: 'syz.0.112': attribute type 5 has an invalid length.
[   65.484778][ T6253] IPVS: set_ctl: invalid protocol: 8345 172.30.1.3:20003
[   65.489002][ T6258] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   65.493605][ T6258] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   65.494633][ T6253] Cannot find add_set index 3 as target
[   65.496478][ T6258] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   65.506242][ T6258] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   65.516026][ T6258] geneve2: entered promiscuous mode
[   65.519596][ T6258] geneve2: entered allmulticast mode
[   65.548455][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.552088][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.559536][ T6253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.666323][ T6270] vlan2: entered promiscuous mode
[   65.668700][ T6270] bond0: entered promiscuous mode
[   65.670883][ T6270] bond_slave_0: entered promiscuous mode
[   65.673502][ T6270] bond_slave_1: entered promiscuous mode
[   65.676018][ T6270] vlan2: entered allmulticast mode
[   65.679102][ T6270] bond0: entered allmulticast mode
[   65.681236][ T6270] bond_slave_0: entered allmulticast mode
[   65.683846][ T6270] bond_slave_1: entered allmulticast mode
[   66.245022][ T6294] netlink: 'syz.2.123': attribute type 2 has an invalid length.
[   66.275073][ T6294] syzkaller0: entered promiscuous mode
[   66.278342][ T6294] syzkaller0: entered allmulticast mode
[   66.457248][ T6268] Bluetooth: hci1: Opcode 0x080f failed: -4
[   67.283303][ T6330] __nla_validate_parse: 7 callbacks suppressed
[   67.283312][ T6330] netlink: 148 bytes leftover after parsing attributes in process `syz.1.133'.
[   67.287854][ T6327] netlink: 92 bytes leftover after parsing attributes in process `syz.0.132'.
[   67.291802][ T6330] netlink: 43 bytes leftover after parsing attributes in process `syz.1.133'.
[   67.297500][ T6326] netlink: 92 bytes leftover after parsing attributes in process `syz.0.132'.
[   67.322341][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'.
[   67.404651][ T6339] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.136'.
[   67.466067][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'.
[   67.502909][ T6351] netlink: 388 bytes leftover after parsing attributes in process `syz.2.140'.
[   67.509908][ T6352] netlink: 388 bytes leftover after parsing attributes in process `syz.2.140'.
[   67.571384][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'.
[   67.688884][ T5224] Bluetooth: hci1: command 0x080f tx timeout
[   67.829531][ T6384] batadv_slave_0: entered promiscuous mode
[   67.862658][ T6379] syzkaller0: entered allmulticast mode
[   67.866203][ T6384] batadv_slave_0: left promiscuous mode
[   68.619198][ T6399] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   68.719525][ T6414] validate_nla: 5 callbacks suppressed
[   68.719535][ T6414] netlink: 'syz.0.160': attribute type 2 has an invalid length.
[   68.850504][ T6423] tipc: Resetting bearer <eth:gre0>
[   68.903558][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.907147][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.916922][ T6428] openvswitch: netlink: IP tunnel dst address not specified
[   69.005170][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.015729][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.054984][ T6423] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.061796][ T6423] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.065124][ T6423] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.068523][ T6423] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.090368][ T6423] bridge1: left allmulticast mode
[   69.092524][ T6423] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[   69.095329][ T6423] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[   69.098529][ T6423] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[   69.101374][ T6423] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[   69.104507][ T6423] geneve2: left promiscuous mode
[   69.106156][ T6423] geneve2: left allmulticast mode
[   69.118042][ T6432] tipc: Started in network mode
[   69.121475][ T6432] tipc: Node identity 8a525915c4fa, cluster identity 4711
[   69.125743][ T6432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.145726][ T6432] tipc: Disabling bearer <eth:syzkaller0>
[   69.267682][ T6447] netlink: 'syz.1.169': attribute type 33 has an invalid length.
[   69.342324][ T6454] netlink: 'syz.1.172': attribute type 1 has an invalid length.
[   69.644487][ T6478] netlink: 'syz.2.181': attribute type 2 has an invalid length.
[   69.647210][ T6477] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   69.686912][ T6479] netlink: 'syz.1.180': attribute type 16 has an invalid length.
[   70.415447][ T6496] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[   70.419117][ T6496] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[   70.422666][ T6496] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[   70.429744][ T6496] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[   70.442485][ T6496] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[   70.460647][ T6501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   70.464023][ T6501] IPv6: NLM_F_CREATE should be set when creating new route
[   70.516041][ T6504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   70.518560][ T6504] IPv6: NLM_F_CREATE should be set when creating new route
[   70.520921][ T6504] IPv6: NLM_F_CREATE should be set when creating new route
[   70.581431][ T6513] ip6gre1: entered promiscuous mode
[   70.631924][ T6522] IPVS: length: 163 != 8
[   70.716828][ T6531] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   70.907518][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.910071][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.136727][ T6537] geneve0: entered promiscuous mode
[   71.139642][ T6537] geneve0: entered allmulticast mode
[   71.475813][ T6571] xt_HMARK: proto mask must be zero with L3 mode
[   71.511660][ T6571] netlink: zone id is out of range
[   71.513569][ T6571] netlink: zone id is out of range
[   71.515557][ T6572] netlink: zone id is out of range
[   71.516448][ T6575] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[   71.522037][ T6572] netlink: zone id is out of range
[   71.524105][ T6572] netlink: zone id is out of range
[   71.525891][ T6572] netlink: zone id is out of range
[   71.532998][ T6571] netlink: zone id is out of range
[   71.535054][ T6571] netlink: zone id is out of range
[   71.535464][ T6572] netlink: zone id is out of range
[   71.843125][ T6620] x_tables: duplicate underflow at hook 1
[   71.927534][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.931400][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.032982][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.054077][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.151409][ T6623] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.154583][ T6623] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.158566][ T6623] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.161655][ T6623] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.230082][ T6635] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   72.319806][ T6643] __nla_validate_parse: 22 callbacks suppressed
[   72.319820][ T6643] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.234'.
[   72.370037][ T5880] hid-generic 0005:0458:005A.0001: item fetching failed at offset 0/3
[   72.380151][ T5880] hid-generic 0005:0458:005A.0001: probe with driver hid-generic failed with error -22
[   72.790421][ T6690] netlink: 252 bytes leftover after parsing attributes in process `syz.0.247'.
[   72.826400][ T6688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.839819][ T6688] syzkaller0: entered promiscuous mode
[   72.842136][ T6688] syzkaller0: entered allmulticast mode
[   72.864817][ T6688] tipc: Resetting bearer <eth:syzkaller0>
[   72.894943][ T6687] tipc: Resetting bearer <eth:syzkaller0>
[   72.918075][ T6687] tipc: Disabling bearer <eth:syzkaller0>
[   73.062556][ T6718] netlink: 108 bytes leftover after parsing attributes in process `syz.0.253'.
[   73.098734][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'.
[   73.211927][ T6739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.257'.
[   73.218608][ T6739] netlink: 92 bytes leftover after parsing attributes in process `syz.0.257'.
[   73.221663][ T6739] netlink: 92 bytes leftover after parsing attributes in process `syz.0.257'.
[   73.312702][ T6742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.364976][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'.
[   73.423249][ T6754] sock: sock_timestamping_bind_phc: sock not bind to device
[   73.462289][ T6758] syz_tun: entered promiscuous mode
[   73.464835][ T6758] batadv_slave_0: entered promiscuous mode
[   73.468945][ T6758] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.471971][ T6758] Cannot create hsr debugfs directory
[   73.474077][ T6758] hsr0: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[   73.479271][ T6758] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.483650][ T6758] hsr0: entered allmulticast mode
[   73.485583][ T6758] syz_tun: entered allmulticast mode
[   73.487757][ T6758] batadv_slave_0: entered allmulticast mode
[   73.578780][ T6762] syzkaller1: entered promiscuous mode
[   73.581271][ T6762] syzkaller1: entered allmulticast mode
[   73.589014][ T6762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.263'.
[   73.594800][ T6762] netlink: 52 bytes leftover after parsing attributes in process `syz.1.263'.
[   73.840631][ T6776] validate_nla: 8 callbacks suppressed
[   73.840648][ T6776] netlink: 'syz.2.267': attribute type 7 has an invalid length.
[   74.240483][ T6800] bpq0: entered promiscuous mode
[   74.242692][ T6800] bpq0: entered allmulticast mode
[   74.270590][ T6806] Illegal XDP return value 4294967294 on prog  (id 125) dev N/A, expect packet loss!
[   74.986328][ T6830] netlink: 'syz.0.278': attribute type 1 has an invalid length.
[   75.053971][ T6830] bond1: (slave bridge2): making interface the new active one
[   75.063652][ T6830] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   75.765218][ T6901] xt_hashlimit: size too large, truncated to 1048576
[   75.770414][ T6901] xt_hashlimit: overflow, try lower: 3/0
[   75.844845][ T6904] netlink: 'syz.2.294': attribute type 9 has an invalid length.
[   76.137074][ T6927] xt_hashlimit: size too large, truncated to 1048576
[   76.197676][ T6931] netlink: 'syz.0.302': attribute type 5 has an invalid length.
[   76.200798][ T6931] netlink: 'syz.0.302': attribute type 5 has an invalid length.
[   76.224080][ T6933] bridge0: port 3(syz_tun) entered blocking state
[   76.227300][ T6933] bridge0: port 3(syz_tun) entered disabled state
[   76.230775][ T6933] syz_tun: entered allmulticast mode
[   76.234538][ T6933] syz_tun: entered promiscuous mode
[   76.339122][ T6944] lo: entered promiscuous mode
[   76.341395][ T6944] net_ratelimit: 164 callbacks suppressed
[   76.341404][ T6944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.799356][ T6996] x_tables: duplicate underflow at hook 1
[   76.802894][ T6996] netlink: 'syz.1.318': attribute type 1 has an invalid length.
[   77.006190][ T7008] netlink: 'syz.1.321': attribute type 5 has an invalid length.
[   77.015084][ T7008] ip6erspan0: entered promiscuous mode
[   77.259732][ T7023] bond0: option fail_over_mac: unable to set because the bond device has slaves
[   77.473575][   T24] IPVS: starting estimator thread 0...
[   77.478647][ T7033] __nla_validate_parse: 19 callbacks suppressed
[   77.478659][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'.
[   77.576711][ T7035] IPVS: using max 37 ests per chain, 88800 per kthread
[   77.603549][ T7044] netlink: 52 bytes leftover after parsing attributes in process `syz.2.331'.
[   77.734952][ T7058] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[   77.794516][ T7061] syzkaller1: entered promiscuous mode
[   77.799751][ T7061] syzkaller1: entered allmulticast mode
[   77.943138][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.340'.
[   77.970933][ T7070] netlink: 'syz.2.341': attribute type 10 has an invalid length.
[   77.973566][ T7070] netlink: 40 bytes leftover after parsing attributes in process `syz.2.341'.
[   77.976901][ T7070] dummy0: entered promiscuous mode
[   77.983889][ T7070] bridge0: port 4(dummy0) entered blocking state
[   77.987302][ T7070] bridge0: port 4(dummy0) entered disabled state
[   77.990160][ T7070] dummy0: entered allmulticast mode
[   78.180325][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'.
[   78.253492][ T7091] bond0: option arp_validate: invalid value (18446744073491447809)
[   78.294386][ T7093] batadv1: entered promiscuous mode
[   78.419113][ T7097] netlink: 64 bytes leftover after parsing attributes in process `syz.2.349'.
[   79.084758][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'.
[   79.134249][ T7119] netlink: 52 bytes leftover after parsing attributes in process `syz.2.357'.
[   79.150415][ T7119] netlink: 'syz.2.357': attribute type 1 has an invalid length.
[   79.164463][ T7119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.357'.
[   79.188455][ T7122] netlink: 'syz.1.355': attribute type 2 has an invalid length.
[   79.812760][ T7148] nbd: must specify at least one socket
[   79.862799][ T7150] netlink: 36 bytes leftover after parsing attributes in process `syz.2.362'.
[   80.204258][ T7180] syzkaller0: entered promiscuous mode
[   80.206124][ T7180] syzkaller0: entered allmulticast mode
[   81.089299][ T7200] No such timeout policy "syz0"
[   81.129400][ T1269] cfg80211: failed to load regulatory.db
[   81.631210][ T7226] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   81.986906][ T7254] netlink: 'syz.2.391': attribute type 2 has an invalid length.
[   82.408136][ T7272] netlink: 'syz.2.398': attribute type 2 has an invalid length.
[   82.421208][ T7272] k*]: entered promiscuous mode
[   82.523535][ T7281] __nla_validate_parse: 10 callbacks suppressed
[   82.523587][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'.
[   82.659622][ T7296] netlink: 32 bytes leftover after parsing attributes in process `syz.0.407'.
[   83.030862][ T7330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.415'.
[   83.076224][ T7337] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.418'.
[   83.086785][ T7334] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.418'.
[   83.228911][ T7350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.421'.
[   83.231924][ T7350] netlink: 'syz.2.421': attribute type 7 has an invalid length.
[   83.234589][ T7350] netlink: 'syz.2.421': attribute type 8 has an invalid length.
[   83.238140][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'.
[   83.341080][ T7353] x_tables: duplicate underflow at hook 1
[   83.449139][ T7361] netlink: 104 bytes leftover after parsing attributes in process `syz.2.424'.
[   83.454973][ T7358] xt_CT: No such helper "snmp"
[   83.464826][ T7358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.423'.
[   83.470518][ T7358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.423'.
[   83.503189][ T7363] netlink: 'syz.2.425': attribute type 4 has an invalid length.
[   83.757497][ T7384] syz.1.430: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   83.763502][ T7384] CPU: 1 UID: 0 PID: 7384 Comm: syz.1.430 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   83.763513][ T7384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.763517][ T7384] Call Trace:
[   83.763521][ T7384]  <TASK>
[   83.763525][ T7384]  dump_stack_lvl+0x189/0x250
[   83.763540][ T7384]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.763549][ T7384]  ? __pfx__printk+0x10/0x10
[   83.763563][ T7384]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   83.763574][ T7384]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   83.763583][ T7384]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   83.763593][ T7384]  warn_alloc+0x214/0x310
[   83.763607][ T7384]  ? __pfx_warn_alloc+0x10/0x10
[   83.763619][ T7384]  ? __get_vm_area_node+0x28f/0x300
[   83.763628][ T7384]  ? hash_netiface_create+0x358/0xfe0
[   83.763641][ T7384]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   83.763650][ T7384]  ? do_syscall_64+0xfa/0x3b0
[   83.763668][ T7384]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   83.763679][ T7384]  ? rcu_is_watching+0x15/0xb0
[   83.763688][ T7384]  ? hash_netiface_create+0x358/0xfe0
[   83.763698][ T7384]  ? hash_netiface_create+0x358/0xfe0
[   83.763708][ T7384]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   83.763716][ T7384]  ? hash_netiface_create+0x358/0xfe0
[   83.763727][ T7384]  ? hash_netiface_create+0x2fe/0xfe0
[   83.763739][ T7384]  hash_netiface_create+0x358/0xfe0
[   83.763752][ T7384]  ? __nla_parse+0x40/0x60
[   83.763760][ T7384]  ? __pfx_hash_netiface_create+0x10/0x10
[   83.763771][ T7384]  ip_set_create+0xa97/0x1940
[   83.763778][ T7384]  ? ip_set_create+0x4a2/0x1940
[   83.763788][ T7384]  ? __pfx_ip_set_create+0x10/0x10
[   83.763808][ T7384]  nfnetlink_rcv_msg+0xb4d/0x1130
[   83.763819][ T7384]  ? __pfx_native_queued_spin_lock_slowpath+0x10/0x10
[   83.763830][ T7384]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   83.763847][ T7384]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   83.763869][ T7384]  ? __lock_acquire+0xab9/0xd20
[   83.763883][ T7384]  netlink_rcv_skb+0x208/0x470
[   83.763892][ T7384]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   83.763903][ T7384]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   83.763915][ T7384]  ? bpf_lsm_capable+0x9/0x20
[   83.763924][ T7384]  ? security_capable+0x7e/0x2e0
[   83.763937][ T7384]  nfnetlink_rcv+0x26a/0x2520
[   83.763948][ T7384]  ? unwind_get_return_address+0x4d/0x90
[   83.763957][ T7384]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   83.763966][ T7384]  ? arch_stack_walk+0xfc/0x150
[   83.763980][ T7384]  ? stack_trace_save+0x9c/0xe0
[   83.763990][ T7384]  ? stack_depot_save_flags+0x40/0x900
[   83.764001][ T7384]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   83.764012][ T7384]  ? kasan_save_track+0x4f/0x80
[   83.764019][ T7384]  ? kasan_save_track+0x3e/0x80
[   83.764029][ T7384]  ? __lock_acquire+0xab9/0xd20
[   83.764044][ T7384]  ? __lock_acquire+0xab9/0xd20
[   83.764055][ T7384]  ? netlink_deliver_tap+0x2e/0x1b0
[   83.764066][ T7384]  ? netlink_deliver_tap+0x2e/0x1b0
[   83.764074][ T7384]  ? netlink_deliver_tap+0x2e/0x1b0
[   83.764104][ T7384]  netlink_unicast+0x75c/0x8e0
[   83.764118][ T7384]  netlink_sendmsg+0x805/0xb30
[   83.764130][ T7384]  ? __pfx_netlink_sendmsg+0x10/0x10
[   83.764139][ T7384]  ? aa_sock_msg_perm+0x94/0x160
[   83.764150][ T7384]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   83.764160][ T7384]  ? __pfx_netlink_sendmsg+0x10/0x10
[   83.764169][ T7384]  __sock_sendmsg+0x21c/0x270
[   83.764177][ T7384]  ____sys_sendmsg+0x505/0x830
[   83.764188][ T7384]  ? __pfx_____sys_sendmsg+0x10/0x10
[   83.764201][ T7384]  ? import_iovec+0x74/0xa0
[   83.764211][ T7384]  ___sys_sendmsg+0x21f/0x2a0
[   83.764221][ T7384]  ? __pfx____sys_sendmsg+0x10/0x10
[   83.764243][ T7384]  ? __fget_files+0x2a/0x420
[   83.764252][ T7384]  ? __fget_files+0x3a0/0x420
[   83.764265][ T7384]  __x64_sys_sendmsg+0x19b/0x260
[   83.764275][ T7384]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   83.764288][ T7384]  ? rcu_is_watching+0x15/0xb0
[   83.764298][ T7384]  ? do_syscall_64+0xbe/0x3b0
[   83.764306][ T7384]  do_syscall_64+0xfa/0x3b0
[   83.764312][ T7384]  ? lockdep_hardirqs_on+0x9c/0x150
[   83.764323][ T7384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.764329][ T7384]  ? exc_page_fault+0x9f/0xf0
[   83.764341][ T7384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.764348][ T7384] RIP: 0033:0x7fe40bd8e929
[   83.764355][ T7384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.764361][ T7384] RSP: 002b:00007fe40cb33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   83.764370][ T7384] RAX: ffffffffffffffda RBX: 00007fe40bfb5fa0 RCX: 00007fe40bd8e929
[   83.764375][ T7384] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004
[   83.764379][ T7384] RBP: 00007fe40be10b39 R08: 0000000000000000 R09: 0000000000000000
[   83.764383][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.764387][ T7384] R13: 0000000000000000 R14: 00007fe40bfb5fa0 R15: 00007ffd50ae7588
[   83.764398][ T7384]  </TASK>
[   83.764400][ T7384] Mem-Info:
[   83.876513][ T7392] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   83.887864][ T7384] active_anon:5503 inactive_anon:0 isolated_anon:0
[   83.887864][ T7384]  active_file:1025 inactive_file:38213 isolated_file:0
[   83.887864][ T7384]  unevictable:1768 dirty:155 writeback:0
[   83.887864][ T7384]  slab_reclaimable:9159 slab_unreclaimable:53019
[   83.887864][ T7384]  mapped:18242 shmem:2444 pagetables:1010
[   83.887864][ T7384]  sec_pagetables:0 bounce:0
[   83.887864][ T7384]  kernel_misc_reclaimable:0
[   83.887864][ T7384]  free:294981 free_pcp:24841 free_cma:0
[   83.941127][ T7392] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   83.960671][ T7396] netlink: 'syz.2.434': attribute type 83 has an invalid length.
[   83.964850][ T7397] netlink: 'syz.2.434': attribute type 83 has an invalid length.
[   83.969118][ T7384] Node 0 active_anon:11320kB inactive_anon:0kB active_file:3196kB inactive_file:21080kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36644kB dirty:408kB writeback:0kB shmem:5032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3132kB pagetables:2352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   83.983945][ T7384] Node 1 active_anon:10692kB inactive_anon:0kB active_file:904kB inactive_file:131772kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36324kB dirty:212kB writeback:0kB shmem:4744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8440kB pagetables:1620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   83.997736][ T7384] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   84.010745][ T7384] lowmem_reserve[]: 0 812 812 812 812
[   84.013532][ T7384] Node 0 DMA32 free:417240kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11320kB inactive_anon:0kB active_file:3196kB inactive_file:21080kB unevictable:3536kB writepending:408kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:51924kB local_pcp:16440kB free_cma:0kB
[   84.025654][ T7384] lowmem_reserve[]: 0 0 0 0 0
[   84.027608][ T7384] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   84.037665][ T7384] lowmem_reserve[]: 0 0 854 854 854
[   84.039445][ T7384] Node 1 Normal free:288832kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10692kB inactive_anon:0kB active_file:904kB inactive_file:131772kB unevictable:3536kB writepending:212kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:49028kB local_pcp:28476kB free_cma:0kB
[   84.050036][ T7384] lowmem_reserve[]: 0 0 0 0 0
[   84.051743][ T7384] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   84.055985][ T7384] Node 0 DMA32: 862*4kB (UM) 296*8kB (UME) 222*16kB (UME) 242*32kB (UM) 32*64kB (UME) 8*128kB (UME) 7*256kB (ME) 6*512kB (UME) 5*1024kB (UME) 3*2048kB (U) 93*4096kB (UM) = 417240kB
[   84.069336][ T7384] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   84.075970][ T7384] Node 1 Normal: 656*4kB (UME) 270*8kB (UME) 391*16kB (UME) 355*32kB (UM) 187*64kB (UM) 50*128kB (UME) 25*256kB (UME) 16*512kB (UM) 12*1024kB (UME) 4*2048kB (UM) 52*4096kB (M) = 288832kB
[   84.081870][ T7384] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.084721][ T7384] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.087770][ T7384] 41682 total pagecache pages
[   84.089311][ T7384] 0 pages in swap cache
[   84.090654][ T7384] Free swap  = 124996kB
[   84.094040][ T7384] Total swap = 124996kB
[   84.096644][ T7384] 786301 pages RAM
[   84.097869][ T7384] 0 pages HighMem/MovableOnly
[   84.099425][ T7384] 241085 pages reserved
[   84.100744][ T7384] 0 pages cma reserved
[   84.141385][ T7403] netlink: 'syz.2.437': attribute type 4 has an invalid length.
[   84.215471][ T7414] xt_hashlimit: overflow, try lower: 6/0
[   84.218895][ T7414] Bluetooth: MGMT ver 1.23
[   84.256397][ T7415] x_tables: duplicate underflow at hook 3
[   84.464337][ T7442] netlink: 'syz.2.449': attribute type 1 has an invalid length.
[   84.900782][ T7476] netlink: 'syz.1.462': attribute type 10 has an invalid length.
[   84.903962][ T7476] batman_adv: batadv0: Adding interface: netdevsim0
[   84.906198][ T7476] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.914659][ T7476] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   85.295553][ T7503] 8021q: VLANs not supported on vcan0
[   85.958642][ T7555] syz_tun (unregistering): left promiscuous mode
[   86.062450][ T7559] netlink: 'syz.1.478': attribute type 2 has an invalid length.
[   86.132224][ T7567] netlink: 'syz.1.481': attribute type 16 has an invalid length.
[   86.138253][ T7567] netlink: 'syz.1.481': attribute type 17 has an invalid length.
[   86.157357][   T13] bond0: (slave bond_slave_0): interface is now down
[   86.157785][ T7567] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.160089][   T13] bond0: (slave bond_slave_1): interface is now down
[   86.163587][ T7567] 8021q: adding VLAN 0 to HW filter on device team0
[   86.168787][ T7567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.177557][   T12] bond0: (slave bond_slave_0): interface is now down
[   86.179657][   T12] bond0: (slave bond_slave_1): interface is now down
[   86.183367][   T12] bond0: now running without any active interface!
[   86.193908][ T7567] syz.1.481 (7567) used greatest stack depth: 19736 bytes left
[   86.286106][ T7576] Cannot find add_set index 0 as target
[   86.384597][ T7578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   86.895312][ T7637] bridge_slave_0: left allmulticast mode
[   86.901046][ T7637] bridge_slave_0: left promiscuous mode
[   86.905241][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.046837][ T5833] Bluetooth: hci2: command 0x0405 tx timeout
[   87.699736][ T7637] bridge_slave_1: left allmulticast mode
[   87.704316][ T7637] bridge_slave_1: left promiscuous mode
[   87.712701][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.727100][ T7637] bond0: (slave bond_slave_0): Releasing backup interface
[   87.730968][ T7637] bond0: (slave bond_slave_1): Releasing backup interface
[   87.736393][ T7637] team0: Port device team_slave_0 removed
[   87.740393][ T7637] team0: Port device team_slave_1 removed
[   87.742477][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.745255][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.749682][ T7637] bond1: (slave bridge2): Releasing active interface
[   87.778992][ T7658] __nla_validate_parse: 20 callbacks suppressed
[   87.779031][ T7658] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.505'.
[   88.074950][ T7676] bond1: entered promiscuous mode
[   88.076897][ T7676] bond1: entered allmulticast mode
[   88.078814][ T7676] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.083262][ T7679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.510'.
[   88.092460][ T7679] netlink: 3 bytes leftover after parsing attributes in process `syz.1.510'.
[   88.124377][ T7681] netlink: 76 bytes leftover after parsing attributes in process `syz.1.511'.
[   88.255497][ T7691] netlink: 'syz.2.514': attribute type 11 has an invalid length.
[   88.258674][ T7691] netlink: 'syz.2.514': attribute type 11 has an invalid length.
[   88.261315][ T7691] netlink: 224 bytes leftover after parsing attributes in process `syz.2.514'.
[   88.371830][ T7709] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   88.409918][ T7711] netlink: 'syz.2.520': attribute type 5 has an invalid length.
[   88.418364][ T7711] ip6erspan0: entered promiscuous mode
[   88.504018][ T7718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.521'.
[   88.533457][ T7716] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   89.049551][ T7742] sctp: [Deprecated]: syz.2.528 (pid 7742) Use of int in max_burst socket option.
[   89.049551][ T7742] Use struct sctp_assoc_value instead
[   89.159242][ T7748] syzkaller1: entered promiscuous mode
[   89.161064][ T7748] syzkaller1: entered allmulticast mode
[   89.165903][ T7748] netlink: 52 bytes leftover after parsing attributes in process `syz.1.530'.
[   90.444353][ T7790] netlink: 220 bytes leftover after parsing attributes in process `syz.0.541'.
[   90.501513][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'.
[   90.523687][ T7797] netlink: 'syz.0.543': attribute type 39 has an invalid length.
[   90.582653][ T7742] Set syz1 is full, maxelem 65536 reached
[   90.622078][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'.
[   90.769494][ T7823] netlink: 'syz.0.552': attribute type 1 has an invalid length.
[   90.805576][ T7826] pim6reg: entered allmulticast mode
[   90.815562][ T7827] pim6reg: left allmulticast mode
[   90.895149][ T7833] x_tables: duplicate underflow at hook 1
[   90.968193][ T7837] xt_TPROXY: Can be used only with -p tcp or -p udp
[   91.701664][ T7873] netlink: 'syz.1.569': attribute type 83 has an invalid length.
[   91.950813][ T7889] netlink: 'syz.1.575': attribute type 23 has an invalid length.
[   91.955290][ T7890] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^BL=Mv^侦Kc'A
[   92.014445][ T7891] sysfs: cannot create duplicate filename '/class/ieee80211/^BL=Mv^侦Kc'A_xD!'
[   92.024331][ T7891] CPU: 1 UID: 0 PID: 7891 Comm: syz.2.576 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   92.024348][ T7891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.024355][ T7891] Call Trace:
[   92.024360][ T7891]  <TASK>
[   92.024365][ T7891]  dump_stack_lvl+0x189/0x250
[   92.024409][ T7891]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.024425][ T7891]  ? __pfx__printk+0x10/0x10
[   92.024442][ T7891]  ? kernfs_path_from_node+0x2c/0x260
[   92.024466][ T7891]  ? kernfs_path_from_node+0x2c/0x260
[   92.024480][ T7891]  ? kernfs_path_from_node+0x2c/0x260
[   92.024497][ T7891]  ? kernfs_path_from_node+0x22c/0x260
[   92.024512][ T7891]  ? kernfs_path_from_node+0x2c/0x260
[   92.024529][ T7891]  sysfs_warn_dup+0x8e/0xa0
[   92.024545][ T7891]  sysfs_do_create_link_sd+0xc0/0x110
[   92.024563][ T7891]  device_add_class_symlinks+0x1cf/0x240
[   92.024581][ T7891]  device_add+0x475/0xb50
[   92.024598][ T7891]  wiphy_register+0x199a/0x26b0
[   92.024625][ T7891]  ? __pfx_wiphy_register+0x10/0x10
[   92.024637][ T7891]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   92.024658][ T7891]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   92.024677][ T7891]  ieee80211_register_hw+0x33e1/0x4120
[   92.024705][ T7891]  ? ieee80211_register_hw+0x1471/0x4120
[   92.024726][ T7891]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   92.024744][ T7891]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   92.024767][ T7891]  ? __hrtimer_setup+0x187/0x210
[   92.024779][ T7891]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   92.024798][ T7891]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   92.024835][ T7891]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   92.024848][ T7891]  ? trace_kmalloc+0x1f/0xd0
[   92.024859][ T7891]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   92.024873][ T7891]  ? kstrndup+0xbf/0x160
[   92.024896][ T7891]  hwsim_new_radio_nl+0xea4/0x1b10
[   92.024942][ T7891]  ? __pfx___nla_validate_parse+0x10/0x10
[   92.024966][ T7891]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   92.024983][ T7891]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[   92.025007][ T7891]  ? __nla_parse+0x40/0x60
[   92.025022][ T7891]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   92.025045][ T7891]  genl_family_rcv_msg_doit+0x215/0x300
[   92.025068][ T7891]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   92.025096][ T7891]  ? bpf_lsm_capable+0x9/0x20
[   92.025110][ T7891]  ? security_capable+0x7e/0x2e0
[   92.025133][ T7891]  genl_rcv_msg+0x60e/0x790
[   92.025156][ T7891]  ? __pfx_genl_rcv_msg+0x10/0x10
[   92.025172][ T7891]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   92.025197][ T7891]  netlink_rcv_skb+0x208/0x470
[   92.025211][ T7891]  ? __pfx_genl_rcv_msg+0x10/0x10
[   92.025229][ T7891]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   92.025256][ T7891]  ? down_read+0x1ad/0x2e0
[   92.025270][ T7891]  genl_rcv+0x28/0x40
[   92.025286][ T7891]  netlink_unicast+0x75c/0x8e0
[   92.025307][ T7891]  netlink_sendmsg+0x805/0xb30
[   92.025328][ T7891]  ? __pfx_netlink_sendmsg+0x10/0x10
[   92.025345][ T7891]  ? aa_sock_msg_perm+0x94/0x160
[   92.025364][ T7891]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   92.025381][ T7891]  ? __pfx_netlink_sendmsg+0x10/0x10
[   92.025396][ T7891]  __sock_sendmsg+0x21c/0x270
[   92.025410][ T7891]  ____sys_sendmsg+0x505/0x830
[   92.025430][ T7891]  ? __pfx_____sys_sendmsg+0x10/0x10
[   92.025460][ T7891]  ? import_iovec+0x74/0xa0
[   92.025477][ T7891]  ___sys_sendmsg+0x21f/0x2a0
[   92.025493][ T7891]  ? __pfx____sys_sendmsg+0x10/0x10
[   92.025533][ T7891]  ? __fget_files+0x2a/0x420
[   92.025548][ T7891]  ? __fget_files+0x3a0/0x420
[   92.025569][ T7891]  __x64_sys_sendmsg+0x19b/0x260
[   92.025586][ T7891]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   92.025611][ T7891]  ? do_user_addr_fault+0xc8a/0x1390
[   92.025627][ T7891]  ? do_syscall_64+0xbe/0x3b0
[   92.025642][ T7891]  do_syscall_64+0xfa/0x3b0
[   92.025653][ T7891]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.025670][ T7891]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.025682][ T7891]  ? exc_page_fault+0x9f/0xf0
[   92.025701][ T7891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.025711][ T7891] RIP: 0033:0x7fefd098e929
[   92.025723][ T7891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.025733][ T7891] RSP: 002b:00007fefd1853038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   92.025747][ T7891] RAX: ffffffffffffffda RBX: 00007fefd0bb6080 RCX: 00007fefd098e929
[   92.025755][ T7891] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[   92.025763][ T7891] RBP: 00007fefd0a10b39 R08: 0000000000000000 R09: 0000000000000000
[   92.025769][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.025776][ T7891] R13: 0000000000000001 R14: 00007fefd0bb6080 R15: 00007ffc6e06f5d8
[   92.025796][ T7891]  </TASK>
[   92.337524][ T7894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.389264][ T7912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.453020][ T7920] syzkaller0: MTU too low for tipc bearer
[   92.454878][ T7920] tipc: Disabling bearer <eth:syzkaller0>
[   92.794825][ T7933] __nla_validate_parse: 15 callbacks suppressed
[   92.794835][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'.
[   92.808682][ T7933] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.919636][ T7943] netlink: 48 bytes leftover after parsing attributes in process `syz.1.588'.
[   93.054887][ T7955] netdevsim netdevsim2: Direct firmware load for .
[   93.054887][ T7955]  failed with error -2
[   93.061189][ T7955] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[   93.061189][ T7955] 
[   93.071996][ T7957] netlink: 256 bytes leftover after parsing attributes in process `syz.1.591'.
[   93.079641][ T7957] unsupported nlmsg_type 40
[   93.082211][ T7957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.591'.
[   93.169118][ T7963] syzkaller1: entered promiscuous mode
[   93.171033][ T7963] syzkaller1: entered allmulticast mode
[   93.178715][ T7963] netlink: 52 bytes leftover after parsing attributes in process `syz.1.592'.
[   93.283161][ T7973] xt_l2tp: v2 doesn't support IP mode
[   93.287523][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'.
[   93.322804][ T7977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.595'.
[   93.364028][ T7977] netlink: 27 bytes leftover after parsing attributes in process `syz.1.595'.
[   93.503819][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'.
[   93.517527][ T7986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.596'.
[   93.931472][ T8031] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   93.972427][ T8036] x_tables: duplicate underflow at hook 1
[   94.105725][ T8041] 8021q: VLANs not supported on nlmon0
[   94.296331][ T8047] syzkaller0: entered promiscuous mode
[   94.298904][ T8047] syzkaller0: entered allmulticast mode
[   95.442905][ T8071] netlink: 'syz.0.615': attribute type 12 has an invalid length.
[   95.473983][ T8070] netlink: 'syz.0.615': attribute type 12 has an invalid length.
[   95.512639][ T8074] bond1: left promiscuous mode
[   95.514866][ T8074] bond1: left allmulticast mode
[   95.518913][ T8074] ip6erspan0: left promiscuous mode
[   95.618217][ T8076] sctp: [Deprecated]: syz.1.616 (pid 8076) Use of int in max_burst socket option deprecated.
[   95.618217][ T8076] Use struct sctp_assoc_value instead
[   95.697267][ T8091] 8021q: VLANs not supported on lo
[   95.760191][ T8099] openvswitch: netlink: Actions may not be safe on all matching packets
[   96.272440][ T8156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.277135][ T8156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.315506][ T8159] netlink: 'syz.1.637': attribute type 11 has an invalid length.
[   96.472265][ T8167] bridge_slave_1: left allmulticast mode
[   96.474395][ T8167] bridge_slave_1: left promiscuous mode
[   96.476516][ T8167] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.483348][ T8167] bridge_slave_0: left allmulticast mode
[   96.485331][ T8167] bridge_slave_0: left promiscuous mode
[   96.490075][ T8167] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.810279][ T8267] vlan3: entered allmulticast mode
[   97.812206][ T8267] bridge_slave_0: entered allmulticast mode
[   97.871663][ T5856] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[   98.694064][ T8295] __nla_validate_parse: 18 callbacks suppressed
[   98.694073][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.667'.
[   98.838164][ T8303] netlink: 52 bytes leftover after parsing attributes in process `syz.0.669'.
[   99.232508][ T8346] netlink: 52 bytes leftover after parsing attributes in process `syz.1.679'.
[   99.714464][ T8374] netlink: 'syz.1.683': attribute type 1 has an invalid length.
[   99.817704][ T8381] netlink: 128 bytes leftover after parsing attributes in process `syz.2.685'.
[   99.926511][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'.
[   99.932531][ T8387] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   99.934999][ T8387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.108385][ T8403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.694'.
[  100.151650][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'.
[  100.494863][ T8442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.704'.
[  100.498924][ T8441] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.704'.
[  100.525427][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'.
[  101.620519][ T8528] pim6reg1: entered promiscuous mode
[  101.622379][ T8528] pim6reg1: entered allmulticast mode
[  101.766118][ T8528] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.777114][ T8528] team0: Port device bond2 added
[  102.319749][ T8610] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  102.325469][ T8610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.394679][ T8617] x_tables: ip_tables: udp match: only valid for protocol 17
[  103.712434][ T8684] __nla_validate_parse: 23 callbacks suppressed
[  103.712443][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'.
[  103.719202][ T8683] netlink: 52 bytes leftover after parsing attributes in process `syz.0.780'.
[  103.753051][ T8687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.783'.
[  103.880268][ T8704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.786'.
[  103.886419][ T8704] netlink: 'syz.1.786': attribute type 16 has an invalid length.
[  103.890577][ T8704] netlink: 'syz.1.786': attribute type 17 has an invalid length.
[  103.977088][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'.
[  103.985459][ T8717] bpq0: left promiscuous mode
[  103.987776][ T8717] bpq0: left allmulticast mode
[  104.028970][ T8721] ieee802154 phy0 wpan0: encryption failed: -22
[  104.032558][ T8721] ieee802154 phy0 wpan0: encryption failed: -22
[  104.034601][ T8720] netlink: 'syz.0.790': attribute type 1 has an invalid length.
[  104.039794][ T8720] netlink: 112 bytes leftover after parsing attributes in process `syz.0.790'.
[  104.075082][ T8723] netlink: 52 bytes leftover after parsing attributes in process `syz.0.792'.
[  104.133466][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'.
[  104.194086][ T8738] sit0: Master is either lo or non-ether device
[  104.393570][ T8752] netlink: 52 bytes leftover after parsing attributes in process `syz.2.801'.
[  104.607683][ T8763] tipc: Started in network mode
[  104.609779][ T8763] tipc: Node identity bea16def28a1, cluster identity 4711
[  104.612835][ T8763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.615887][ T8765] syzkaller0: entered promiscuous mode
[  104.619225][ T8765] syzkaller0: entered allmulticast mode
[  104.635998][ T8765] tipc: Resetting bearer <eth:syzkaller0>
[  104.646394][ T8765] tipc: Disabling bearer <eth:syzkaller0>
[  104.720988][ T8768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.806'.
[  104.756253][ T8770] netlink: 'syz.2.807': attribute type 1 has an invalid length.
[  105.153458][ T8788] netem: change failed
[  105.267536][ T8792] netlink: 'syz.0.816': attribute type 10 has an invalid length.
[  106.434776][ T8859] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  106.447506][ T8861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.462805][ T8861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.644560][ T8876] openvswitch: netlink: Key type 30 is not supported
[  106.997015][ T8902] netlink: 'syz.0.845': attribute type 1 has an invalid length.
[  107.017844][ T8902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  107.020790][ T8902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  107.023707][ T8902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  107.028554][ T8902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  107.033580][ T8902] bond3: (slave geneve3): making interface the new active one
[  107.037785][ T8902] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  107.048795][ T8902] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  107.051763][ T8905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  107.110396][ T8911] 8021q: adding VLAN 0 to HW filter on device bond3
[  107.238224][ T8926] blkio.reset_stats is deprecated
[  107.260775][ T8926] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  107.264489][ T8926] CPU: 1 UID: 0 PID: 8926 Comm: syz.0.852 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  107.264499][ T8926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.264504][ T8926] Call Trace:
[  107.264508][ T8926]  <TASK>
[  107.264512][ T8926]  dump_stack_lvl+0x189/0x250
[  107.264526][ T8926]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.264535][ T8926]  ? __pfx__printk+0x10/0x10
[  107.264545][ T8926]  ? kernfs_path_from_node+0x2c/0x260
[  107.264555][ T8926]  ? kernfs_path_from_node+0x2c/0x260
[  107.264564][ T8926]  ? kernfs_path_from_node+0x2c/0x260
[  107.264574][ T8926]  ? kernfs_path_from_node+0x22c/0x260
[  107.264583][ T8926]  ? kernfs_path_from_node+0x2c/0x260
[  107.264612][ T8926]  sysfs_warn_dup+0x8e/0xa0
[  107.264624][ T8926]  sysfs_do_create_link_sd+0xc0/0x110
[  107.264635][ T8926]  device_add_class_symlinks+0x1cf/0x240
[  107.264646][ T8926]  device_add+0x475/0xb50
[  107.264657][ T8926]  wiphy_register+0x199a/0x26b0
[  107.264672][ T8926]  ? __pfx_wiphy_register+0x10/0x10
[  107.264680][ T8926]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  107.264692][ T8926]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  107.264703][ T8926]  ieee80211_register_hw+0x33e1/0x4120
[  107.264720][ T8926]  ? ieee80211_register_hw+0x1471/0x4120
[  107.264733][ T8926]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  107.264744][ T8926]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  107.264759][ T8926]  ? __hrtimer_setup+0x187/0x210
[  107.264768][ T8926]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  107.264780][ T8926]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  107.264800][ T8926]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  107.264808][ T8926]  ? trace_kmalloc+0x1f/0xd0
[  107.264816][ T8926]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  107.264824][ T8926]  ? kstrndup+0xbf/0x160
[  107.264839][ T8926]  hwsim_new_radio_nl+0xea4/0x1b10
[  107.264848][ T8926]  ? __pfx___nla_validate_parse+0x10/0x10
[  107.264862][ T8926]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  107.264875][ T8926]  ? __nla_parse+0x40/0x60
[  107.264884][ T8926]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  107.264900][ T8926]  genl_family_rcv_msg_doit+0x215/0x300
[  107.264913][ T8926]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  107.264935][ T8926]  ? bpf_lsm_capable+0x9/0x20
[  107.264947][ T8926]  ? security_capable+0x7e/0x2e0
[  107.264966][ T8926]  genl_rcv_msg+0x60e/0x790
[  107.264985][ T8926]  ? __pfx_genl_rcv_msg+0x10/0x10
[  107.265000][ T8926]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  107.265024][ T8926]  netlink_rcv_skb+0x208/0x470
[  107.265038][ T8926]  ? __pfx_genl_rcv_msg+0x10/0x10
[  107.265054][ T8926]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  107.265086][ T8926]  ? down_read+0x1ad/0x2e0
[  107.265098][ T8926]  genl_rcv+0x28/0x40
[  107.265113][ T8926]  netlink_unicast+0x75c/0x8e0
[  107.265134][ T8926]  netlink_sendmsg+0x805/0xb30
[  107.265155][ T8926]  ? __pfx_netlink_sendmsg+0x10/0x10
[  107.265170][ T8926]  ? aa_sock_msg_perm+0x94/0x160
[  107.265186][ T8926]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  107.265203][ T8926]  ? __pfx_netlink_sendmsg+0x10/0x10
[  107.265217][ T8926]  __sock_sendmsg+0x21c/0x270
[  107.265230][ T8926]  ____sys_sendmsg+0x505/0x830
[  107.265247][ T8926]  ? __pfx_____sys_sendmsg+0x10/0x10
[  107.265268][ T8926]  ? import_iovec+0x74/0xa0
[  107.265285][ T8926]  ___sys_sendmsg+0x21f/0x2a0
[  107.265303][ T8926]  ? __pfx____sys_sendmsg+0x10/0x10
[  107.265348][ T8926]  ? __fget_files+0x2a/0x420
[  107.265363][ T8926]  ? __fget_files+0x3a0/0x420
[  107.265387][ T8926]  __x64_sys_sendmsg+0x19b/0x260
[  107.265405][ T8926]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  107.265429][ T8926]  ? rcu_is_watching+0x15/0xb0
[  107.265448][ T8926]  ? do_syscall_64+0xbe/0x3b0
[  107.265463][ T8926]  do_syscall_64+0xfa/0x3b0
[  107.265474][ T8926]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.265491][ T8926]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.265503][ T8926]  ? exc_page_fault+0x9f/0xf0
[  107.265522][ T8926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.265533][ T8926] RIP: 0033:0x7f1c1038e929
[  107.265544][ T8926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.265554][ T8926] RSP: 002b:00007f1c0e1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  107.265567][ T8926] RAX: ffffffffffffffda RBX: 00007f1c105b5fa0 RCX: 00007f1c1038e929
[  107.265575][ T8926] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  107.265582][ T8926] RBP: 00007f1c10410b39 R08: 0000000000000000 R09: 0000000000000000
[  107.265589][ T8926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.265623][ T8926] R13: 0000000000000000 R14: 00007f1c105b5fa0 R15: 00007ffedba55238
[  107.265646][ T8926]  </TASK>
[  107.545866][ T8942] netlink: 'syz.1.856': attribute type 5 has an invalid length.
[  107.573424][ T8942] netlink: 'syz.1.856': attribute type 5 has an invalid length.
[  107.579858][ T8944] netlink: 'syz.1.856': attribute type 5 has an invalid length.
[  107.586336][ T8944] netlink: 'syz.1.856': attribute type 5 has an invalid length.
[  107.746493][ T8967] @: renamed from veth0_vlan
[  107.836176][ T8979] netlink: 'syz.2.866': attribute type 1 has an invalid length.
[  107.938578][ T8989] delete_channel: no stack
[  108.185084][ T9007] pimreg: entered allmulticast mode
[  108.202081][ T9007] pimreg: left allmulticast mode
[  108.296105][ T9014] syzkaller0: entered allmulticast mode
[  108.869322][ T9030] __nla_validate_parse: 24 callbacks suppressed
[  108.869336][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'.
[  108.884735][ T9028] netlink: 'syz.2.879': attribute type 21 has an invalid length.
[  108.888378][ T9028] netlink: 132 bytes leftover after parsing attributes in process `syz.2.879'.
[  108.892755][ T9028] netlink: 'syz.2.879': attribute type 13 has an invalid length.
[  108.963778][ T9028] netlink: 44 bytes leftover after parsing attributes in process `syz.2.879'.
[  108.999651][ T9040] x_tables: duplicate underflow at hook 2
[  109.011264][ T9035] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.056078][ T9035] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.064780][ T9035] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  109.074339][ T9035] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  109.100007][ T9044] veth3: entered promiscuous mode
[  109.105400][ T9044] bond2: (slave veth3): Enslaving as an active interface with a down link
[  109.123538][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.127762][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.380410][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'.
[  109.434103][ T9078] netlink: 52 bytes leftover after parsing attributes in process `syz.2.892'.
[  110.357282][ T9105] netlink: 52 bytes leftover after parsing attributes in process `syz.1.901'.
[  110.611222][ T9128] netlink: 52 bytes leftover after parsing attributes in process `syz.2.908'.
[  110.656961][ T9134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.907'.
[  110.702152][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'.
[  110.706342][ T9142] validate_nla: 4 callbacks suppressed
[  110.706349][ T9142] netlink: 'syz.2.911': attribute type 30 has an invalid length.
[  110.714519][ T9142] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.718001][ T9142] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.721256][ T9142] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.724290][ T9142] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.732399][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'.
[  110.735324][ T9142] netlink: 'syz.2.911': attribute type 30 has an invalid length.
[  110.761139][ T9144] pim6reg1: entered promiscuous mode
[  110.763023][ T9144] pim6reg1: entered allmulticast mode
[  110.899808][ T9154] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  111.142867][ T9158] tipc: Enabled bearer <udp:syz2>, priority 10
[  111.451651][ T9178] IPVS: set_ctl: invalid protocol: 46 172.20.20.37:20004
[  111.485686][ T9180] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  111.646271][ T9196] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  111.762944][ T9210] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.842237][ T9222] netlink: 'syz.2.940': attribute type 4 has an invalid length.
[  112.122317][ T9245] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  112.365241][ T9261] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.369556][ T9261] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.373067][ T9261] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.377036][ T9261] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.383138][ T9262] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  113.066041][ T9304] netlink: 'syz.1.968': attribute type 2 has an invalid length.
[  113.447320][ T9326] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  113.714798][ T9358] veth6: entered allmulticast mode
[  114.051749][ T9394] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  114.068977][ T9398] SET target dimension over the limit!
[  114.120156][ T9398] __nla_validate_parse: 16 callbacks suppressed
[  114.120167][ T9398] netlink: 112 bytes leftover after parsing attributes in process `syz.2.989'.
[  114.125704][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'.
[  114.148240][ T9408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.151683][ T9408] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  114.154507][ T9408] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  114.168899][ T9408] tipc: Resetting bearer <eth:syzkaller0>
[  114.322245][ T9414] IPVS: Scheduler module ip_vs_sip not found
[  114.353521][ T9422] syzkaller0: entered promiscuous mode
[  114.355655][ T9422] syzkaller0: entered allmulticast mode
[  115.169038][ T9433] netlink: 'syz.2.998': attribute type 15 has an invalid length.
[  115.171555][ T9433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.998'.
[  115.386156][ T9437] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1001'.
[  115.459204][ T9443] nftables ruleset with unbound set
[  115.589124][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'.
[  115.592044][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'.
[  115.794316][ T9459] syzkaller1: entered promiscuous mode
[  115.801181][ T9459] syzkaller1: entered allmulticast mode
[  115.811181][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'.
[  115.818071][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'.
[  115.976788][ T9483] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  115.997710][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'.
[  116.001121][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1016'.
[  116.093485][ T9494] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  116.707691][ T9533] xt_hashlimit: max too large, truncated to 1048576
[  116.713225][ T9533] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  117.477069][ T9548] netlink: 'syz.0.1038': attribute type 1 has an invalid length.
[  117.634617][ T9558] xt_CT: No such helper "syz0"
[  117.820592][ T9583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.974911][ T9592] x_tables: duplicate underflow at hook 3
[  118.522935][ T9611] netlink: 'syz.0.1058': attribute type 1 has an invalid length.
[  118.561940][ T9614] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  118.845652][ T9631] xt_TCPMSS: Only works on TCP SYN packets
[  118.985130][ T9641] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  119.165718][ T9658] __nla_validate_parse: 17 callbacks suppressed
[  119.165732][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'.
[  119.304648][ T9672] xt_hashlimit: size too large, truncated to 1048576
[  119.314392][ T9672] warn_alloc: 1 callbacks suppressed
[  119.314405][ T9672] syz.1.1075: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  119.324107][ T9672] CPU: 1 UID: 0 PID: 9672 Comm: syz.1.1075 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  119.324123][ T9672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.324129][ T9672] Call Trace:
[  119.324134][ T9672]  <TASK>
[  119.324140][ T9672]  dump_stack_lvl+0x189/0x250
[  119.324160][ T9672]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.324172][ T9672]  ? __pfx__printk+0x10/0x10
[  119.324187][ T9672]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  119.324202][ T9672]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  119.324215][ T9672]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  119.324230][ T9672]  warn_alloc+0x214/0x310
[  119.324255][ T9672]  ? __pfx_warn_alloc+0x10/0x10
[  119.324274][ T9672]  ? __get_vm_area_node+0x28f/0x300
[  119.324287][ T9672]  ? htable_create+0xfc/0x7a0
[  119.324305][ T9672]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  119.324336][ T9672]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  119.324378][ T9672]  ? rcu_is_watching+0x15/0xb0
[  119.324392][ T9672]  ? htable_create+0xfc/0x7a0
[  119.324406][ T9672]  ? htable_create+0xfc/0x7a0
[  119.324419][ T9672]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  119.324434][ T9672]  ? htable_create+0xfc/0x7a0
[  119.324448][ T9672]  ? hashlimit_pernet+0x23/0x240
[  119.324469][ T9672]  htable_create+0xfc/0x7a0
[  119.324491][ T9672]  hashlimit_mt_check_common+0x719/0xa10
[  119.324514][ T9672]  hashlimit_mt_check_v1+0x221/0x360
[  119.324532][ T9672]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[  119.324552][ T9672]  ? xt_find_match+0x1f7/0x250
[  119.324574][ T9672]  xt_check_match+0x3d1/0xab0
[  119.324587][ T9672]  ? __pfx___mutex_lock+0x10/0x10
[  119.324602][ T9672]  ? __pfx_xt_check_match+0x10/0x10
[  119.324616][ T9672]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  119.324630][ T9672]  ? xt_find_match+0x1f7/0x250
[  119.324642][ T9672]  translate_table+0x1553/0x2040
[  119.324662][ T9672]  ? __pfx_translate_table+0x10/0x10
[  119.324672][ T9672]  ? __might_fault+0xb0/0x130
[  119.324688][ T9672]  ? _copy_from_user+0x94/0xb0
[  119.324701][ T9672]  do_ip6t_set_ctl+0x970/0xce0
[  119.324714][ T9672]  ? rcu_is_watching+0x15/0xb0
[  119.324722][ T9672]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  119.324739][ T9672]  ? __pfx___mutex_lock+0x10/0x10
[  119.324748][ T9672]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  119.324758][ T9672]  ? __pfx_futex_wait+0x10/0x10
[  119.324768][ T9672]  nf_setsockopt+0x26f/0x290
[  119.324781][ T9672]  rawv6_setsockopt+0x23b/0x5b0
[  119.324792][ T9672]  ? __lock_acquire+0xab9/0xd20
[  119.324801][ T9672]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  119.324812][ T9672]  ? aa_sock_opt_perm+0x74/0x110
[  119.324824][ T9672]  ? sock_common_setsockopt+0x36/0xc0
[  119.324832][ T9672]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  119.324840][ T9672]  do_sock_setsockopt+0x25a/0x3e0
[  119.324851][ T9672]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  119.324861][ T9672]  ? __fget_files+0x2a/0x420
[  119.324874][ T9672]  __x64_sys_setsockopt+0x18b/0x220
[  119.324886][ T9672]  do_syscall_64+0xfa/0x3b0
[  119.324894][ T9672]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.324905][ T9672]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.324912][ T9672]  ? exc_page_fault+0x9f/0xf0
[  119.324923][ T9672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.324930][ T9672] RIP: 0033:0x7fe40bd8e929
[  119.324938][ T9672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.324945][ T9672] RSP: 002b:00007fe40cb33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  119.324954][ T9672] RAX: ffffffffffffffda RBX: 00007fe40bfb5fa0 RCX: 00007fe40bd8e929
[  119.324959][ T9672] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  119.324963][ T9672] RBP: 00007fe40be10b39 R08: 00000000000004c0 R09: 0000000000000000
[  119.324967][ T9672] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[  119.324971][ T9672] R13: 0000000000000000 R14: 00007fe40bfb5fa0 R15: 00007ffd50ae7588
[  119.324983][ T9672]  </TASK>
[  119.324987][ T9672] Mem-Info:
[  119.476264][ T9672] active_anon:5846 inactive_anon:0 isolated_anon:0
[  119.476264][ T9672]  active_file:1042 inactive_file:38228 isolated_file:0
[  119.476264][ T9672]  unevictable:1768 dirty:100 writeback:0
[  119.476264][ T9672]  slab_reclaimable:9620 slab_unreclaimable:55831
[  119.476264][ T9672]  mapped:18294 shmem:2425 pagetables:987
[  119.476264][ T9672]  sec_pagetables:0 bounce:0
[  119.476264][ T9672]  kernel_misc_reclaimable:0
[  119.476264][ T9672]  free:295297 free_pcp:19720 free_cma:0
[  119.492862][ T9672] Node 0 active_anon:11952kB inactive_anon:0kB active_file:3196kB inactive_file:21092kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36872kB dirty:268kB writeback:0kB shmem:5008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3216kB pagetables:2148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  119.504763][ T9672] Node 1 active_anon:11432kB inactive_anon:0kB active_file:972kB inactive_file:131820kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36304kB dirty:132kB writeback:0kB shmem:4692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8912kB pagetables:1800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  119.515231][ T9672] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  119.525024][ T9672] lowmem_reserve[]: 0 812 812 812 812
[  119.526986][ T9672] Node 0 DMA32 free:438320kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12020kB inactive_anon:0kB active_file:3196kB inactive_file:21092kB unevictable:3536kB writepending:268kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:25508kB local_pcp:18968kB free_cma:0kB
[  119.537210][ T9672] lowmem_reserve[]: 0 0 0 0 0
[  119.538792][ T9672] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  119.548894][ T9672] lowmem_reserve[]: 0 0 854 854 854
[  119.551062][ T9672] Node 1 Normal free:269016kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11432kB inactive_anon:0kB active_file:972kB inactive_file:131820kB unevictable:3536kB writepending:132kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:53300kB local_pcp:34280kB free_cma:0kB
[  119.561817][ T9672] lowmem_reserve[]: 0 0 0 0 0
[  119.563460][ T9672] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  119.567874][ T9672] Node 0 DMA32: 454*4kB (U) 353*8kB (UE) 3*16kB (UME) 301*32kB (UME) 271*64kB (UM) 135*128kB (UM) 97*256kB (UM) 70*512kB (UME) 39*1024kB (UME) 23*2048kB (UM) 59*4096kB (UM) = 438320kB
[  119.573633][ T9672] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  119.579234][ T9672] Node 1 Normal: 42*4kB (UE) 320*8kB (UME) 619*16kB (UE) 364*32kB (UME) 190*64kB (UME) 69*128kB (UE) 22*256kB (UM) 6*512kB (UM) 6*1024kB (UME) 4*2048kB (UM) 49*4096kB (UM) = 269016kB
[  119.585054][ T9672] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  119.588094][ T9672] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  119.591305][ T9672] 41695 total pagecache pages
[  119.592772][ T9672] 0 pages in swap cache
[  119.594153][ T9672] Free swap  = 124996kB
[  119.595499][ T9672] Total swap = 124996kB
[  119.596951][ T9672] 786301 pages RAM
[  119.598150][ T9672] 0 pages HighMem/MovableOnly
[  119.599646][ T9672] 241085 pages reserved
[  119.601038][ T9672] 0 pages cma reserved
[  120.132648][ T9696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1084'.
[  120.143563][ T9699] netlink: 'syz.2.1085': attribute type 1 has an invalid length.
[  120.146044][ T9699] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1085'.
[  120.162873][ T9700] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.165933][ T9700] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.169127][ T9700] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.171977][ T9700] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.213734][ T9699] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1085'.
[  120.282825][ T9712] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  120.285428][ T9712] bond1: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  120.290238][ T9714] netlink: 'syz.2.1089': attribute type 10 has an invalid length.
[  120.307785][ T9714] dummy0: left allmulticast mode
[  120.310114][ T9714] dummy0: left promiscuous mode
[  120.312437][ T9714] bridge0: port 4(dummy0) entered disabled state
[  120.322849][ T9714] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  120.334579][ T9714] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1089'.
[  120.376423][ T9717] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1090'.
[  120.430662][ T9719] syzkaller0: entered promiscuous mode
[  120.432971][ T9719] syzkaller0: entered allmulticast mode
[  120.745616][ T9736] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1096'.
[  120.819968][ T9737] netlink: 'syz.0.1096': attribute type 21 has an invalid length.
[  121.562037][ T9744] netlink: 'syz.2.1098': attribute type 4 has an invalid length.
[  121.581190][ T9746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1099'.
[  121.586295][ T9746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'.
[  121.670742][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1100'.
[  121.717852][ T9754] netlink: 'syz.2.1101': attribute type 9 has an invalid length.
[  121.912433][ T9769] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  121.915921][ T9780] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  121.940622][ T5282] udevd[5282]: worker [7893] terminated by signal 33 (Unknown signal 33)
[  121.943588][ T5282] udevd[5282]: worker [7893] failed while handling '/devices/virtual/block/loop0'
[  121.992339][ T9787] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  122.762956][ T9854] xt_TCPMSS: Only works on TCP SYN packets
[  123.212080][ T9879] netlink: 'syz.0.1127': attribute type 1 has an invalid length.
[  123.249406][ T9883] netlink: 'syz.0.1129': attribute type 5 has an invalid length.
[  123.481257][ T9902] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  123.485414][ T9902] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  123.554827][ T9906] netlink: 'syz.0.1138': attribute type 1 has an invalid length.
[  123.586509][ T9908] netlink: 'syz.0.1139': attribute type 6 has an invalid length.
[  123.590829][ T9908] netlink: 'syz.0.1139': attribute type 8 has an invalid length.
[  123.715847][ T9915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.762856][ T9917] nbd: must specify at least one socket
[  124.279597][ T9925] __nla_validate_parse: 11 callbacks suppressed
[  124.279608][ T9925] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1146'.
[  124.471228][ T9940] 8021q: VLANs not supported on ip6_vti0
[  124.570781][ T9946] xt_ipcomp: unknown flags F7
[  124.621327][ T9952] netlink: 'syz.1.1155': attribute type 27 has an invalid length.
[  124.681143][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'.
[  124.684093][ T9954] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1156'.
[  124.715117][ T9957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1157'.
[  124.719479][ T9959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1158'.
[  124.723429][ T9964] netlink: 'syz.1.1157': attribute type 1 has an invalid length.
[  124.734295][ T9964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1157'.
[  124.771006][ T9970] sock: sock_timestamping_bind_phc: sock not bind to device
[  124.820780][ T9978] netlink: 'syz.2.1162': attribute type 39 has an invalid length.
[  124.833589][ T9978] syz_tun (unregistering): left allmulticast mode
[  124.835796][ T9978] syz_tun (unregistering): left promiscuous mode
[  124.838357][ T9978] bridge0: port 3(syz_tun) entered disabled state
[  124.868915][ T9980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1163'.
[  125.029914][ T9992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1167'.
[  125.101169][T10000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1169'.
[  125.243898][T10012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1171'.
[  126.005442][T10025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.099633][T10031] bond0: (slave dummy0): Releasing backup interface
[  126.103739][T10031] bridge_slave_0: left allmulticast mode
[  126.105615][T10031] bridge_slave_0: left promiscuous mode
[  126.110885][T10031] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.114652][T10031] bridge_slave_1: left allmulticast mode
[  126.116467][T10031] bridge_slave_1: left promiscuous mode
[  126.119878][T10031] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.125031][T10031] bond0: (slave bond_slave_0): Releasing backup interface
[  126.129861][T10031] bond0: (slave bond_slave_1): Releasing backup interface
[  126.135602][T10031] team0: Port device team_slave_0 removed
[  126.139249][T10031] team0: Port device team_slave_1 removed
[  126.141385][T10031] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.145780][T10031] netlink: 'syz.2.1178': attribute type 10 has an invalid length.
[  126.151199][T10031] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  127.111215][T10060] bridge0: port 1(vlan0) entered blocking state
[  127.114931][T10060] bridge0: port 1(vlan0) entered disabled state
[  127.119265][T10060] vlan0: entered allmulticast mode
[  127.121604][T10060] bond0: entered allmulticast mode
[  127.202696][T10073] bond0: option min_links: invalid value (18446744073709551604)
[  127.217240][T10073] bond0: option min_links: allowed values 0 - 2147483647
[  127.222602][T10075] xt_CT: You must specify a L4 protocol and not use inversions on it
[  127.296397][T10079] netlink: 'syz.1.1191': attribute type 1 has an invalid length.
[  127.418078][T10090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  127.420944][T10090] IPv6: NLM_F_CREATE should be set when creating new route
[  127.423576][T10090] IPv6: NLM_F_CREATE should be set when creating new route
[  127.426240][T10090] IPv6: NLM_F_CREATE should be set when creating new route
[  127.527777][T10096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  127.558668][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  127.586852][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  127.636863][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  127.673779][T10107] openvswitch: netlink: Actions may not be safe on all matching packets
[  127.726993][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  127.896833][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  128.169396][T10138] IPVS: Scheduler module ip_vs_sip not found
[  128.177774][T10138] IPVS: length: 131 != 8
[  128.226798][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  128.341991][T10148] syzkaller0: entered promiscuous mode
[  128.350636][T10148] syzkaller0: entered allmulticast mode
[  128.358034][T10146] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.380199][T10151] tipc: Resetting bearer <eth:syzkaller0>
[  128.394012][T10151] tipc: Disabling bearer <eth:syzkaller0>
[  128.465278][T10161] validate_nla: 4 callbacks suppressed
[  128.465288][T10161] netlink: 'syz.2.1216': attribute type 1 has an invalid length.
[  128.473520][T10161] netlink: 'syz.2.1216': attribute type 2 has an invalid length.
[  128.723351][T10180] netlink: 'syz.0.1222': attribute type 27 has an invalid length.
[  129.102729][T10206] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  129.640460][T10233] __nla_validate_parse: 12 callbacks suppressed
[  129.640470][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'.
[  130.269925][T10252] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.296197][T10253] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  130.312401][T10253] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  130.456493][T10268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1248'.
[  130.469957][T10268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1248'.
[  130.630435][T10287] netlink: 'syz.2.1254': attribute type 11 has an invalid length.
[  130.633980][T10287] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1254'.
[  130.637768][T10287] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1254'.
[  130.741788][T10288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.778249][T10292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1256'.
[  130.784217][T10292] netlink: 'syz.0.1256': attribute type 1 has an invalid length.
[  131.154235][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'.
[  131.415516][T10324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.424187][T10324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.430446][T10324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.719760][T10331] bond0: (slave wlan1): Releasing backup interface
[  131.823259][T10338] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1268'.
[  131.881622][T10339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1268'.
[  131.885360][T10339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1268'.
[  131.889891][T10339] netlink: 'syz.0.1268': attribute type 3 has an invalid length.
[  131.894543][T10339] xt_CT: You must specify a L4 protocol and not use inversions on it
[  132.026150][T10352] sch_fq: defrate 0 ignored.
[  132.061299][T10356] xfrm1: entered promiscuous mode
[  132.063060][T10356] xfrm1: entered allmulticast mode
[  132.328795][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.873713][T10366] bond0: (slave bond_slave_0): Releasing backup interface
[  132.878115][T10366] bond_slave_0: left promiscuous mode
[  132.880139][T10366] bond_slave_0: left allmulticast mode
[  132.891837][T10366] bond0: (slave bond_slave_1): Releasing backup interface
[  132.915696][T10366] bond_slave_1: left promiscuous mode
[  132.922245][T10366] bond_slave_1: left allmulticast mode
[  132.926113][T10366] team0: Port device team_slave_0 removed
[  132.933773][T10373] netlink: 'syz.1.1277': attribute type 10 has an invalid length.
[  132.933812][T10366] team0: Port device team_slave_1 removed
[  132.939392][T10366] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.943291][T10366] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.946180][T10366] batman_adv: batadv0: Removing interface: netdevsim0
[  132.950830][T10366] bond2: (slave veth3): Releasing active interface
[  132.958670][T10373] bond0: (slave wlan1): refused to change device type
[  133.101281][T10386] ieee802154 phy0 wpan0: encryption failed: -22
[  133.305732][T10404] netlink: 'syz.2.1289': attribute type 1 has an invalid length.
[  133.494316][T10425] netlink: 'syz.1.1298': attribute type 4 has an invalid length.
[  133.509103][T10430] netlink: 'syz.0.1300': attribute type 1 has an invalid length.
[  133.531404][T10430] 8021q: adding VLAN 0 to HW filter on device bond5
[  133.671942][T10453] openvswitch: netlink: Key type 13071 is out of range max 32
[  133.673657][T10448] 8021q: adding VLAN 0 to HW filter on device bond4
[  133.787923][T10459] netlink: 'syz.0.1309': attribute type 1 has an invalid length.
[  133.794120][T10459] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  133.871694][T10473] netlink: 'syz.0.1314': attribute type 2 has an invalid length.
[  133.884289][T10476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.414081][T10531] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  134.417603][T10531] tipc: Bearer <udp:s>: trying with adjusted priority
[  134.420435][T10531] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  134.691740][T10547] xt_connbytes: Forcing CT accounting to be enabled
[  134.695246][T10547] set match dimension is over the limit!
[  135.161259][T10577] __nla_validate_parse: 20 callbacks suppressed
[  135.161268][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'.
[  135.166333][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1339'.
[  135.181065][T10577] netlink: 'syz.0.1342': attribute type 7 has an invalid length.
[  135.188287][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'.
[  135.243456][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'.
[  135.256447][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'.
[  135.346422][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'.
[  135.351832][T10608] netlink: 'syz.2.1346': attribute type 1 has an invalid length.
[  135.355101][T10608] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1346'.
[  135.355811][T10609] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  135.362301][T10608] netlink: 'syz.2.1346': attribute type 1 has an invalid length.
[  135.364354][T10609] macsec2: entered allmulticast mode
[  135.369841][T10609] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  135.421108][T10615] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1349'.
[  135.424127][T10615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1349'.
[  135.428317][T10615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1349'.
[  135.508193][T10617] netlink: 'syz.2.1350': attribute type 1 has an invalid length.
[  135.540637][T10617] 8021q: adding VLAN 0 to HW filter on device bond2
[  135.568708][T10617] 8021q: adding VLAN 0 to HW filter on device bond2
[  135.571856][T10617] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  135.579701][T10617] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  135.642910][T10620] gretap1: entered promiscuous mode
[  136.534958][T10655] netlink: 'syz.0.1361': attribute type 1 has an invalid length.
[  136.906106][T10670] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  136.921604][T10670] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  137.082444][T10690] netlink: 'syz.2.1370': attribute type 3 has an invalid length.
[  138.149215][ T5856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  138.153173][ T5856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  138.177918][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  138.465241][T10803] IPVS: length: 49 != 8
[  138.860164][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  138.863886][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  138.868642][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  138.872576][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  138.875715][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  138.959876][T10833] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.966937][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  139.048420][T10825] chnl_net:caif_netlink_parms(): no params data found
[  139.122406][T10825] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.124901][T10825] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.128240][T10825] bridge_slave_0: entered allmulticast mode
[  139.131126][T10825] bridge_slave_0: entered promiscuous mode
[  139.134738][T10825] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.139161][T10825] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.141636][T10825] bridge_slave_1: entered allmulticast mode
[  139.147656][T10825] bridge_slave_1: entered promiscuous mode
[  139.187429][T10825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.195650][T10825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.207145][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  139.281326][T10825] team0: Port device team_slave_0 added
[  139.285841][T10825] team0: Port device team_slave_1 added
[  139.355727][T10825] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.359248][T10825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.371298][T10825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.384411][T10825] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.387865][T10825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.398170][T10825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.427954][T10825] hsr_slave_0: entered promiscuous mode
[  139.430305][T10825] hsr_slave_1: entered promiscuous mode
[  139.432484][T10825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.435212][T10825] Cannot create hsr debugfs directory
[  139.578696][T10825] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode
[  139.775879][T10825] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  139.780458][T10825] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  139.785229][T10825] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  139.790255][T10825] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  139.808775][T10825] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.811746][T10825] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.815404][T10825] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.818398][T10825] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.858034][T10825] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.868809][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.871902][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.881594][T10825] 8021q: adding VLAN 0 to HW filter on device team0
[  139.886465][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.888866][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.900141][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.903510][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.039889][T10825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.081250][T10825] veth0_vlan: entered promiscuous mode
[  140.090103][T10825] veth1_vlan: entered promiscuous mode
[  140.121664][T10825] veth0_macvtap: entered promiscuous mode
[  140.129245][T10825] veth1_macvtap: entered promiscuous mode
[  140.144676][T10825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.159298][T10825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.166186][T10825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.171215][T10825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.174910][T10825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.179669][T10825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.271055][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.274206][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.319828][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.323617][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.719163][T10898] validate_nla: 5 callbacks suppressed
[  140.719172][T10898] netlink: 'syz.0.1435': attribute type 6 has an invalid length.
[  140.724057][T10898] netlink: 'syz.0.1435': attribute type 27 has an invalid length.
[  141.452719][T10901] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  141.465661][T10901] pimreg: entered allmulticast mode
[  141.469017][T10901] pimreg: left allmulticast mode
[  142.246858][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  142.281059][T10933] __nla_validate_parse: 24 callbacks suppressed
[  142.281070][T10933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1446'.
[  142.347415][T10936] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  142.402525][T10936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1447'.
[  142.541510][T10943] netlink: 'syz.1.1450': attribute type 1 has an invalid length.
[  142.544119][T10943] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1450'.
[  142.557752][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'.
[  142.760022][ T5856] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.809483][T10949] netlink: zone id is out of range
[  142.817323][T10949] netlink: zone id is out of range
[  142.819147][T10949] netlink: zone id is out of range
[  142.820907][T10949] netlink: zone id is out of range
[  142.822629][T10949] netlink: zone id is out of range
[  142.824392][T10949] netlink: zone id is out of range
[  142.826128][T10949] netlink: zone id is out of range
[  142.832972][T10949] netlink: zone id is out of range
[  142.836236][T10949] netlink: zone id is out of range
[  142.852835][ T5224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  142.856336][ T5224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  142.861486][ T5224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  142.865755][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  142.871653][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  142.975165][T10950] chnl_net:caif_netlink_parms(): no params data found
[  143.032362][T10965] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  143.062932][T10950] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.065306][T10950] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.070378][T10950] bridge_slave_0: entered allmulticast mode
[  143.074239][T10950] bridge_slave_0: entered promiscuous mode
[  143.081687][T10950] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.084088][T10950] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.086476][T10950] bridge_slave_1: entered allmulticast mode
[  143.092003][T10950] bridge_slave_1: entered promiscuous mode
[  143.119795][T10950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.124919][T10950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.146258][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'.
[  143.174987][T10950] team0: Port device team_slave_0 added
[  143.186652][T10950] team0: Port device team_slave_1 added
[  143.190134][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1456'.
[  143.223475][T10950] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.225783][T10950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.236774][T10950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.248761][T10950] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.251610][T10950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.264291][T10950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.281615][T10980] netlink: 'syz.0.1458': attribute type 23 has an invalid length.
[  143.298533][T10950] hsr_slave_0: entered promiscuous mode
[  143.301052][T10950] hsr_slave_1: entered promiscuous mode
[  143.303280][T10950] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.305937][T10950] Cannot create hsr debugfs directory
[  143.438062][T10986] macvlan1: entered allmulticast mode
[  143.583136][T11002] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  143.659244][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'.
[  143.740336][ T5836] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  143.745283][ T5836] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  143.749656][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  143.754909][ T5836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.758831][ T5836] RIP: 0010:klist_remove+0x14a/0x340
[  143.761067][ T5836] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 89 50 be f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 6a 50 be f6 49 8b 44 24 58 48 89 44 24 08
[  143.769121][ T5836] RSP: 0018:ffffc900033df840 EFLAGS: 00010202
[  143.771706][ T5836] RAX: 000000000000000b RBX: ffff88801ed35640 RCX: 0000000000000000
[  143.775065][ T5836] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  143.778427][ T5836] RBP: ffffc900033df928 R08: ffffffff8f887283 R09: 1ffffffff1f10e50
[  143.781677][ T5836] R10: dffffc0000000000 R11: fffffbfff1f10e51 R12: 0000000000000000
[  143.784877][ T5836] R13: 1ffff11005d8bd0c R14: ffff88802ec5e860 R15: dffffc0000000000
[  143.788193][ T5836] FS:  00005555803ca500(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  143.791835][ T5836] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.794547][ T5836] CR2: 00007f1c0e1b3fc8 CR3: 000000000df38000 CR4: 00000000000006f0
[  143.797902][ T5836] Call Trace:
[  143.799354][ T5836]  <TASK>
[  143.800649][ T5836]  ? __pfx_klist_remove+0x10/0x10
[  143.802816][ T5836]  ? __pfx_kobject_move+0x10/0x10
[  143.804994][ T5836]  ? get_device_parent+0x366/0x3a0
[  143.807202][ T5836]  device_move+0x193/0x700
[  143.809014][ T5836]  hci_conn_del_sysfs+0xb8/0x170
[  143.811056][ T5836]  hci_conn_del+0x8ff/0xcb0
[  143.812955][ T5836]  hci_conn_hash_flush+0x191/0x230
[  143.815103][ T5836]  hci_dev_close_sync+0xaef/0x1330
[  143.817289][ T5836]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  143.819732][ T5836]  ? up_write+0x1c4/0x420
[  143.821631][ T5836]  hci_unregister_dev+0x21a/0x510
[  143.823801][ T5836]  vhci_release+0x80/0xd0
[  143.825668][ T5836]  ? __pfx_vhci_release+0x10/0x10
[  143.827793][ T5836]  __fput+0x44c/0xa70
[  143.829540][ T5836]  task_work_run+0x1d4/0x260
[  143.831538][ T5836]  ? __pfx_task_work_run+0x10/0x10
[  143.833661][ T5836]  ? kmem_cache_free+0x18f/0x400
[  143.835775][ T5836]  do_exit+0x6b5/0x22e0
[  143.837558][ T5836]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  143.839723][ T5836]  ? __pfx_do_exit+0x10/0x10
[  143.841676][ T5836]  ? _raw_spin_unlock_irq+0x23/0x50
[  143.843930][ T5836]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.846149][ T5836]  do_group_exit+0x21c/0x2d0
[  143.848150][ T5836]  __x64_sys_exit_group+0x3f/0x40
[  143.850296][ T5836]  x64_sys_call+0x21ba/0x21c0
[  143.852305][ T5836]  do_syscall_64+0xfa/0x3b0
[  143.854255][ T5836]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.856439][ T5836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.859021][ T5836]  ? exc_page_fault+0x9f/0xf0
[  143.861053][ T5836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.863574][ T5836] RIP: 0033:0x7fe40bd8e929
[  143.865508][ T5836] Code: Unable to access opcode bytes at 0x7fe40bd8e8ff.
[  143.868450][ T5836] RSP: 002b:00007ffd50ae7108 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  143.871984][ T5836] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe40bd8e929
[  143.875341][ T5836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  143.878672][ T5836] RBP: 00007fe40bdebad8 R08: 00007ffd50ae4ea7 R09: 00000000000927c0
[  143.882028][ T5836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.885623][ T5836] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007ffd50ae79a0
[  143.889015][ T5836]  </TASK>
[  143.890390][ T5836] Modules linked in:
[  143.893353][ T5836] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  143.940683][ T5836] RIP: 0010:klist_remove+0x14a/0x340
[  143.946645][ T5836] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 89 50 be f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 6a 50 be f6 49 8b 44 24 58 48 89 44 24 08
[  143.954087][ T5836] RSP: 0018:ffffc900033df840 EFLAGS: 00010202
[  143.956409][ T5836] RAX: 000000000000000b RBX: ffff88801ed35640 RCX: 0000000000000000
[  143.969350][ T5836] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  143.972809][ T5836] RBP: ffffc900033df928 R08: ffffffff8f887283 R09: 1ffffffff1f10e50
[  143.976255][ T5836] R10: dffffc0000000000 R11: fffffbfff1f10e51 R12: 0000000000000000
[  143.979961][ T5836] R13: 1ffff11005d8bd0c R14: ffff88802ec5e860 R15: dffffc0000000000
[  143.983379][ T5836] FS:  00005555803ca500(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  143.987285][ T5836] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.990028][ T5836] CR2: 00007fbf0ce87e20 CR3: 0000000026a14000 CR4: 00000000000006f0
[  143.993411][ T5836] Kernel panic - not syncing: Fatal exception
[  143.996763][ T5836] Kernel Offset: disabled
[  143.998662][ T5836] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:06:47  Registers:
info registers vcpu 0

CPU#0
RAX=51f781a1ce25d100 RBX=ffffffff81976c78 RCX=51f781a1ce25d100 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555d83e808 CR3=0000000021f84000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0000000000000251 000000000000302d
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffff0000 XMM09=0000000000000251 000000000000302d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900033df070
R8 =ffff8881082e0237 R9 =1ffff1102105c046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98ce R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555803ca500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1c0e1b3fc8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
