last executing test programs:

10m19.196637146s ago: executing program 1 (id=5821):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

10m19.19641537s ago: executing program 1 (id=5822):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x30000000})
r2 = socket(0x1, 0x80802, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001})
epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
close(r3)
shutdown(r2, 0x0)
close(r1)

10m19.057155676s ago: executing program 1 (id=5823):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x46, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x1, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520)

10m19.056861108s ago: executing program 1 (id=5824):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

10m18.011235536s ago: executing program 1 (id=5836):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2, 0xa, 0x9, 0x9, 0x2, 0x0, 0x70bd2a, 0x25dfdbff}, 0x10}}, 0x800)

10m16.316843314s ago: executing program 1 (id=5885):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000740)={@val={0x0, 0x884c}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "6277d7", 0x14, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xffff, 0x0, 0x6}}}}}}}}, 0x4e)

10m16.219862968s ago: executing program 32 (id=5885):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000740)={@val={0x0, 0x884c}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "6277d7", 0x14, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xffff, 0x0, 0x6}}}}}}}}, 0x4e)

4m10.00271006s ago: executing program 0 (id=15689):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb11001800000000dfc082047d465c3d4a72d16900000002010000000000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20)

4m9.952730499s ago: executing program 0 (id=15691):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000003)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x3)

4m9.843685271s ago: executing program 0 (id=15692):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m9.843525272s ago: executing program 0 (id=15693):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)

4m9.524306667s ago: executing program 0 (id=15697):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

4m9.524207787s ago: executing program 0 (id=15698):
unshare(0x22020600)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00'})

4m9.402092274s ago: executing program 33 (id=15698):
unshare(0x22020600)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00'})

1.381099059s ago: executing program 2 (id=22012):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10)
sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x40, r11, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0)
getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x16, 0x2}, {0xfff5, 0x7}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)={0x14, r11, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)

1.060822005s ago: executing program 2 (id=22027):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x4008af03, &(0x7f0000001540)={0x11, 0x7, {0xb, @usage=0x101, 0x0, 0x26, 0x4, 0xfff, 0x0, 0x81, 0x40, @struct={0x5, 0x6}, 0x2, 0x5, [0x8d5, 0x3, 0x40, 0xffffffffffffffff, 0xdf, 0x1]}, {0x80000001, @usage=0x1000, 0x0, 0x9, 0x3136, 0x3, 0x7ffffffe, 0x3, 0x0, @usage=0x1, 0x0, 0x9, [0xc6, 0x3c96, 0x4, 0x5, 0xff, 0xd]}, {0x400, @struct={0x3, 0xfffffff8}, 0x0, 0x8, 0xffffffffffffffa8, 0x1, 0xfffffffffffffffc, 0x7f, 0xa5, @struct={0x0, 0x9}, 0x5, 0x6, [0x30e0, 0x567, 0x7, 0x9, 0x7, 0x2]}, {0x2, 0x6, 0xfff}})

1.000083644s ago: executing program 2 (id=22030):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x4008af04, &(0x7f0000000100)={0x0, 0x1, 0x1, [0xa, 0x9, 0x5, 0x3, 0x2], [0x97, 0x4, 0x81, 0x3, 0xffff, 0x9, 0x8, 0xf, 0xbc18, 0x4, 0x7, 0x7ff, 0x100000001, 0x81, 0x8, 0x26b7, 0x7, 0x5, 0x9, 0xb0e7, 0x9b69, 0xedaf, 0x6, 0xfff, 0x6, 0x8, 0x800, 0xe, 0x4, 0xa, 0x8, 0x0, 0xa82, 0x0, 0x0, 0x8, 0x6, 0x2, 0x80, 0x7, 0x973, 0xfffffffffffffffd, 0x4, 0x5, 0x5, 0xff, 0x3f4d, 0x3d, 0x10001, 0x1, 0x3ff, 0x0, 0x1, 0x4, 0xa90e, 0x2, 0x3ff, 0x4, 0x3, 0x3, 0x400, 0x1, 0x3, 0x0, 0x8, 0xf0, 0x200, 0x8, 0x7, 0x200, 0x2, 0xffffffffffffe42b, 0x9, 0xfffffffffffffffc, 0x2, 0x56bbc785, 0xfffffffffffffff7, 0x5, 0x3ff, 0x3079acd0, 0x9, 0x9, 0x5, 0x4c, 0x1, 0x0, 0x9, 0x1000000000001, 0x8, 0x8, 0x2, 0xa0, 0x200000000000000, 0xffffffffffffff10, 0x6, 0x9, 0x5, 0xfffffffffffffeff, 0x10000, 0x3ff, 0x3, 0x3, 0x2, 0x8, 0x80000001, 0x0, 0x400000000000001, 0xe, 0x0, 0x0, 0x8, 0x2, 0x3, 0x2, 0x101, 0x79, 0x94, 0x1000, 0x511, 0xfffffffffffffe00, 0x1]})

914.229113ms ago: executing program 2 (id=22033):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x78}}, 0x0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x4000000)

809.372642ms ago: executing program 2 (id=22037):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x4008af03, &(0x7f0000001540)={0x11, 0x7, {0xb, @usage=0x101, 0x0, 0x26, 0x4, 0xfff, 0x0, 0x81, 0x40, @struct={0x5, 0x6}, 0x2, 0x5, [0x8d5, 0x3, 0x40, 0xffffffffffffffff, 0xdf, 0x1]}, {0x80000001, @usage=0x1000, 0x0, 0x9, 0x3136, 0x3, 0x7ffffffe, 0x3, 0x0, @usage=0x1, 0x0, 0x9, [0xc6, 0x3c96, 0x4, 0x5, 0xff, 0xd]}, {0x400, @struct={0x3, 0xfffffff8}, 0x0, 0x8, 0xffffffffffffffa8, 0x1, 0xfffffffffffffffc, 0x7f, 0xa5, @struct={0x0, 0x9}, 0x5, 0x6, [0x30e0, 0x567, 0x7, 0x9, 0x7, 0x2]}, {0x2, 0x6, 0xfff}})

760.732794ms ago: executing program 2 (id=22040):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0xa, 0x3, 0x87)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x6b)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14)
listen(r0, 0x1ff)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r1, &(0x7f0000000100)='Q', 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)
r2 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x9, 0xffffffffffff7fff, 0x5, 0xdd43, 0x2, 0x800, 0x4a, 0x7}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0)
accept4(r6, 0x0, 0x0, 0x800)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', 0x0})
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f00000002c0), 0x0, 0x801, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

590.095414ms ago: executing program 4 (id=22051):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000040)={0x0, 0x900, &(0x7f00000001c0)={&(0x7f0000000080)={0x40, 0x1410, 0x1, 0x70bf2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c0b6}, 0x81e0)

529.40027ms ago: executing program 4 (id=22052):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x900, &(0x7f00000001c0)=[{&(0x7f0000003980)=""/156, 0x9c}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000004a40)=""/4081, 0xff1}, {&(0x7f0000001880)=""/4105, 0x1009}, {&(0x7f00000000c0)=""/112, 0x70}, {&(0x7f0000000680)=""/110, 0x6e}], 0x6}, 0x40002000)

470.371742ms ago: executing program 4 (id=22053):
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000007c0)={{r1}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000008000000000000000100000000000000050000000000000016000000000000000500000035e9365b2a8102fce2ec819d6100000000ff00000000000000fc0a000000000000070000000000000065560000000000000200000000000000070000000000000001000000000000000101000000000000191f000000000000000000000000000004000000000000006e4b9c7229f4c3c980b99a1f30265932a42eb8fd1388b3abf298819dfbc207372409bc59107961ce704dadb252829237ab880f7f1b011eaffc772dcb2fa3176d85"]}, @name="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"})
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getqdisc={0x38, 0x26, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xc}, {0x10, 0xd}, {0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c081}, 0x800)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x4e4}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, r5, 0x4, r5}, 0x7)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r6 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r6)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a80)={&(0x7f0000001940)={0x110, r7, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x178}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xa847529664061c1b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x177}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x234}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x110}, 0x1, 0x0, 0x0, 0x4000040}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000700)='%-010d \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001880)={r11, &(0x7f00000017c0)="46786e3c822a70cbd266f84c3beb6be4505972c247c5fe6e21d1d2457fda42defb3504935e57e986322e9a1a5ad8fcb7", &(0x7f0000001800)=""/109}, 0x20)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)

409.583513ms ago: executing program 3 (id=22056):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2={0xfc, 0x2, '\x00', 0x2}, [@dstopts={0x0, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340"], 0xc4}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x47e47}]}, 0x38}}, 0x0)

405.177623ms ago: executing program 3 (id=22057):
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT], 0xd)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
pwritev(r2, &(0x7f0000000f80)=[{&(0x7f0000000180)="10", 0x1}, {0x0}], 0x2, 0x6, 0x80)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000290000000400000001000000000000eb1700000000000000290000000400", @ANYBLOB="9d8863d36ea68d0be71ee2b2763d31cc0b49594959fc4f2002680e3c755aba58569ae18488c7703229718ce7f2d91428894a7b8b4e1526892fc018b321581b9a82c6b2f5f5ff64db38c8301df8f1e69fe117cf2e981e51d76b38ccfbb988a912966106046f0619ddff34b4e14895bd98a56e16a1d290d021d038967fb1efe15a595a93568c9d5e671aff9fb238c68dc067686c"], 0x30}, 0xc4)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)

335.490112ms ago: executing program 3 (id=22058):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x1, [0xa, 0x9, 0x5, 0x3, 0x2], [0x97, 0x4, 0x81, 0x3, 0xffff, 0x9, 0x8, 0xf, 0xbc18, 0x4, 0x7, 0x7ff, 0x100000001, 0x81, 0x8, 0x26b7, 0x7, 0x5, 0x9, 0xb0e7, 0x9b69, 0xedaf, 0x6, 0xfff, 0x6, 0x8, 0x800, 0xe, 0x4, 0xa, 0x8, 0x0, 0xa82, 0x0, 0x0, 0x8, 0x6, 0x2, 0x80, 0x7, 0x973, 0xfffffffffffffffd, 0x4, 0x5, 0x5, 0xff, 0x3f4d, 0x3d, 0x10001, 0x1, 0x3ff, 0x200000000000000, 0x1, 0x4, 0xa90e, 0x2, 0x3ff, 0x4, 0x3, 0x3, 0x400, 0x1, 0x3, 0x0, 0x8, 0xf0, 0x200, 0x8, 0x7, 0x200, 0x2, 0xffffffffffffe42b, 0x9, 0xfffffffffffffffc, 0x2, 0x56bbc785, 0xfffffffffffffff7, 0x5, 0x3ff, 0x3079acd0, 0x9, 0x9, 0x5, 0x4c, 0x1, 0x0, 0x9, 0x1000000000001, 0x8, 0x8, 0x2, 0xa0, 0x0, 0xffffffffffffff10, 0x6, 0x9, 0x5, 0xfffffffffffffeff, 0x10000, 0x3ff, 0x3, 0x3, 0x2, 0x8, 0x80000001, 0x0, 0x400000000000001, 0xe, 0x0, 0x0, 0x8, 0x2, 0x3, 0x2, 0x101, 0x79, 0x94, 0x1000, 0x511, 0xfffffffffffffe00, 0x1]})

329.268243ms ago: executing program 3 (id=22059):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001b0000000700210061610000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
unshare(0xc040480)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000100000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3f258a3b, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r2 = socket(0x2c, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000400)="ec2b33ec7a7374884d85c417b5446568041da412c82b284128619d30e55a6103fecc7becb94ccc09eab66b8709a38cd70082", &(0x7f0000000080)=@udp=r2, 0x1}, 0x20)
r4 = socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000180), &(0x7f0000000280)=@tcp=r4, 0x1}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r3, 0x58, &(0x7f0000000380)}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000072013100000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="18acba206c0004000d8000"/24], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

323.936045ms ago: executing program 4 (id=22060):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r0, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f)

261.514982ms ago: executing program 3 (id=22061):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004c015)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x438a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'lo\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r4], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040)

135.279273ms ago: executing program 4 (id=22062):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000007c0), 0x88601, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000080)={{0x7, 0xe}, {0x1, 0x68d}, 0xd, 0x1})

1.591496ms ago: executing program 4 (id=22063):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x440}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}]}, 0x48}}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={0x14c5e3cb18ede1a9, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$VHOST_SET_FEATURES(r1, 0x4008af60, &(0x7f0000000140)=0x4000000)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind(r3, &(0x7f0000000580)=@llc={0x1a, 0xffff, 0x1, 0x4, 0x4, 0x38, @random="cd43612bf6b9"}, 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00'], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x5c0, 0x1d0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x4f0, 0x4f0, 0xffffffff, 0x4f0, 0x4f0, 0x5, &(0x7f0000000000), {[{{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff, 0xffffff00, 0xffffffff], [0xff000000, 0xffffffff, 0x0, 0xff], 'pimreg1\x00', 'macsec0\x00', {}, {}, 0x0, 0x6, 0x6, 0x51}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x2, 'system_u:object_r:logrotate_var_lib_t:s0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, [0xffffffff, 0xffffffff, 0x100fffffe, 0xffffff00], [0xff000000, 0xffffff00, 0xffffffff], 'veth1_macvtap\x00', 'virt_wifi0\x00', {0xff}, {0x6e38536220abe70f}, 0x6c, 0x53, 0x2, 0x20}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e24, @gre_key=0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x8}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x67, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x10}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x5, @ipv6=@private1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e20, @gre_key=0x6667}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
getpeername(r0, &(0x7f00000000c0)=@x25, &(0x7f0000000280)=0x80)
r8 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(r8, 0x0, 0x30, 0x0, 0x0)
close(0x3)

0s ago: executing program 3 (id=22064):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000bc0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x105c, r1, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7b}}}}, [@NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x5, 0x1, 0x5, 0x5, 0x9c, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfa, 0x80, 0x800, 0x437, 0x5, 0xff32, 0x6]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5, 0x2]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x2, 0x4, 0x6, 0x7, 0x1, 0x1, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb72, 0xcfc, 0x1, 0x7328, 0x1, 0x4, 0x794, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x6, 0xcc93, 0x7ff, 0x0, 0xcd, 0x7]}}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0xc, 0x12, 0x5, 0xb, 0x6, 0xc, 0x36, 0x60, 0xb, 0x3f, 0x30, 0x5]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0x5}, {0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x4, 0x3}, {0x4, 0x3}, {0x1, 0x8}, {0x6}, {0x7, 0x5}, {0x2, 0x8}, {0x5, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb, 0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x608, 0x8, 0x10, 0x5, 0x401, 0x3, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x7}, {0x2, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x7}, {0x2, 0x3}, {0x1, 0x8}, {0x5, 0xa}, {0x4, 0x1}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x4}, {0x7, 0xa}, {0x6, 0x8}, {0x3, 0x6}, {0x2, 0x3}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x4, 0x5}, {0x0, 0x4}, {0x3}, {0x6, 0x1}, {0x4, 0x9}, {0x2, 0xa}, {0x6}, {0x1, 0x6}, {0x7, 0x9}, {0x4, 0x6}, {0x4, 0xe}, {0x0, 0x9}, {0x6, 0x8}, {0x6, 0x5}, {0x2, 0x1}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0x2}, {0x2, 0x4}, {0x1, 0xa}, {}, {0x7, 0x9}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0x5}, {0x6}, {0x6, 0x5}, {0x3, 0x4}, {0x2, 0x7}, {0x1, 0x1}, {0x4}, {}, {0x6, 0x8}, {0x7, 0x4}, {0x6, 0x1}, {0x4, 0x5}, {0x6, 0x3}, {0x6, 0x4}, {0x4, 0x7}, {0x7, 0x1}, {0x2, 0x3}, {0x4, 0x4}, {0x2, 0x3}, {0x4}, {0x4}, {0x5, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x1, 0x5}, {0x4}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x1, 0x36, 0x30, 0x18, 0x353df6546a0b1110, 0x24, 0x1b, 0x6c, 0x6c, 0x41, 0x2, 0x16, 0x14]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x1, 0x36, 0x12, 0x4, 0xb, 0x36, 0x36, 0x1, 0x1b, 0x30, 0x48, 0x5, 0x3, 0x1d, 0x36, 0x5, 0x16, 0x6c, 0x6c, 0x60, 0x1b, 0x60, 0x6, 0x1b, 0xc, 0x4, 0x9, 0x36, 0xc, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xad, 0x8, 0x1000, 0x2, 0x1, 0x6, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa83, 0x4, 0x1ff, 0x1, 0x0, 0x6, 0x8ba, 0xfff2]}}]}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5d22, 0x7, 0x5, 0x3, 0xc, 0x200, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x6, 0x0, 0x800, 0x3, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x5}, {0x5, 0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x0, 0x6, 0x3, 0x80, 0xf800, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x3, 0x8, 0x5, 0x1000, 0x2, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x6}, {0x0, 0x5}, {0x4, 0x9}, {0x3, 0x1}, {0x4, 0x5}, {0x4, 0x9}, {0x4, 0x14}, {0x6, 0x8}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x7, 0x4}, {0x7, 0x9}, {0x5}, {0x2, 0x6}, {0x3, 0x5}, {0x0, 0xa}, {0x3, 0xa}, {0x0, 0x6}, {0x5, 0x1}, {0x1, 0x3}, {0x6, 0x6}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x3}, {0x0, 0x8}, {0x6, 0x1}, {0x2, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0x1}, {0x0, 0x4}, {0x1, 0x7}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x7}, {0x4, 0x2}, {0x0, 0x1}, {0x3, 0x7}, {0x3, 0x3}, {0x0, 0x5}, {0x0, 0x4}, {0x7, 0x9}, {0x3, 0x4}, {0x5, 0x5}, {0x4, 0x3}, {0x0, 0x4}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x5, 0x1000, 0x2, 0xb, 0x630, 0x7, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xfffd, 0x200, 0x200, 0x9, 0xe, 0x40, 0xfffd]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x6, 0x8}, {0x5, 0xa}, {0x1, 0x3}, {0x7, 0x1}, {0x2, 0x8}, {0x6, 0x9}, {0x2, 0x8}, {0x1, 0x3}, {0x5, 0xa}, {0x5, 0x8}, {0x4, 0x1}, {0x5, 0x8}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x7, 0x9}, {0x4, 0x4}, {0x0, 0x4}, {0x7, 0x7}, {0x2, 0x8}, {0x7, 0x2}, {0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x6, 0x5}, {0x6, 0x1}, {0x0, 0x3}, {0x5}, {0x0, 0x6}, {0x2, 0x1}, {0x4}, {0x5, 0x2}, {0x2, 0x6}, {0x4, 0x4}, {0x7, 0x6}, {0x7, 0x8}, {0x2, 0x2}, {0x1, 0x3}, {0x2, 0x1}, {0x6, 0x7}, {0x6, 0x5}, {0x7, 0x3}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x3}, {0x7, 0x6}, {0x5, 0x4}, {0x1}, {0x1, 0x2}, {0x3, 0x5}, {0x3, 0x2}, {0x6, 0x1}, {0x1, 0x9}, {0x2, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0x348, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x1, 0xc, 0x18, 0x12, 0x60, 0x24, 0x30, 0x4, 0x1b, 0xc, 0x30, 0x2, 0x48, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x401, 0xfffe, 0x0, 0x7149, 0xb3de, 0xaf, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x3, 0xffff, 0xdd5f, 0x0, 0x3, 0x22fb, 0x3]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x8, 0x4, 0x6, 0x0, 0x69, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x60, 0x24, 0x60, 0x3, 0xb, 0x9, 0x24, 0x4, 0x6c, 0x1b, 0x9, 0x18, 0x5, 0x0, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x5, 0x6, 0x8, 0x8000, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x6]}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x73ef, 0x800, 0xa1, 0x76, 0x8eae, 0x5, 0x6]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x6}, {0x1, 0x4}, {0x1, 0x2}, {0x3, 0x5}, {0x3, 0x2}, {0x6, 0x9}, {}, {0x6, 0x7}, {0x1, 0xa}, {0x5, 0xa}, {0x6, 0x3}, {0x7, 0x2}, {0x2}, {0x7, 0x8}, {0x4, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0xa}, {0x4, 0xa}, {0x5, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0x4}, {0x5, 0x5}, {0x1, 0xa}, {0x2}, {0x6, 0x1}, {0x1, 0x9}, {0x1, 0x9}, {0x2, 0x4}, {0x5, 0x8}, {0x7, 0x3}, {0x4, 0x9}, {0x0, 0xa}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0xa}, {0x5, 0x5}, {0x5, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x7}, {0x3, 0x1}, {}, {0x1, 0x8}, {0x7, 0x9}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x9}, {0x1, 0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x2, 0x9}, {0x2, 0x5}, {0x6, 0x9}, {0x5, 0x9}, {0x1, 0x9}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x9, 0x8001, 0x8, 0x81, 0x5, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x3, 0x8, 0x2, 0x2, 0x4, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0xf, 0x2, 0x1, 0x6, 0x9, 0x996]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x57, 0x3, 0x0, 0x2, 0x8, 0x200, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x30, 0x24, 0x44, 0x60, 0x48, 0x1b, 0x60, 0x1, 0x6e, 0x48]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0xffff, 0x3ff, 0x7, 0x1, 0xfff2, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x4, 0x5, 0x6, 0xfffa, 0x5, 0x200]}}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x6, 0x6}, {}, {0x3, 0x9}, {0x0, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x0, 0x2}, {0x4, 0x8}, {0x4}, {0x0, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x1, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0x5}, {0x3, 0x3}, {0x5, 0x7}, {0x3}, {0x5, 0x8}, {0x2, 0x7}, {0x1, 0x7}, {0x5, 0xa}, {}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x58ab, 0xb, 0xaaf4, 0x8000, 0xe1d, 0xc8, 0x7, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x32, 0x3, 0x30, 0x65, 0x6, 0x5, 0xb, 0x3, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x2, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x9}, {0x3, 0x4}, {0x3, 0x6}, {0x6, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x6}, {0x7, 0x8}, {0x4, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0x3, 0x2}, {0x6, 0x1}, {0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0x6}, {0x2, 0x4}, {0x2, 0x3}, {0x1, 0xa}, {0x2, 0x8}, {0x4, 0xa}, {0x7, 0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x7, 0x9}, {0x7}, {0x4, 0x3}, {0x7, 0x3}, {0x5, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {0x4, 0x6}, {0x3, 0x5}]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xea0, 0x9, 0x7, 0x4, 0x2000, 0x3, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb, 0x3f, 0x2, 0x1ff, 0x1, 0x8, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x8, 0x7, 0x0, 0x100, 0x8, 0x2, 0xffd]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x2}, {0x7, 0x6}, {0x0, 0x5}, {0x4, 0x9}, {0x6, 0x6}, {0x2, 0x8}, {0x2, 0x5}, {0x1}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x1, 0xa}, {0x4, 0x4}, {0x3, 0x8}, {0x2, 0xa}, {0x6, 0x4}, {0x5, 0x3}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0x4}, {0x6, 0x1}, {0x3, 0x2}, {0x1, 0x7}, {0x7, 0x5}, {0x6, 0x8}, {0x3, 0x1}, {0x0, 0x3}, {0x5, 0x9}, {}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x3}, {0x1, 0x1}, {0x5, 0xa}, {0x6}, {}, {0x5, 0x1}, {0x4, 0x3}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x2, 0x2}, {0x3, 0x9}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x5}, {0x5, 0xa}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x401, 0x4, 0xfff7, 0x51, 0xe, 0x3, 0x1000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x7, 0x9, 0x81, 0xfff2, 0x1c3, 0x6, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x2b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xbc, 0x294, 0x0, 0xf3, 0x7, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0xad86, 0x2, 0x68, 0xfff0, 0x800]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1}, {0x7}, {0x3, 0x7}, {0x2, 0x5}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x3}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x1}, {0x4}, {0x3}, {0x6, 0x5}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x8}, {0x7, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x2, 0x3}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1736, 0x3, 0x7, 0x6, 0x4, 0xa66a, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x7}, {0x6, 0x1}, {0x2}, {0x7, 0x2}, {0x5, 0x8}, {0x4, 0xa}, {0x4, 0x8}, {0x3, 0x5}, {0x2, 0x3}, {0x4, 0x8}, {0x6, 0x8}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x1}, {0x7, 0x3}, {0x2, 0x7}, {0x0, 0x8}, {0x3, 0x7}, {0x6, 0x1}, {0x7, 0x8}, {0x5, 0x4}, {0x3, 0xa}, {0x7, 0xa}, {0x3, 0x5}, {0x4, 0x6}, {0x6, 0x8}, {0x6, 0x3}, {0x6, 0x8}, {0x7, 0x8}, {0x7, 0x6}, {0x4, 0xa}, {0x4, 0x4}, {0x2, 0xa}, {0x0, 0xa}, {0x0, 0x7}, {0x0, 0x9}, {0x1, 0xa}, {0x6, 0x1}, {0x0, 0x8}, {0x2, 0x9}, {0x7, 0x5}, {0x5, 0x4}, {0x5, 0x8}, {0x4, 0x8}, {0x1, 0x5}, {0x4}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x4}, {0x4, 0x8}, {0x0, 0x7}, {0x2, 0x7}, {0x5, 0xa}, {}, {0x3, 0x6}, {0x7}, {0x2, 0x5}, {0x7, 0x5}, {0x0, 0x1}, {0x2, 0xa}, {0x6, 0x4}, {0x5, 0x3}, {0x4}, {0x5, 0x2}, {0x4, 0x2}, {0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x5, 0x9}, {0x6}, {0x5, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x3, 0x4, 0x2, 0x7, 0x7, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x8, 0x5, 0x6, 0xf800, 0xf5, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x60, 0x6, 0x60, 0x60, 0xb, 0x9, 0x6c, 0x18, 0x1b, 0x16, 0x1e, 0x60]}]}, @NL80211_BAND_60GHZ={0x130, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x12, 0x3, 0x48]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0xa}, {0x2, 0xa}, {0x2}, {0x0, 0x3}, {0x2, 0xa}, {0x7, 0x8}, {0x3, 0x5}, {0x2, 0x1}, {0x0, 0x2}, {0x5, 0x9}, {0x2, 0x9}, {0x1, 0x6}, {0x7, 0x7}, {0x5, 0x4}, {0x6, 0x8}, {0x6, 0x3}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x4}, {0x3, 0x3}, {0x2}, {0x5}, {0x3, 0x2}, {0x6, 0x5}, {0x6, 0x4}, {0x6, 0xa}, {0x4}, {0x4, 0x7}, {0x6, 0x6}, {0x3}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x4, 0x7}, {0x0, 0x7}, {0x5, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x3}, {0x4, 0x4}, {0x1}, {0x1, 0x2}, {0x3, 0x5}, {0x6, 0x3}, {0x0, 0x1}, {0x6, 0x5}, {0x1, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xce, 0x6, 0x8, 0x3, 0x6, 0x101, 0x9, 0x4]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x3}, {0x2, 0x4}, {0x0, 0x1}, {0x3, 0x9}, {0x7, 0x4}, {0x1}, {0x0, 0x8}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x5}, {0x6, 0x3}, {0x7, 0x5}, {0x6, 0x5}, {0x7, 0x6}, {0x5, 0x1}, {0x5, 0x7}, {0x6, 0x1}, {0x1, 0x9}, {0x5, 0x1}, {0x0, 0x9}, {0x4, 0x1}, {0x2, 0x9}, {0x6, 0x7}, {0x2, 0x1}, {0x3, 0x6}, {0x1, 0x4}, {0x7, 0x8}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0xa}, {0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x5}, {0x5, 0x5}, {0x3}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0xa}, {0x4, 0x2}, {}, {0x7, 0x6}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0x8}, {0x2, 0x7}, {0x6, 0x4}, {0x3, 0x5}, {0x5, 0x3}, {0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6, 0x1}, {0x4}, {0x2, 0x3}, {0x2, 0x2}, {0x7}, {0x3, 0x5}, {0x5}, {0x0, 0x3}, {0x5, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0x8}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0xa}, {0x7, 0x4}, {0x1, 0x1}, {0x7, 0x3}, {0x0, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7}, {0x0, 0x2}, {0x3, 0x5}, {0x4, 0x2}, {0x0, 0x1}, {0x6, 0x8}, {0x4, 0x2}, {0x4, 0x9}, {0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0xa}, {0x4, 0x3}, {0x6, 0x7}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x8}, {0x4, 0x7}, {0x6, 0x6}, {0x5, 0x4}, {0x5, 0x9}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x4, 0x8}, {0x0, 0x9}, {0x7, 0x5}, {0x4, 0x4}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x1}, {0x6}, {0x4, 0x3}, {0x4, 0x2}, {0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x6, 0x2}, {0x6, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0x24, 0x3, 0x6c, 0x1, 0x3, 0x18, 0x2, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x64f8, 0x7ff, 0x4e38, 0xfff8, 0x2, 0x10]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xd, 0x6, 0xf, 0x9, 0x5, 0x6, 0x200]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x5}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x5, 0x6}, {0x0, 0x8}, {0x7, 0x3}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x1}, {0x5, 0x3}, {0x6, 0x4}, {0x0, 0x3}, {0x6, 0x8}, {0x1, 0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x4}, {}, {0x1, 0x3}, {0x6, 0x5}, {0x0, 0x7}, {0x2, 0x6}, {0x5, 0x4}, {0x2, 0x6}, {0x5, 0xa}, {0x2, 0x5}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x6}, {0x3, 0x4}, {0x3, 0x8}, {0x2, 0x1}, {0x5, 0x6}, {0x2, 0x3}, {0x6, 0x7}, {0x7, 0x8}, {}, {0x7, 0x3}, {0x6, 0x8}, {0x2, 0x7}, {0x6, 0x1}, {0x6, 0x8}, {0x5}, {0x5, 0x7}, {0x4, 0x1}, {0x1, 0xa}, {0x7, 0x6}, {0x2, 0x6}, {0x5, 0x6}, {0x1, 0xa}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0x4}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x7, 0x6, 0xfff, 0xc00, 0x25, 0x724b]}}]}]}, @NL80211_ATTR_TX_RATES={0x28, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0xc, 0x1, 0x30, 0x30, 0x60, 0x1, 0x2, 0x60, 0x3, 0x2, 0x3, 0xb, 0x3, 0x16, 0x4, 0x6c, 0x60, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x17c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x1, 0x2, 0x60]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x24, 0xc, 0x1, 0x24]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x5, 0x9}, {0x1, 0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x0, 0x6}, {0x3, 0xa}, {0x7, 0x8}, {0x7}, {0x0, 0x5}, {0x3}, {0x4, 0x3}, {0x6, 0x1}, {0x0, 0x8}, {0x2, 0x7}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x5, 0x8}, {0x7, 0x2}, {0x0, 0x1}, {0x1, 0x4}, {0x6}, {0x7, 0x6}, {0x5, 0x4}, {0x5, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x5, 0x1}, {0x3, 0x9}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0x1}, {0x7, 0xa}, {0x5, 0x6}, {0x1, 0x5}, {0x6, 0x4}, {0x0, 0xa}, {0x3, 0xa}, {0x1}, {0x5, 0x1}, {0x5, 0x5}, {0x5, 0x9}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x3}, {0x4, 0x2}, {0x7, 0x3}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x5}, {0x2}, {0x2, 0x4}, {0x3, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x7, 0x5}, {0x1, 0x8}, {0x0, 0xc}, {0x7, 0x7}, {0x7}, {0x0, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x2}, {0x4, 0x3}, {0x2, 0x7}, {0x2, 0x1}, {0x4, 0x8}, {0x0, 0x7}, {0x6, 0x8}, {0x1, 0x2}, {0x0, 0x7}, {0x4, 0x3}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x5}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x4}]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x9, 0x42d, 0x401, 0x71b2, 0x13d9, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2284, 0x7f, 0x5, 0x3ff, 0x3, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x30, 0xc, 0x4, 0x30, 0xb, 0x2, 0x7e, 0x36, 0x37, 0xb, 0x24, 0x1, 0x36]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x16, 0x3, 0x5, 0x19, 0x65, 0x5, 0x60, 0x48, 0x2, 0x36, 0x18, 0xb, 0x1b, 0x1b, 0x6]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0x1}, {0x1}, {0x0, 0xa}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x6}, {0x5, 0x8}, {0x7, 0x8}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x4}, {0x7, 0x1}, {0x1}, {0x4, 0x8}, {0x2, 0x8}, {0x3, 0xa}, {0x1, 0xa}, {0x3, 0x8}, {0x6, 0x2}, {0x4, 0x2}, {0x7, 0x4}, {0x7, 0x7}, {0x7}, {0x6, 0x5}, {0x1, 0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x4, 0x9}, {0x0, 0x2}, {0x0, 0x1}, {0x3}, {0x4, 0xa}, {0x4}, {0x0, 0x4}, {0x7, 0x6}, {0x3, 0x9}, {0x4, 0x1}, {0x4, 0x8}, {}, {0x2, 0xa}, {0x5, 0x5}, {0x4, 0x9}, {0x6, 0xa}, {0x6, 0x9}, {0x7, 0x6}, {0x7, 0x8}, {0x1}, {0x5, 0x6}, {0x3, 0x9}, {0x1}, {0x6, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x5, 0x2, 0x400, 0xd11, 0x0, 0x8, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x114, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0xc70, 0x80, 0x6, 0x3, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x7, 0x4f2, 0x40, 0x800, 0xfff, 0x9, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x1, 0x7, 0x40, 0xfffb, 0x2, 0x7b0]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x3}, {0x2, 0x3}, {0x4, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x6, 0x8}, {0x3, 0x2}, {0x0, 0x7}, {0x1, 0x9}, {0x3}, {0x4, 0x5}, {0x5, 0xa}, {0x1, 0x9}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x3}, {0x4, 0x6}, {0x6, 0x6}, {0x2, 0x9}, {0x3, 0x7}, {0x5, 0xa}, {0x3, 0x9}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x3}, {0x1, 0x8}, {0x5, 0x5}, {0x2, 0x8}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x7}, {0x2}, {0x7, 0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x6}, {0x5, 0x5}, {0x0, 0x1}, {0x5, 0x9}, {0x2}, {0x1, 0x3}, {}, {0x5, 0x7}, {0x0, 0x8}, {0x4, 0x7}, {0x6, 0xa}, {0x1, 0x6}, {0x7}, {0x0, 0x4}, {0x7, 0x1}, {0x5, 0x9}, {0x3, 0x7}, {0x7, 0x1}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x2, 0x4}, {0x6, 0x2}, {0x2, 0x9}, {}, {0x1, 0x8}, {0x1, 0xa}, {0x2, 0x2}, {0x7, 0x5}, {0x6, 0x7}, {0x7, 0x2}, {0x0, 0x5}, {0x0, 0x8}, {0x4, 0x7}, {0x6}, {0x6, 0x4}, {0x4, 0x5}, {0x1, 0x1}, {0x4, 0x5}, {0x2, 0x1}, {0x0, 0xa}, {0x4, 0x7}, {0x5, 0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x6}, {0x4, 0x6}, {0x6, 0xa}, {0x7, 0x5}, {0x3, 0xa}, {0x2}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0x2}, {0x1, 0x5}, {0x6, 0x7}, {0x5, 0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x0, 0x4}, {0x5, 0x9}, {0x7, 0x7}, {0x0, 0x7}, {0x7, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x101, 0x81, 0x5, 0x1, 0x7, 0x2, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0xfffa, 0x5, 0x7f, 0xfff, 0x9, 0xfff8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x419, 0x1ff, 0x0, 0x2, 0x5, 0xb25c, 0xad90]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1b6, 0x6ccb, 0x8, 0x101, 0x6, 0x6, 0x800, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x240, 0x1d6, 0x2, 0x9bb5, 0x9, 0xc, 0x3, 0xc9b]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x6, 0x6}, {0x4, 0x1}, {0x1, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x1, 0x9, 0x507, 0x2, 0x0, 0x101, 0xfff9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x5}, {0x4, 0x9}, {0x7, 0x2}, {0x7, 0x8}, {0x6, 0x5}, {0x6, 0x4}, {0x3, 0x5}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x4, 0x2}, {0x0, 0x6}, {0x5, 0x1}, {0x5, 0x4}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x4}, {0x3, 0x6}, {0x3, 0x6}, {0x7, 0xa}, {0x1, 0x9}, {0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0xfffc, 0x3, 0x93, 0x5, 0x4, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x50, 0x8, 0x4, 0x9, 0x5, 0x2c]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x24, 0x36, 0x48, 0x1b, 0x2, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x18, 0x4, 0xc, 0x2, 0x48, 0x48, 0x9, 0x9, 0x18, 0x6, 0x33, 0x6c, 0x18, 0x1b, 0xb, 0x6c, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0x6}, {0x6, 0x5}, {0x0, 0x2}, {0x4}, {0x0, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x1, 0xfe, 0xffcd, 0x9, 0x5, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x9}, {0x5, 0x9}, {0x4, 0x2}, {0x6, 0x5}, {0x2, 0x7}, {0x4, 0x4}, {0x6, 0x9}, {0x4}, {0x2, 0x3}, {0x2, 0x9}, {0x5, 0x7}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x6}, {0x7, 0x6}, {0x0, 0x8}, {0x5, 0x1}, {0x6, 0xa}, {0x1, 0x4}, {0x0, 0x6}, {0x7, 0x4}, {0x4, 0x9}, {0x0, 0x3}, {0x2, 0x5}, {0x5, 0x8}, {0x7, 0x2}, {0x5, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x1, 0x6}, {0x2, 0x5}, {0x7, 0xa}, {0x5, 0x3}, {0x2, 0xa}, {0x1, 0x4}, {0x6, 0x4}, {0x5, 0x3}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x8}, {0x5, 0x7}, {0x5, 0x5}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0x8}, {0x3, 0x1}, {0x6, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x6, 0x4}, {0x5, 0x6}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x2}, {0x6, 0x4}, {0x0, 0x3}, {0x3, 0xc}, {0x1, 0x2}, {0x3, 0x2}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x7, 0x5}, {0x2, 0x3}, {0x2, 0x4}, {0x5, 0x5}, {0x1, 0x2}, {0x4, 0x8}, {0x7, 0x9}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x7}, {0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x5, 0xa}, {0x6, 0x7}, {0x1, 0x7}, {0x1, 0x5}, {0x1, 0x3}, {0x2, 0x6}, {0x4, 0x6}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x4, 0x4, 0x4, 0x1, 0x8, 0xf, 0x1]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1ff, 0x6bc7, 0x0, 0x4, 0x1, 0x5, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x8000, 0x7, 0xc, 0x5, 0x0, 0xfff]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x1c87, 0x5, 0x7d, 0x9, 0x7, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x1, 0xfffc, 0x48, 0x1, 0x5, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x4d2, 0x4, 0x7ff, 0x7, 0x6, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x4}, {0x0, 0x7}, {0x1}, {0x1, 0xa}, {0x4, 0xa}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x1}, {0x7, 0x2}, {0x5, 0x6}, {0x5, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x7, 0x7}, {0x4, 0x3}, {0x6, 0x3}, {0x1, 0x7}, {0x3}, {0x2, 0x3}, {0x0, 0x2}, {0x3, 0xa}, {0x7, 0xa}, {0x0, 0x5}, {0x0, 0x8}, {0x2, 0x8}, {0x4, 0x3}, {0x3, 0x8}, {0x6, 0x9}, {0x4, 0x2}, {0x6, 0x5}, {0x1, 0x2}, {0x1, 0x2}, {0x2, 0x6}, {0x2, 0x4}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0x1}, {0x3, 0xa}, {0x4, 0x6}, {0x3}, {}, {0x3, 0x3}, {0x3, 0x5}, {0x4, 0x3}, {0x2, 0x7}, {0x5, 0x6}, {0x2, 0x7}, {0x2, 0x9}, {0x4, 0x6}, {0x5, 0x8}, {0x2, 0xa}, {0x1, 0x6}, {0x1, 0x5}, {0x2, 0x1}, {0x5, 0x7}, {0x6, 0x5}, {0x6}, {0x2, 0x8}, {0x0, 0x1}, {0x3, 0x7}, {0x6, 0x8}, {0x0, 0xa}, {0x6, 0xa}, {0x0, 0x7}, {0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x1b, 0x5, 0x12, 0x1, 0x18, 0x6, 0x60, 0x6, 0x9, 0x18, 0xaae0a620700ad4b9, 0x3, 0x1, 0x16, 0x36, 0x60, 0xb, 0xc, 0xc762b48ea65ec876, 0xb, 0x60]}]}]}, @NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3d, 0x101, 0xc3, 0x8001, 0xe, 0x7f9, 0x8]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x5, 0xfff8, 0x4015, 0x8, 0x3ff, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x18, 0x28, 0x3, 0x6c, 0xb, 0x6c, 0x6c, 0x5, 0x16, 0xda0ee91a1acc2c29, 0x2, 0x0, 0xb, 0xc, 0x1b, 0x18, 0x12, 0xb, 0x4, 0x3, 0x48]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x1b]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0xfff7, 0x1, 0x8, 0xfffc, 0x6, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0xf4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x5, 0x2565, 0xfff9, 0xf0d, 0x3, 0x65, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x5, 0x7, 0x1, 0x1, 0x711f, 0x2, 0xed4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7f, 0x870, 0x7, 0x7, 0x2, 0x4, 0xad36]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x60, 0x18, 0x30, 0x60, 0x9, 0xb, 0x4d, 0x5, 0x9, 0x4, 0x30, 0x6]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x18, 0xb, 0x1, 0x0, 0x5, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x100, 0x2c, 0x800, 0xfff9, 0x4824, 0x81, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x3, 0x1, 0x5, 0x0, 0x3ff, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x105c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x94, 0x30, 0xb, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x1, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_ACTION={0x6, 0x3, 0x1b}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_ZONE={0x6, 0x4, 0x1ff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40014)

kernel console output (not intermixed with test programs):

4] dummy0: entered allmulticast mode
[  706.207179][T13284] dummy0: left allmulticast mode
[  706.209145][T13284] dummy0: left promiscuous mode
[  706.318449][T13286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17278'.
[  706.366199][T13286] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  706.369407][T11586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  706.373221][T11586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  706.376353][T11586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  706.379401][T11586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  706.383033][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17278'.
[  706.388706][T13286] bond3 (unregistering): (slave geneve3): Releasing backup interface
[  706.395568][T13286] bond3 (unregistering): Released all slaves
[  706.413607][T11586] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  706.417202][T11586] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  706.420845][T11586] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  706.424715][T11586] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  707.175264][T13339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17300'.
[  707.176714][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  707.178925][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17300'.
[  707.183752][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  707.226312][T13343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17301'.
[  707.672434][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  707.692012][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  707.890968][T13383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  707.927729][T13385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17320'.
[  709.970393][T13431] netlink: 'syz.3.17339': attribute type 21 has an invalid length.
[  710.129556][T13442] netlink: 'syz.2.17342': attribute type 1 has an invalid length.
[  710.290506][T13459] ip6_vti0 speed is unknown, defaulting to 1000
[  710.432868][T13459] wg1 speed is unknown, defaulting to 1000
[  710.436118][T13459] xfrm0 speed is unknown, defaulting to 1000
[  710.534260][T13474] netlink: 108 bytes leftover after parsing attributes in process `syz.3.17348'.
[  710.723954][T13487] netlink: 'syz.4.17355': attribute type 5 has an invalid length.
[  710.885057][T13500] syzkaller0: entered promiscuous mode
[  710.887205][T13500] syzkaller0: entered allmulticast mode
[  711.276320][T13527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  711.386108][T13527] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  711.399688][T13527] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17374'.
[  711.503099][T13540] siw: device registration error -23
[  711.789534][T11586] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  711.793072][T11586] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  711.796399][T11586] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  711.799432][T11586] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  712.058005][T13581] veth22: entered promiscuous mode
[  712.062869][T13581] veth22: entered allmulticast mode
[  712.144055][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17401'.
[  712.156888][T13589] sit0: left promiscuous mode
[  712.166541][T13589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  712.192077][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  712.249577][T13600] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  712.293519][T13602] netlink: 'syz.3.17407': attribute type 1 has an invalid length.
[  712.478260][T13617] netlink: 'syz.4.17414': attribute type 5 has an invalid length.
[  712.716857][T13636] bond11 (unregistering): Released all slaves
[  713.101955][T13669] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  713.102265][ T5909] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  713.137282][T13671] 8021q: adding VLAN 0 to HW filter on device bond0
[  713.149123][T13671] bond0: (slave macvlan2): Opening slave failed
[  713.195555][T13672] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  713.291378][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17441'.
[  713.316814][T13686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17442'.
[  713.327365][T13686] team1: entered promiscuous mode
[  713.328979][T13686] team1: entered allmulticast mode
[  713.569733][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17454'.
[  713.574038][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17454'.
[  713.841719][T13722] tun0: tun_chr_ioctl cmd 1074025675
[  713.843469][T13722] tun0: persist enabled
[  713.845022][T13722] tun0: tun_chr_ioctl cmd 1074025675
[  713.846760][T13722] tun0: persist disabled
[  713.999961][T13736] bridge26: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  714.012718][T13736] mac80211_hwsim hwsim25 wlan0: Caught tx_queue_len zero misconfig
[  714.064353][T13736] batadv_slave_0: left allmulticast mode
[  714.067305][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17466'.
[  714.072048][T13736] netlink: 428 bytes leftover after parsing attributes in process `syz.3.17466'.
[  714.075001][T13736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17466'.
[  715.305263][T13777] ip6_vti0 speed is unknown, defaulting to 1000
[  715.376953][T13777] wg1 speed is unknown, defaulting to 1000
[  715.380488][T13777] xfrm0 speed is unknown, defaulting to 1000
[  715.498378][T13785] netlink: 'syz.4.17486': attribute type 9 has an invalid length.
[  715.501040][T13785] netlink: 'syz.4.17486': attribute type 6 has an invalid length.
[  715.672245][T13799] netlink: 'syz.4.17493': attribute type 89 has an invalid length.
[  715.747758][T13807] netlink: 'syz.4.17497': attribute type 1 has an invalid length.
[  715.750922][T13807] netlink: 'syz.4.17497': attribute type 3 has an invalid length.
[  715.759399][T13807] netlink: 224 bytes leftover after parsing attributes in process `syz.4.17497'.
[  715.922371][T13817] nbd0: detected capacity change from 0 to 127
[  715.926684][   T58] block nbd0: Receive control failed (result -32)
[  716.059921][T13827] ip6_vti0 speed is unknown, defaulting to 1000
[  716.159519][T13841] netlink: 68 bytes leftover after parsing attributes in process `syz.4.17510'.
[  716.197569][T13827] wg1 speed is unknown, defaulting to 1000
[  716.197629][T13835] ip6_vti0 speed is unknown, defaulting to 1000
[  716.200798][T13827] xfrm0 speed is unknown, defaulting to 1000
[  716.395320][T13835] wg1 speed is unknown, defaulting to 1000
[  716.413124][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17516'.
[  716.418076][T13852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17516'.
[  716.431360][T13835] xfrm0 speed is unknown, defaulting to 1000
[  716.439411][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17517'.
[  716.670485][T13865] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4)
[  716.714537][T13867] netlink: 'syz.3.17523': attribute type 15 has an invalid length.
[  716.884689][T13872] ip6_vti0 speed is unknown, defaulting to 1000
[  716.987333][T13872] wg1 speed is unknown, defaulting to 1000
[  716.993474][T13872] xfrm0 speed is unknown, defaulting to 1000
[  717.856076][ T5226] Bluetooth: hci0: link tx timeout
[  717.858986][ T5226] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  718.115616][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17552'.
[  718.125060][T13935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17553'.
[  718.319437][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17560'.
[  718.349260][T13957] sctp: [Deprecated]: syz.2.17564 (pid 13957) Use of int in max_burst socket option.
[  718.349260][T13957] Use struct sctp_assoc_value instead
[  718.477381][T13975] netlink: 6 bytes leftover after parsing attributes in process `syz.4.17572'.
[  718.941966][ T5226] Bluetooth: hci0: command 0x0401 tx timeout
[  719.437770][T14011] netlink: 3 bytes leftover after parsing attributes in process `syz.2.17587'.
[  720.266993][T14049] netlink: 'syz.3.17604': attribute type 31 has an invalid length.
[  720.312804][T14051] ip6_vti0 speed is unknown, defaulting to 1000
[  720.433729][T14051] wg1 speed is unknown, defaulting to 1000
[  720.437711][T14051] xfrm0 speed is unknown, defaulting to 1000
[  720.550320][T14059] sch_tbf: burst 4398 is lower than device lo mtu (61420) !
[  720.660885][T30595] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  720.666180][T30595] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  720.676275][T30595] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  720.687741][T30595] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  720.856733][T14069] bpq0: entered promiscuous mode
[  720.858305][T14069] bpq0: entered allmulticast mode
[  720.932066][T14082] __nla_validate_parse: 3 callbacks suppressed
[  720.932078][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17617'.
[  721.034293][ T5226] Bluetooth: hci0: command 0x0401 tx timeout
[  721.147600][T14098] netlink: 'syz.3.17625': attribute type 2 has an invalid length.
[  721.151952][T14098] netlink: 'syz.3.17625': attribute type 2 has an invalid length.
[  721.209612][T30595] tipc: Subscription rejected, illegal request
[  721.252394][T14105] netlink: 'syz.3.17628': attribute type 1 has an invalid length.
[  721.328878][T14110] ip6_vti0 speed is unknown, defaulting to 1000
[  721.478994][T14110] wg1 speed is unknown, defaulting to 1000
[  721.484955][T14110] xfrm0 speed is unknown, defaulting to 1000
[  722.666360][T14153] netlink: 'syz.3.17646': attribute type 3 has an invalid length.
[  722.669084][T14153] netlink: 'syz.3.17646': attribute type 3 has an invalid length.
[  724.048950][T14182] netlink: 'syz.4.17659': attribute type 46 has an invalid length.
[  724.177731][T14201] netlink: 'syz.4.17668': attribute type 4 has an invalid length.
[  724.210554][T14204] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.17670'.
[  724.249211][T14206] netlink: 68 bytes leftover after parsing attributes in process `syz.2.17672'.
[  724.269259][T14206] netlink: 148 bytes leftover after parsing attributes in process `syz.2.17672'.
[  724.272652][T14206] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  724.314300][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17675'.
[  724.322283][T14212] syzkaller0: entered promiscuous mode
[  724.324601][T14212] syzkaller0: entered allmulticast mode
[  724.346456][T14212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  724.350097][T14211] tipc: Resetting bearer <eth:syzkaller0>
[  724.374701][T14211] tipc: Disabling bearer <eth:syzkaller0>
[  724.695823][T14250] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17691'.
[  725.129111][T14277] tap0: tun_chr_ioctl cmd 1074025677
[  725.130963][T14277] tap0: linktype set to 1
[  725.414015][T14293] netlink: 616 bytes leftover after parsing attributes in process `syz.2.17711'.
[  725.558599][T14303] xt_TPROXY: Can be used only with -p tcp or -p udp
[  725.850291][T14324] hsr0: left promiscuous mode
[  725.901233][T14325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17726'.
[  726.498296][T14324] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode
[  726.501148][T14324] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode
[  726.506082][T14324] wireguard3: left promiscuous mode
[  726.509882][T14324] wireguard3: left allmulticast mode
[  726.511905][T14324] ipvlan0: left promiscuous mode
[  726.513567][T14324] ipvlan0: left allmulticast mode
[  726.515256][T14324] geneve1: left allmulticast mode
[  726.517223][T14324] veth22: left promiscuous mode
[  726.518882][T14324] veth22: left allmulticast mode
[  727.021873][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  727.538776][T14361] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  727.544659][T14361] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode
[  727.547258][T14361] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode
[  727.583141][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17746'.
[  727.587652][T14369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17746'.
[  727.883939][T14392] ip6_vti0 speed is unknown, defaulting to 1000
[  727.978930][T14392] wg1 speed is unknown, defaulting to 1000
[  727.983005][T14392] xfrm0 speed is unknown, defaulting to 1000
[  728.183524][T14420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17767'.
[  728.333135][T14426] bond11: entered promiscuous mode
[  728.336160][T14426] bond11: entered allmulticast mode
[  728.338148][T14426] 8021q: adding VLAN 0 to HW filter on device bond11
[  728.636084][T14449] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  728.675211][T14453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17781'.
[  728.728414][T14459] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  728.767156][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17786'.
[  728.777119][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17786'.
[  728.780388][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17786'.
[  728.784544][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17786'.
[  728.787668][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17786'.
[  728.790838][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17786'.
[  728.795878][T14464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  728.822048][T15963] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  729.662653][T15963] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  730.109817][T14510] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  730.473472][T14551] syzkaller0: entered promiscuous mode
[  730.475754][T14551] syzkaller0: entered allmulticast mode
[  732.302165][T14668] netlink: 'syz.2.17875': attribute type 1 has an invalid length.
[  732.689750][T14694] __nla_validate_parse: 13 callbacks suppressed
[  732.689766][T14694] netlink: 1100 bytes leftover after parsing attributes in process `syz.2.17886'.
[  733.143302][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17903'.
[  733.567374][T14780] batadv_slave_1: entered promiscuous mode
[  733.570850][T14778] batadv_slave_1: left promiscuous mode
[  733.975565][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17949'.
[  734.023571][T14840] xt_TCPMSS: Only works on TCP SYN packets
[  734.186195][T14858] netlink: 220 bytes leftover after parsing attributes in process `syz.3.17961'.
[  734.189427][T14858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17961'.
[  734.213609][T14860] netlink: 'syz.3.17962': attribute type 1 has an invalid length.
[  734.296467][T14864] ip6_vti0 speed is unknown, defaulting to 1000
[  734.445846][T14864] wg1 speed is unknown, defaulting to 1000
[  734.451055][T14864] xfrm0 speed is unknown, defaulting to 1000
[  734.564955][T14881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  734.567745][T14881] syzkaller0: entered promiscuous mode
[  734.570517][T14881] syzkaller0: entered allmulticast mode
[  734.605108][T14881] tipc: Resetting bearer <eth:syzkaller0>
[  734.608861][T14880] tipc: Resetting bearer <eth:syzkaller0>
[  734.634243][T14880] tipc: Disabling bearer <eth:syzkaller0>
[  734.897913][T14894] Cannot find del_set index 4 as target
[  734.989535][T14892] block nbd3: server does not support multiple connections per device.
[  735.000175][T14892] block nbd3: shutting down sockets
[  735.093912][T14904] netlink: 'syz.2.17982': attribute type 6 has an invalid length.
[  735.589290][T14943] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17998'.
[  736.130339][T14956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18003'.
[  736.678083][T14989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  736.680613][T14989] syzkaller0: entered promiscuous mode
[  736.683076][T14989] syzkaller0: entered allmulticast mode
[  736.699263][T14989] tipc: Resetting bearer <eth:syzkaller0>
[  736.703958][T14988] tipc: Resetting bearer <eth:syzkaller0>
[  736.716245][T14988] tipc: Disabling bearer <eth:syzkaller0>
[  737.030228][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18031'.
[  737.062300][T15018] macvtap1: entered promiscuous mode
[  737.063951][T15018] syz_tun: entered promiscuous mode
[  737.065647][T15018] macvtap1: entered allmulticast mode
[  737.099733][T15018] syz_tun: left promiscuous mode
[  737.149942][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18035'.
[  737.636709][T15074] pim6reg: entered allmulticast mode
[  737.696619][T15077] pim6reg: left allmulticast mode
[  737.748826][T15078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  738.084058][T15078] tipc: Resetting bearer <eth:syzkaller0>
[  738.404684][   T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  738.409207][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  738.417150][   T13] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  738.420683][   T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  738.424517][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  738.430145][   T13] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  738.434676][   T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  738.438359][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  738.452894][   T13] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  738.456174][   T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  738.459462][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  738.465314][   T13] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  738.518475][T15092] netlink: 'syz.2.18065': attribute type 39 has an invalid length.
[  738.562566][T15092] hsr_slave_1 (unregistering): left promiscuous mode
[  738.604294][T15097] netpci0: tun_chr_ioctl cmd 1074025677
[  738.606683][T15097] netpci0: linktype set to 6
[  738.608829][T15095] ip6_vti0 speed is unknown, defaulting to 1000
[  738.758103][T15098] ip6_vti0 speed is unknown, defaulting to 1000
[  738.761523][T15095] wg1 speed is unknown, defaulting to 1000
[  738.770019][T15095] xfrm0 speed is unknown, defaulting to 1000
[  739.104940][T15098] wg1 speed is unknown, defaulting to 1000
[  739.124787][T15098] xfrm0 speed is unknown, defaulting to 1000
[  739.681848][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18080'.
[  741.091555][T15170] ip6_vti0 speed is unknown, defaulting to 1000
[  741.226217][T15170] wg1 speed is unknown, defaulting to 1000
[  741.274589][T15170] xfrm0 speed is unknown, defaulting to 1000
[  742.065110][T15186] ip6_vti0 speed is unknown, defaulting to 1000
[  742.237706][T15186] wg1 speed is unknown, defaulting to 1000
[  742.241405][T15186] xfrm0 speed is unknown, defaulting to 1000
[  742.511158][T15230] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.18122'.
[  742.855470][T15257] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  743.035577][T15271] netlink: 'syz.4.18141': attribute type 21 has an invalid length.
[  743.044167][T15271] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18141'.
[  743.223122][T15292] netlink: 'syz.2.18151': attribute type 15 has an invalid length.
[  743.285329][T15297] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  744.149714][T15342] macsec1: entered promiscuous mode
[  744.159477][T15342] mac80211_hwsim hwsim51 wlan1: entered promiscuous mode
[  744.959264][T15423] netlink: 'syz.2.18209': attribute type 13 has an invalid length.
[  744.966915][T15423] gretap0: refused to change device tx_queue_len
[  744.969622][T15423] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  745.179981][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18217'.
[  745.262665][ T5226] Bluetooth: hci0: command 0x0401 tx timeout
[  745.759136][T15480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18233'.
[  745.883990][T15489] ip6_vti0 speed is unknown, defaulting to 1000
[  745.922654][T15492] netlink: 'syz.4.18237': attribute type 8 has an invalid length.
[  745.980818][T15498] pim6reg1: entered promiscuous mode
[  745.986172][T15498] pim6reg1: entered allmulticast mode
[  746.025292][T15489] wg1 speed is unknown, defaulting to 1000
[  746.028902][T15489] xfrm0 speed is unknown, defaulting to 1000
[  746.868872][T15518] syz.3.18249 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  746.892138][T15518] CPU: 0 UID: 0 PID: 15518 Comm: syz.3.18249 Not tainted syzkaller #0 PREEMPT(full) 
[  746.892157][T15518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  746.892162][T15518] Call Trace:
[  746.892166][T15518]  <TASK>
[  746.892170][T15518]  dump_stack_lvl+0xe8/0x150
[  746.892185][T15518]  dump_header+0xd3/0x4c0
[  746.892195][T15518]  oom_kill_process+0x263/0x800
[  746.892206][T15518]  out_of_memory+0xe55/0x11f0
[  746.892219][T15518]  ? __pfx___mutex_lock+0x10/0x10
[  746.892232][T15518]  ? __pfx_out_of_memory+0x10/0x10
[  746.892248][T15518]  mem_cgroup_out_of_memory+0x158/0x270
[  746.892260][T15518]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  746.892274][T15518]  ? _raw_spin_unlock+0x28/0x50
[  746.892281][T15518]  ? memcg1_oom_prepare+0x37e/0x450
[  746.892289][T15518]  try_charge_memcg+0xdfb/0x12a0
[  746.892304][T15518]  ? __pfx_try_charge_memcg+0x10/0x10
[  746.892314][T15518]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  746.892327][T15518]  charge_memcg+0x9f/0x180
[  746.892335][T15518]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  746.892342][T15518]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  746.892351][T15518]  __read_swap_cache_async+0x212/0x480
[  746.892366][T15518]  swap_cluster_readahead+0x358/0x680
[  746.892378][T15518]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  746.892394][T15518]  ? get_vma_policy+0x27b/0x3c0
[  746.892405][T15518]  swapin_readahead+0x196/0xc50
[  746.892416][T15518]  ? swap_table_get+0x1e/0x260
[  746.892428][T15518]  ? __pfx_swapin_readahead+0x10/0x10
[  746.892439][T15518]  ? swap_table_get+0x1e/0x260
[  746.892448][T15518]  ? swap_table_get+0x1e/0x260
[  746.892457][T15518]  ? swap_table_get+0x1e/0x260
[  746.892479][T15518]  ? swap_table_get+0x216/0x260
[  746.892489][T15518]  ? swap_cache_get_folio+0x513/0x520
[  746.892502][T15518]  do_swap_page+0x4d4/0x5e20
[  746.892518][T15518]  ? ___pte_offset_map+0x29/0x240
[  746.892532][T15518]  ? do_swap_page+0x192/0x5e20
[  746.892541][T15518]  ? __pfx_do_swap_page+0x10/0x10
[  746.892552][T15518]  ? __lock_acquire+0x6b5/0x2cf0
[  746.892560][T15518]  ? __pfx_default_wake_function+0x10/0x10
[  746.892599][T15518]  ? ___pte_offset_map+0x1ae/0x240
[  746.892612][T15518]  ? pte_offset_map_rw_nolock+0xea/0x160
[  746.892624][T15518]  handle_mm_fault+0x12d2/0x32a0
[  746.892640][T15518]  ? handle_mm_fault+0xee/0x32a0
[  746.892654][T15518]  ? __pfx_handle_mm_fault+0x10/0x10
[  746.892663][T15518]  ? lock_vma_under_rcu+0x45a/0x500
[  746.892681][T15518]  do_user_addr_fault+0xa73/0x1360
[  746.892692][T15518]  ? rcu_is_watching+0x15/0xb0
[  746.892702][T15518]  ? trace_page_fault_user+0x84/0x1c0
[  746.892711][T15518]  exc_page_fault+0x6a/0xc0
[  746.892720][T15518]  asm_exc_page_fault+0x26/0x30
[  746.892727][T15518] RIP: 0033:0x7fb27846874c
[  746.892735][T15518] Code: ca 30 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  746.892742][T15518] RSP: 002b:00007ffccd573080 EFLAGS: 00010206
[  746.892750][T15518] RAX: 0000000000000000 RBX: 00007fb278805fa0 RCX: 000055556dfc8808
[  746.892755][T15518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  746.892760][T15518] RBP: 00007fb278807da0 R08: 0000000000000000 R09: 0000000000000000
[  746.892765][T15518] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000b66d2
[  746.892769][T15518] R13: 00007fb278805fac R14: 00000000000b63c3 R15: 00007ffccd573180
[  746.892782][T15518]  </TASK>
[  746.892786][T15518] memory: usage 307200kB, limit 307200kB, failcnt 257
[  747.041741][T15518] memory+swap: usage 307316kB, limit 9007199254740988kB, failcnt 0
[  747.044387][T15518] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  747.046666][T15518] Memory cgroup stats for /syz3:
[  747.046722][T15518] cache 0
[  747.049836][T15518] rss 0
[  747.050944][T15518] rss_huge 0
[  747.071739][T15518] shmem 0
[  747.072718][T15518] mapped_file 0
[  747.073819][T15518] dirty 0
[  747.074745][T15518] writeback 0
[  747.075787][T15518] workingset_refault_anon 29
[  747.077230][T15518] workingset_refault_file 0
[  747.078693][T15518] swap 118784
[  747.079748][T15518] swapcached 12288
[  747.081232][T15518] pgpgin 377869
[  747.091714][T15518] pgpgout 377866
[  747.093125][T15518] pgfault 771966
[  747.094380][T15518] pgmajfault 19
[  747.095527][T15518] inactive_anon 12288
[  747.096802][T15518] active_anon 0
[  747.097906][T15518] inactive_file 0
[  747.099318][T15518] active_file 0
[  747.100694][T15518] unevictable 0
[  747.131996][T15518] hierarchical_memory_limit 314572800
[  747.133766][T15518] hierarchical_memsw_limit 9223372036854771712
[  747.136401][T15518] total_cache 0
[  747.137637][T15518] total_rss 0
[  747.138809][T15518] total_rss_huge 0
[  747.140004][T15518] total_shmem 0
[  747.141098][T15518] total_mapped_file 0
[  747.142487][T15518] total_dirty 0
[  747.143588][T15518] total_writeback 0
[  747.144770][T15518] total_workingset_refault_anon 29
[  747.146332][T15518] total_workingset_refault_file 0
[  747.147996][T15518] total_swap 118784
[  747.149426][T15518] total_swapcached 12288
[  747.151067][T15518] total_pgpgin 377869
[  747.172780][T15518] total_pgpgout 377866
[  747.175285][T15518] total_pgfault 771966
[  747.176780][T15518] total_pgmajfault 19
[  747.178324][T15518] total_inactive_anon 12288
[  747.180138][T15518] total_active_anon 0
[  747.181509][T15518] total_inactive_file 0
[  747.202314][T15518] total_active_file 0
[  747.203809][T15518] total_unevictable 0
[  747.205162][T15518] anon_cost 0
[  747.206350][T15518] file_cost 0
[  747.207544][T15518] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.18249,pid=15518,uid=0
[  747.224047][T15518] Memory cgroup out of memory: Killed process 15518 (syz.3.18249) total-vm:102132kB, anon-rss:1148kB, file-rss:21516kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  747.615412][T15551] netlink: 312 bytes leftover after parsing attributes in process `syz.2.18264'.
[  747.675856][T15555] ip6_vti0 speed is unknown, defaulting to 1000
[  747.775654][T15555] wg1 speed is unknown, defaulting to 1000
[  747.779152][T15555] xfrm0 speed is unknown, defaulting to 1000
[  748.091140][T15579] netlink: 'syz.3.18275': attribute type 2 has an invalid length.
[  748.865640][T15608] netlink: 34 bytes leftover after parsing attributes in process `syz.2.18286'.
[  749.534459][T15654] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  749.699670][T15671] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  749.768185][T15677] ip6_vti0 speed is unknown, defaulting to 1000
[  749.806272][T15681] netlink: 'syz.2.18321': attribute type 13 has an invalid length.
[  749.961581][T15677] wg1 speed is unknown, defaulting to 1000
[  749.973811][T15677] xfrm0 speed is unknown, defaulting to 1000
[  750.315147][T15714] ip6_vti0 speed is unknown, defaulting to 1000
[  750.555612][T15714] wg1 speed is unknown, defaulting to 1000
[  750.561841][T15714] xfrm0 speed is unknown, defaulting to 1000
[  750.626332][T15724] netlink: 'syz.2.18339': attribute type 1 has an invalid length.
[  750.628983][T15724] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18339'.
[  751.109678][T15764] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  751.294192][T15774] tunl0: Caught tx_queue_len zero misconfig
[  751.487149][T15785] netlink: 'syz.4.18365': attribute type 13 has an invalid length.
[  751.883113][T15821] netlink: 256 bytes leftover after parsing attributes in process `syz.2.18380'.
[  751.886185][T15821] unsupported nlmsg_type 40
[  752.624651][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  752.626638][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  752.859121][T15899] gtp3: entered promiscuous mode
[  752.860829][T15899] gtp3: entered allmulticast mode
[  753.146258][ T8455] bond2 (unregistering): (slave ip6gretap3): Releasing active interface
[  753.267268][ T1095] smc: removing ib device syz1
[  753.414717][ T8455] bond13 (unregistering): (slave gretap3): Releasing backup interface
[  753.471136][ T8455] bond4 (unregistering): (slave gre2): Releasing backup interface
[  753.473974][ T8455] gre2 (unregistering): left promiscuous mode
[  753.617258][ T8455] bond12 (unregistering): (slave geneve5): Releasing active interface
[  754.023373][ T8455] bond6 (unregistering): (slave bridge8): Releasing active interface
[  754.062863][ T8455] bond6 (unregistering): (slave bridge9): Releasing active interface
[  754.183391][ T8455] `: Port device bridge12 removed
[  754.350076][ T8455] bond2 (unregistering): (slave macvlan5): Releasing active interface
[  754.357794][ T8455] batman_adv: batadv0: Removing interface: macvlan0
[  754.375322][ T8455] bond0 (unregistering): Released all slaves
[  754.379738][ T8455] bond1 (unregistering): Released all slaves
[  754.465427][ T8455] bond2 (unregistering): (slave veth11): Releasing active interface
[  754.469490][ T8455] bond2 (unregistering): Released all slaves
[  754.567594][ T8455] bond3 (unregistering): Released all slaves
[  754.646137][ T8455] bond4 (unregistering): Released all slaves
[  754.724155][ T8455] bond5 (unregistering): Released all slaves
[  754.730988][ T8455] bond6 (unregistering): Released all slaves
[  754.738905][ T8455] bond7 (unregistering): Released all slaves
[  754.821561][ T8455] bond8 (unregistering): (slave wireguard0): Releasing backup interface
[  754.824664][ T8455] wireguard0: left promiscuous mode
[  754.826990][ T8455] bond8 (unregistering): (slave wireguard1): Releasing backup interface
[  754.830458][ T8455] bond8 (unregistering): Released all slaves
[  754.910237][ T8455] bond9 (unregistering): (slave bond10): Releasing backup interface
[  754.912964][ T8455] bond10 (unregistering): left promiscuous mode
[  754.915906][ T8455] bond9 (unregistering): Released all slaves
[  754.995334][ T8455] bond10 (unregistering): Released all slaves
[  755.074373][ T8455] bond11 (unregistering): Released all slaves
[  755.080509][ T8455] bond12 (unregistering): Released all slaves
[  755.164062][ T8455] bond13 (unregistering): (slave bond14): Releasing backup interface
[  755.166762][ T8455] bond14 (unregistering): left promiscuous mode
[  755.169224][ T8455] bond13 (unregistering): Released all slaves
[  755.247932][ T8455] bond14 (unregistering): Released all slaves
[  755.329263][T15941] lo: Caught tx_queue_len zero misconfig
[  755.586220][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18444'.
[  755.829299][T15985] netlink: 'syz.2.18453': attribute type 13 has an invalid length.
[  755.832085][T15985] netlink: 'syz.2.18453': attribute type 17 has an invalid length.
[  755.864067][T15985] 8021q: adding VLAN 0 to HW filter on device `
[  755.867587][T15985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  755.878347][    T9] ip6_vti0 speed is unknown, defaulting to 1000
[  755.880271][    T9] syz2: Port: 1 Link ACTIVE
[  755.883363][    T9] ip6_vti0 speed is unknown, defaulting to 1000
[  755.892003][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  756.263265][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  756.338871][T16018] netlink: 'syz.2.18468': attribute type 1 has an invalid length.
[  756.381953][T16018] bond17: (slave vxcan3): The slave device specified does not support setting the MAC address
[  756.386709][T16018] bond17: (slave vxcan3): Error -95 calling set_mac_address
[  756.427786][T16020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18468'.
[  756.434753][T16020] 8021q: adding VLAN 0 to HW filter on device bond17
[  756.453019][T16020] bond17: (slave bridge22): Enslaving as an active interface with a down link
[  756.465182][T16018] macvlan2: entered promiscuous mode
[  756.467407][T16018] macvlan2: entered allmulticast mode
[  756.470344][T16018] bond17: entered promiscuous mode
[  756.473587][T16018] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  756.477830][T16018] bond17: left promiscuous mode
[  756.646167][T16028] netlink: 'syz.4.18472': attribute type 10 has an invalid length.
[  756.648729][T16028] netlink: 2 bytes leftover after parsing attributes in process `syz.4.18472'.
[  756.652756][T16028] batadv_slave_1: entered promiscuous mode
[  756.655797][T16028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  756.658766][T16028] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  756.661183][T16028] batman_adv: batadv0: Removing interface: batadv_slave_1
[  756.668604][T16028] bridge0: port 3(batadv_slave_1) entered blocking state
[  756.670978][T16028] bridge0: port 3(batadv_slave_1) entered disabled state
[  756.673616][T16028] batadv_slave_1: entered allmulticast mode
[  756.716438][T16036] netlink: 'syz.2.18476': attribute type 1 has an invalid length.
[  756.731851][T16036] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18476'.
[  756.736380][T16039] netlink: 'syz.4.18477': attribute type 1 has an invalid length.
[  756.749052][T16041] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  756.758873][T16039] 8021q: adding VLAN 0 to HW filter on device bond3
[  756.773190][T16039] bond3: (slave geneve4): making interface the new active one
[  756.779155][T16039] bond3: (slave geneve4): Enslaving as an active interface with an up link
[  756.788084][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  756.799320][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  756.805233][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  756.812539][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  756.876119][T11586] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  756.878649][T11586] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  757.005307][ T8455] : left promiscuous mode
[  757.053261][ T8455] : left promiscuous mode
[  757.127263][ T8455] tipc: Disabling bearer <eth:syzkaller0>
[  757.137596][ T8455] tipc: Disabling bearer <udp:syz0>
[  757.145728][ T8455] tipc: Left network mode
[  757.179050][T16082] ip6_vti0 speed is unknown, defaulting to 1000
[  757.334543][T16093] IPVS: Unknown mcast interface: wg2
[  757.336788][T16082] wg1 speed is unknown, defaulting to 1000
[  757.425036][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18499'.
[  757.463047][T16102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  757.465627][T16102] syzkaller0: entered promiscuous mode
[  757.467301][T16102] syzkaller0: entered allmulticast mode
[  757.486090][T16102] tipc: Resetting bearer <eth:syzkaller0>
[  757.490213][T16101] tipc: Resetting bearer <eth:syzkaller0>
[  757.507707][T16101] tipc: Disabling bearer <eth:syzkaller0>
[  757.663395][T16120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18508'.
[  757.823161][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  757.983773][    T9] page_pool_release_retry() stalled pool shutdown: id 47, 3329 inflight 544 sec
[  758.272901][T16172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18529'.
[  758.318578][T16172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18529'.
[  758.475115][T16184] netlink: 408 bytes leftover after parsing attributes in process `syz.4.18535'.
[  758.486795][ T8455] hsr_slave_0: left promiscuous mode
[  758.496619][ T8455] hsr_slave_1: left promiscuous mode
[  758.535827][T16188] netlink: 6 bytes leftover after parsing attributes in process `syz.3.18537'.
[  758.540477][T16188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  758.708498][T16201] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.18543'.
[  759.384833][T16194] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  760.127064][T16267] netlink: 'syz.4.18565': attribute type 16 has an invalid length.
[  760.132085][T16267] netlink: 'syz.4.18565': attribute type 3 has an invalid length.
[  760.233390][T16275] netlink: 'syz.4.18569': attribute type 2 has an invalid length.
[  760.236704][T16275] netlink: 'syz.4.18569': attribute type 11 has an invalid length.
[  760.285022][T16277] syzkaller1: entered promiscuous mode
[  760.287700][T16277] syzkaller1: entered allmulticast mode
[  760.577823][T16299] netem: incorrect gi model size
[  760.579974][T16299] netem: change failed
[  760.781749][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  761.059189][T16357] ip6_vti0 speed is unknown, defaulting to 1000
[  761.333842][T16373] mac80211_hwsim hwsim23 syzkaller0: Caught tx_queue_len zero misconfig
[  761.345053][ T5904] page_pool_release_retry() stalled pool shutdown: id 178, 3329 inflight 181 sec
[  761.857314][T16402] netlink: 'syz.2.18628': attribute type 2 has an invalid length.
[  761.860123][T16402] __nla_validate_parse: 4 callbacks suppressed
[  761.860132][T16402] netlink: 119 bytes leftover after parsing attributes in process `syz.2.18628'.
[  762.080351][T16426] vlan2: entered promiscuous mode
[  762.083263][T16426] geneve1: entered promiscuous mode
[  762.092002][T16426] vlan2: entered allmulticast mode
[  762.093999][T16426] geneve1: entered allmulticast mode
[  762.154966][T16435] netlink: 'syz.4.18643': attribute type 15 has an invalid length.
[  763.867746][T16521] netlink: 'syz.3.18682': attribute type 11 has an invalid length.
[  763.870294][T16521] netlink: 'syz.3.18682': attribute type 11 has an invalid length.
[  763.873543][T16521] netlink: 224 bytes leftover after parsing attributes in process `syz.3.18682'.
[  763.930560][T16531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18687'.
[  764.067988][T16545] 8021q: adding VLAN 0 to HW filter on device bond0
[  764.070957][T16545] 8021q: adding VLAN 0 to HW filter on device team0
[  764.078117][T16545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  764.105106][T12442] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  764.112042][T12442] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  764.119749][T12442] bond0: now running without any active interface!
[  764.135367][T16549] tipc: Enabling <ib:lo> not permitted
[  764.137632][T16549] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  764.223084][T15963] page_pool_release_retry() stalled pool shutdown: id 37, 5276 inflight 605 sec
[  764.559091][T16585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18713'.
[  764.603942][T16589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18715'.
[  764.607629][T16589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18715'.
[  765.086061][T16631] netlink: 'syz.2.18736': attribute type 5 has an invalid length.
[  765.092975][T16627] syzkaller0: entered promiscuous mode
[  765.095146][T16627] syzkaller0: entered allmulticast mode
[  765.276028][T16644] ip6_vti0 speed is unknown, defaulting to 1000
[  765.626722][T16682] netlink: 'syz.3.18757': attribute type 10 has an invalid length.
[  765.629862][T16682] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18757'.
[  765.635157][T16682] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  765.639245][T16682] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  765.642643][T16682] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  765.647375][T16682] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  765.690185][T16684] bond4 (unregistering): Released all slaves
[  766.097799][T16718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18774'.
[  766.253142][T16726] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  766.481120][T16748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  767.093501][T16790] ip6_vti0 speed is unknown, defaulting to 1000
[  767.345297][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18805'.
[  767.351449][T16805] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18805'.
[  767.501121][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18814'.
[  767.510271][T16827] veth0_to_bond: entered allmulticast mode
[  767.523070][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18814'.
[  768.554268][T16856] netlink: 428 bytes leftover after parsing attributes in process `syz.3.18825'.
[  768.557006][T16856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18825'.
[  768.910758][T16890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18841'.
[  768.914881][T16890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18841'.
[  768.953890][T16892] netlink: 'syz.2.18842': attribute type 10 has an invalid length.
[  768.994209][T16894] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18843'.
[  768.998105][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18843'.
[  769.073766][T16898] IPv6: addrconf: prefix option has invalid lifetime
[  769.261794][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  769.523042][T16935] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  769.815524][T16969] bpq0: left promiscuous mode
[  769.817032][T16969] bpq0: left allmulticast mode
[  769.863286][T16975] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  769.867261][T16975] bond12 (unregistering): Released all slaves
[  770.071187][T17000] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  770.325054][T17022] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  770.383245][T17026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  770.739057][T17060] ip6_vti0 speed is unknown, defaulting to 1000
[  771.595711][T17077] erspan0: left promiscuous mode
[  772.458651][T17146] __nla_validate_parse: 8 callbacks suppressed
[  772.458665][T17146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18958'.
[  772.526799][T17156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18962'.
[  774.246789][T17272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19015'.
[  774.282624][T17276] netlink: 'syz.2.19017': attribute type 33 has an invalid length.
[  774.286135][T17276] `: entered allmulticast mode
[  774.288231][T17276] bridge4: entered allmulticast mode
[  774.714172][T17297] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.19027'.
[  775.874186][T17332] netlink: 'syz.4.19043': attribute type 6 has an invalid length.
[  775.876716][T17332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19043'.
[  775.879511][T17332] netlink: 'syz.4.19043': attribute type 6 has an invalid length.
[  775.928786][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19045'.
[  775.954154][T17338] ieee802154 phy0 wpan0: encryption failed: -22
[  775.956681][T17338] ieee802154 phy0 wpan0: encryption failed: -22
[  776.020977][T17342] ip6_vti0 speed is unknown, defaulting to 1000
[  776.152812][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19049'.
[  776.638739][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19063'.
[  776.643127][T17379] netlink: 'syz.4.19063': attribute type 12 has an invalid length.
[  776.654067][   T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  776.654137][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19063'.
[  776.657381][   T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  776.657411][   T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  776.657434][   T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  776.679413][T17379] netlink: 'syz.4.19063': attribute type 12 has an invalid length.
[  777.526489][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19070'.
[  777.580408][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19072'.
[  777.696371][T17420] netlink: 'syz.2.19080': attribute type 1 has an invalid length.
[  777.738617][T17424] ip6_vti0 speed is unknown, defaulting to 1000
[  777.890645][T17442] netlink: 'syz.3.19089': attribute type 10 has an invalid length.
[  777.897735][T17442] 8021q: adding VLAN 0 to HW filter on device batadv0
[  777.915766][T17442] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  778.868080][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19098'.
[  779.139351][T17495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19113'.
[  779.205415][T17502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19115'.
[  779.208601][T17502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19115'.
[  779.351179][T17517] dummy0: entered promiscuous mode
[  779.354010][T17517] macsec2: entered promiscuous mode
[  779.356354][T17517] macsec2: entered allmulticast mode
[  779.358514][T17517] dummy0: entered allmulticast mode
[  779.370478][T17519] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19123'.
[  779.379423][T17517] dummy0: left allmulticast mode
[  779.381582][T17517] dummy0: left promiscuous mode
[  779.887349][   T34] audit: type=1804 audit(1767650700.739:13): pid=17580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.19152" name="/newroot/4298/cgroup.controllers" dev="tmpfs" ino=21673 res=1 errno=0
[  779.912393][   T34] audit: type=1800 audit(1767650700.739:14): pid=17580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19152" name="cgroup.controllers" dev="tmpfs" ino=21673 res=0 errno=0
[  780.084378][T17603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19162'.
[  780.141366][T17611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19167'.
[  780.179369][T17609] ip6_vti0 speed is unknown, defaulting to 1000
[  780.183644][T17615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19168'.
[  780.260407][T17620] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  780.405374][T17633] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  780.408424][T17633] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  780.553711][T17652] netlink: 'syz.3.19183': attribute type 3 has an invalid length.
[  780.556737][T17652] netlink: 'syz.3.19183': attribute type 1 has an invalid length.
[  780.637894][T17658] netlink: 'syz.2.19181': attribute type 12 has an invalid length.
[  780.645039][T17657] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  782.123873][T17714] netlink: zone id is out of range
[  782.125571][T17714] netlink: zone id is out of range
[  782.127169][T17714] netlink: zone id is out of range
[  782.128750][T17714] netlink: zone id is out of range
[  782.130470][T17714] netlink: zone id is out of range
[  782.132181][T17714] netlink: zone id is out of range
[  782.133745][T17714] netlink: zone id is out of range
[  782.136098][T17714] netlink: zone id is out of range
[  783.041253][   T34] audit: type=1800 audit(1767650703.889:15): pid=17767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19234" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=6102 res=0 errno=0
[  783.053761][   T34] audit: type=1804 audit(1767650703.909:16): pid=17767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.19234" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=6102 res=1 errno=0
[  783.346658][T17804] netlink: 'syz.4.19252': attribute type 10 has an invalid length.
[  783.349997][T17804] vlan0: entered allmulticast mode
[  783.355311][T17804] veth0_vlan: entered allmulticast mode
[  783.383854][T17808] ip6_vti0 speed is unknown, defaulting to 1000
[  783.851261][T17846] ip6_vti0 speed is unknown, defaulting to 1000
[  783.905273][T17853] netlink: 'syz.4.19276': attribute type 1 has an invalid length.
[  784.195974][T17871] __nla_validate_parse: 2 callbacks suppressed
[  784.195984][T17871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19284'.
[  785.564418][T17931] ip6_vti0 speed is unknown, defaulting to 1000
[  785.918671][T17946] ip6_vti0 speed is unknown, defaulting to 1000
[  786.374824][T17978] netlink: 'syz.4.19327': attribute type 10 has an invalid length.
[  786.377277][T17978] batadv0: entered allmulticast mode
[  786.380359][T17978] 8021q: adding VLAN 0 to HW filter on device batadv0
[  786.387227][T17978] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  786.391404][T17978] netlink: 'syz.4.19327': attribute type 10 has an invalid length.
[  786.398358][T17978] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19327'.
[  786.401990][T17978] batadv0: entered promiscuous mode
[  786.405524][T17978] bond0: (slave batadv0): Releasing backup interface
[  786.418770][T17978] bridge0: port 4(batadv0) entered blocking state
[  786.420819][T17978] bridge0: port 4(batadv0) entered disabled state
[  786.542234][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  786.802340][T12442] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  786.806580][T12442] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  786.990800][T18011] mac80211_hwsim hwsim51 wlan1: left promiscuous mode
[  787.032062][T18017] geneve5: entered promiscuous mode
[  787.049993][T12442] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  787.052915][T12442] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  787.055951][T12442] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  787.059178][T12442] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  787.496466][T18046] net_ratelimit: 36 callbacks suppressed
[  787.496484][T18046] openvswitch: netlink: Message has 4 unknown bytes.
[  787.577152][T18048] netlink: 'syz.4.19355': attribute type 4 has an invalid length.
[  787.693151][T18052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19356'.
[  787.829044][T18064] syz_tun (unregistering): left allmulticast mode
[  787.837810][T18068] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  787.918997][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19370'.
[  787.974641][T18088] tipc: Bearer <udp:>: already 2 bearers with priority 10
[  787.976925][T18088] tipc: Bearer <udp:>: trying with adjusted priority
[  787.979041][T18088] tipc: Enabling of bearer <udp:> rejected, max 3 bearers permitted
[  788.009904][T18090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19376'.
[  788.338729][T18138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19393'.
[  788.354548][T18139] netlink: 52 bytes leftover after parsing attributes in process `syz.3.19394'.
[  788.397883][T18143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  788.401373][T18143] syzkaller0: entered promiscuous mode
[  788.404900][T18143] syzkaller0: entered allmulticast mode
[  788.440852][T18143] tipc: Resetting bearer <eth:syzkaller0>
[  788.446125][T18142] tipc: Resetting bearer <eth:syzkaller0>
[  788.465988][T18142] tipc: Disabling bearer <eth:syzkaller0>
[  788.549062][T18157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19402'.
[  788.562489][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19404'.
[  789.837409][T18208] ip6_vti0 speed is unknown, defaulting to 1000
[  789.998135][T18212] ip6_vti0 speed is unknown, defaulting to 1000
[  790.469506][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19447'.
[  790.479088][T18263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19447'.
[  791.460867][T18287] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma?
[  791.883193][T18317] ip6_vti0 speed is unknown, defaulting to 1000
[  792.162725][T18322] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  792.216935][T18326] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19466'.
[  792.258495][T18328] netlink: 'syz.2.19467': attribute type 3 has an invalid length.
[  792.271706][T18328] netlink: 'syz.2.19467': attribute type 3 has an invalid length.
[  792.721363][T18358] netlink: 'syz.2.19480': attribute type 2 has an invalid length.
[  792.772213][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19484'.
[  792.782728][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19484'.
[  792.789934][T18364] gretap0: entered promiscuous mode
[  792.797302][T18364] gretap0: left promiscuous mode
[  793.196334][T18391] ip6_vti0 speed is unknown, defaulting to 1000
[  794.213245][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19522'.
[  795.329339][T18487] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.19538'.
[  795.410645][T18495] netem: incorrect ge model size
[  795.418951][T18495] netem: change failed
[  795.442072][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19543'.
[  795.445249][T18499] netlink: 48 bytes leftover after parsing attributes in process `syz.4.19543'.
[  795.448043][T18499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19543'.
[  795.462468][T18499] vlan3: entered allmulticast mode
[  795.464246][T18499] dummy0: entered allmulticast mode
[  795.676995][T18518] netlink: 108 bytes leftover after parsing attributes in process `syz.4.19554'.
[  795.681736][T18518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19554'.
[  795.685800][T18518] tipc: Invalid UDP bearer configuration
[  795.685868][T18518] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  795.979385][T18549] ip6_vti0 speed is unknown, defaulting to 1000
[  796.570211][T18570] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19573'.
[  796.578865][T18570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19573'.
[  796.800988][T18582] netlink: 'syz.2.19578': attribute type 4 has an invalid length.
[  796.995357][T18609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19589'.
[  797.000933][T18606] ip6_vti0 speed is unknown, defaulting to 1000
[  797.742233][T18663] netlink: get zone limit has 4 unknown bytes
[  798.858558][T18752] netlink: 'syz.2.19654': attribute type 3 has an invalid length.
[  798.861119][T18752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19654'.
[  799.019491][T18765] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  799.095946][T18775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19665'.
[  799.884079][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19685'.
[  799.940402][T18821] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19687'.
[  799.952586][T18821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19687'.
[  800.210426][T18845] bridge3: entered promiscuous mode
[  800.212866][T18845] bridge3: entered allmulticast mode
[  800.407490][T18868] netlink: 'syz.3.19710': attribute type 30 has an invalid length.
[  800.664524][T18885] netlink: zone id is out of range
[  800.740558][T18889] netlink: 'syz.3.19718': attribute type 1 has an invalid length.
[  800.800465][T18893] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  801.535430][T18942] netlink: 'syz.2.19741': attribute type 13 has an invalid length.
[  801.538796][T18942] netlink: 'syz.2.19741': attribute type 17 has an invalid length.
[  801.582572][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  801.672574][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  802.365800][T18959] __nla_validate_parse: 9 callbacks suppressed
[  802.365810][T18959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19748'.
[  802.456196][T18968] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19752'.
[  802.703962][T19005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19770'.
[  802.760851][T19007] ip6_vti0 speed is unknown, defaulting to 1000
[  802.812772][T19017] netlink: 'syz.2.19775': attribute type 10 has an invalid length.
[  802.815321][T19017] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19775'.
[  802.818460][T19015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19771'.
[  802.865658][T19020] syzkaller0: entered promiscuous mode
[  802.867775][T19020] syzkaller0: entered allmulticast mode
[  803.208375][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19795'.
[  803.511391][T19097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19812'.
[  803.669298][T19113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19820'.
[  803.776314][T19119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19823'.
[  804.009123][T19140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19833'.
[  804.281561][T19163] netlink: get zone limit has 8 unknown bytes
[  804.310436][T19164] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!!b.>nS#^'
[  804.316493][T19164] CPU: 1 UID: 0 PID: 19164 Comm: syz.4.19842 Not tainted syzkaller #0 PREEMPT(full) 
[  804.316507][T19164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  804.316513][T19164] Call Trace:
[  804.316518][T19164]  <TASK>
[  804.316522][T19164]  dump_stack_lvl+0xe8/0x150
[  804.316538][T19164]  sysfs_warn_dup+0x8e/0xa0
[  804.316549][T19164]  sysfs_do_create_link_sd+0xc0/0x110
[  804.316559][T19164]  device_add_class_symlinks+0x1cf/0x240
[  804.316574][T19164]  device_add+0x475/0xb70
[  804.316590][T19164]  wiphy_register+0x1d6c/0x2d50
[  804.316622][T19164]  ? __pfx_wiphy_register+0x10/0x10
[  804.316640][T19164]  ? __pfx_netdev_run_todo+0x10/0x10
[  804.316659][T19164]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  804.316680][T19164]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  804.316698][T19164]  ieee80211_register_hw+0x34d2/0x4150
[  804.316714][T19164]  ? __lock_acquire+0x6b5/0x2cf0
[  804.316736][T19164]  ? ieee80211_register_hw+0x1481/0x4150
[  804.316759][T19164]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  804.316787][T19164]  ? __hrtimer_setup+0x181/0x200
[  804.316803][T19164]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  804.316819][T19164]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  804.316840][T19164]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  804.316847][T19164]  ? kstrndup+0xbf/0x160
[  804.316861][T19164]  hwsim_new_radio_nl+0xf85/0x1c30
[  804.316872][T19164]  ? __pfx___nla_validate_parse+0x10/0x10
[  804.316888][T19164]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  804.316899][T19164]  ? rcu_is_watching+0x15/0xb0
[  804.316910][T19164]  ? __nla_parse+0x40/0x60
[  804.316921][T19164]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  804.316933][T19164]  genl_family_rcv_msg_doit+0x22a/0x330
[  804.316944][T19164]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  804.316957][T19164]  ? bpf_lsm_capable+0x9/0x20
[  804.316966][T19164]  ? security_capable+0x7e/0x2c0
[  804.316983][T19164]  genl_rcv_msg+0x61c/0x7a0
[  804.316995][T19164]  ? __pfx_genl_rcv_msg+0x10/0x10
[  804.317002][T19164]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  804.317044][T19164]  netlink_rcv_skb+0x232/0x4b0
[  804.317057][T19164]  ? __pfx_genl_rcv_msg+0x10/0x10
[  804.317067][T19164]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  804.317076][T19164]  ? genl_rcv+0x19/0x40
[  804.317090][T19164]  ? down_read+0x272/0x2e0
[  804.317100][T19164]  ? genl_rcv+0xd/0x40
[  804.317109][T19164]  genl_rcv+0x28/0x40
[  804.317116][T19164]  netlink_unicast+0x80f/0x9b0
[  804.317130][T19164]  ? __pfx_netlink_unicast+0x10/0x10
[  804.317138][T19164]  ? __alloc_skb+0x193/0x390
[  804.317147][T19164]  ? netlink_sendmsg+0x650/0xb40
[  804.317158][T19164]  ? skb_put+0x11b/0x210
[  804.317168][T19164]  netlink_sendmsg+0x813/0xb40
[  804.317184][T19164]  ? __pfx_netlink_sendmsg+0x10/0x10
[  804.317196][T19164]  ? aa_sock_msg_perm+0xf1/0x1b0
[  804.317206][T19164]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  804.317214][T19164]  ? __pfx_netlink_sendmsg+0x10/0x10
[  804.317225][T19164]  __sock_sendmsg+0x21c/0x270
[  804.317239][T19164]  ____sys_sendmsg+0x4d7/0x810
[  804.317248][T19164]  ? __might_fault+0xaf/0x130
[  804.317262][T19164]  ? __pfx_____sys_sendmsg+0x10/0x10
[  804.317275][T19164]  ? import_iovec+0x73/0xa0
[  804.317286][T19164]  ___sys_sendmsg+0x2a5/0x360
[  804.317295][T19164]  ? __lock_acquire+0x6b5/0x2cf0
[  804.317304][T19164]  ? __pfx____sys_sendmsg+0x10/0x10
[  804.317316][T19164]  ? futex_wait+0x29a/0x380
[  804.317336][T19164]  ? __fget_files+0x2a/0x420
[  804.317346][T19164]  ? __fget_files+0x3a0/0x420
[  804.317359][T19164]  __x64_sys_sendmsg+0x1bd/0x2a0
[  804.317388][T19164]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  804.317408][T19164]  do_syscall_64+0xe2/0xf80
[  804.317417][T19164]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.317424][T19164]  ? trace_irq_disable+0x37/0x100
[  804.317436][T19164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.317444][T19164] RIP: 0033:0x7f1fed19acb9
[  804.317454][T19164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  804.317461][T19164] RSP: 002b:00007f1fee070028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  804.317470][T19164] RAX: ffffffffffffffda RBX: 00007f1fed406090 RCX: 00007f1fed19acb9
[  804.317477][T19164] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  804.317482][T19164] RBP: 00007f1fed208bf7 R08: 0000000000000000 R09: 0000000000000000
[  804.317487][T19164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  804.317492][T19164] R13: 00007f1fed406128 R14: 00007f1fed406090 R15: 00007ffc5b7acc78
[  804.317506][T19164]  </TASK>
[  804.530918][T19168] netlink: 'syz.3.19846': attribute type 1 has an invalid length.
[  804.540953][T19168] netlink: 'syz.3.19846': attribute type 2 has an invalid length.
[  804.688105][T19181] netlink: 'syz.2.19851': attribute type 30 has an invalid length.
[  804.692899][T19181] netlink: 'syz.2.19851': attribute type 30 has an invalid length.
[  804.938684][T19194] ip6_vti0 speed is unknown, defaulting to 1000
[  805.003856][T19200] netlink: 'syz.3.19859': attribute type 3 has an invalid length.
[  805.139454][T19208] netlink: 'syz.4.19862': attribute type 1 has an invalid length.
[  805.143159][T19208] netlink: 'syz.4.19862': attribute type 2 has an invalid length.
[  805.146406][T19208] netlink: 'syz.4.19862': attribute type 1 has an invalid length.
[  805.483243][T19252] netlink: 'syz.3.19883': attribute type 1 has an invalid length.
[  805.509985][T19252] 8021q: adding VLAN 0 to HW filter on device bond12
[  805.530071][T19252] 8021q: adding VLAN 0 to HW filter on device bond12
[  805.532651][T19252] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address
[  805.537179][T19252] bond12: (slave vxcan5): Error -95 calling set_mac_address
[  805.574480][T19260] gretap5: entered promiscuous mode
[  805.580290][T19260] bond12: (slave gretap5): making interface the new active one
[  805.585602][T19260] bond12: (slave gretap5): Enslaving as an active interface with an up link
[  805.595290][T19260] macvlan1: entered promiscuous mode
[  805.597324][T19260] macvlan1: entered allmulticast mode
[  805.599834][T19260] bond12: entered promiscuous mode
[  805.602606][T19260] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  805.622821][T19260] bond12: (slave macvlan1): the slave hw address is in use by the bond; giving it the hw address of gretap5
[  805.628682][T19260] bond12: left promiscuous mode
[  805.653931][T19252] x_tables: duplicate underflow at hook 1
[  806.045452][T19295] syzkaller0: entered promiscuous mode
[  806.047178][T19295] syzkaller0: entered allmulticast mode
[  807.525252][T19329] netlink: 'syz.2.19914': attribute type 3 has an invalid length.
[  807.528042][T19329] __nla_validate_parse: 11 callbacks suppressed
[  807.528054][T19329] netlink: 3 bytes leftover after parsing attributes in process `syz.2.19914'.
[  807.667555][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19920'.
[  808.015532][T19373] syzkaller0: Caught tx_queue_len zero misconfig
[  808.075008][T19377] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  808.080500][T19377] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  808.189454][T19387] ip6_vti0 speed is unknown, defaulting to 1000
[  808.337749][T19392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19943'.
[  808.361416][T19394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19944'.
[  808.994589][T19442] gretap6: entered promiscuous mode
[  809.200804][T19467] bond18: entered promiscuous mode
[  809.203816][T19467] 8021q: adding VLAN 0 to HW filter on device bond18
[  809.224964][T19467] 8021q: adding VLAN 0 to HW filter on device bond18
[  809.228492][T19467] bond18: (slave wireguard4): The slave device specified does not support setting the MAC address
[  809.232739][T19467] bond18: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[  809.241102][T19467] bond18: (slave wireguard4): making interface the new active one
[  809.248962][T19467] wireguard4: entered promiscuous mode
[  809.251498][T19467] bond18: (slave wireguard4): Enslaving as an active interface with an up link
[  809.258709][T19467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  809.261110][T19467] IPv6: NLM_F_CREATE should be set when creating new route
[  809.263427][T19467] IPv6: NLM_F_CREATE should be set when creating new route
[  809.267850][T19467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  809.276607][T19467] bond18: (slave wireguard5): The slave device specified does not support setting the MAC address
[  809.284174][T19467] bond18: (slave wireguard5): Enslaving as a backup interface with an up link
[  809.605516][T19525] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20001'.
[  809.720605][T19535] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  809.906010][T19551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20013'.
[  809.908915][T19551] netlink: 88 bytes leftover after parsing attributes in process `syz.3.20013'.
[  810.305192][T19578] ip6_vti0 speed is unknown, defaulting to 1000
[  810.403417][T19579] ip6_vti0 speed is unknown, defaulting to 1000
[  811.490276][T19622] dvmrp8: entered allmulticast mode
[  811.936135][T19642] openvswitch: netlink: Message has 1 unknown bytes.
[  811.938320][T19642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  812.156738][T19659] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20057'.
[  812.267529][T19671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20063'.
[  812.271171][T19671] bridge0: port 4(batadv0) entered disabled state
[  812.276662][T19671] batadv_slave_1: left allmulticast mode
[  812.279034][T19671] bridge0: port 3(batadv_slave_1) entered disabled state
[  812.283203][T19671] bridge_slave_1: left allmulticast mode
[  812.285067][T19671] bridge_slave_1: left promiscuous mode
[  812.286980][T19671] bridge0: port 2(bridge_slave_1) entered disabled state
[  812.290810][T19671] bridge_slave_0: left allmulticast mode
[  812.293224][T19671] bridge_slave_0: left promiscuous mode
[  812.295128][T19671] bridge0: port 1(bridge_slave_0) entered disabled state
[  812.779287][T19715] tipc: Failed to remove unknown binding: 66,1,1/2152750895:1111641470/1111641472
[  812.821905][T19716] nbd4: detected capacity change from 0 to 63
[  812.824506][T19719] block nbd4: NBD_DISCONNECT
[  812.826261][T19719] block nbd4: Disconnected due to user request.
[  812.828219][T19719] block nbd4: shutting down sockets
[  812.839810][T19720] tipc: Failed to remove unknown binding: 66,1,1/2152750895:1111641470/1111641472
[  812.846633][T19720] tipc: Failed to remove unknown binding: 66,1,1/2152750895:1111641470/1111641472
[  814.064463][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  814.066500][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  814.170460][T19774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20107'.
[  814.726230][T19791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20114'.
[  815.077019][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20120'.
[  815.083608][T19807] ip6_vti0 speed is unknown, defaulting to 1000
[  815.425461][T19833] validate_nla: 4 callbacks suppressed
[  815.425472][T19833] netlink: 'syz.4.20131': attribute type 1 has an invalid length.
[  815.601072][T19846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20138'.
[  815.670181][T19854] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.705067][T19854] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.727512][T19859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20142'.
[  815.755304][T19854] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.819074][T19854] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.893998][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  815.906325][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  815.914945][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  815.934019][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  816.033666][T19878] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  816.207558][T19901] netlink: 108 bytes leftover after parsing attributes in process `syz.3.20164'.
[  816.414527][T19924] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20174'.
[  816.557979][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20183'.
[  816.561307][T19944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20183'.
[  816.566115][T19944] netlink: 'syz.3.20183': attribute type 6 has an invalid length.
[  816.569726][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20183'.
[  816.573004][T19944] netlink: 'syz.3.20183': attribute type 6 has an invalid length.
[  816.597212][T19946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  816.731145][T19959] netlink: 'syz.3.20190': attribute type 9 has an invalid length.
[  816.904268][T19977] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  816.957133][T19986] sctp: [Deprecated]: syz.3.20203 (pid 19986) Use of int in maxseg socket option.
[  816.957133][T19986] Use struct sctp_assoc_value instead
[  817.036864][T19991] ip6_vti0 speed is unknown, defaulting to 1000
[  817.526950][T20008] ip6_vti0 speed is unknown, defaulting to 1000
[  817.956762][T20041] netlink: 'syz.2.20219': attribute type 10 has an invalid length.
[  818.312481][T15963] page_pool_release_retry() stalled pool shutdown: id 47, 3329 inflight 605 sec
[  818.326435][T20064] xt_CT: No such helper "snmp_trap"
[  818.969010][T20096] netlink: 'syz.2.20240': attribute type 3 has an invalid length.
[  819.123765][T20106] ip6_vti0 speed is unknown, defaulting to 1000
[  819.394610][T20124] __nla_validate_parse: 10 callbacks suppressed
[  819.394621][T20124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20252'.
[  819.681021][T20145] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20262'.
[  819.749931][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20263'.
[  819.889549][T20159] netlink: 'syz.3.20268': attribute type 21 has an invalid length.
[  819.892235][T20159] netlink: 156 bytes leftover after parsing attributes in process `syz.3.20268'.
[  821.422155][ T5226] Bluetooth: hci1: command 0x041b tx timeout
[  821.462233][T20195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20283'.
[  821.528317][T20202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20286'.
[  821.531146][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20286'.
[  821.537651][T20202] netlink: 'syz.3.20286': attribute type 14 has an invalid length.
[  821.540679][T20202] netlink: 'syz.3.20286': attribute type 11 has an invalid length.
[  821.662383][ T5909] page_pool_release_retry() stalled pool shutdown: id 178, 3329 inflight 241 sec
[  821.741735][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  823.039573][T20277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20320'.
[  823.048442][T20277] `: left allmulticast mode
[  823.049979][T20277] bridge4: left allmulticast mode
[  823.052605][T20277] 8021q: adding VLAN 0 to HW filter on device `
[  823.055386][T20277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  823.071934][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  823.132216][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  823.295361][T20294] sctp: [Deprecated]: syz.2.20327 (pid 20294) Use of int in maxseg socket option.
[  823.295361][T20294] Use struct sctp_assoc_value instead
[  823.443630][T20302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20331'.
[  823.462412][T20302] team1: entered promiscuous mode
[  823.464639][T20302] team1: entered allmulticast mode
[  823.471941][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  823.476189][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  823.531507][T20304] syzkaller0: left promiscuous mode
[  823.537485][T20304] syzkaller0: left allmulticast mode
[  824.136434][T20343] netlink: 52 bytes leftover after parsing attributes in process `syz.2.20351'.
[  824.140427][T20344] Cannot find del_set index 4 as target
[  824.322578][ T5909] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  824.342949][T20364] bridge0: entered promiscuous mode
[  824.541975][    T9] page_pool_release_retry() stalled pool shutdown: id 37, 5276 inflight 665 sec
[  824.593433][T20375] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  824.664687][T20375] batadv_slave_0: entered promiscuous mode
[  824.667988][T20375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20367'.
[  824.673314][T20375] netlink: 428 bytes leftover after parsing attributes in process `syz.2.20367'.
[  824.676006][T20375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20367'.
[  825.155782][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20377'.
[  825.846993][T20421] 8021q: adding VLAN 0 to HW filter on device bond0
[  825.851081][T20421] 8021q: adding VLAN 0 to HW filter on device team0
[  825.858100][T20421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  826.060836][T20431] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20391'.
[  826.252341][T20435] nbd3: detected capacity change from 0 to 127
[  826.256122][ T7586] block nbd3: Receive control failed (result -32)
[  826.482857][T20451] ip6_vti0 speed is unknown, defaulting to 1000
[  826.503853][T20454] IPVS: Scheduler module ip_vs_sip not found
[  826.678390][T20468] netlink: 'syz.4.20406': attribute type 1 has an invalid length.
[  827.429123][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20409'.
[  827.476465][T20477] netlink: 'syz.3.20410': attribute type 10 has an invalid length.
[  827.480106][T20477] netlink: 'syz.3.20410': attribute type 10 has an invalid length.
[  828.014382][T20515] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.20426'.
[  828.021773][T20515] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  828.076399][T20521] syzkaller1: entered promiscuous mode
[  828.078171][T20521] syzkaller1: entered allmulticast mode
[  828.160294][T20530] netlink: 96 bytes leftover after parsing attributes in process `syz.4.20433'.
[  828.265116][T20545] netlink: 'syz.2.20439': attribute type 5 has an invalid length.
[  828.270411][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20439'.
[  828.316072][T20551] netlink: 104 bytes leftover after parsing attributes in process `syz.3.20442'.
[  828.346005][T20553] netlink: 'syz.2.20443': attribute type 8 has an invalid length.
[  828.365966][T20555] syzkaller0: Caught tx_queue_len zero misconfig
[  828.653668][T20587] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  828.862586][T20609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  829.752127][T20716] __nla_validate_parse: 1 callbacks suppressed
[  829.752139][T20716] netlink: 96 bytes leftover after parsing attributes in process `syz.2.20514'.
[  829.862293][T20722] block nbd4: server does not support multiple connections per device.
[  829.865081][T20722] block nbd4: shutting down sockets
[  831.156155][T20758] netlink: 104 bytes leftover after parsing attributes in process `syz.3.20531'.
[  831.271045][T20770] openvswitch: netlink: Message has 572 unknown bytes.
[  831.274902][T20770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  832.479502][T20805] ieee802154 phy0 wpan0: encryption failed: -90
[  833.028828][T20870] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  833.044965][T20872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20580'.
[  833.286188][T20893] netlink: 'syz.4.20593': attribute type 1 has an invalid length.
[  833.359243][T20904] sctp: [Deprecated]: syz.4.20596 (pid 20904) Use of int in max_burst socket option deprecated.
[  833.359243][T20904] Use struct sctp_assoc_value instead
[  833.363519][T20896] NFSD: Failed to start, no listeners configured.
[  833.684320][T20928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20606'.
[  833.698727][T20928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20606'.
[  833.717192][T20928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20606'.
[  833.725889][T20928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20606'.
[  833.728706][T20928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20606'.
[  833.736942][T20928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20606'.
[  833.739651][T20928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20606'.
[  833.892091][   T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  833.894560][   T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  833.906449][   T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  833.909077][   T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  834.689760][T21016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  834.889947][T21032] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  834.896426][T21032] batman_adv: batadv0: Adding interface: gretap2
[  834.898527][T21032] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  834.908334][T21032] batman_adv: batadv0: Interface activated: gretap2
[  834.978134][T21040] netlink: 'syz.4.20654': attribute type 46 has an invalid length.
[  835.337930][T21066] __nla_validate_parse: 214 callbacks suppressed
[  835.337946][T21066] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.20667'.
[  835.827413][T21084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20675'.
[  836.193472][T21106] ip6_vti0 speed is unknown, defaulting to 1000
[  837.293674][T21138] netlink: 176 bytes leftover after parsing attributes in process `syz.3.20698'.
[  837.765640][T21167] netlink: 'syz.4.20712': attribute type 1 has an invalid length.
[  837.768813][T21167] netlink: 228 bytes leftover after parsing attributes in process `syz.4.20712'.
[  838.381195][T21180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20718'.
[  838.395661][T21180] ip6_vti0 speed is unknown, defaulting to 1000
[  838.657791][T21189] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode
[  838.660012][T21189] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode
[  838.697325][T21191] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  838.701513][T21191] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode
[  838.705207][T21191] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode
[  838.879810][T21203] netlink: 56 bytes leftover after parsing attributes in process `syz.4.20727'.
[  838.884800][T21203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20727'.
[  839.419088][T21242] ip6_vti0 speed is unknown, defaulting to 1000
[  840.056905][T21270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20756'.
[  840.276302][T21292] bond5: entered promiscuous mode
[  840.278284][T21292] bond5: entered allmulticast mode
[  840.283526][T21292] 8021q: adding VLAN 0 to HW filter on device bond5
[  840.448132][T21311] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  840.455215][T21311] syzkaller0: entered promiscuous mode
[  840.458028][T21311] syzkaller0: entered allmulticast mode
[  840.539146][T21320] bridge_slave_0: entered promiscuous mode
[  840.583578][T21322] bridge25: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  840.743274][T21341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20790'.
[  841.134586][T21370] delete_channel: no stack
[  841.884034][T21442] sctp: [Deprecated]: syz.4.20839 (pid 21442) Use of struct sctp_assoc_value in delayed_ack socket option.
[  841.884034][T21442] Use struct sctp_sack_info instead
[  841.889555][T21442] sctp: [Deprecated]: syz.4.20839 (pid 21442) Use of struct sctp_assoc_value in delayed_ack socket option.
[  841.889555][T21442] Use struct sctp_sack_info instead
[  841.916428][T21444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20840'.
[  842.028320][T21450] netlink: 208 bytes leftover after parsing attributes in process `syz.4.20843'.
[  842.541758][T21424] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  842.544162][T21424] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  842.714633][T21471] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  843.733141][T21493] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  843.796447][T21497] netlink: 'syz.3.20860': attribute type 1 has an invalid length.
[  844.087323][T21503] syzkaller0: entered promiscuous mode
[  844.089742][T21503] syzkaller0: entered allmulticast mode
[  844.108565][T21503] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  844.116268][T21502] tipc: Resetting bearer <eth:syzkaller0>
[  844.140342][T21502] tipc: Disabling bearer <eth:syzkaller0>
[  844.376047][T21516] netlink: 72 bytes leftover after parsing attributes in process `syz.4.20866'.
[  844.813226][T21533] netlink: 148 bytes leftover after parsing attributes in process `syz.3.20871'.
[  844.901834][T21531] nbd4: detected capacity change from 0 to 63
[  844.904554][T21534] block nbd4: NBD_DISCONNECT
[  844.906231][T21534] block nbd4: Disconnected due to user request.
[  844.908318][T21534] block nbd4: shutting down sockets
[  844.944220][T21541] netlink: 'syz.3.20872': attribute type 5 has an invalid length.
[  845.054154][T21550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20874'.
[  845.242776][T21557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20878'.
[  845.262945][T21557] 8021q: adding VLAN 0 to HW filter on device bond6
[  845.403053][T21568] netlink: 'syz.4.20880': attribute type 3 has an invalid length.
[  845.494196][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20884'.
[  845.497837][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20884'.
[  845.526517][T21577] team0: Device gtp3 is up. Set it down before adding it as a team port
[  845.736757][T21596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20890'.
[  845.770932][T21596] bond13: entered promiscuous mode
[  845.773255][T21596] 8021q: adding VLAN 0 to HW filter on device bond13
[  845.869694][T21604] IPVS: stopping backup sync thread 15257 ...
[  845.965533][T21613] netlink: 'syz.4.20894': attribute type 39 has an invalid length.
[  845.980596][T21613] batman_adv: batadv0: Removing interface: macvtap0
[  846.148996][T21630] netlink: 'syz.3.20902': attribute type 1 has an invalid length.
[  846.173744][T21630] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address
[  846.178415][T21630] bond14: (slave vxcan5): Error -95 calling set_mac_address
[  846.222989][T21632] bond14: (slave gretap7): making interface the new active one
[  846.226656][T21632] bond14: (slave gretap7): Enslaving as an active interface with an up link
[  846.352095][T21640] netlink: 'syz.3.20904': attribute type 1 has an invalid length.
[  846.355365][T21640] __nla_validate_parse: 1 callbacks suppressed
[  846.355377][T21640] netlink: 228 bytes leftover after parsing attributes in process `syz.3.20904'.
[  846.578473][T21651] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode
[  846.594579][T21651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  847.162183][T21670] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20912'.
[  847.197382][T21672] netlink: 'syz.3.20913': attribute type 33 has an invalid length.
[  847.199966][T21672] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20913'.
[  847.639054][T21694] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20921'.
[  847.721441][T21694] netlink: 'syz.3.20921': attribute type 4 has an invalid length.
[  847.795313][T21713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20924'.
[  847.803430][T21713] netlink: 'syz.2.20924': attribute type 10 has an invalid length.
[  848.037563][T21726] IPVS: length: 24 != 12792
[  848.217217][T21734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20933'.
[  848.674857][T21760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20940'.
[  848.686659][T21757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20939'.
[  848.726834][T21762] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  848.807140][T21769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20943'.
[  848.811205][T21767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20943'.
[  848.882805][T21773] x9: renamed from bridge_slave_0
[  848.983826][T21771] 8021q: adding VLAN 0 to HW filter on device bond0
[  849.054183][ T7586] block nbd4: Receive control failed (result -32)
[  849.105580][T21782] syzkaller1: tun_chr_ioctl cmd 1074025677
[  849.107748][T21782] syzkaller1: Linktype set failed because interface is up
[  849.121820][T21782] netlink: 'syz.4.20945': attribute type 1 has an invalid length.
[  849.132881][ T5904] syzkaller1: tun_net_xmit 90
[  849.527809][T21804] ip6_vti0 speed is unknown, defaulting to 1000
[  849.563567][T21806] netlink: 'syz.3.20952': attribute type 6 has an invalid length.
[  849.567300][T21805] netlink: 'syz.3.20952': attribute type 6 has an invalid length.
[  849.644926][   T12] syzkaller1: tun_net_xmit 86
[  849.822292][T21825] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode
[  849.824683][T21825] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode
[  849.901414][T21840] netlink: 'syz.2.20962': attribute type 1 has an invalid length.
[  849.945433][T21844] netlink: 'syz.2.20964': attribute type 4 has an invalid length.
[  850.029574][T21852] nbd: illegal input index -1
[  850.071953][T21855] netlink: 'syz.4.20968': attribute type 21 has an invalid length.
[  850.076465][T21855] netlink: 'syz.4.20968': attribute type 4 has an invalid length.
[  850.079825][T21855] netlink: 'syz.4.20968': attribute type 3 has an invalid length.
[  850.132822][T21842] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  851.212614][T21931] bond0: (slave bond_slave_0): Releasing backup interface
[  851.215909][T21931] bond0: (slave bond_slave_1): Releasing backup interface
[  851.219533][T21931] team0: Port device team_slave_0 removed
[  851.222513][T21931] team0: Port device team_slave_1 removed
[  851.224935][T21931] batman_adv: batadv0: Removing interface: batadv_slave_0
[  851.228146][T21931] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  851.265841][T21935] : renamed from bond0
[  851.399122][T21945] team0: Device ip6tnl6 is of different type
[  851.487009][T21955] __nla_validate_parse: 15 callbacks suppressed
[  851.487019][T21955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20994'.
[  851.494837][T21955] netlink: 'syz.4.20994': attribute type 58 has an invalid length.
[  851.497234][T21955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20994'.
[  851.605269][T21965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20998'.
[  851.626764][T21967] block nbd5: Unsupported socket: should be TCP or UNIX.
[  851.667607][T21971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21001'.
[  851.703620][T21973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21002'.
[  851.709003][T21973] netlink: 156 bytes leftover after parsing attributes in process `syz.4.21002'.
[  851.714219][T21973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21002'.
[  852.585959][T22013] netlink: 27 bytes leftover after parsing attributes in process `syz.3.21012'.
[  852.660781][T22014] bond0: (slave batadv0): Releasing backup interface
[  852.680768][T22014] bond0: (slave bridge_slave_1): Releasing backup interface
[  852.685311][T22014] bond0: (slave bond_slave_0): Releasing backup interface
[  852.690645][T22014] bond0: (slave c@0): Releasing backup interface
[  852.694688][T22014] batman_adv: batadv0: Removing interface: batadv_slave_0
[  852.699625][T22014] bond1: (slave bond2): Releasing backup interface
[  852.707804][T22014] bond2: left allmulticast mode
[  852.713708][T22014] batman_adv: batadv0: Removing interface: gretap2
[  852.720927][T22014] bond6: (slave geneve3): Releasing active interface
[  852.730488][T22014] bond7: (slave geneve4): Releasing active interface
[  852.737015][T22014] bond12: (slave gretap5): Releasing active interface
[  852.778437][T22014] bond14: (slave gretap7): Releasing active interface
[  852.823303][T22019] netlink: 'syz.2.21014': attribute type 83 has an invalid length.
[  852.932851][T22037] lo: entered allmulticast mode
[  852.934600][T22037] lo: left allmulticast mode
[  853.057838][T22049] xt_TCPMSS: Only works on TCP SYN packets
[  853.329616][T22073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21029'.
[  853.388507][T22078] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.21031'.
[  853.547386][T22094] ip6tnl0: Caught tx_queue_len zero misconfig
[  853.625894][   T34] audit: type=1107 audit(1767650774.479:17): pid=22101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  853.798466][T22117] ip6_vti0 speed is unknown, defaulting to 1000
[  854.112480][T22136] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode
[  854.132322][T22134] tipc: Resetting bearer <eth:syzkaller0>
[  855.800956][T22165] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  855.807312][T22165] syzkaller0: entered promiscuous mode
[  855.809569][T22165] syzkaller0: entered allmulticast mode
[  855.833831][T22165] tipc: Resetting bearer <eth:syzkaller0>
[  855.838406][T22164] tipc: Resetting bearer <eth:syzkaller0>
[  855.856681][T22164] tipc: Disabling bearer <eth:syzkaller0>
[  856.129242][T22194] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode
[  856.131567][T22194] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  856.351289][T22213] xt_TCPMSS: Only works on TCP SYN packets
[  856.354045][T22215] xt_TCPMSS: Only works on TCP SYN packets
[  856.668032][T22243] __nla_validate_parse: 5 callbacks suppressed
[  856.668042][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21097'.
[  856.694845][T22243] 8021q: adding VLAN 0 to HW filter on device bond0
[  856.835329][T22259] openvswitch: netlink: Multiple metadata blocks provided
[  857.486231][T22279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21108'.
[  857.491954][T22279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21108'.
[  857.497153][T22279] netem: change failed
[  857.659760][T22290] vlan3: entered promiscuous mode
[  857.661347][T22290] bridge0: entered promiscuous mode
[  857.829724][T22312] validate_nla: 4 callbacks suppressed
[  857.829741][T22312] netlink: 'syz.2.21119': attribute type 1 has an invalid length.
[  857.887833][T22312] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address
[  857.908752][T22312] bond19: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  857.922189][T22312] bond19: (slave vxcan1): making interface the new active one
[  857.924535][T22320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21119'.
[  857.926406][T22312] bond19: (slave vxcan1): Enslaving as an active interface with an up link
[  857.937978][T22320] bond19 (unregistering): (slave vxcan1): Releasing backup interface
[  857.951228][T22320] bond19 (unregistering): Released all slaves
[  858.153680][T22334] netlink: 'syz.3.21124': attribute type 1 has an invalid length.
[  858.158781][T22334] netlink: 'syz.3.21124': attribute type 7 has an invalid length.
[  858.170726][T22334] netlink: 'syz.3.21124': attribute type 8 has an invalid length.
[  858.174588][T22334] netlink: 208 bytes leftover after parsing attributes in process `syz.3.21124'.
[  858.179542][T22335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21125'.
[  858.190996][T22335] netlink: 'syz.4.21125': attribute type 6 has an invalid length.
[  858.369841][T22353] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  858.372111][T22351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.21132'.
[  858.378659][T22351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.21132'.
[  858.464337][T22358] netlink: 'syz.4.21134': attribute type 5 has an invalid length.
[  858.524635][T22365] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21138'.
[  858.528571][T22365] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21138'.
[  858.533680][T22365] netlink: 'syz.2.21138': attribute type 1 has an invalid length.
[  858.536709][T22365] netlink: 'syz.2.21138': attribute type 2 has an invalid length.
[  858.768965][T22388] bond0: (slave ip6gretap3): Enslaving as an active interface with an up link
[  859.332699][T22400] netlink: 'syz.4.21150': attribute type 2 has an invalid length.
[  859.335429][T22400] netlink: 'syz.4.21150': attribute type 1 has an invalid length.
[  859.380546][T22406] syzkaller0: left promiscuous mode
[  859.383171][T22406] syzkaller0: left allmulticast mode
[  859.522281][T22420] delete_channel: no stack
[  859.696720][T22434] delete_channel: no stack
[  859.719697][T22438] lo: Caught tx_queue_len zero misconfig
[  860.669396][T22469] mac80211_hwsim hwsim23 syzkaller0: Caught tx_queue_len zero misconfig
[  860.789367][T22473] tunl0: Caught tx_queue_len zero misconfig
[  860.880511][T22478] delete_channel: no stack
[  860.933555][T22481] xt_TCPMSS: Only works on TCP SYN packets
[  861.262206][T22504] delete_channel: no stack
[  861.639883][T22542] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  861.685757][T22550] __nla_validate_parse: 18 callbacks suppressed
[  861.685768][T22550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21209'.
[  861.693561][T22550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21209'.
[  861.697579][T22550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21209'.
[  861.764506][T22557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21212'.
[  861.786707][T22560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21213'.
[  861.843557][T22562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21214'.
[  861.892126][T22564] netlink: 96 bytes leftover after parsing attributes in process `syz.3.21215'.
[  862.414264][T22580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21221'.
[  862.772592][T22588] netlink: 216 bytes leftover after parsing attributes in process `syz.4.21224'.
[  862.776454][T22588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21224'.
[  863.374304][T22628] syzkaller1: entered promiscuous mode
[  863.376060][T22628] syzkaller1: entered allmulticast mode
[  863.467884][T22633] validate_nla: 5 callbacks suppressed
[  863.467895][T22633] netlink: 'syz.2.21241': attribute type 1 has an invalid length.
[  863.514717][T22636] Cannot find map_set index 135 as target
[  863.517275][T22636] netlink: 'syz.2.21243': attribute type 4 has an invalid length.
[  864.227887][T22716] netlink: 'syz.3.21274': attribute type 2 has an invalid length.
[  864.233972][T22716] : entered promiscuous mode
[  864.537780][T22735] netlink: 'syz.2.21279': attribute type 21 has an invalid length.
[  864.540465][T22735] netlink: 'syz.2.21279': attribute type 1 has an invalid length.
[  864.953847][T22754] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  864.958129][T22754] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode
[  864.961287][T22754] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode
[  865.703960][T22780] ip6_vti0 speed is unknown, defaulting to 1000
[  865.705257][T22784] netlink: 'syz.2.21296': attribute type 1 has an invalid length.
[  865.752374][T22784] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address
[  865.756471][T22784] bond19: (slave vxcan3): Error -95 calling set_mac_address
[  866.266673][T22809] netlink: 'syz.4.21302': attribute type 6 has an invalid length.
[  866.483370][T22822] SET target dimension over the limit!
[  866.687868][T22838] netlink: 'syz.2.21314': attribute type 1 has an invalid length.
[  866.734652][T22838] bond20: (slave vxcan3): The slave device specified does not support setting the MAC address
[  866.739518][T22838] bond20: (slave vxcan3): Error -95 calling set_mac_address
[  866.770712][T22841] syzkaller0: entered promiscuous mode
[  866.773400][T22841] syzkaller0: entered allmulticast mode
[  867.260493][T22846] netlink: 'syz.4.21316': attribute type 13 has an invalid length.
[  867.304327][T22848] __nla_validate_parse: 19 callbacks suppressed
[  867.304344][T22848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21317'.
[  867.386058][T22855] netlink: 'syz.4.21319': attribute type 10 has an invalid length.
[  867.501003][T22859] netlink: 64 bytes leftover after parsing attributes in process `syz.4.21321'.
[  867.506089][T22859] netlink: 132 bytes leftover after parsing attributes in process `syz.4.21321'.
[  867.691440][T22876] netlink: 68 bytes leftover after parsing attributes in process `syz.2.21327'.
[  867.747593][T22881] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  867.751131][T22881] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  867.763567][T22878] C: renamed from team_slave_0 (while UP)
[  867.772716][T22878] netlink: 116 bytes leftover after parsing attributes in process `syz.3.21328'.
[  867.775924][T22878] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  867.821554][T22887] ip6_vti0 speed is unknown, defaulting to 1000
[  867.867243][T22890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  868.216330][T22919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21340'.
[  868.656955][T22966] validate_nla: 3 callbacks suppressed
[  868.656965][T22966] netlink: 'syz.4.21354': attribute type 2 has an invalid length.
[  868.657234][T22968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21355'.
[  868.677400][T22966] x_tables: duplicate underflow at hook 2
[  868.700445][T22971] netlink: 76 bytes leftover after parsing attributes in process `syz.4.21357'.
[  868.756135][T22980] netlink: 'syz.4.21359': attribute type 1 has an invalid length.
[  868.791091][T22986] netlink: 'syz.2.21361': attribute type 3 has an invalid length.
[  868.815750][T22980] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  868.819946][T22980] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  868.838268][T22982] pim6reg1: entered promiscuous mode
[  868.839967][T22982] pim6reg1: entered allmulticast mode
[  868.879110][T22982] netlink: 136 bytes leftover after parsing attributes in process `syz.3.21360'.
[  869.055339][T23007] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  869.215149][T23024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21373'.
[  869.325895][T23030] netlink: 'syz.2.21376': attribute type 1 has an invalid length.
[  869.329010][T23030] netlink: 'syz.2.21376': attribute type 2 has an invalid length.
[  869.916449][T23078] syzkaller0: left promiscuous mode
[  869.918536][T23078] syzkaller0: left allmulticast mode
[  869.967208][T23086] netlink: 'syz.4.21397': attribute type 1 has an invalid length.
[  869.969690][T23086] netlink: 'syz.4.21397': attribute type 2 has an invalid length.
[  870.021074][T23089] syzkaller0: entered promiscuous mode
[  870.029734][T23089] syzkaller0: entered allmulticast mode
[  870.052177][T23089] block nbd4: NBD_DISCONNECT
[  870.054089][T23089] block nbd4: Send disconnect failed -32
[  870.056242][T23089] block nbd4: shutting down sockets
[  870.206010][T23105] netlink: 'syz.2.21403': attribute type 1 has an invalid length.
[  870.223299][T23105] bond21: (slave vxcan3): The slave device specified does not support setting the MAC address
[  870.226782][T23105] bond21: (slave vxcan3): Error -95 calling set_mac_address
[  870.577224][T23133] x_tables: duplicate underflow at hook 3
[  870.743999][T23143] ip6_vti0 speed is unknown, defaulting to 1000
[  871.168158][T23178] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  871.345104][T23198] netlink: 'syz.2.21438': attribute type 83 has an invalid length.
[  872.215270][T23220] xt_l2tp: unknown flags: 51
[  872.350460][T23228] __nla_validate_parse: 17 callbacks suppressed
[  872.350475][T23228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21450'.
[  872.501203][T23230] netlink: 'syz.4.21451': attribute type 21 has an invalid length.
[  872.659885][T11586] syzkaller0: tun_net_xmit 76
[  872.662768][T11586] syzkaller0: tun_net_xmit 48
[  872.664176][T23236] syzkaller0: create flow: hash 353265637 index 1
[  872.682035][ T5904] syzkaller0: tun_net_xmit 76
[  872.723275][T23235] syzkaller0: delete flow: hash 353265637 index 1
[  873.554321][T23252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21459'.
[  874.345668][T23259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21461'.
[  874.357522][T23262] validate_nla: 1 callbacks suppressed
[  874.357533][T23262] netlink: 'syz.2.21462': attribute type 26 has an invalid length.
[  874.507776][T23279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21467'.
[  874.863870][T23312] netlink: 'syz.2.21481': attribute type 1 has an invalid length.
[  874.866553][T23312] netlink: 96 bytes leftover after parsing attributes in process `syz.2.21481'.
[  874.870063][T23312] netlink: 658 bytes leftover after parsing attributes in process `syz.2.21481'.
[  874.873839][T23312] netlink: 1 bytes leftover after parsing attributes in process `syz.2.21481'.
[  874.986477][T23324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21485'.
[  875.015542][T23333] netlink: 220 bytes leftover after parsing attributes in process `syz.3.21487'.
[  875.056382][T23335] netlink: 440 bytes leftover after parsing attributes in process `syz.4.21488'.
[  875.188888][T23358] tipc: Enabling of bearer <ib:caif0> rejected, max 3 bearers permitted
[  875.364970][T23377] netlink: 'syz.4.21503': attribute type 13 has an invalid length.
[  875.433839][T23385] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  875.436953][T23385] syzkaller0: entered promiscuous mode
[  875.448513][T23385] syzkaller0: entered allmulticast mode
[  875.490384][T23377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  875.495134][T23376] tipc: Resetting bearer <eth:syzkaller0>
[  875.535023][T23376] tipc: Disabling bearer <eth:syzkaller0>
[  875.535847][T23396] xt_addrtype: ipv6 does not support BROADCAST matching
[  875.603609][T23401] xt_CT: No such helper "snmp_trap"
[  875.617590][T23401] xt_CT: No such helper "snmp_trap"
[  875.640403][T23409] netlink: 'syz.4.21514': attribute type 7 has an invalid length.
[  875.642929][T23401] xt_CT: No such helper "snmp_trap"
[  875.898875][T23441] syzkaller0: entered promiscuous mode
[  875.900634][T23441] syzkaller0: entered allmulticast mode
[  875.942084][T23441] geneve1: Caught tx_queue_len zero misconfig
[  876.078540][T23458] netlink: 'syz.4.21533': attribute type 1 has an invalid length.
[  876.396370][T23502] syzkaller0: entered promiscuous mode
[  876.398603][T23502] syzkaller0: entered allmulticast mode
[  876.506487][T23511] 8021q: adding VLAN 0 to HW filter on device bond0
[  876.508962][T23511] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  876.542635][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  876.782803][T12442] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  876.986867][T23572] batadv0: Caught tx_queue_len zero misconfig
[  876.989347][T23572] netem: change failed
[  877.148855][T23579] bond15: Unable to set up delay as MII monitoring is disabled
[  877.152971][T23579] bond15 (unregistering): Released all slaves
[  877.182996][T23581] netlink: 'syz.3.21576': attribute type 6 has an invalid length.
[  877.356442][T23591] __nla_validate_parse: 14 callbacks suppressed
[  877.356454][T23591] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.21580'.
[  877.365135][T23591] geneve10: entered promiscuous mode
[  877.368602][T12442] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  877.373209][T12442] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  877.378522][T12442] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  877.384556][T12442] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  877.416808][T23594] netlink: 'syz.3.21581': attribute type 8 has an invalid length.
[  877.419360][T23594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21581'.
[  877.426921][T23594] bond0: entered promiscuous mode
[  877.429523][T23594] geneve0: entered promiscuous mode
[  877.432499][T23594] C: entered promiscuous mode
[  877.434793][T23594] hsr0: entered promiscuous mode
[  877.582471][ T5890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  877.692828][T23614] netlink: 'syz.3.21587': attribute type 1 has an invalid length.
[  877.695386][T23614] netlink: 'syz.3.21587': attribute type 2 has an invalid length.
[  877.749048][T23623] netlink: 'syz.2.21590': attribute type 1 has an invalid length.
[  877.785860][T23623] bond22: (slave vxcan3): The slave device specified does not support setting the MAC address
[  877.789699][T23623] bond22: (slave vxcan3): Error -95 calling set_mac_address
[  877.833745][T11586] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  877.836520][T11586] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  878.080139][T23655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21602'.
[  878.181590][T23668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21607'.
[  878.186010][T23668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21607'.
[  878.247672][T23673] ip6tnl6: entered allmulticast mode
[  878.432168][ T5909] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  878.464295][T23685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21611'.
[  878.488926][T23680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21611'.
[  878.622116][    T9] page_pool_release_retry() stalled pool shutdown: id 47, 3329 inflight 665 sec
[  878.763406][T23691] xt_hashlimit: size too large, truncated to 1048576
[  878.814614][T23693] : renamed from tunl0 (while UP)
[  878.943751][T23697] bond23: (slave vxcan5): The slave device specified does not support setting the MAC address
[  878.948379][T23697] bond23: (slave vxcan5): Error -95 calling set_mac_address
[  878.951443][T23700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21615'.
[  878.995436][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21616'.
[  879.006464][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21616'.
[  879.026441][T23705] xt_socket: unknown flags 0x50
[  879.085895][T23708] 8021q: adding VLAN 0 to HW filter on device bond24
[  879.162189][T23717] macsec1: entered promiscuous mode
[  879.166878][T23717] bond24: entered promiscuous mode
[  879.169295][T23717] macsec1: entered allmulticast mode
[  879.179292][T23717] bond24: entered allmulticast mode
[  879.184121][T23717] bond24: left allmulticast mode
[  879.186176][T23717] bond24: left promiscuous mode
[  879.967972][T23746] validate_nla: 6 callbacks suppressed
[  879.967983][T23746] netlink: 'syz.2.21634': attribute type 1 has an invalid length.
[  880.474173][T23779] netlink: 'syz.4.21646': attribute type 17 has an invalid length.
[  881.210339][T23813] netlink: 'syz.3.21658': attribute type 62 has an invalid length.
[  882.005204][T23815] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  882.010956][T23815] netem: change failed
[  882.063868][ T5890] page_pool_release_retry() stalled pool shutdown: id 178, 3329 inflight 302 sec
[  882.302034][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  882.337964][T23843] netlink: 'syz.4.21668': attribute type 1 has an invalid length.
[  882.348824][T23848] macsec2: entered allmulticast mode
[  882.351029][T23848] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode
[  882.359555][T23848] mac80211_hwsim hwsim26 wlan1: left allmulticast mode
[  882.495132][T23861] __nla_validate_parse: 12 callbacks suppressed
[  882.495141][T23861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21675'.
[  882.515522][T23861] bridge0: port 1(vlan3) entered blocking state
[  882.517641][T23861] bridge0: port 1(vlan3) entered disabled state
[  882.519630][T23861] vlan3: entered allmulticast mode
[  882.521212][T23861] erspan0: entered allmulticast mode
[  882.528068][T23861] vlan3: entered promiscuous mode
[  882.529742][T23861] erspan0: entered promiscuous mode
[  882.533132][T23862] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  882.568918][T23866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21677'.
[  882.688575][T23874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21680'.
[  882.756076][T23883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21683'.
[  882.765623][T23883] netlink: 2 bytes leftover after parsing attributes in process `syz.2.21683'.
[  882.921310][T23894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21687'.
[  883.242581][T23920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21693'.
[  884.661201][T23924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21694'.
[  884.691072][T23924] bond26: option lacp_rate: invalid value (227)
[  884.700543][T23924] bond26 (unregistering): Released all slaves
[  884.862150][ T9794] page_pool_release_retry() stalled pool shutdown: id 37, 5276 inflight 726 sec
[  884.992798][T23962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21706'.
[  884.995764][T23962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21706'.
[  885.108389][T23975] xt_CT: You must specify a L4 protocol and not use inversions on it
[  885.251134][T23998] ip6_vti0 speed is unknown, defaulting to 1000
[  885.436556][T24029] SET target dimension over the limit!
[  885.645140][T24065] netlink: 'syz.2.21736': attribute type 10 has an invalid length.
[  885.650694][T24065] `: entered promiscuous mode
[  885.658872][T24065] bridge4: entered promiscuous mode
[  885.759821][T24081] vlan3: left allmulticast mode
[  885.764791][T24081] erspan0: left allmulticast mode
[  885.766793][T24081] vlan3: left promiscuous mode
[  885.768552][T24081] erspan0: left promiscuous mode
[  885.770697][T24081] bridge0: port 1(vlan3) entered disabled state
[  885.891918][T24091] ip6_vti0 speed is unknown, defaulting to 1000
[  886.332110][T24139] netlink: 'syz.2.21760': attribute type 29 has an invalid length.
[  886.419740][T24151] xfrm2: entered allmulticast mode
[  886.456725][T24158] netlink: 'syz.2.21767': attribute type 21 has an invalid length.
[  886.980352][T24192] netlink: 'syz.2.21777': attribute type 13 has an invalid length.
[  886.986127][T24192] macvtap0: entered promiscuous mode
[  886.992498][T24192] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  887.267568][T24209] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  887.312843][T24212] ip6gretap3: entered promiscuous mode
[  887.316503][T24212] bond0: (slave ip6gretap3): Enslaving as an active interface with an up link
[  887.561345][T24243] __nla_validate_parse: 19 callbacks suppressed
[  887.561356][T24243] netlink: 7 bytes leftover after parsing attributes in process `syz.2.21795'.
[  887.566788][T24243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21795'.
[  887.569942][T24243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21795'.
[  887.595845][T24248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21796'.
[  887.840683][T24255] netlink: 'syz.4.21799': attribute type 1 has an invalid length.
[  887.843733][T24255] netlink: 'syz.4.21799': attribute type 2 has an invalid length.
[  887.873127][T24257] netlink: 'syz.4.21800': attribute type 3 has an invalid length.
[  887.875551][T24257] netlink: 'syz.4.21800': attribute type 16 has an invalid length.
[  887.878515][T24257] netlink: 132 bytes leftover after parsing attributes in process `syz.4.21800'.
[  887.888695][T24257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21800'.
[  887.894013][T24257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21800'.
[  887.897370][T24257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21800'.
[  887.901442][T24257] netlink: 72 bytes leftover after parsing attributes in process `syz.4.21800'.
[  887.905091][T24257] netlink: 'syz.4.21800': attribute type 1 has an invalid length.
[  887.912358][T24257] ip6gretap4: entered allmulticast mode
[  888.010205][T24268] netlink: 'syz.4.21804': attribute type 298 has an invalid length.
[  888.025027][T24268] team_slave_0: Caught tx_queue_len zero misconfig
[  888.086311][T24275] netlink: 60 bytes leftover after parsing attributes in process `syz.4.21806'.
[  888.555277][T24320] syzkaller0: entered promiscuous mode
[  888.557687][T24320] syzkaller0: entered allmulticast mode
[  888.819850][T24328] syzkaller1: entered promiscuous mode
[  888.822152][T24328] syzkaller1: entered allmulticast mode
[  889.690345][T24349] TCP: TCP_TX_DELAY enabled
[  889.805466][T24354] ip6_vti0 speed is unknown, defaulting to 1000
[  890.362709][T24380] sctp: [Deprecated]: syz.2.21843 (pid 24380) Use of int in max_burst socket option deprecated.
[  890.362709][T24380] Use struct sctp_assoc_value instead
[  890.466683][T24387] netem: change failed
[  890.872182][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  891.335581][T24445] macvtap0: entered promiscuous mode
[  891.337302][T24445] batadv0: entered promiscuous mode
[  891.339830][T24445] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  891.606155][T24460] ip6_vti0 speed is unknown, defaulting to 1000
[  891.688047][T24471] netem: change failed
[  892.308018][T24516] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  892.480148][T24532] ip6tnl0: Caught tx_queue_len zero misconfig
[  892.566855][T24542] sctp: [Deprecated]: syz.4.21899 (pid 24542) Use of struct sctp_assoc_value in delayed_ack socket option.
[  892.566855][T24542] Use struct sctp_sack_info instead
[  892.580801][T24550] __nla_validate_parse: 13 callbacks suppressed
[  892.580816][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21901'.
[  892.627060][T24556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21903'.
[  892.687899][T24557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.21902'.
[  892.739544][T24566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21906'.
[  892.749022][T24566] netlink: 312 bytes leftover after parsing attributes in process `syz.2.21906'.
[  892.886992][T24579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21911'.
[  893.054484][T24588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21914'.
[  893.112637][T24588] bond26: (slave bridge30): Enslaving as an active interface with an up link
[  893.119606][T24588] macvlan2: entered promiscuous mode
[  893.121455][T24588] macvlan2: entered allmulticast mode
[  893.125540][T24588] bond26: entered promiscuous mode
[  893.127338][T24588] bridge30: entered promiscuous mode
[  893.129719][T24588] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  893.133449][T24588] bond26: left promiscuous mode
[  893.135461][T24588] bridge30: left promiscuous mode
[  893.254715][T24595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21916'.
[  893.398340][T24608] ip6_vti0 speed is unknown, defaulting to 1000
[  893.572201][T24622] lo: Caught tx_queue_len zero misconfig
[  893.709857][T24634] sctp: [Deprecated]: syz.3.21928 (pid 24634) Use of struct sctp_assoc_value in delayed_ack socket option.
[  893.709857][T24634] Use struct sctp_sack_info instead
[  894.013446][T24657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21935'.
[  894.072917][T24662] atomic_op ffff8880217db998 conn xmit_atomic 0000000000000000
[  894.182715][T24670] netlink: 104 bytes leftover after parsing attributes in process `syz.3.21940'.
[  894.253152][T24674] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  894.395981][T24687] delete_channel: no stack
[  894.542951][T24708] x_tables: ip_tables: ah match: only valid for protocol 51
[  894.754664][T24718] dvmrp8: left allmulticast mode
[  894.834831][T24724] validate_nla: 3 callbacks suppressed
[  894.834842][T24724] netlink: 'syz.2.21956': attribute type 2 has an invalid length.
[  894.933839][T24728] xt_limit: Overflow, try lower: 268435456/134217728
[  895.009690][T24737] block nbd4: Unsupported socket: should be TCP or UNIX.
[  895.299762][T24758] netlink: 'syz.3.21970': attribute type 1 has an invalid length.
[  895.303694][T24758] nbd: error processing sock list
[  895.436936][T24764] bond15: Unable to set up delay as MII monitoring is disabled
[  895.442542][T24764] bond15 (unregistering): Released all slaves
[  895.755873][T24775] tipc: Resetting bearer <eth:syzkaller0>
[  895.856739][T24775] batadv0: left promiscuous mode
[  895.866753][T12442] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  895.874977][T12442] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  895.885004][T12442] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  895.917290][T12442] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  895.973958][T24783] nbd: nbd2 already in use
[  895.977323][T24783] nbd: illegal input index 65508
[  896.075748][T24789] IPVS: set_ctl: invalid protocol: 12 172.30.0.4:20001
[  896.278820][T24798] 8021q: adding VLAN 0 to HW filter on device bond27
[  896.407165][T24808] : entered promiscuous mode
[  897.609250][T24831] __nla_validate_parse: 16 callbacks suppressed
[  897.609268][T24831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21990'.
[  897.786717][T24844] netlink: 'syz.3.21995': attribute type 6 has an invalid length.
[  897.791331][T24844] netlink: 'syz.3.21995': attribute type 3 has an invalid length.
[  897.795843][T24844] netlink: 240 bytes leftover after parsing attributes in process `syz.3.21995'.
[  897.823660][T24851] netlink: 'syz.3.21997': attribute type 3 has an invalid length.
[  897.862507][T24855] netlink: 'syz.2.21998': attribute type 6 has an invalid length.
[  898.009471][T24865] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode
[  898.012390][T24865] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode
[  898.018238][T24865] netlink: 'syz.2.22002': attribute type 23 has an invalid length.
[  898.115737][T24870] ip6_vti0 speed is unknown, defaulting to 1000
[  898.293910][T24868] netlink: 'syz.2.22003': attribute type 1 has an invalid length.
[  898.299892][T24868] netlink: 'syz.2.22003': attribute type 4 has an invalid length.
[  898.304937][T24868] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.22003'.
[  898.312824][T24868] netlink: 'syz.2.22003': attribute type 1 has an invalid length.
[  898.317997][T24868] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.22003'.
[  898.379386][T24876] syz_tun: left allmulticast mode
[  898.507820][T24896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  898.680190][T24915] netlink: 68 bytes leftover after parsing attributes in process `syz.4.22020'.
[  898.837048][T24932] netlink: 52 bytes leftover after parsing attributes in process `syz.3.22024'.
[  898.886337][T24938] netlink: 156 bytes leftover after parsing attributes in process `syz.4.22029'.
[  898.889287][T24938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22029'.
[  898.899326][T24938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22029'.
[  898.953195][T24944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22028'.
[  899.226918][T24984] 8021q: adding VLAN 0 to HW filter on device bond15
[  899.349089][T25000] syzkaller1: entered promiscuous mode
[  899.350895][T25000] syzkaller1: entered allmulticast mode
[  899.723034][T25027] 8021q: adding VLAN 0 to HW filter on device bond16
[  899.726844][T25027] bond16: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  899.736190][T25027] 8021q: adding VLAN 0 to HW filter on device bond16
[  899.745392][T25027] bond16: (slave lo): Enslaving as an active interface with an up link
[  899.846949][T25027] bond16 (unregistering): (slave lo): Releasing backup interface
[  899.849751][T25027] bond16 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  899.857727][T25027] bond16 (unregistering): Released all slaves
[  899.900693][T25034] x_tables: duplicate underflow at hook 1
[  899.951863][ T8455] unregister_netdevice: waiting for lo to become free. Usage count = 11935
[  899.957586][ T8455] ref_tracker: netdev@ffff888115446618 has 11934/11934 users at
[  899.957586][ T8455]      dst_init+0xd9/0x450
[  899.957586][ T8455]      dst_alloc+0x12a/0x170
[  899.957586][ T8455]      ip_route_input_rcu+0x23e5/0x3130
[  899.957586][ T8455]      ip_route_input_noref+0x17c/0x270
[  899.957586][ T8455]      ip_rcv_finish_core+0x5af/0x1c00
[  899.957586][ T8455]      ip_sublist_rcv+0x3ad/0xa70
[  899.957586][ T8455]      ip_list_rcv+0x3f1/0x450
[  899.957586][ T8455]      __netif_receive_skb_list_core+0x7e5/0x810
[  899.957586][ T8455]      netif_receive_skb_list_internal+0x995/0xcf0
[  899.957586][ T8455]      netif_receive_skb_list+0x54/0x410
[  899.957586][ T8455]      bpf_test_run_xdp_live+0x1946/0x1cf0
[  899.957586][ T8455]      bpf_prog_test_run_xdp+0x7d2/0x1120
[  899.957586][ T8455]      bpf_prog_test_run+0x2c7/0x340
[  899.957586][ T8455]      __sys_bpf+0x5cb/0x920
[  899.957586][ T8455]      __x64_sys_bpf+0x7c/0x90
[  899.957586][ T8455]      do_syscall_64+0xe2/0xf80
[  899.957586][ T8455] 
