last executing test programs:

3m24.283229506s ago: executing program 0 (id=177):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x3, {0x0, 0x0, 0x3}, 0x2}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x63, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x2}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x2008c004)

3m24.224161548s ago: executing program 0 (id=180):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(r2, 0x0, 0x0)
close(0x3)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c00003800048031"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@ifindex=r1, r0, 0x19, 0x2000, r0, @value=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

3m24.053096286s ago: executing program 0 (id=186):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f600008100000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f600008100000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x83}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x83}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="8d04798e0d8ea25a126d7bebb23587070930a4824636ecea8b4d00973784f8b364bcfa80baef8c7bc59630657d17275beafd3ce12a0821ede6337ea62fb27a54c8f0d0e2263d2af54559e79427bc717d7499d7189dc8e2450ab30280b4b0d81ba23b85d15a6adbc7ef18a0fe8debf56c2d53e17f3e7d83050053a7e51ceaaea859401e1cc28f185a65f722a6f3acffff13475d275552", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB], 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r8=>0x0})
socket(0x10, 0x803, 0x0) (async)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r8, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x40, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x40}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x10) (async)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x40, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x40}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
sendmsg$inet_sctp(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="cf8b5205", 0x4}, {&(0x7f0000000440)="e5", 0x1}], 0x2, 0x0, 0x0, 0x10}, 0x24040010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r14, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r15, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030005ac0f0005000900010000001c"], 0x58}}, 0x0)
sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600060600000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r16 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$int_out(r16, 0x5460, &(0x7f0000000080))

3m23.884163237s ago: executing program 0 (id=190):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000700000000060015000400000014001680100008800c0002c0"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100))
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042)
close(0x3)
setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4)

3m23.50029328s ago: executing program 0 (id=194):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) (async)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) (async, rerun: 64)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000010080001000100"/28], 0x1c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)

3m23.242956788s ago: executing program 0 (id=197):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0)
syz_emit_ethernet(0x15b, &(0x7f0000000700)={@remote, @empty, @void, {@mpls_mc={0x8848, {[{0x6f, 0x0, 0x1}, {0x2}, {0x60, 0x0, 0x1}], @ipv6=@tcp={0x7, 0x6, "b49643", 0x119, 0x6, 0xff, @mcast1, @mcast1, {[@fragment={0x4, 0x0, 0x9a, 0x0, 0x0, 0x9, 0x68}, @routing={0x2f, 0xe, 0x2, 0x2, 0x0, [@loopback, @local, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @remote]}], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x1, 0xc, 0x0, 0x7f, {[@md5sig={0x13, 0x12, "cfa6ca6d50fdef86496fcc9120d5adea"}]}}, {"1940984c59e118afc08a3850b3bb59faf86e8c47d2c981b4ffba6b902d3d41fb468b8f34e9a7700ae536879fee2658e78d6845029af515dce75c76666278ebad0cc8123aa23ee788f81b27a69f882e210e391ed45508a8120e5aaac32e1f2b0e81d76523bf057dd5b0afd05b91da0e8b51"}}}}}}}}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x9}) (async, rerun: 64)
r3 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) (async)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r4], 0x21c}}, 0x0) (async)
r6 = getpid() (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r7)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r8, 0x72b}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) (async, rerun: 32)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async)
write$cgroup_pid(r4, &(0x7f00000006c0)=r6, 0x12)
r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r11}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

3m23.163744072s ago: executing program 32 (id=197):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0)
syz_emit_ethernet(0x15b, &(0x7f0000000700)={@remote, @empty, @void, {@mpls_mc={0x8848, {[{0x6f, 0x0, 0x1}, {0x2}, {0x60, 0x0, 0x1}], @ipv6=@tcp={0x7, 0x6, "b49643", 0x119, 0x6, 0xff, @mcast1, @mcast1, {[@fragment={0x4, 0x0, 0x9a, 0x0, 0x0, 0x9, 0x68}, @routing={0x2f, 0xe, 0x2, 0x2, 0x0, [@loopback, @local, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @remote]}], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x1, 0xc, 0x0, 0x7f, {[@md5sig={0x13, 0x12, "cfa6ca6d50fdef86496fcc9120d5adea"}]}}, {"1940984c59e118afc08a3850b3bb59faf86e8c47d2c981b4ffba6b902d3d41fb468b8f34e9a7700ae536879fee2658e78d6845029af515dce75c76666278ebad0cc8123aa23ee788f81b27a69f882e210e391ed45508a8120e5aaac32e1f2b0e81d76523bf057dd5b0afd05b91da0e8b51"}}}}}}}}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x9}) (async, rerun: 64)
r3 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) (async)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r4], 0x21c}}, 0x0) (async)
r6 = getpid() (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r7)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r8, 0x72b}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) (async, rerun: 32)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async)
write$cgroup_pid(r4, &(0x7f00000006c0)=r6, 0x12)
r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r11}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

1.132085919s ago: executing program 1 (id=2943):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r4, 0x8, 0x12}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x10)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, &(0x7f0000003780))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x880000, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.072239739s ago: executing program 1 (id=2945):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000005, 0x8c4b815a5465c2b1, r0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x2, 0x0)
setsockopt(r2, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f00)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2d, 0xb, 0xffffffffffffb7ce, {0x3, @ah_ip6_spec={@empty, @rand_addr=' \x01\x00', 0x8, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x2, 0x40, [0x6be112d9]}, @udp_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x4e24, 0x4e23, 0x1c}, {0x0, @empty, 0x302, 0x7, [0x6, 0xbe]}, 0x4}}})
close(r2)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe000000000a0000", 0x1c)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @loopback}], 0x10)

897.907957ms ago: executing program 3 (id=2949):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="020000000000010000003f000000080003000000000053ee5482f552c9020922f0487044581a7a0e042a007adc9bfd9c3808489d26520b1dac722c2213ba73efdfd8a28b88d671764bad7d4c22abe9a8702adc761fa0af48999f625dd5585cec0f6b5ca1b004bd4c166c5115b03fd0f82a2b3ea383f8ccc21f2230d8ddf31a3cde9914dddd5b180d"], 0x1c}}, 0x40845)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
accept4$rose(r2, &(0x7f0000000340)=@full={0xb, @dev, @default, 0x0, [@remote, @remote, @default, @null]}, &(0x7f0000000440)=0x40, 0x800)
r3 = socket(0x10, 0x3, 0x2)
r4 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x35}}]}]}, 0xac}}, 0x20000000) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x35}}]}]}, 0xac}}, 0x20000000)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)
socket(0x10, 0x80003, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x12}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) (async)
getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)
unshare(0x2a020400)
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25250000000e0026b360442c01006e65746465767383fdadc91c4e9ba00846696d0000000f0002006e657464657673696d3000001eb4b90d9d4a2096950d661735f9fe95d7ca53082696725f00c5cd015822e4bb0616b761174918409fb8d6def45b5fec60e37ec4a9cad4723905ed2e80cd2bda19471e2af5275dfadcb3386f3cac6af9695f418bf7f19ba4b18c3330d96b"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280000}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280000}}, 0xe8)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000140)=0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)

892.635305ms ago: executing program 2 (id=2950):
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000008d1b9829c215000000000400"/34], 0x50) (async)
socket$inet(0x2, 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0) (async)
epoll_create1(0x80000)
socket(0x1, 0x80802, 0x0) (async)
epoll_create1(0x0) (async)
socket$netlink(0x10, 0x3, 0x12)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async)
accept4(r1, 0x0, 0x0, 0x800) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) (async)
socket$inet6(0xa, 0x802, 0x0) (async)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000380)={<r3=>0x0, 0x8001, 0x20, 0x8, 0x101}, &(0x7f00000003c0)=0x18)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000400)={r3, 0x88}, 0x8)
r4 = socket(0x1d, 0x2, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) (async)
recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/128, 0x80}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0)
close(r5) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00'}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socket$nl_route(0x10, 0x3, 0x0)

806.547552ms ago: executing program 3 (id=2951):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r3, 0x8, 0x12}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x10)
close(r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x880000, {0x0, 0x0, 0x0, r9, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

806.075429ms ago: executing program 2 (id=2952):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x2, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0x2}, {0x1, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x7fff}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

701.673279ms ago: executing program 2 (id=2953):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0x3da0000)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x200000000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r3)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000006800090300e5ffffff0a8b0000000a0004000000000004000b0014000880000120020000000000000000000012820c3e54c4e7aea35b4900b6f6d2f725b20100c8a521311ed28ff8fab5876660971c0704ec51d7"], 0x30}}, 0x0)

694.108389ms ago: executing program 3 (id=2954):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000e0000000001812000000a8201f0221909aa05553613c2becb6fb0595c74436efe4ace8216cccddf4d042816be32ad94ab7981fadb8979c7b395e13be8e4d5505e912901abee1cc00dd8f88a5b7d5da", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

636.431407ms ago: executing program 2 (id=2955):
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5dcb229a}, @ETHTOOL_A_CHANNELS_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0xc800) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0)
ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) (async, rerun: 64)
r3 = socket$kcm(0x29, 0x7, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f00000001c0)={0xf38, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x69}}}}, [@NL80211_ATTR_TX_RATES={0x3ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0xa}, {0x5, 0xa}, {0x4}, {0x3, 0x2}, {0x7}, {0x6, 0x4}, {0x6, 0x1}, {0x1, 0x9}, {0x3}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x9}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0x5}, {0x1, 0xa}, {0x5, 0x9}, {0x6, 0x9}, {0x2, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0x2}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0x9}, {0x7, 0x3}, {0x4, 0xa}, {0x3, 0x7}, {0x7, 0x1}, {0x6, 0x9}, {0x0, 0x7}, {0x6, 0x1}, {0x1, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x7}, {0x4, 0xa}, {0x7, 0x7}, {0x1, 0x8}, {}, {0x0, 0x2}, {0x4, 0x3}, {0x4, 0x9}, {0x5, 0xa}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0x8}, {0x7, 0x9}, {0x7, 0x6}, {0x1, 0x2}, {0x3, 0xa}, {0x2, 0x6}, {0x0, 0xa}, {0x5, 0x1}, {0x1}, {0x7, 0x9}, {}, {0x1, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x7}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x1, 0x9}, {0x7}, {0x0, 0x2}, {0x3, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x30, 0x9, 0x5, 0x3, 0x5, 0x18, 0x2]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x4, 0x4, 0x16, 0x9, 0x39, 0x24, 0x6c, 0x6c, 0x48, 0x36, 0x60, 0x6c, 0x0, 0x27, 0x0, 0x12, 0x6, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x6c, 0x24, 0x4, 0x30, 0x24, 0x18, 0x6c, 0x1, 0x48, 0x3, 0x1b, 0x3, 0x12, 0x6, 0x1, 0x12, 0xb, 0x2, 0x2, 0x24, 0x1, 0x6c, 0x4e, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xa80, 0x8000, 0x2, 0x1, 0x6, 0x2ce2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x9, 0x3, 0x7f, 0x4, 0xc, 0xe]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x4, 0x2, 0x3, 0x0, 0x85, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x48, 0x3, 0x36, 0x48, 0x6, 0x48, 0x3, 0xb, 0x18, 0x36, 0x3, 0x30, 0xc, 0x3, 0x56, 0x60, 0x60, 0x7, 0x12, 0x1b, 0x6]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x9}, {0x6, 0x3}, {0x3, 0x3}, {0x3, 0x3}, {0x2, 0x8}, {0x0, 0x6}, {0x5}, {0x3, 0x4}, {0x7, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x3, 0x18, 0x16, 0x48, 0x1, 0x48, 0x16, 0x16, 0x1, 0x1b, 0x48, 0x1, 0x5, 0x12, 0x60, 0x24, 0x30, 0x60, 0x2, 0x12, 0xc, 0x3, 0x9, 0xb, 0x60, 0x63, 0x1]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x3}, {0x2, 0x3}, {0x1, 0x8}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0x4}, {0x2, 0x6}, {0x0, 0x6}, {0x0, 0x2}, {0x4}, {0x0, 0x5}, {0x1, 0x5}, {0x7}, {0x6, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x6}, {0x1, 0x2}, {0x3, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x5, 0x6}, {0x2, 0x8}, {0x0, 0x2}, {0x3, 0x5}, {0x7, 0xa}, {0x4, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x1621, 0x7, 0xac, 0x7, 0x96, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x17, 0xa, 0x48, 0x18, 0x3, 0x30, 0x6, 0x18, 0x5, 0xc, 0xb, 0x30, 0xc, 0x60, 0x5, 0x13, 0x6, 0xc, 0x5, 0x18, 0x0, 0xc, 0x7f, 0x24, 0x16, 0x6c, 0x12, 0x3]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x5, 0x8}, {0x2}, {0x6, 0x3}, {0x4, 0x5}, {0x3, 0x2}, {0x1, 0x5}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x7}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0x1}, {0x5, 0x3}, {0x3, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x4, 0xa}, {0x3, 0xa}, {0x1}, {0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x2}, {0x3, 0x9}, {0x7, 0x9}, {0x2, 0x9}, {0x7, 0x5}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0x7}, {0x4}, {0x6, 0x9}, {0x7, 0x2}, {0x1, 0x5}, {0x3}, {0x0, 0xa}, {0x5, 0x5}, {0x7, 0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x4, 0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x3}, {0x4, 0xa}, {0x6, 0x7}, {0x3, 0x2}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x8}, {0x7, 0xa}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0xa}, {0x2}, {0x3, 0x9}, {0x4, 0x2}, {0x4, 0x6}, {0x0, 0x8}, {0x2, 0x8}, {0x0, 0x7}, {0x4}, {}, {0x1, 0x7}, {0x4, 0x4}, {0x5, 0xa}, {0x7}, {0x1, 0x5}, {0x2, 0x1}, {0x6, 0x5}, {0x5, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x2, 0x9}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x9}, {0x7, 0x7}, {0x2, 0x6}, {0x5, 0x3}, {0x2}, {0x7, 0xa}, {0x1}, {0x2, 0x5}, {0x3, 0x5}, {0x2, 0x4}, {0x0, 0x6}, {0x3, 0xa}, {0x4, 0x8}, {0x1, 0xa}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x5}, {0x0, 0x4}, {0x3, 0x2}, {0x5}, {0x3, 0x6}, {0x3, 0xa}, {0x3, 0x9}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0x1}, {0x5, 0x1f}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x5}, {0x1, 0x1}, {0x5, 0x4}, {0x7, 0x6}, {0x2, 0x4}, {0x6, 0x8}, {0x6, 0x8}, {0x2, 0x1}, {0x0, 0x2}, {0x5, 0xa}, {0x7, 0x5}, {0x3, 0x4}, {0x3, 0x1}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x7}, {0x6, 0x1}]}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x1}, {0x1}, {0x2, 0x8}, {0x7, 0xa}, {0x1, 0x6}, {0x4}, {0x4, 0x6}, {0x5}, {0x0, 0x5}, {0x6, 0x4}, {0x5, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x4, 0x2}, {0x4}, {0x4, 0x5}, {0x3, 0x7}, {0x1, 0x3}, {0x2, 0x7}, {0x1, 0x8}, {0x2, 0xa}, {0x5}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x6}, {0x5, 0xa}, {0x1, 0x8}, {0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x3, 0x1}, {0x5, 0x4}, {0x5, 0x9}, {0x5, 0x8}, {0x2, 0x5}, {0x7, 0x5}, {0x7, 0x5}, {0x0, 0x7}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x2}, {0x4, 0xa}, {0x1, 0x6}, {0x5, 0x4}, {0x2, 0x1}, {0x6, 0xa}, {0x3, 0x2}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0x2}, {0x3, 0x9}, {0x0, 0x9}, {0x2, 0x1}, {0x7, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0x2}, {0x3, 0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x1}, {0x3, 0x5}, {0x4, 0x5}, {0x2, 0x8}, {0x4, 0x7}, {0x6, 0x4}, {0x7, 0x8}, {0x5, 0x9}, {0x0, 0x6}, {0x7, 0x2}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x5}, {0x2, 0x1}, {0x7, 0xa}, {0x2, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x2}, {0x1, 0xa}, {0x4, 0x4}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x3, 0x6}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x4, 0x2}, {0x3, 0x7}, {0x1}, {0x4, 0x3}, {0x1, 0x9}, {0x3, 0x9}, {0x1, 0x4}, {0x3, 0x2}, {0x5}, {0x1, 0x6}, {0x2, 0x4}, {0x6, 0x4}, {0x2}, {0x6, 0x1}, {0x1}, {0x1, 0x7}, {0x2, 0x3}, {0x2, 0xa}, {0x7}, {0x2, 0x5}, {0x6, 0x3}, {0x1}, {0x6, 0x6}, {0x3, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x4, 0x1}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x6}, {0x0, 0x9}, {0x5, 0x4}, {0x6, 0x6}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x89b, 0x1, 0x5, 0x1ff, 0xff9e, 0x7, 0x9]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x0, 0x30, 0xc, 0xc, 0x3, 0x48, 0x6c, 0x9, 0x2, 0x2, 0x1, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x80, 0x3b4f, 0x6, 0x2, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0xa}, {0x2, 0x7}, {0x1, 0x4}, {0x1, 0xa}, {0x5, 0x1}, {0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x4}, {0x3}, {0x3, 0x7}, {0x6, 0x9}, {0x0, 0x4}, {0x3, 0x6}, {0x4, 0x2}, {0x5}, {0x1, 0x5}, {0x6, 0x3}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0xa}, {0x4, 0x3}, {0x0, 0x4}, {0x2, 0x9}, {0x5, 0x6}, {0x5, 0x6}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x5}, {0x4, 0x7}, {0x4, 0x8}, {0x5, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x5, 0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x5, 0x1}, {0x7, 0x3}, {0x0, 0x2}, {0x4, 0x7}, {0x7, 0xa}, {0x5}, {0x1, 0x2}, {0x7, 0x6}, {0x4, 0xa}, {0x0, 0xa}, {0x5, 0x3}, {0x5, 0x9}, {0x6, 0x3}, {0x3, 0x2}, {0x5, 0x7}, {0x4, 0x8}, {0x7, 0x2}, {0x3, 0x4}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0xa}, {0x0, 0x2}, {0x4, 0x6}, {0x6, 0x4}, {0x5, 0x5}, {0x2, 0x8}, {0x5, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {}, {0x3, 0x6}, {0x7, 0x3}, {0x0, 0x1}, {0x4, 0x2}, {0x7, 0x9}, {0x3, 0xa}, {0x7, 0x7}, {0x6, 0x1}, {0x7, 0x9}, {0x1, 0x3}, {0x5, 0x3}, {0x0, 0x8}, {0x5, 0x8}, {0x4, 0x6}, {0x5}, {0x4, 0x8}, {0x2, 0x2}, {0x1, 0x5}, {0x0, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x5, 0x6}, {0x7, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x5, 0x4}, {0x2, 0x3}, {0x1, 0x2}, {0x5, 0x4}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x7}, {0x1, 0xa}, {0x4}, {0x2, 0x1}, {0x1, 0x2}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x3}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x4}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0xa}, {0x5, 0x1}, {0x2, 0x6}, {0x4, 0x1}, {0x5}, {0x4, 0x5}, {0x1, 0x9}, {0x3, 0x9}, {0x3, 0x6}, {0x4, 0xa}, {0x0, 0x4}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x2a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x0, 0x3, 0x3, 0xf9, 0x1, 0x100, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x2, 0x4, 0x4, 0x7ff, 0x5, 0x1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x9}, {0x7, 0x2}, {0x4, 0x1}, {0x7, 0x6}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x6}, {0x1, 0x5}, {0x6, 0x1}, {0x6, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x6, 0x5}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0x6}, {0x2, 0x3}, {0x5, 0x7}, {0x3, 0x5}, {0x2, 0x5}, {0x3, 0xa}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5, 0x3}, {0x1, 0x5}, {0x6, 0x8}, {0x3, 0x7}, {0x5, 0x6}, {0x0, 0x2}, {0x2}, {0x5, 0x3}, {0x4, 0xa}, {0x0, 0x1}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0x1}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x9}, {0x2, 0x9}, {0x1, 0x9}, {0x6, 0x9}, {0x7, 0xa}, {0x5, 0x8}, {0x5, 0x7}, {0x6, 0xa}, {0x1, 0x9}, {0x4, 0x2}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x3}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x9}, {0x7, 0x9}, {0x7}, {0x1, 0x3}, {0x5, 0x5}, {0x6}, {0x5, 0x6}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x5}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x9}, {0x7, 0x3}, {0x4, 0x5}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0x9}, {0x3, 0x4}, {0x2, 0x5}, {0x1, 0x2}, {0x6}, {0x3, 0x6}, {0x6, 0x6}, {0x1, 0xa}, {0x5, 0x8}, {0x2, 0x2}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x60, 0x35, 0x9, 0x12, 0x9, 0x60, 0x48, 0x16, 0xc, 0x36, 0xc, 0x16, 0x2, 0x12, 0x6c, 0x24, 0x36, 0x1, 0x9, 0x6, 0x30, 0x18, 0x1b, 0x9, 0x45, 0x1b, 0x3, 0x1, 0x1b, 0x12, 0x24]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x200, 0x8, 0x100, 0x8, 0x5, 0x2af, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x2, 0x8}, {0x7, 0x7}, {0x4, 0x4}, {0x6, 0x9}, {0x7, 0x7}, {0x4, 0x2}, {0x6, 0x1}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0x8}, {}, {0x7, 0x4}, {0x1, 0x8}, {0x1}, {0x7}, {0x4, 0x2}, {0x5, 0xa}, {0x7, 0x5}, {0x2, 0x9}, {0x6, 0x5}, {0x5, 0x5}, {0x6, 0x7}, {0x6, 0x8}, {0x4, 0x9}, {0x4, 0x5}, {0x6, 0x7}, {0x6, 0x9}, {0x6, 0x5}, {0x5, 0x1}, {0x4, 0x6}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x7}, {0x1, 0x1}, {0x1, 0x3}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6}, {0x6, 0x1}, {0x7, 0x8}, {0x4, 0x9}, {0x7, 0xa}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x2}, {0x2, 0x8}, {0x5, 0x2}, {0x4, 0x8}, {0x1, 0x8}, {0x7}, {0x5, 0x2}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x7, 0x2}, {0x2, 0x6}, {0x2, 0x7}, {0x4}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0xa}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x30, 0x1b, 0x60, 0x2, 0xc, 0x2, 0x0, 0x21d5b8eb64f2815c, 0x60, 0x1b, 0x6c, 0x48, 0x9, 0x60, 0x18, 0x2e, 0x18, 0x6c, 0x24, 0x4, 0x4, 0x1, 0x4, 0x48, 0x4, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0xdbdb, 0xffd2, 0xfff7, 0x2, 0x4, 0x8]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x16, 0x12, 0x16, 0x9, 0x1b, 0x36, 0x48, 0xcb, 0x48, 0x6c, 0x1, 0xc, 0x60, 0x48, 0x12, 0x5, 0xc, 0xb, 0x9, 0x16, 0xb, 0x5, 0x12, 0x36, 0x36, 0x7f, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x40, 0x4, 0x4, 0x6, 0x6, 0xfc9, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0xb, 0x6, 0x60, 0x9, 0x5, 0x9, 0x24, 0x18, 0x9, 0x48, 0x1b, 0x24, 0x2, 0x5, 0x3, 0x60, 0x2, 0x6, 0x0, 0x48, 0xc, 0x36, 0x40, 0x36]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x5, 0x12, 0x6, 0x24, 0x9, 0x1b, 0x60, 0x3, 0x12, 0x36, 0x16, 0x4, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x8, 0xf03, 0xb, 0xab, 0x9, 0x7]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x0, 0x5, 0x3, 0x562c, 0xd, 0x6, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x288, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x2, 0xc, 0x6c, 0x24, 0x24, 0x3, 0x9, 0x775a109c62b55cbb, 0x3, 0x12, 0x1b, 0x48, 0x16, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x62, 0x3, 0x8, 0x6, 0xff, 0x9, 0x2, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x8001, 0x5, 0xf000, 0x6, 0x8, 0x6, 0xa]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x30, 0x48, 0xb, 0xc, 0x24, 0x1b, 0x3, 0x16, 0x6c, 0x6, 0x12, 0xc, 0x16, 0x60, 0x5, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x8001, 0x8, 0x2, 0x4, 0x6, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfffe, 0xf3f, 0xac4, 0xeb06, 0x7, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0x9, 0x7, 0x3, 0x4, 0x2, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x4, 0x16, 0x30, 0x1, 0x4, 0x1b, 0x3, 0x6, 0x3, 0x48, 0x16, 0x4, 0x48, 0x48, 0x9, 0x6c, 0x60, 0x16, 0x12, 0x3, 0x12, 0x36]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x30, 0x24, 0x12, 0x60, 0x18, 0x48, 0x60, 0x6c, 0x24, 0x18, 0xc, 0x36, 0x36]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x1fe0, 0x0, 0xb, 0x5, 0x9, 0xf0f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x6, 0x3917, 0x2, 0x2, 0x40, 0x1]}}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x7, 0x2, 0x5, 0x5, 0x6, 0x2cfb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x1000, 0x5, 0x7fff, 0x7, 0x0, 0x9]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0xc, 0x30, 0x9, 0x3, 0x2, 0x2, 0x24, 0x48, 0x0, 0x9, 0xc, 0x4, 0x4, 0x6c, 0x36, 0x48, 0x3, 0x6, 0x3]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0x5}, {0x5, 0x9}, {0x0, 0x4}, {0x3, 0x2}, {0x0, 0x6}, {0x5, 0x9}, {0x5}, {0x0, 0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x3}, {0x7, 0x5}, {}, {0x7, 0x4}, {0x3}, {0x2, 0x6}, {0x5, 0x9}, {0x3, 0xa}, {0x7, 0x1}, {0x0, 0x7}, {0x6, 0x7}, {0x5, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x3}, {0x2, 0x4}, {0x1, 0x5}, {0x3, 0x1}, {0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x5}, {0x5, 0x8}, {0x4}, {0x5, 0xa}, {0x7, 0x1}, {0x5, 0xa}, {0x5, 0x9}, {0x0, 0x4}, {0x1}, {}, {0x2, 0x4}, {0x0, 0x1d}, {0x4, 0x9}, {0x5, 0x6}, {0x6, 0x8}, {0x6, 0xa}, {0x3, 0x1}, {0x3, 0x2}, {0x1, 0x2}, {0x5, 0x7}, {0x6, 0x6}, {0x5, 0x1}, {0x0, 0xa}, {0x4, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x3}, {0x5, 0xa}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x8, 0x6, 0x7fff, 0x3, 0x1, 0x8]}}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa535, 0x5, 0x4, 0xf60c, 0x400, 0x10, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x400, 0x8, 0x9, 0x8001, 0x9, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0xfff7, 0x6, 0xe, 0x2, 0xcd, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0xc0, 0x7ff, 0x1, 0x4, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8, 0x1, 0x0, 0x6, 0x1, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xc34, 0xff00, 0x2b1, 0x89, 0x3, 0x8, 0x8]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x41a, 0x8, 0xeb87, 0x316, 0x7ff, 0x6, 0x6, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x2}, {0x4, 0x6}, {0x7, 0x1}, {0x6, 0x1}, {0x3, 0x7}, {0x5, 0x4}, {0x7, 0x4}, {0x2, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x244, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd7, 0x4, 0x800, 0xb, 0x4, 0xa, 0x9, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x340c8bda29e9496e, 0x0, 0x36, 0x18, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x3134, 0x6, 0x3, 0x45, 0x96]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x1, 0x9, 0x1, 0x60]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x3, 0x3}, {0x5, 0x5}, {0x6, 0x2}, {0x2, 0x3}, {0x4, 0xa}, {0x3, 0x7}, {0x7, 0x7}, {0x0, 0x6}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x4, 0x5, 0x3, 0xfa69, 0x0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x4, 0x8, 0x65ab, 0x13, 0x8, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x7fff, 0x3, 0x5, 0x1, 0x3, 0x2, 0xb394]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x9}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x6}, {0x7, 0x3}, {0x4, 0x8}, {0x7, 0x9}, {0x4, 0x5}, {0x2}, {0x1, 0x6}, {0x3, 0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x7}, {}, {0x3, 0x7}, {0x2, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x2}, {0x3, 0x8}, {0x4, 0x5}, {0x6, 0x2}, {0x3, 0x6}, {0x5, 0x7}, {0x6, 0x5}, {0x3, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x3, 0xa}, {0x6, 0x1}, {0x1, 0x8}, {0x2, 0x1}, {0x1, 0x4}, {0x0, 0x9}, {0x2, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x4}, {0x4, 0x7}, {0x0, 0x6}, {0x1, 0x6}, {0x2, 0x6}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0x9}, {0x1, 0x4}, {0x3, 0xa}, {0x1, 0xa}, {0x5, 0x8}, {0x2, 0x5}, {0x2, 0x8}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x5}, {0x1}, {0x5, 0x7}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0xfffe, 0x7, 0x7ff, 0x538a, 0x86a, 0x45]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb15d, 0x0, 0x46a, 0xb, 0xfff9, 0xb, 0xff, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xc9, 0x3, 0x81, 0x2, 0x2, 0x6, 0x6ab]}}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x1}, {0x7, 0x8}, {0x3, 0x5}, {0x6, 0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x2}, {0x7, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x1, 0x8}, {0x7, 0x2}, {0x6, 0x2}, {0x0, 0x7}, {0x7, 0x7}, {0x0, 0x5}, {0x5, 0x8}, {0x7, 0x2}, {0x7}, {0x1, 0xa}, {0x1}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x9}, {0x5, 0x9}, {0x6, 0xa}, {0x6, 0x6}, {0x7, 0xa}, {0x6}, {0x2, 0x1}, {0x2, 0x2}, {0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0xa}, {0x2, 0x5}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x975, 0x3, 0x8000, 0xe, 0x6, 0x100, 0x7]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0xb, 0xb, 0x17, 0x9]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x6c, 0x6c, 0x2, 0x2, 0xb, 0x30, 0x12, 0x9, 0x30, 0x24, 0xc, 0x9, 0x12, 0xb, 0x2, 0x18, 0x12, 0x18, 0x60, 0xb, 0x24, 0x30, 0x30, 0x48, 0x0, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x1800, 0x7, 0xc, 0x1, 0x5, 0xffff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x2, 0x4954, 0x56c, 0x2, 0x8, 0xc27]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x5ea4, 0x3, 0x8, 0xc7d8, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xc167, 0x3, 0xf57, 0x9, 0x81, 0x5, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x170, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x3, 0x6bf, 0x0, 0x3, 0xff62, 0x4800]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x71, 0x24, 0x4, 0xc, 0x16, 0x18, 0x0, 0x48, 0x24, 0x12, 0x9, 0x1, 0x1, 0x18, 0x5, 0x9, 0x5, 0x3, 0xc, 0x0]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x27e2, 0x7, 0xff, 0x81, 0x6, 0x3, 0x2, 0x4]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x1}, {0x0, 0x6}, {0x3, 0x9}, {0x3, 0x7}, {0x4, 0x4}, {0x5, 0x5}, {0x2, 0x7}, {0x7, 0xa}, {0x0, 0x8}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0x8}, {0x5}, {0x6, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x6, 0x8}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xba33, 0x800, 0x8d2a, 0xfeff, 0x0, 0x5, 0x5, 0x40]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x4, 0x7}, {0x6, 0xa}, {0x3, 0x2}, {0x0, 0x7}, {0x7, 0xa}, {0x4, 0x6}, {0x1, 0x7}, {0x0, 0x6}, {0x7, 0x6}, {0x6, 0x11}, {0x6, 0x9}, {0x2, 0x3}, {0x0, 0x5}, {}, {0x6, 0x7}, {0x5, 0x2}, {0x0, 0x6}, {0x7}, {0x6, 0x9}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x4}, {0x4, 0x4}, {0x5, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x5}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x6}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x1}, {0x7, 0x9}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x7}, {0x1, 0x7}, {0x1}, {0x6, 0x2}, {0x3, 0x6}, {0x2, 0x2}, {0x6, 0x7}, {0x6, 0x2}, {0x5, 0x1}, {0x0, 0x6}, {0x2, 0x5}, {0x7, 0x1d}, {0x3, 0x7}, {0x5, 0x5}, {0x1, 0x5}, {0x7, 0xa}]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x9, 0x9, 0xff, 0xfffc, 0x6, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x4, 0xc, 0x1, 0x3, 0x31, 0x6, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x9}, {0x1, 0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0x1}, {0x3, 0x3}, {0x1, 0x9}, {0x4, 0x4}, {0x3, 0x4}, {0x7, 0x2}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x8}, {0x1, 0x4}, {0x3, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x3}, {0x3, 0x1}, {0x1, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0x7}, {0x5, 0x4}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x4}, {0x3, 0x7}, {0x7, 0xa}, {0x5, 0x9}, {0x3}, {0x6, 0x7}, {0x4, 0xa}, {}, {0x2}, {0x2, 0xa}, {0x4, 0x2}, {0x0, 0x6}, {0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x7, 0xf, 0x0, 0x9, 0x4000, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x164, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xc, 0xe082, 0x58d, 0x1, 0x6, 0x8, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5f8, 0xff, 0x224e, 0x8, 0x8, 0x0, 0x1]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0xa}, {0x6, 0x6}, {0x4, 0x7}, {0x1, 0x2}, {0x6, 0x4}, {0x0, 0x2}, {0x1, 0x7}, {0x6, 0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x1, 0x8}, {0x5, 0x6}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x1}, {0x7, 0x5}, {0x6, 0x2}, {0x7, 0x7}, {}, {0x3, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x1}, {0x5, 0x2}, {0x6, 0x8}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x7}, {0x7, 0x5}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0x5}, {0x1, 0x8}, {0x1, 0x5}, {0x5, 0x9}, {0x7, 0x5}, {0x4, 0x5}, {0x4, 0x1}, {0x3, 0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x1, 0x1}, {0x6, 0x7}, {0x4, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x0, 0x5}, {0x7, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x2, 0x4}, {0x1, 0x7}, {0x2, 0x6}, {0x6}, {0x1, 0x9}, {0x2, 0x8}, {0x4, 0x3}, {0x0, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x5}, {0x2}, {0x1, 0x7}, {0x2, 0x6}, {0x3, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x10, 0x16, 0x10, 0x12, 0x24, 0x2, 0x18, 0x4, 0x16, 0x24, 0x4, 0x48, 0xb, 0x12, 0x24, 0x30, 0x2, 0x5, 0x30, 0x16, 0x16, 0x2, 0x30, 0x9, 0x5, 0x27, 0x1b, 0x5, 0xc, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x1b, 0x12, 0x1, 0x18, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x5, 0x99f5, 0x6, 0x2, 0x6, 0x7, 0x1]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xc925, 0x5, 0x7, 0xd, 0x9, 0x1, 0x3]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x8}, {0x6, 0x2}, {0x1, 0x5}, {0x6, 0x7}, {0x4, 0xa}, {0x4, 0xa}, {0x0, 0x7}, {0x4, 0x8}, {0x2, 0x6}, {0x3, 0x7}, {0x4, 0x6}, {0x2, 0x6}, {0x0, 0xa}, {0x3, 0x9}, {0x2, 0x6}, {0x7, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x7}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x1}, {0x7, 0x9}, {0x0, 0xb}, {0x2, 0x8}, {0x1, 0x3}, {0x3, 0x5}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x5}, {0x2, 0x9}, {0x6, 0x7}, {0x6, 0x7}, {0x0, 0x1}, {0x6, 0x5}, {0x6, 0x1}, {0x5, 0x7}, {0x0, 0xa}, {0x1, 0x5}, {0x3, 0x2}, {0x2, 0x5}, {0x4, 0x2}, {0x1, 0x7}, {0x6, 0xa}, {0x1, 0x8}, {0x6, 0xa}, {0x6, 0x1}, {0x5, 0x7}, {0x7, 0x5}, {0x5}, {0x1}, {0x7, 0x8}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x1, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x64, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0xd3, 0x2, 0x3, 0x237, 0xfff, 0x4]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0xa}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x3}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x7}, {0x6}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0x60, 0x48, 0xbdac79848e38db54, 0x4, 0x1, 0x6c, 0x5, 0x473ab502ff936b34, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x5, 0x7f, 0x7, 0x0, 0x3, 0x0, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x8e98, 0xa, 0x0, 0x4, 0x780, 0x6]}}]}]}]}, 0xf38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40805) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r0) (rerun: 32)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000001280)={&(0x7f0000001180), 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x3c, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0x3, 0x4, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001300), r0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x74, r6, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048015}, 0x4c055) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000001440)={'tunl0\x00', @broadcast}) (async)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000001480)={0x3, 0x2, 0x13}) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000014c0)=0x2, 0x4) (async)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC(r8, 0x29, 0xcd, &(0x7f0000001500)={{0xa, 0x4e24, 0x1, @private1, 0x8}, {0xa, 0x4e20, 0x4, @local, 0x1}, 0x0, {[0x6, 0xfffffff4, 0x9, 0x81, 0x5, 0xff, 0x7, 0x3]}}, 0x5c) (async)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$FS_IOC_GETFSLABEL(r9, 0x81009431, &(0x7f0000001580))
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000016c0), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x3c, r10, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000017c0), 0x610400, 0x0) (async, rerun: 32)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001880)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x70, r11, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7f, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x844) (async)
r13 = accept4$ax25(0xffffffffffffffff, &(0x7f00000019c0)={{0x3, @null}, [@null, @null, @bcast, @rose, @rose, @default, @netrom, @default]}, &(0x7f0000001a40)=0x48, 0x1000)
recvfrom$ax25(r13, &(0x7f0000001a80)=""/80, 0x50, 0x40002040, &(0x7f0000001b00)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x34, r11, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2a}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008051}, 0x8090)

539.602883ms ago: executing program 2 (id=2956):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x3, 0xe, 0x7ffffffe)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r1], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000180)=0x20)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xba, 0x757})
socket$inet6(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000006067b1c4fa4779820000000000000000500"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet(0x2, 0x3, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
recvmsg(0xffffffffffffffff, 0x0, 0x63)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000240)={0xffffdffd, 0x1ff, 0x9})
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)

538.189661ms ago: executing program 3 (id=2957):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0x9, 0x200, 0x7, 0x200, r0, 0xb, '\x00', r3}, 0x50)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)

292.177734ms ago: executing program 2 (id=2958):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000006110080000000000630afcff0000000095000000000000008ac8617df1644c58a3b8102b72a0f6f585597f0928f0ae450f4f5ee3884015eaf92e86d26ae1a7aa3a3af872f129e7473b8630a34bbb00c081ce214b2295ff2ebc3f8177f829052d8df49fbf8b35f86a7a0f3b379bd3c7eec142699515d60f397024f5"], &(0x7f0000000100)='GPL\x00'}, 0x90) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000006110080000000000630afcff0000000095000000000000008ac8617df1644c58a3b8102b72a0f6f585597f0928f0ae450f4f5ee3884015eaf92e86d26ae1a7aa3a3af872f129e7473b8630a34bbb00c081ce214b2295ff2ebc3f8177f829052d8df49fbf8b35f86a7a0f3b379bd3c7eec142699515d60f397024f5"], &(0x7f0000000100)='GPL\x00'}, 0x90)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0)
write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3) (async)
close(0x3)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffcf61}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0x6}, 0x18)
r7 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r7, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x7c9ce320e12d300) (async)
sendmmsg$inet(r7, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x7c9ce320e12d300)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a54000000060a09040000000000000000020000070900020073797a32000000000900010073797a3000000000614d8fa1244a0a800b00010065787468647200001400028008000440000000b60800064000000001140000001100010000000000000000000000000a97351b33319cf6bd4a9b1acfedc8d1f9ee797671aa3773c59c"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a54000000060a09040000000000000000020000070900020073797a32000000000900010073797a3000000000614d8fa1244a0a800b00010065787468647200001400028008000440000000b60800064000000001140000001100010000000000000000000000000a97351b33319cf6bd4a9b1acfedc8d1f9ee797671aa3773c59c"], 0x7c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r9=>0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r11, &(0x7f0000000000), 0x2a979d)
setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, &(0x7f00000002c0), 0x4)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00005fcfcc63d000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r13}, 0x10)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r14, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0)
listen(0xffffffffffffffff, 0x80)

229.428343ms ago: executing program 3 (id=2959):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x7, 0x1, 0x0, 0x6, {{0x5, 0x4, 0x2, 0x2d, 0x14, 0x64, 0x0, 0xe0, 0x2f, 0x0, @local, @empty}}}})
r0 = socket$netlink(0x10, 0x3, 0x15)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(morus1280-avx2)\x00'}, 0x58) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(morus1280-avx2)\x00'}, 0x58)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001200)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/125, 0x7d}], 0x1, &(0x7f0000000440)=""/129, 0x81}, 0x1}, {{&(0x7f0000000500)=@nfc, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f0000000680)=""/74, 0x4a}, {&(0x7f0000000700)=""/232, 0xe8}, {&(0x7f0000000800)=""/170, 0xaa}], 0x4, &(0x7f0000000900)=""/83, 0x53}, 0x22b9dfcf}], 0x2, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f0000001200)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/125, 0x7d}], 0x1, &(0x7f0000000440)=""/129, 0x81}, 0x1}, {{&(0x7f0000000500)=@nfc, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f0000000680)=""/74, 0x4a}, {&(0x7f0000000700)=""/232, 0xe8}, {&(0x7f0000000800)=""/170, 0xaa}], 0x4, &(0x7f0000000900)=""/83, 0x53}, 0x22b9dfcf}], 0x2, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c0008001600010a00000071c51ce3fc40e2883f18276ddaf7cc9b92"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001d00)=@newtaction={0x8d8, 0x1e, 0x109, 0xfe, 0x40000, {}, [{0x134, 0x1, [@m_mirred={0x130, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x104, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, {0x790, 0x1, [@m_mpls={0x15c, 0x5, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x9, 0x8, 0x2b, 0xb6}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0x10a, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1a8, 0x14, 0x0, 0x0, {{0x7}, {0x170, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x111, 0x6, {0x5, 'security\x00', 0xe5, 0xe1b6, "ce9062b2d8c0188ab81195279ab93753b5ed71b9d5ea13782a11a7d976720c430a6ef9c94d9713bae0dfd9ae307145f70574a676f387b4ca09c871503ffe9f0c6ba772485d7490cdfa99dea9f1193d794a78bbb02296785b15e22de40b39cb14d2f3fdd4ee32b8af12221f8399118c3b4946bca3bd2c19926c7278d38ace2f415a9611a45d18d53cf1577572ec7c63e9ad2e410869309a7f80e029c72ed6e79db8dff593113b9a7b127e9cf53fe60e044035f699c009706902ef9d89bba6242096a05e8f90196ef884c52ad2732999efd473034e3988e3d7bb2603d732ea9e2db416295d878e9e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x14, 0x6, "7b5f3fcc0dca231cafa87abb35287d71"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x188, 0xa, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x800, 0x8, 0x203554f2, 0x73}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xbc5e, 0x0, 0x0, 0x1}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfc, 0x2, 0x20000000}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x1, 0x10000000, 0x6, 0x7}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2a97ae74, 0x0, 0x0, 0x8, 0x6}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x2, 0x36f2, 0xffff34e2}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x20000000, 0x2, 0x1ff}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x11, 0x0, 0x1, 0x2}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x2, 0x69}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x3, 0x80, 0xed}, 0x5c}}]}, {0x42, 0x6, "9fcf121afbd48e6cc568cb2f9f0e29d8bb5c2189f305bf6246cc4a66610a44204e76bb4326cc13fb88eee4528807c6ac34dfd741532861137c3da0572471"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_gact={0x19c, 0x6, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b1d8f05, 0x0, 0x3, 0x8, 0x88}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x68e, 0xffffffffffffffff, 0xa0, 0xf0a}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xb, 0x7, 0x0, 0x401}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xd3, 0x10000000, 0x3, 0xab}}, @TCA_GACT_PARMS={0x18, 0x2, {0xff, 0x3, 0x10000000, 0x6, 0x67}}]}, {0xf6, 0x6, "287720c4c07028061fd05dc440ae6dc9ed80dce603b15ae90c1a27eb5f67f580ab9aba65b6f8a300b71dc4403ef73b7c62fb365466bbf7284ef43c1022c0057eebfe314dcdf56f315f6cb7b5386f5f4dc7160477dc199974c9df3290cb5f6ad191ddf3e834654880c91e7dcbaf5bfdbac9aa6147f1a2a5c2faf873be8a8174952f1c15eefc382a0bd21ca1edbc2b52995638591883e44990af6f33b3e7560b308a5b6f6007145ee4721fb0cc4609b4a2fec78c7408f138adfc96dec8b02431851064af91e45d6d705dae4a2240c6974b0fef3567c4031beaa8c68254d49e8f20d30d0696886bebde5a4eb50514d2cb985cbe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x164, 0x2, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x10000, 0x4, 0x5e5, 0xffffffff}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x10000000, 0x4, 0x2}, 0x47}}]}, {0xfd, 0x6, "43b78eb4d0f86952f6dacfb412b2e288116cbc6c136eb60b7b0e6009c727bdd2d23aaaf4335ab02a7c91d6ca268ba0c7ad666a9940c932820bba90e72b98f723feca43d91381f64caa22bf70f18a1cd69020b495638aabbd9e90d8bb98c188b01e269a3f16c2eefb5bbb9fad8a3ae477e8b7a52b0b8b363916356106928fd2731a58a0dfa87fc8476925ba5209256a62cd892cec13d7207d3a79f54a789e3adf8d711797a460bfba65c14f0c8910e446532215304e34094018db5fa9fad52e78abf750b7b4cbbf6716ac62add032fb41ebba08cb7ea9207edb66bbeeb1e5f97cad8709f40d4d566c7e2ef4bf801dd7ea4cef16e4e571d44f8c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x8d8}, 0x1, 0x2b1e}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001d00)=@newtaction={0x8d8, 0x1e, 0x109, 0xfe, 0x40000, {}, [{0x134, 0x1, [@m_mirred={0x130, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x104, 0x6, "ccc23afd8d937aef056d68cb82a8c6f4af56c75a86c232265a85758d9efad44c2b7a44faf64bebbf8c29288dd98249cba67bb09cfa3258388aa2c4d58bf1b1fc47f2f989577d4973c70d0989f56e6582d018871b87d1680b81d6a5cb86cb85308789023f287d41a34c95ec44011df5e68195961502de255a7fa556a17b34dbdf4ff4ce20446cb14e1613d8dba9fae7064db38b7e85b45cc6458f591496fe44cb21126903d0f036f80954e5a3699e92b564151487dd7934b650cc7d4fd70d0ed37a2cad1381cce5aaa3d934d811d340ec67347353f224692b8035fd1fe8d790fa899818991262cdbac29f66ba3bc4d122108d84728ce0b23a6f7d238816ad587d"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, {0x790, 0x1, [@m_mpls={0x15c, 0x5, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x9, 0x8, 0x2b, 0xb6}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0x10a, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1a8, 0x14, 0x0, 0x0, {{0x7}, {0x170, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x111, 0x6, {0x5, 'security\x00', 0xe5, 0xe1b6, "ce9062b2d8c0188ab81195279ab93753b5ed71b9d5ea13782a11a7d976720c430a6ef9c94d9713bae0dfd9ae307145f70574a676f387b4ca09c871503ffe9f0c6ba772485d7490cdfa99dea9f1193d794a78bbb02296785b15e22de40b39cb14d2f3fdd4ee32b8af12221f8399118c3b4946bca3bd2c19926c7278d38ace2f415a9611a45d18d53cf1577572ec7c63e9ad2e410869309a7f80e029c72ed6e79db8dff593113b9a7b127e9cf53fe60e044035f699c009706902ef9d89bba6242096a05e8f90196ef884c52ad2732999efd473034e3988e3d7bb2603d732ea9e2db416295d878e9e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x14, 0x6, "7b5f3fcc0dca231cafa87abb35287d71"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x188, 0xa, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x800, 0x8, 0x203554f2, 0x73}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xbc5e, 0x0, 0x0, 0x1}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfc, 0x2, 0x20000000}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x1, 0x10000000, 0x6, 0x7}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2a97ae74, 0x0, 0x0, 0x8, 0x6}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x2, 0x36f2, 0xffff34e2}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x20000000, 0x2, 0x1ff}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x11, 0x0, 0x1, 0x2}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x2, 0x69}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x3, 0x80, 0xed}, 0x5c}}]}, {0x42, 0x6, "9fcf121afbd48e6cc568cb2f9f0e29d8bb5c2189f305bf6246cc4a66610a44204e76bb4326cc13fb88eee4528807c6ac34dfd741532861137c3da0572471"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_gact={0x19c, 0x6, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b1d8f05, 0x0, 0x3, 0x8, 0x88}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x68e, 0xffffffffffffffff, 0xa0, 0xf0a}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xb, 0x7, 0x0, 0x401}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xd3, 0x10000000, 0x3, 0xab}}, @TCA_GACT_PARMS={0x18, 0x2, {0xff, 0x3, 0x10000000, 0x6, 0x67}}]}, {0xf6, 0x6, "287720c4c07028061fd05dc440ae6dc9ed80dce603b15ae90c1a27eb5f67f580ab9aba65b6f8a300b71dc4403ef73b7c62fb365466bbf7284ef43c1022c0057eebfe314dcdf56f315f6cb7b5386f5f4dc7160477dc199974c9df3290cb5f6ad191ddf3e834654880c91e7dcbaf5bfdbac9aa6147f1a2a5c2faf873be8a8174952f1c15eefc382a0bd21ca1edbc2b52995638591883e44990af6f33b3e7560b308a5b6f6007145ee4721fb0cc4609b4a2fec78c7408f138adfc96dec8b02431851064af91e45d6d705dae4a2240c6974b0fef3567c4031beaa8c68254d49e8f20d30d0696886bebde5a4eb50514d2cb985cbe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x164, 0x2, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x10000, 0x4, 0x5e5, 0xffffffff}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x10000000, 0x4, 0x2}, 0x47}}]}, {0xfd, 0x6, "43b78eb4d0f86952f6dacfb412b2e288116cbc6c136eb60b7b0e6009c727bdd2d23aaaf4335ab02a7c91d6ca268ba0c7ad666a9940c932820bba90e72b98f723feca43d91381f64caa22bf70f18a1cd69020b495638aabbd9e90d8bb98c188b01e269a3f16c2eefb5bbb9fad8a3ae477e8b7a52b0b8b363916356106928fd2731a58a0dfa87fc8476925ba5209256a62cd892cec13d7207d3a79f54a789e3adf8d711797a460bfba65c14f0c8910e446532215304e34094018db5fa9fad52e78abf750b7b4cbbf6716ac62add032fb41ebba08cb7ea9207edb66bbeeb1e5f97cad8709f40d4d566c7e2ef4bf801dd7ea4cef16e4e571d44f8c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x8d8}, 0x1, 0x2b1e}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x6}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f0000000400000004"], 0x48)
socket$packet(0x11, 0x2, 0x300)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0xfffb, 0x9, 0x4009, 0x6, 0x4, 0x0, 0x1, 0x800}, 0x20) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0xfffb, 0x9, 0x4009, 0x6, 0x4, 0x0, 0x1, 0x800}, 0x20)
r5 = socket$inet(0x10, 0x3, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x40000}, 0xc)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r0], 0x104}, 0x1, 0x0, 0x0, 0x404c894}, 0x200080c0) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r0], 0x104}, 0x1, 0x0, 0x0, 0x404c894}, 0x200080c0)

222.914099ms ago: executing program 1 (id=2960):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a0002"], 0x48}}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4)
sendmmsg$inet6(r5, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x11}}}}, @dstopts={{0x18}}], 0x40, 0x7ffffff7}}], 0x1, 0x0)

161.838075ms ago: executing program 1 (id=2961):
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4080001) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) (async)
r11 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r11, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x17, r9, 0x1, 0xf9}, 0x14)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r13, 0x2000012, 0xffffffffffffffca, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bind$bt_l2cap(r12, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) (async, rerun: 64)
connect$bt_l2cap(r12, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) (rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3fcf00"/28], 0x48)

161.293892ms ago: executing program 3 (id=2962):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c000140"], 0x92fc}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="020000000000010000003f000000080003000000000053ee5482f552c9020922f0487044581a7a0e042a007adc9bfd9c3808489d26520b1dac722c2213ba73efdfd8a28b88d671764bad7d4c22abe9a8702adc761fa0af48999f625dd5585cec0f6b5ca1b004bd4c166c5115b03fd0f82a2b3ea383f8ccc21f2230d8ddf31a3cde9914dddd5b180d"], 0x1c}}, 0x40845)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000480)={0x4041}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2)
socket(0x10, 0x80003, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x12}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28)
unshare(0x2a020400)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x4d6, 0x2b}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xe8)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)

92.063322ms ago: executing program 1 (id=2963):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc44121d9d322fe7c008775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3940fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d150000000000000000", 0xd8}], 0x1}, 0x4000000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={<r2=>0x0, @private, @loopback}, &(0x7f00000003c0)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000190001002cbd7000000000001c140000fe03800100"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
bind$bt_hci(r4, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10)
getpeername$l2tp(r8, 0x0, &(0x7f0000000c00))
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000000)={0xfffffff8, 0x6, 0x25}, 0xc)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/205, 0xcd, 0x1, &(0x7f0000000680)=""/187, 0xbb}, &(0x7f0000000780)=0x40)
bind$bt_hci(r10, &(0x7f0000000540)={0x1f, 0x101, 0x2}, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@updsa={0x12c, 0x1a, 0x100, 0x70bd28, 0x25dfdbfd, {{@in6=@loopback, @in=@loopback, 0x4e24, 0x6, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0x2b, r2, r3}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x6c}, @in6=@local, {0x8, 0x8, 0x49be45e, 0x19, 0x3, 0x8, 0x6, 0x585b}, {0x40, 0x3, 0xe, 0x4}, {0x4, 0x3, 0x2}, 0x70bd28, 0x3503, 0x2, 0x2, 0x4, 0x2d}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd27, 0x4000009}}, @tfcpad={0x8, 0x16, 0x3}, @lifetime_val={0x24, 0x9, {0xa, 0x3, 0x5, 0x7}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x612fc0b6c779a97b}, 0x1)
r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000840)=r12)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x38, 0xd3, &(0x7f0000000040)="09a4f1d543f598765cfa05c5908f6e142eeeec88977ca3d0fb633fac82f1fcb4ab80c1ea883921d37d5d0d8b56158a5bf6a32b7e15bf0fe0", &(0x7f0000000080)=""/211, 0x10, 0x0, 0x58, 0x84, &(0x7f0000000180)="1ef8bd46eb2026394826e476e32d72d96e9a2499b38b5ce1213c3c6f8ff70d279cc447d202f41405de9296f1d64e50831fe8937e958f074e7281b82459d325662a36cbb2d0e6df0f4775ad735d340f1a3e3abf21e2256f01", &(0x7f0000000200)="1a10755a2f1b72c934a72bd7e167fd95bd15bf1164ed0ad4506073b8bf0a389cb47930467cd86e24f9b95d4bb22aaf03b0a265e23274d6195848e2ffdf8557390ce18edb39469055e16a086f33587b49755b4eb7f92572394b60e579c299fbaf72b0c3d56a0269ae724f4161e9f874b9db3dfaccf0d39dd45a0658b7e6f8effff0db80dd", 0x4, 0x0, 0x6}, 0x50)

0s ago: executing program 1 (id=2964):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={<r2=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2}, &(0x7f0000000100)=0x8)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd25, 0x25dfdbfd, {0xa, 0x10, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000050)

kernel console output (not intermixed with test programs):

 parsing attributes in process `syz.1.1476'.
[  161.841740][T11458] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1474'.
[  161.876679][T11482] 8021q: adding VLAN 0 to HW filter on device bond8
[  162.055689][T11498] tc_dump_action: action bad kind
[  162.106612][T11509] bond11: (slave batadv2): Releasing active interface
[  162.136426][T11509] team0: Mode changed to "activebackup"
[  162.145303][T11507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1482'.
[  162.329123][T11533] macsec5: entered promiscuous mode
[  162.331202][T11533] bridge0: entered promiscuous mode
[  162.334851][T11533] bridge0: left promiscuous mode
[  162.353146][T11523] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  162.358978][T11523] syzkaller0: entered promiscuous mode
[  162.365732][T11523] syzkaller0: entered allmulticast mode
[  162.462818][T11542] sch_tbf: burst 88 is lower than device veth9 mtu (1514) !
[  162.752972][T11583] 8021q: VLANs not supported on bond0
[  162.761598][T11583] nbd: must specify at least one socket
[  163.437093][T11605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.441363][T11605] syzkaller0: entered promiscuous mode
[  163.443894][T11605] syzkaller0: entered allmulticast mode
[  163.476369][T11605] tipc: Resetting bearer <eth:syzkaller0>
[  163.494525][T11612] netlink: 'syz.2.1507': attribute type 1 has an invalid length.
[  163.540631][T11604] tipc: Resetting bearer <eth:syzkaller0>
[  163.551736][T11604] tipc: Disabling bearer <eth:syzkaller0>
[  163.561523][T11615] batadv_slave_1: entered promiscuous mode
[  163.579456][T11615] netlink: 'syz.2.1508': attribute type 10 has an invalid length.
[  163.583700][T11615] bond0: (slave wlan1): Opening slave failed
[  163.602435][T11614] batadv_slave_1: left promiscuous mode
[  163.878000][T11637] sctp: [Deprecated]: syz.1.1516 (pid 11637) Use of struct sctp_assoc_value in delayed_ack socket option.
[  163.878000][T11637] Use struct sctp_sack_info instead
[  164.015907][T11655] veth1_to_bond: entered allmulticast mode
[  164.043745][T11655] veth1_to_bond (unregistering): left allmulticast mode
[  164.280608][T11670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.293413][T11670] syzkaller0: entered promiscuous mode
[  164.295360][T11670] syzkaller0: entered allmulticast mode
[  164.328970][T11670] tipc: Resetting bearer <eth:syzkaller0>
[  164.349780][T11670] tipc: Resetting bearer <eth:syzkaller0>
[  164.360432][T11670] tipc: Disabling bearer <eth:syzkaller0>
[  164.424992][T11676] xt_HMARK: spi-set and port-set can't be combined
[  164.718299][T11702] __nla_validate_parse: 21 callbacks suppressed
[  164.718313][T11702] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1535'.
[  164.895758][T11717] sctp: [Deprecated]: syz.2.1539 (pid 11717) Use of struct sctp_assoc_value in delayed_ack socket option.
[  164.895758][T11717] Use struct sctp_sack_info instead
[  164.953660][T11722] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1540'.
[  165.240489][T11739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1545'.
[  165.497647][T11752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1549'.
[  165.516998][T11752] team_slave_0: mtu less than device minimum
[  165.524957][T11753] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  165.526045][T11752] batman_adv: batadv0: Adding interface: ip6gretap3
[  165.532297][T11752] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.542507][T11752] batman_adv: batadv0: Interface activated: ip6gretap3
[  165.638021][T11755] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1550'.
[  165.640436][T11760] openvswitch: netlink: IP tunnel dst address not specified
[  165.844810][T11770] sctp: [Deprecated]: syz.1.1553 (pid 11770) Use of int in maxseg socket option.
[  165.844810][T11770] Use struct sctp_assoc_value instead
[  165.921240][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'.
[  165.924297][T11772] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1554'.
[  165.960061][T11779] netlink: 'syz.1.1555': attribute type 10 has an invalid length.
[  165.997848][T11779] bond0: (slave wlan1): Opening slave failed
[  166.071643][T11786] lo speed is unknown, defaulting to 1000
[  166.077456][T11786] lo speed is unknown, defaulting to 1000
[  166.088563][T11786] lo speed is unknown, defaulting to 1000
[  166.095711][T11786] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  166.123025][T11789] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1556'.
[  166.125987][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'.
[  166.142981][T11789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.148447][T11786] lo speed is unknown, defaulting to 1000
[  166.151920][T11789] veth0_to_bridge: entered promiscuous mode
[  166.154248][T11789] veth0_to_bridge: entered allmulticast mode
[  166.157591][T11786] lo speed is unknown, defaulting to 1000
[  166.160903][T11786] lo speed is unknown, defaulting to 1000
[  166.224817][T11794] netlink: 'syz.2.1560': attribute type 13 has an invalid length.
[  166.229861][T11794] netlink: 'syz.2.1560': attribute type 17 has an invalid length.
[  166.250437][T11794] erspan0: left promiscuous mode
[  166.270393][T11794] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.273387][T11794] 8021q: adding VLAN 0 to HW filter on device team0
[  166.276197][T11794] tipc: Resetting bearer <eth:team0>
[  166.279643][T11794] tipc: Resetting bearer <eth:team0>
[  166.284187][T11794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.290534][ T1269] lo speed is unknown, defaulting to 1000
[  166.292852][ T1269] syz2: Port: 1 Link ACTIVE
[  166.296633][T11798] mac80211_hwsim hwsim5 wlan1: Caught tx_queue_len zero misconfig
[  166.312129][T11797] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1561'.
[  166.361866][T11808] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  166.555618][T11838] bond3: (slave vcan1): Releasing backup interface
[  166.558674][T11838] bond3: (slave vcan2): making interface the new active one
[  166.564060][T11838] bond3: (slave vcan2): Releasing backup interface
[  166.572302][T11838] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  166.574855][T11838] batman_adv: batadv0: Removing interface: ip6gretap3
[  166.594773][T11831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.607740][T11831] netlink: 'syz.2.1572': attribute type 32 has an invalid length.
[  166.630644][T11841] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  166.649717][T11842] netlink: 'syz.1.1573': attribute type 30 has an invalid length.
[  167.266660][T11860] lo speed is unknown, defaulting to 1000
[  167.465974][T11876] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[  167.665264][T11885] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.721242][T11891] netlink: 'syz.1.1588': attribute type 1 has an invalid length.
[  167.734057][T11891] 8021q: adding VLAN 0 to HW filter on device bond7
[  167.763341][T11876] lo speed is unknown, defaulting to 1000
[  167.815988][T11898] netlink: 'syz.2.1590': attribute type 6 has an invalid length.
[  167.820428][T11898] netlink: 'syz.2.1590': attribute type 5 has an invalid length.
[  167.890790][T11903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  168.104819][T11921] geneve4: entered promiscuous mode
[  168.106679][T11921] geneve4: entered allmulticast mode
[  168.111697][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 38630 - 0
[  168.114467][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 46528 - 0
[  168.119309][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 38630 - 0
[  168.122247][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 46528 - 0
[  168.126189][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 38630 - 0
[  168.132342][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 46528 - 0
[  168.140730][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 38630 - 0
[  168.146982][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 46528 - 0
[  168.232881][T11937] veth1_to_team: Caught tx_queue_len zero misconfig
[  168.283905][T11943] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  168.287877][T11943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.662346][T11964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  168.831102][T11977] validate_nla: 2 callbacks suppressed
[  168.831111][T11977] netlink: 'syz.2.1608': attribute type 21 has an invalid length.
[  169.165552][T12004] Bluetooth: MGMT ver 1.23
[  169.219928][T12016] openvswitch: netlink: nsh attr 20 is out of range max 3
[  169.221562][T12017] netlink: 'syz.2.1618': attribute type 1 has an invalid length.
[  169.262798][T12017] 8021q: adding VLAN 0 to HW filter on device bond12
[  169.466114][T12035] hsr_slave_1 (unregistering): left promiscuous mode
[  169.551844][T12044] netlink: 'syz.2.1626': attribute type 10 has an invalid length.
[  169.553272][T12043] netlink: 'syz.2.1626': attribute type 10 has an invalid length.
[  169.554579][T12044] tipc: Resetting bearer <eth:team0>
[  169.562761][T12044] netlink: 'syz.2.1626': attribute type 10 has an invalid length.
[  169.571924][T12043] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  169.744965][T12048] lo speed is unknown, defaulting to 1000
[  169.845398][T12054] __nla_validate_parse: 21 callbacks suppressed
[  169.845410][T12054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1628'.
[  169.852936][T12054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1628'.
[  169.856015][T12054] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1628'.
[  169.865809][T12054] pimreg: entered allmulticast mode
[  169.900529][T12057] veth0_to_batadv: entered allmulticast mode
[  169.905295][T12053] pimreg: left allmulticast mode
[  169.907224][T12053] veth0_to_batadv: left allmulticast mode
[  169.995785][T12059] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  169.999349][T12059] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  170.001712][T12059] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  170.009256][T12059] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  170.065257][T12068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1632'.
[  170.082467][T12069] veth1_to_bond: Caught tx_queue_len zero misconfig
[  170.294349][T12085] netlink: 'syz.3.1637': attribute type 28 has an invalid length.
[  170.301050][T12083] netlink: 'syz.1.1636': attribute type 13 has an invalid length.
[  170.303596][T12083] netlink: 'syz.1.1636': attribute type 17 has an invalid length.
[  170.509435][T12083] lo speed is unknown, defaulting to 1000
[  170.663976][T12107] net_ratelimit: 2 callbacks suppressed
[  170.663990][T12107] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  170.722097][T12109] netlink: 'syz.3.1645': attribute type 1 has an invalid length.
[  170.725965][T12109] netlink: 'syz.3.1645': attribute type 2 has an invalid length.
[  170.735881][T12109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1645'.
[  170.795786][T12112] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1646'.
[  170.795988][T12113] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1646'.
[  170.805365][T12115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1647'.
[  170.865079][T12116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  170.872576][T12115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  170.916393][T12125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.921379][T12125] syzkaller0: entered promiscuous mode
[  170.924450][T12125] syzkaller0: entered allmulticast mode
[  170.945618][T12125] tipc: Resetting bearer <eth:syzkaller0>
[  170.953549][T12124] tipc: Resetting bearer <eth:syzkaller0>
[  170.965626][T12124] tipc: Disabling bearer <eth:syzkaller0>
[  171.099514][T12132] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1652'.
[  171.102768][T12132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1652'.
[  171.191126][T12146] syz.1.1651 (12146) used obsolete PPPIOCDETACH ioctl
[  171.208782][T12137] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  171.522580][T12176] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  171.525504][T12176] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  171.534817][T12176] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  171.642855][T12194] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.720156][T12194] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.769984][T12194] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.819106][T12194] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.921092][ T5855] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  171.963563][ T5855] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.973193][ T5855] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.998638][ T5855] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  172.375699][T12262] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  172.381669][T12262] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.755524][T12292] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  172.759705][T12293] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  173.682017][T12364] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  173.848262][T12365] lo speed is unknown, defaulting to 1000
[  174.435688][T12383] dvmrp8: entered allmulticast mode
[  174.855938][T12402] __nla_validate_parse: 14 callbacks suppressed
[  174.855949][T12402] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1716'.
[  174.888637][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1717'.
[  174.897440][T12409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1717'.
[  174.940783][T12413] validate_nla: 4 callbacks suppressed
[  174.940794][T12413] netlink: 'syz.2.1718': attribute type 10 has an invalid length.
[  174.945936][T12414] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1718'.
[  174.949714][T12414] openvswitch: netlink: Flow key attr not present in new flow.
[  175.144388][T12416] lo speed is unknown, defaulting to 1000
[  175.164945][T12420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1720'.
[  175.404334][T12437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1724'.
[  175.408357][T12437] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1724'.
[  175.412161][T12437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1724'.
[  175.416063][T12437] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1724'.
[  175.431800][T12438] 8021q: VLANs not supported on ip6gre0
[  175.464670][T12438] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.1723'.
[  175.533792][T12444] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.537568][T12444] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.704898][T12459] pim6reg1: entered promiscuous mode
[  175.708298][T12459] pim6reg1: entered allmulticast mode
[  175.768467][T12459] syzkaller0: left promiscuous mode
[  175.770689][T12459] syzkaller0: left allmulticast mode
[  175.795938][T12459] 8021q: adding VLAN 0 to HW filter on device bond13
[  175.804279][T12459] bond13: entered promiscuous mode
[  175.806454][T12459] team0: Port device bond13 added
[  176.190105][T12482] netlink: 'syz.3.1738': attribute type 4 has an invalid length.
[  176.292382][T12500] openvswitch: netlink: Flow key attr not present in new flow.
[  176.351749][T12503] vlan2: entered allmulticast mode
[  176.353498][T12503] bridge_slave_0: entered allmulticast mode
[  176.621697][T12535] netlink: 'syz.1.1751': attribute type 39 has an invalid length.
[  176.722653][T12540] netlink: 'syz.2.1752': attribute type 1 has an invalid length.
[  177.007463][T12570] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  177.011341][T12570] syzkaller0: entered promiscuous mode
[  177.013813][T12570] syzkaller0: entered allmulticast mode
[  177.262898][T12583] bond0: (slave syz_tun): Releasing backup interface
[  177.274968][T12583] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  177.542223][T12594] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  177.737592][T12596] netlink: 'syz.2.1772': attribute type 11 has an invalid length.
[  177.952784][T12616] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  178.003037][T12622] vlan2: entered allmulticast mode
[  178.055187][T12628] netlink: 'syz.1.1778': attribute type 1 has an invalid length.
[  178.085080][T12628] 8021q: adding VLAN 0 to HW filter on device bond8
[  178.097598][T12611] bond8: (slave gretap1): making interface the new active one
[  178.101709][T12611] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  178.109652][T12611] macsec5: entered promiscuous mode
[  178.111466][T12611] bond0: entered promiscuous mode
[  178.115476][T12611] bond0: left promiscuous mode
[  178.619550][T12667] netlink: 'syz.2.1790': attribute type 2 has an invalid length.
[  178.622814][T12667] netlink: 'syz.2.1790': attribute type 1 has an invalid length.
[  179.123815][T12681] netlink: zone id is out of range
[  179.126180][T12681] netlink: zone id is out of range
[  179.129010][T12681] netlink: zone id is out of range
[  179.131204][T12681] netlink: zone id is out of range
[  179.133447][T12681] netlink: zone id is out of range
[  179.135557][T12681] netlink: zone id is out of range
[  179.144203][T12681] netlink: zone id is out of range
[  179.698337][T12698] netlink: 'syz.2.1796': attribute type 9 has an invalid length.
[  179.762316][T12705] Unsupported ieee802154 address type: 0
[  179.863831][T12713] __nla_validate_parse: 90 callbacks suppressed
[  179.863846][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'.
[  179.870574][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'.
[  179.975981][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1803'.
[  180.014146][T12721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.018039][T12721] syzkaller0: entered promiscuous mode
[  180.019995][T12721] syzkaller0: entered allmulticast mode
[  180.035614][T12721] tipc: Resetting bearer <eth:syzkaller0>
[  180.067857][T12719] tipc: Resetting bearer <eth:syzkaller0>
[  180.092049][T12719] tipc: Disabling bearer <eth:syzkaller0>
[  180.104675][T12725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1805'.
[  180.153523][T12735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1808'.
[  180.207590][T12735] netlink: 'syz.2.1808': attribute type 12 has an invalid length.
[  180.221389][T12740] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1810'.
[  180.229260][T12742] lo speed is unknown, defaulting to 1000
[  180.231775][T12742] lo speed is unknown, defaulting to 1000
[  180.245850][T12742] lo speed is unknown, defaulting to 1000
[  180.260783][T12742] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  180.292445][T12742] lo speed is unknown, defaulting to 1000
[  180.299653][T12742] lo speed is unknown, defaulting to 1000
[  180.305694][T12742] lo speed is unknown, defaulting to 1000
[  180.341580][T12752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1813'.
[  180.351172][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1812'.
[  180.355891][T12742] ipvlan3: entered promiscuous mode
[  180.445337][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'.
[  180.704038][T12772] lo speed is unknown, defaulting to 1000
[  180.707421][T12772] lo speed is unknown, defaulting to 1000
[  180.718368][ T5233] Bluetooth: hci1: command 0x0406 tx timeout
[  181.358063][T12789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1822'.
[  181.535970][T12795] vlan0: entered promiscuous mode
[  181.771446][T12818] netlink: 'syz.3.1829': attribute type 12 has an invalid length.
[  181.915336][T12833] netlink: 'syz.2.1834': attribute type 12 has an invalid length.
[  182.056731][T12851] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  182.391427][T12863] lo speed is unknown, defaulting to 1000
[  182.427242][T12863] lo speed is unknown, defaulting to 1000
[  182.741256][T12912] netlink: 'syz.3.1854': attribute type 10 has an invalid length.
[  182.744618][T12912] 8021q: adding VLAN 0 to HW filter on device team0
[  182.748562][T12912] bond0: (slave team0): Enslaving as an active interface with an up link
[  182.752859][T12912] netlink: 'syz.3.1854': attribute type 10 has an invalid length.
[  182.805925][T12912] bond4: (slave macvlan3): making interface the new active one
[  182.809483][T12912] bond4: (slave macvlan3): Enslaving as an active interface with an up link
[  182.890962][T12925] net_ratelimit: 19 callbacks suppressed
[  182.890971][T12925] openvswitch: netlink: IPv4 tunnel dst address is zero
[  183.263335][T12946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.282801][T12948] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  184.152422][T12961] netlink: 'syz.3.1868': attribute type 3 has an invalid length.
[  184.712134][T12971] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.750099][T12971] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.845563][T12971] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.895984][T12971] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.974410][ T5873] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  184.984692][ T5873] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  185.006296][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  185.014938][T12984] syzkaller1: entered promiscuous mode
[  185.019922][T12984] syzkaller1: entered allmulticast mode
[  185.032166][ T5855] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  185.126013][T12986] netlink: 'syz.2.1875': attribute type 10 has an invalid length.
[  185.129243][T12986] __nla_validate_parse: 76 callbacks suppressed
[  185.129251][T12986] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1875'.
[  185.136466][T12986] geneve0: entered promiscuous mode
[  185.139260][T12986] team0: Port device geneve0 added
[  185.141394][ T5855] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  185.145214][ T5855] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  185.149647][ T5855] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  185.153374][ T5855] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  185.304997][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'.
[  185.610262][T13009] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  185.622435][T13010] netlink: 'syz.1.1883': attribute type 21 has an invalid length.
[  185.625599][T13010] netlink: 'syz.1.1883': attribute type 1 has an invalid length.
[  185.628733][T13010] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1883'.
[  186.046122][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'.
[  186.051542][T13034] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1891'.
[  186.087238][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'.
[  186.094564][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1892'.
[  186.126587][T13036] netlink: 'syz.3.1892': attribute type 1 has an invalid length.
[  186.134756][T13036] netlink: 'syz.3.1892': attribute type 1 has an invalid length.
[  186.513215][T13060] syzkaller1: entered promiscuous mode
[  186.515616][T13060] syzkaller1: entered allmulticast mode
[  186.590659][T13062] sch_fq: defrate 0 ignored.
[  186.710186][T13067] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1902'.
[  187.148295][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'.
[  187.153050][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'.
[  187.162894][T13083] lo speed is unknown, defaulting to 1000
[  187.165622][T13083] lo speed is unknown, defaulting to 1000
[  187.492337][T13128] netlink: 'syz.2.1917': attribute type 1 has an invalid length.
[  187.743999][T13146] sctp: [Deprecated]: syz.2.1923 (pid 13146) Use of int in max_burst socket option deprecated.
[  187.743999][T13146] Use struct sctp_assoc_value instead
[  187.806272][T13151] netlink: 'syz.2.1924': attribute type 1 has an invalid length.
[  187.854243][T13151] 8021q: adding VLAN 0 to HW filter on device bond15
[  187.858925][T13151] bond14: (slave bond15): making interface the new active one
[  187.862403][T13151] bond14: (slave bond15): Enslaving as an active interface with an up link
[  188.081258][T13167] netlink: 'syz.2.1927': attribute type 4 has an invalid length.
[  188.244135][T13178] netlink: 'syz.2.1931': attribute type 3 has an invalid length.
[  188.295058][T13186] netlink: 'syz.2.1934': attribute type 10 has an invalid length.
[  188.391866][T13194] netlink: 'syz.2.1938': attribute type 35 has an invalid length.
[  188.452721][T13197] bond0: (slave team0): Releasing backup interface
[  188.472185][T13197] bond4: (slave macvlan3): Releasing backup interface
[  188.480487][T13197] rdma_op ffff8881107a69f0 conn xmit_rdma 0000000000000000
[  188.548689][T13197] bond0: (slave wlan1): Opening slave failed
[  189.725244][T13255] geneve0: left promiscuous mode
[  189.731020][T13255] team0: Port device geneve0 removed
[  189.734309][T13255] bond13: left promiscuous mode
[  189.740864][T13255] team0: Port device bond13 removed
[  189.743345][T13255] bond14: (slave bond15): Releasing backup interface
[  189.748043][ T6706] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  189.751856][ T6706] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  189.770482][ T6706] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  189.776556][T13255] team0: Mode changed to "broadcast"
[  189.779725][ T6706] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  190.001457][T13269] batadv_slave_0: entered promiscuous mode
[  190.028321][T13274] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  190.031137][T13274] tipc: Enabled bearer <udp:syz2>, priority 10
[  190.033402][T13269] batadv_slave_0: left promiscuous mode
[  190.066315][T13271] bond16: (slave gretap4): making interface the new active one
[  190.069965][T13271] bond16: (slave gretap4): Enslaving as an active interface with an up link
[  190.114462][ T5886] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.118877][ T5886] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.126917][ T5886] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.130335][ T5886] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.135061][T13283] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  190.167123][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  190.203515][T13296] vxcan0: entered promiscuous mode
[  190.289675][T13311] __nla_validate_parse: 18 callbacks suppressed
[  190.289685][T13311] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1968'.
[  190.317241][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  190.380952][T13319] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.1976'.
[  190.384152][T13320] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.1976'.
[  190.452129][T13324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1978'.
[  190.456928][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  190.461635][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1978'.
[  190.464550][T13324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1978'.
[  190.466236][T13326] netlink: ct family unspecified
[  190.472210][T13326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.515605][T13331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1980'.
[  190.520545][T13331] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1980'.
[  190.534796][T13329] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1979'.
[  190.607247][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  190.756946][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  190.833543][T13339] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1982'.
[  190.887201][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  191.028222][   T10] tipc: Node number set to 761047578
[  191.032355][T13352] veth0_to_bridge: left promiscuous mode
[  191.039634][T13352] syzkaller0: left promiscuous mode
[  191.047342][T13352] bond11: left promiscuous mode
[  191.049510][T13352] batadv2: left promiscuous mode
[  191.051809][T13352] geneve4: left promiscuous mode
[  191.078586][T13360] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  191.179414][T13368] validate_nla: 12 callbacks suppressed
[  191.179428][T13368] netlink: 'syz.2.1991': attribute type 10 has an invalid length.
[  191.194627][T13368] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.204140][T13368] bond0: entered promiscuous mode
[  191.206894][T13368] team0: Port device bond0 added
[  191.252335][T13372] netlink: 'syz.1.1993': attribute type 2 has an invalid length.
[  191.285682][T13374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  191.300270][T13374] vxcan4: entered promiscuous mode
[  191.482468][T13389] netlink: 'syz.1.1997': attribute type 3 has an invalid length.
[  191.504242][T13389] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.528095][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  191.583041][T13395] netlink: 'syz.1.1999': attribute type 1 has an invalid length.
[  191.602072][T13395] 8021q: adding VLAN 0 to HW filter on device bond9
[  191.636610][T13395] 8021q: adding VLAN 0 to HW filter on device bond9
[  191.639564][T13395] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  191.644037][T13395] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  191.675134][T13398] bond9: (slave bridge12): Enslaving as an active interface with a down link
[  191.738165][ T5855] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  191.828931][T13400] ..0: left allmulticast mode
[  191.831239][T13400] hsr_slave_0: left allmulticast mode
[  191.839187][T13400] macsec0: left promiscuous mode
[  191.843184][T13400] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  191.846366][T13400] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  191.873006][T13400] bond5: left promiscuous mode
[  191.876215][T13400] bond5: left allmulticast mode
[  191.880173][T13400] macsec2: left promiscuous mode
[  191.882499][T13400] macsec2: left allmulticast mode
[  191.885811][T13400] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  191.894031][T13400] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  191.897895][T13400] macsec3: left promiscuous mode
[  191.900130][T13400] macsec3: left allmulticast mode
[  191.904792][T13400] bond6: left promiscuous mode
[  191.912057][T13400] bond6: left allmulticast mode
[  191.946603][ T6706] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.953516][ T6706] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.972322][ T6706] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.985321][ T6706] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.994049][ T6706] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.000270][ T6706] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.003879][ T6706] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.009851][ T6706] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.102089][T13412] netlink: 'syz.1.2002': attribute type 1 has an invalid length.
[  192.779193][T13425] netlink: 'syz.2.2006': attribute type 1 has an invalid length.
[  193.028295][T13443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.031190][T13444] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  193.034681][T13443] syzkaller0: entered promiscuous mode
[  193.036611][T13443] syzkaller0: entered allmulticast mode
[  193.053192][T13443] tipc: Resetting bearer <eth:syzkaller0>
[  193.111799][T13442] tipc: Resetting bearer <eth:syzkaller0>
[  193.120581][T13442] tipc: Disabling bearer <eth:syzkaller0>
[  193.601599][T13453] netlink: 'syz.2.2012': attribute type 1 has an invalid length.
[  193.617184][T13453] 8021q: adding VLAN 0 to HW filter on device bond18
[  193.626560][T13453] bond18: (slave bridge10): making interface the new active one
[  193.631846][T13453] bond18: (slave bridge10): Enslaving as an active interface with an up link
[  193.639671][T13454] bond18: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  193.786048][T13464] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  193.790378][T13464] syzkaller0: entered promiscuous mode
[  194.797224][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[  194.860114][T13494] veth0: entered promiscuous mode
[  194.876061][T13494] veth0 (unregistering): left promiscuous mode
[  194.892930][T13496] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  194.896236][T13496] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  194.970691][T13499] macvtap0: entered allmulticast mode
[  194.976167][T13499] netlink: 'syz.2.2024': attribute type 4 has an invalid length.
[  195.117103][    C0] net_ratelimit: 6 callbacks suppressed
[  195.117114][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  195.119847][T13505] netlink: 'syz.1.2027': attribute type 1 has an invalid length.
[  195.154268][T13505] 8021q: adding VLAN 0 to HW filter on device bond10
[  195.351115][T13503] lo speed is unknown, defaulting to 1000
[  195.359029][T13503] lo speed is unknown, defaulting to 1000
[  195.522433][T13521] __nla_validate_parse: 12 callbacks suppressed
[  195.522443][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2029'.
[  195.613897][T13525] gtp0: entered promiscuous mode
[  195.618138][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'.
[  195.669200][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'.
[  195.673094][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'.
[  195.681719][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'.
[  195.780068][T13531] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2032'.
[  195.845874][T13527] lo speed is unknown, defaulting to 1000
[  195.849340][T13527] lo speed is unknown, defaulting to 1000
[  196.146632][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'.
[  196.156991][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  196.180288][T13546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  196.232566][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'.
[  196.236336][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'.
[  196.254633][T13571] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2044'.
[  196.270186][T13547] lo speed is unknown, defaulting to 1000
[  196.278233][T13547] lo speed is unknown, defaulting to 1000
[  196.753529][T13582] lo speed is unknown, defaulting to 1000
[  196.762878][T13582] lo speed is unknown, defaulting to 1000
[  197.197037][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  197.286015][T13623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.333757][T13617] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.457913][T13614] tipc: Disabling bearer <eth:syzkaller0>
[  197.820340][T13649] netlink: 'syz.3.2061': attribute type 10 has an invalid length.
[  197.824604][T13649] bond0: (slave wlan1): Opening slave failed
[  198.237045][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  198.733040][T13699] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  198.744727][T13699] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  199.277098][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  199.610994][T13717] smc: net device bond0 erased user defined pnetid SYZ2
[  199.917685][T13717] bond0 (unregistering): left promiscuous mode
[  199.922002][T13717] team0: Port device bond0 removed
[  199.925716][T13717] bond0 (unregistering): Released all slaves
[  199.944164][T13715] lo speed is unknown, defaulting to 1000
[  199.950966][T13715] lo speed is unknown, defaulting to 1000
[  200.105400][T13739] syzkaller1: entered promiscuous mode
[  200.110265][T13739] syzkaller1: entered allmulticast mode
[  200.317987][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  200.667426][T13765] __nla_validate_parse: 13 callbacks suppressed
[  200.667441][T13765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2092'.
[  201.043137][T13783] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 38630 - 0
[  201.048359][T13783] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 46528 - 0
[  201.082371][T13783] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 38630 - 0
[  201.086509][T13783] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 46528 - 0
[  201.145876][T13783] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 38630 - 0
[  201.163305][T13783] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 46528 - 0
[  201.229272][T13783] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 38630 - 0
[  201.237489][T13783] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 46528 - 0
[  201.298045][ T6706] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 46528 - 0
[  201.306390][ T6706] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 38630 - 0
[  201.324086][ T6706] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 46528 - 0
[  201.331324][ T6706] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 38630 - 0
[  201.366956][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  201.391305][ T6706] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 46528 - 0
[  201.394019][ T6706] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 38630 - 0
[  201.396631][ T6706] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 46528 - 0
[  201.399623][ T6706] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 38630 - 0
[  201.429993][T13803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2099'.
[  201.439340][T13803] rdma_op ffff888122d8b1f0 conn xmit_rdma 0000000000000000
[  201.450266][T13803] netlink: 'syz.3.2099': attribute type 10 has an invalid length.
[  201.453192][T13803] bond0: (slave wlan1): Opening slave failed
[  201.854515][T13809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2102'.
[  202.032090][T13811] lo speed is unknown, defaulting to 1000
[  202.035061][T13811] lo speed is unknown, defaulting to 1000
[  202.226479][T13816] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2104'.
[  202.232357][T13816] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2104'.
[  202.236403][T13816] dvmrp8: left allmulticast mode
[  202.290340][T13817] netlink: 'syz.2.2104': attribute type 1 has an invalid length.
[  202.293467][T13817] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2104'.
[  202.331819][T13816] rdma_rxe: rxe_newlink: failed to add lo
[  202.334582][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2104'.
[  202.397009][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  202.500864][T13842] netlink: 'syz.2.2111': attribute type 1 has an invalid length.
[  202.515957][T13842] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.532334][T13848] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2112'.
[  202.536478][T13842] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.539668][T13842] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address
[  202.543586][T13842] bond0: (slave vxcan5): Error -95 calling set_mac_address
[  202.598711][T13844] veth1: entered promiscuous mode
[  202.604317][T13844] bond0: (slave veth1): Enslaving as an active interface with a down link
[  202.609926][T13844] erspan0: entered allmulticast mode
[  202.693071][T13858] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.698410][T13858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  202.705257][T13866] lo: entered allmulticast mode
[  202.718087][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  202.783075][T13875] netlink: 'syz.3.2122': attribute type 1 has an invalid length.
[  202.787601][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2118'.
[  202.805369][T13875] 8021q: adding VLAN 0 to HW filter on device bond9
[  202.844806][T13875] 8021q: adding VLAN 0 to HW filter on device bond9
[  202.848168][T13875] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  202.853635][T13875] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  202.871951][T13878] netlink: 'syz.1.2120': attribute type 1 has an invalid length.
[  202.884548][T13872] bond8: (slave gretap1): Releasing active interface
[  202.889773][T13872] bond9: (slave bridge12): Releasing active interface
[  202.902475][T13877] veth9: entered promiscuous mode
[  202.923002][ T1269] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  202.935594][T13879] erspan0: entered allmulticast mode
[  202.971643][T13872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2120'.
[  202.999061][T13881] netlink: 'syz.2.2123': attribute type 12 has an invalid length.
[  203.033776][T13886] netlink: 'syz.3.2124': attribute type 1 has an invalid length.
[  203.072969][T13886] 8021q: adding VLAN 0 to HW filter on device bond10
[  203.095126][T13886] 8021q: adding VLAN 0 to HW filter on device bond10
[  203.099633][T13886] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  203.104445][T13886] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  203.140698][T13890] netlink: 'syz.1.2125': attribute type 2 has an invalid length.
[  203.147953][T13890] netlink: 'syz.1.2125': attribute type 2 has an invalid length.
[  203.155340][T13888] veth9: entered promiscuous mode
[  203.163589][T13888] bond10: (slave veth9): Enslaving as an active interface with a down link
[  203.167931][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  203.183099][T13886] bond10: (slave erspan0): making interface the new active one
[  203.190904][T13886] bond10: (slave erspan0): Enslaving as an active interface with an up link
[  203.195504][T13886] netlink: 'syz.3.2124': attribute type 21 has an invalid length.
[  203.202460][T13893] netlink: zone id is out of range
[  203.205064][T13893] netlink: zone id is out of range
[  203.208398][T13893] netlink: zone id is out of range
[  203.210680][T13893] netlink: zone id is out of range
[  203.212889][T13893] netlink: zone id is out of range
[  203.215105][T13893] netlink: zone id is out of range
[  203.648082][T13929] syzkaller1: entered promiscuous mode
[  203.650104][T13929] syzkaller1: entered allmulticast mode
[  203.838686][ T1269] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  204.070796][T13968] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  204.074932][T13968] CPU: 1 UID: 0 PID: 13968 Comm: syz.1.2148 Not tainted syzkaller #0 PREEMPT(full) 
[  204.074944][T13968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.074948][T13968] Call Trace:
[  204.074952][T13968]  <TASK>
[  204.074955][T13968]  dump_stack_lvl+0x189/0x250
[  204.074971][T13968]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.074980][T13968]  ? __pfx__printk+0x10/0x10
[  204.074992][T13968]  ? kernfs_path_from_node+0x2f/0x290
[  204.075001][T13968]  ? kernfs_path_from_node+0x250/0x290
[  204.075008][T13968]  ? kernfs_path_from_node+0x2f/0x290
[  204.075018][T13968]  sysfs_warn_dup+0x8e/0xa0
[  204.075025][T13968]  sysfs_do_create_link_sd+0xc0/0x110
[  204.075034][T13968]  device_add_class_symlinks+0x1cf/0x240
[  204.075043][T13968]  device_add+0x475/0xb50
[  204.075053][T13968]  wiphy_register+0x1ba6/0x28d0
[  204.075069][T13968]  ? __pfx_wiphy_register+0x10/0x10
[  204.075075][T13968]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  204.075089][T13968]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  204.075100][T13968]  ieee80211_register_hw+0x3425/0x4080
[  204.075116][T13968]  ? ieee80211_register_hw+0x14a1/0x4080
[  204.075129][T13968]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  204.075157][T13968]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  204.075171][T13968]  ? __hrtimer_setup+0x187/0x210
[  204.075179][T13968]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  204.075191][T13968]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  204.075214][T13968]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  204.075222][T13968]  ? trace_kmalloc+0x1f/0xd0
[  204.075230][T13968]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  204.075239][T13968]  ? kstrndup+0xbf/0x160
[  204.075251][T13968]  hwsim_new_radio_nl+0xea4/0x1b10
[  204.075262][T13968]  ? __pfx___nla_validate_parse+0x10/0x10
[  204.075279][T13968]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  204.075293][T13968]  ? __nla_parse+0x40/0x60
[  204.075305][T13968]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  204.075321][T13968]  genl_family_rcv_msg_doit+0x215/0x300
[  204.075333][T13968]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  204.075348][T13968]  ? bpf_lsm_capable+0x9/0x20
[  204.075358][T13968]  ? security_capable+0x7e/0x2e0
[  204.075371][T13968]  genl_rcv_msg+0x60e/0x790
[  204.075382][T13968]  ? __pfx_genl_rcv_msg+0x10/0x10
[  204.075390][T13968]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  204.075405][T13968]  netlink_rcv_skb+0x208/0x470
[  204.075411][T13968]  ? __lock_acquire+0xab9/0xd20
[  204.075422][T13968]  ? __pfx_genl_rcv_msg+0x10/0x10
[  204.075431][T13968]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  204.075495][T13968]  ? down_read+0x1ad/0x2e0
[  204.075507][T13968]  genl_rcv+0x28/0x40
[  204.075515][T13968]  netlink_unicast+0x82f/0x9e0
[  204.075531][T13968]  ? __pfx_netlink_unicast+0x10/0x10
[  204.075542][T13968]  ? netlink_sendmsg+0x642/0xb30
[  204.075548][T13968]  ? skb_put+0x11b/0x210
[  204.075563][T13968]  netlink_sendmsg+0x805/0xb30
[  204.075574][T13968]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.075584][T13968]  ? aa_sock_msg_perm+0xf1/0x1d0
[  204.075592][T13968]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  204.075599][T13968]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.075606][T13968]  __sock_sendmsg+0x21c/0x270
[  204.075618][T13968]  ____sys_sendmsg+0x505/0x830
[  204.075629][T13968]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.075641][T13968]  ? import_iovec+0x74/0xa0
[  204.075651][T13968]  ___sys_sendmsg+0x21f/0x2a0
[  204.075660][T13968]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.075684][T13968]  ? __fget_files+0x2a/0x420
[  204.075690][T13968]  ? __fget_files+0x3a0/0x420
[  204.075701][T13968]  __x64_sys_sendmsg+0x19b/0x260
[  204.075710][T13968]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.075722][T13968]  ? rcu_is_watching+0x15/0xb0
[  204.075731][T13968]  ? do_syscall_64+0xbe/0x3b0
[  204.075740][T13968]  do_syscall_64+0xfa/0x3b0
[  204.075747][T13968]  ? lockdep_hardirqs_on+0x9c/0x150
[  204.075754][T13968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.075760][T13968]  ? exc_page_fault+0x9f/0xf0
[  204.075769][T13968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.075796][T13968] RIP: 0033:0x7faff0f8ebe9
[  204.075810][T13968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.075818][T13968] RSP: 002b:00007faff1d83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.075827][T13968] RAX: ffffffffffffffda RBX: 00007faff11c5fa0 RCX: 00007faff0f8ebe9
[  204.075832][T13968] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  204.075837][T13968] RBP: 00007faff1011e19 R08: 0000000000000000 R09: 0000000000000000
[  204.075842][T13968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.075847][T13968] R13: 00007faff11c6038 R14: 00007faff11c5fa0 R15: 00007ffde528dbc8
[  204.075878][T13968]  </TASK>
[  204.238485][ T5886] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  204.241547][ T5886] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  204.254199][T13968] veth11: entered allmulticast mode
[  204.583176][T13984] lo speed is unknown, defaulting to 1000
[  204.588124][T13984] lo speed is unknown, defaulting to 1000
[  204.707808][T13995] netlink: 'syz.2.2153': attribute type 5 has an invalid length.
[  204.743301][T13995] geneve5: entered promiscuous mode
[  204.745576][T13995] geneve5: entered allmulticast mode
[  204.752618][ T6706] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 256 - 0
[  204.756286][ T6706] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 256 - 0
[  204.764495][ T6706] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 256 - 0
[  204.768982][ T6706] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 256 - 0
[  204.827381][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  205.074078][T14007] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  205.076612][T14008] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  205.305972][T14026] batadv3: entered promiscuous mode
[  205.308704][T14026] batadv3: entered allmulticast mode
[  205.493443][T14043] netlink: 'syz.1.2168': attribute type 10 has an invalid length.
[  205.499200][T14043] net_ratelimit: 28 callbacks suppressed
[  205.499255][T14043] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  205.519886][T14045] syz.2.2169: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  205.526168][T14045] CPU: 1 UID: 0 PID: 14045 Comm: syz.2.2169 Not tainted syzkaller #0 PREEMPT(full) 
[  205.526179][T14045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  205.526184][T14045] Call Trace:
[  205.526187][T14045]  <TASK>
[  205.526191][T14045]  dump_stack_lvl+0x189/0x250
[  205.526205][T14045]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.526213][T14045]  ? __pfx__printk+0x10/0x10
[  205.526223][T14045]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  205.526231][T14045]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  205.526239][T14045]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  205.526248][T14045]  warn_alloc+0x214/0x310
[  205.526260][T14045]  ? __pfx_warn_alloc+0x10/0x10
[  205.526273][T14045]  ? __get_vm_area_node+0x28f/0x300
[  205.526283][T14045]  ? xskq_create+0xbf/0x170
[  205.526291][T14045]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  205.526311][T14045]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  205.526345][T14045]  ? __kasan_kmalloc+0x93/0xb0
[  205.526355][T14045]  vmalloc_user_noprof+0xad/0xf0
[  205.526365][T14045]  ? xskq_create+0xbf/0x170
[  205.526372][T14045]  xskq_create+0xbf/0x170
[  205.526379][T14045]  xsk_init_queue+0xb0/0x110
[  205.526390][T14045]  xsk_setsockopt+0x57b/0x8d0
[  205.526401][T14045]  ? __pfx_xsk_setsockopt+0x10/0x10
[  205.526411][T14045]  ? __pfx_aa_sk_perm+0x10/0x10
[  205.526422][T14045]  ? __fget_files+0x2a/0x420
[  205.526428][T14045]  ? aa_sock_opt_perm+0xff/0x1b0
[  205.526435][T14045]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  205.526443][T14045]  ? __pfx_xsk_setsockopt+0x10/0x10
[  205.526453][T14045]  do_sock_setsockopt+0x17c/0x1b0
[  205.526463][T14045]  __x64_sys_setsockopt+0x13f/0x1b0
[  205.526472][T14045]  do_syscall_64+0xfa/0x3b0
[  205.526479][T14045]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.526486][T14045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.526493][T14045]  ? exc_page_fault+0x9f/0xf0
[  205.526500][T14045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.526507][T14045] RIP: 0033:0x7f83eaf8ebe9
[  205.526514][T14045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.526520][T14045] RSP: 002b:00007f83e91f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  205.526528][T14045] RAX: ffffffffffffffda RBX: 00007f83eb1c5fa0 RCX: 00007f83eaf8ebe9
[  205.526533][T14045] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[  205.526538][T14045] RBP: 00007f83eb011e19 R08: 0000000000000004 R09: 0000000000000000
[  205.526542][T14045] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  205.526546][T14045] R13: 00007f83eb1c6038 R14: 00007f83eb1c5fa0 R15: 00007ffec4eb2418
[  205.526557][T14045]  </TASK>
[  205.526667][T14045] Mem-Info:
[  205.527328][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  205.530175][T14045] active_anon:16132 inactive_anon:0 isolated_anon:0
[  205.530175][T14045]  active_file:1405 inactive_file:38287 isolated_file:0
[  205.530175][T14045]  unevictable:1768 dirty:202 writeback:0
[  205.530175][T14045]  slab_reclaimable:10889 slab_unreclaimable:140569
[  205.530175][T14045]  mapped:18129 shmem:2489 pagetables:1027
[  205.530175][T14045]  sec_pagetables:0 bounce:0
[  205.530175][T14045]  kernel_misc_reclaimable:0
[  205.530175][T14045]  free:183306 free_pcp:23564 free_cma:0
[  205.653892][T14045] Node 0 active_anon:14864kB inactive_anon:0kB active_file:3824kB inactive_file:19992kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36352kB dirty:196kB writeback:0kB shmem:4904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8304kB pagetables:2076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  205.666439][T14045] Node 1 active_anon:49620kB inactive_anon:0kB active_file:1796kB inactive_file:133156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36140kB dirty:620kB writeback:0kB shmem:4932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4444kB pagetables:2028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  205.679777][T14045] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  205.691654][T14045] lowmem_reserve[]: 0 811 811 811 811
[  205.694652][T14045] Node 0 DMA32 free:235972kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14864kB inactive_anon:0kB active_file:3824kB inactive_file:19992kB unevictable:3536kB writepending:196kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:38088kB local_pcp:14476kB free_cma:0kB
[  205.715936][T14045] lowmem_reserve[]: 0 0 0 0 0
[  205.718171][T14045] Node 1 DMA32 free:421812kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:20420kB local_pcp:11968kB free_cma:0kB
[  205.731077][T14045] lowmem_reserve[]: 0 0 854 854 854
[  205.733454][T14045] Node 1 Normal free:61036kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49552kB inactive_anon:0kB active_file:1796kB inactive_file:133156kB unevictable:3536kB writepending:620kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:34908kB local_pcp:13120kB free_cma:0kB
[  205.747314][T14045] lowmem_reserve[]: 0 0 0 0 0
[  205.750372][T14050] __nla_validate_parse: 19 callbacks suppressed
[  205.750383][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'.
[  205.764675][T14045] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  205.770545][T14045] Node 0 DMA32: 969*4kB (UM) 670*8kB (UME) 111*16kB (UM) 76*32kB (UME) 23*64kB (UME) 7*128kB (ME) 22*256kB (UME) 19*512kB (UME) 8*1024kB (UME) 4*2048kB (M) 46*4096kB (M) = 235972kB
[  205.779235][T14045] Node 1 DMA32: 3*4kB (UM) 3*8kB (UM) 3*16kB (UM) 3*32kB (UM) 4*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 5*2048kB (UM) 99*4096kB (UM) = 421812kB
[  205.786411][T14045] Node 1 Normal: 39*4kB (M) 166*8kB (ME) 480*16kB (UME) 551*32kB (UME) 207*64kB (UME) 66*128kB (UM) 11*256kB (UM) 11*512kB (UME) 4*1024kB (UME) 0*2048kB 0*4096kB = 61036kB
[  205.793809][T14045] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  205.797908][T14045] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  205.802374][T14045] 42117 total pagecache pages
[  205.804459][T14045] 0 pages in swap cache
[  205.806354][T14045] Free swap  = 124996kB
[  205.808584][T14045] Total swap = 124996kB
[  205.810536][T14045] 786301 pages RAM
[  205.812314][T14045] 0 pages HighMem/MovableOnly
[  205.814475][T14045] 241344 pages reserved
[  205.816411][T14045] 0 pages cma reserved
[  206.003300][T14062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2173'.
[  206.353180][T14079] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  206.379740][T14079] netlink: 'syz.1.2177': attribute type 4 has an invalid length.
[  206.384552][T14079] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2177'.
[  206.395709][T14079] : renamed from bond0 (while UP)
[  206.440516][T14084] IPVS: ip_vs_edit_dest(): server weight less than zero
[  206.446961][T14084] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  206.449635][T14084] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  206.461125][T14087] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  206.502014][T14093] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  206.506047][T14093] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  206.557175][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  206.646251][T14104] netlink: 'syz.3.2182': attribute type 1 has an invalid length.
[  206.658308][T14104] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2182'.
[  206.698133][T14100] lo speed is unknown, defaulting to 1000
[  206.702183][T14100] lo speed is unknown, defaulting to 1000
[  206.831605][T14113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.845455][T14113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2185'.
[  206.919165][T14120] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2185'.
[  206.922249][T14120] NCSI netlink: No device for ifindex 0
[  207.120331][T14117] lo speed is unknown, defaulting to 1000
[  207.123512][T14117] lo speed is unknown, defaulting to 1000
[  207.219100][T14124] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2187'.
[  207.222808][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2187'.
[  207.251722][T14124] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  207.420137][T14137] geneve6: entered promiscuous mode
[  207.430363][T14140] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2192'.
[  207.433416][T14139] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2192'.
[  207.441819][T14139] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  207.444989][T14139] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  207.479269][T14142] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  208.505718][T14188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  208.566997][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  208.623099][T14185] lo speed is unknown, defaulting to 1000
[  208.635246][T14185] lo speed is unknown, defaulting to 1000
[  208.693589][T14198] validate_nla: 5 callbacks suppressed
[  208.693598][T14198] netlink: 'syz.1.2208': attribute type 20 has an invalid length.
[  208.822762][T14211] netlink: 'syz.1.2211': attribute type 3 has an invalid length.
[  208.931799][T14218] netlink: 'syz.1.2212': attribute type 1 has an invalid length.
[  208.935445][T14218] netlink: 'syz.1.2212': attribute type 2 has an invalid length.
[  209.005404][T14224] netlink: 'syz.1.2214': attribute type 13 has an invalid length.
[  209.061648][T14229] bond0: up delay (18673) is not a multiple of miimon (100), value rounded to 18600 ms
[  209.066071][T14229] bond0: entered promiscuous mode
[  209.068383][T14229] bond0: entered allmulticast mode
[  209.070589][T14229] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.705124][T14235] lo speed is unknown, defaulting to 1000
[  209.708006][T14235] lo speed is unknown, defaulting to 1000
[  209.975610][T14240] netlink: 'syz.1.2219': attribute type 1 has an invalid length.
[  210.001457][T14240] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.031829][T14240] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.037442][T14240] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  210.043645][T14240] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  210.051670][T14245] netlink: 'syz.2.2221': attribute type 1 has an invalid length.
[  210.113177][T14248] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  210.437510][T14251] lo speed is unknown, defaulting to 1000
[  210.444264][T14251] lo speed is unknown, defaulting to 1000
[  210.802927][T14276] lo speed is unknown, defaulting to 1000
[  210.805602][T14276] lo speed is unknown, defaulting to 1000
[  210.864837][T14282] netlink: 'syz.1.2230': attribute type 10 has an invalid length.
[  210.868854][T14282] __nla_validate_parse: 18 callbacks suppressed
[  210.868861][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2230'.
[  210.873948][T14282] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2230'.
[  210.883436][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2230'.
[  210.886551][T14282] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2230'.
[  211.219890][T14293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2234'.
[  211.224598][T14293] netlink: 'syz.3.2234': attribute type 6 has an invalid length.
[  211.232692][T14293] netlink: 'syz.3.2234': attribute type 12 has an invalid length.
[  211.236066][T14293] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2234'.
[  211.405961][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2237'.
[  211.432163][T14305] lo: entered allmulticast mode
[  211.506496][T14305] lo: left allmulticast mode
[  211.525139][T14309] geneve3: entered promiscuous mode
[  211.529235][T14309] geneve3: entered allmulticast mode
[  211.533011][ T5886] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  211.536669][ T5886] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  211.543584][ T5886] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  211.548119][ T5886] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  211.610599][T14317] delete_channel: no stack
[  211.859804][T14344] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2247'.
[  211.862684][T14344] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2247'.
[  211.865635][T14344] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2247'.
[  212.023545][T14344] lo speed is unknown, defaulting to 1000
[  212.026535][T14344] lo speed is unknown, defaulting to 1000
[  212.168037][ T5845] Bluetooth: hci0: command tx timeout
[  212.303057][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  212.727864][T14411] netlink: zone id is out of range
[  212.730163][T14411] netlink: zone id is out of range
[  212.732457][T14411] netlink: zone id is out of range
[  212.734290][T14411] netlink: zone id is out of range
[  212.735933][T14411] netlink: zone id is out of range
[  212.740069][T14411] netlink: zone id is out of range
[  212.743029][T14411] netlink: get zone limit has 8 unknown bytes
[  212.807450][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  215.082269][T14491] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  215.116466][T14494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  215.540081][T14524] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[  215.929912][T14536] __nla_validate_parse: 50 callbacks suppressed
[  215.929928][T14536] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2299'.
[  216.043073][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'.
[  216.131905][T14546] bpq0: entered promiscuous mode
[  216.417180][T14561] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2309'.
[  216.424185][T14561] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  216.454623][T14558] validate_nla: 2 callbacks suppressed
[  216.454637][T14558] netlink: 'syz.1.2308': attribute type 39 has an invalid length.
[  216.461616][T14561] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  216.496351][T14561] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  216.591265][T14561] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  216.680631][ T5886] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  216.685028][ T5886] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  216.700565][ T5886] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  216.703657][ T5886] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  216.709390][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'.
[  216.863187][T14587] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2316'.
[  216.866284][T14587] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2316'.
[  216.877575][T14587] rdma_rxe: rxe_newlink: failed to add lo
[  216.883236][T14587] 8021q: adding VLAN 0 to HW filter on device 
[  216.886295][T14587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.909497][ T5847] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  216.924549][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'.
[  216.929475][T14593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2318'.
[  216.954588][T14596] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2319'.
[  216.988141][T14601] macsec5: entered promiscuous mode
[  216.990066][T14601] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  216.992624][T14601] macsec5: entered allmulticast mode
[  216.994640][T14601] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  217.002027][T14601] macsec6: entered promiscuous mode
[  217.004000][T14601] macsec6: entered allmulticast mode
[  217.037100][ T1269] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 60 sec
[  217.081573][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2321'.
[  217.439923][T14631] veth0: entered promiscuous mode
[  217.443672][T14631] veth0 (unregistering): left promiscuous mode
[  217.460988][T14631] bond0: (slave veth1): Releasing active interface
[  217.461276][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  217.504037][T14634] netlink: 'syz.3.2330': attribute type 5 has an invalid length.
[  217.676981][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  218.451886][T14664] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  218.462288][T14665] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  218.594076][T14686] netlink: 'syz.3.2344': attribute type 3 has an invalid length.
[  218.777158][T14704] sctp: [Deprecated]: syz.1.2348 (pid 14704) Use of struct sctp_assoc_value in delayed_ack socket option.
[  218.777158][T14704] Use struct sctp_sack_info instead
[  218.887980][T14698] lo speed is unknown, defaulting to 1000
[  218.890601][T14698] lo speed is unknown, defaulting to 1000
[  218.951627][T14715] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.993032][T14717] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  219.003416][T14718] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  219.069392][T14721] syzkaller1: entered promiscuous mode
[  219.071478][T14721] syzkaller1: entered allmulticast mode
[  219.478251][T14744] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  219.915537][T14766] netlink: 'syz.1.2370': attribute type 3 has an invalid length.
[  220.060298][T14785] netlink: 'syz.1.2376': attribute type 3 has an invalid length.
[  220.091292][T14788] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  220.098941][T14789] netlink: 'syz.3.2378': attribute type 10 has an invalid length.
[  220.102755][T14789] bond0: (slave wlan1): Opening slave failed
[  220.107744][T14789] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  220.196024][T14797] can: request_module (can-proto-0) failed.
[  220.196453][T14796] can: request_module (can-proto-0) failed.
[  220.201260][T14797] openvswitch: netlink: IP tunnel dst address not specified
[  220.203831][T14797] openvswitch: netlink: IP tunnel dst address not specified
[  220.230080][T14802] netlink: 'syz.1.2381': attribute type 1 has an invalid length.
[  220.248632][T14802] 8021q: adding VLAN 0 to HW filter on device bond11
[  220.255148][T14805] netlink: 'syz.3.2382': attribute type 10 has an invalid length.
[  220.265146][T14802] 8021q: adding VLAN 0 to HW filter on device bond11
[  220.268774][T14802] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address
[  220.274182][T14802] bond11: (slave vxcan3): Error -95 calling set_mac_address
[  220.291245][T14805] 8021q: adding VLAN 0 to HW filter on device team0
[  220.295841][T14805] bond0: (slave team0): Enslaving as an active interface with an up link
[  220.301647][T14805] netlink: 'syz.3.2382': attribute type 10 has an invalid length.
[  220.333445][T14805] bond4: (slave veth1_to_team): making interface the new active one
[  220.337621][T14805] bond4: (slave veth1_to_team): Enslaving as an active interface with an up link
[  220.463249][T14811] netlink: 'syz.2.2384': attribute type 7 has an invalid length.
[  220.659356][T14818] lo speed is unknown, defaulting to 1000
[  220.666113][T14818] lo speed is unknown, defaulting to 1000
[  221.112366][T14878] __nla_validate_parse: 24 callbacks suppressed
[  221.112519][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2400'.
[  221.200223][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2401'.
[  221.260850][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2401'.
[  221.403042][T14883] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2402'.
[  222.055669][   T33] audit: type=1107 audit(1756950694.746:3): pid=14911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  222.111627][T14914] geneve6: entered promiscuous mode
[  222.214336][T14920] syzkaller0: entered promiscuous mode
[  222.216614][T14920] syzkaller0: entered allmulticast mode
[  223.580600][T14950] netlink: 'syz.3.2421': attribute type 1 has an invalid length.
[  223.653780][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'.
[  223.722250][T14967] ip6tnl5: entered promiscuous mode
[  223.726446][T14967] ip6tnl5: entered allmulticast mode
[  223.743394][T14968] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  223.752498][T14968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.755512][T14968] batadv0: entered promiscuous mode
[  223.759330][T14968] team0: Failed to send options change via netlink (err -105)
[  223.761791][T14968] team0: Port device batadv0 added
[  223.882618][T14985] bond_slave_0: Caught tx_queue_len zero misconfig
[  223.905754][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2431'.
[  224.036538][T15000] netlink: 22 bytes leftover after parsing attributes in process `syz.2.2432'.
[  224.182248][T15018] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  224.245070][T15024] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  224.345916][T15033] netlink: 'syz.3.2442': attribute type 1 has an invalid length.
[  224.395976][T15035] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2443'.
[  224.402130][T15035] .70: renamed from hsr0
[  224.406470][T15035] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  224.416259][T15035] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  224.422107][T15035] .70: entered allmulticast mode
[  224.424485][T15035] hsr_slave_0: entered allmulticast mode
[  224.430017][T15035] hsr_slave_1: entered allmulticast mode
[  224.432928][T15035] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  224.479794][T15037] dvmrp8: entered allmulticast mode
[  224.488996][T15037] dvmrp8: left allmulticast mode
[  224.639002][T15048] netlink: 'syz.1.2446': attribute type 12 has an invalid length.
[  224.641991][T15044] netlink: 'syz.1.2446': attribute type 12 has an invalid length.
[  224.906468][T15058] netlink: 'syz.1.2450': attribute type 1 has an invalid length.
[  224.916249][T15056] netlink: 'syz.1.2450': attribute type 1 has an invalid length.
[  224.986365][T15061] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2451'.
[  225.000937][T15061] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2451'.
[  225.268759][T15071] tipc: Resetting bearer <eth:syzkaller0>
[  225.306218][   T47] lo speed is unknown, defaulting to 1000
[  225.308972][   T47] syz2: Port: 1 Link DOWN
[  225.318092][T15073] geneve6: entered promiscuous mode
[  225.333316][T15073] geneve6: entered allmulticast mode
[  225.344322][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 46528 - 0
[  225.350469][   T13] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 38630 - 0
[  225.355876][   T13] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 256 - 0
[  225.360097][   T13] netdevsim netdevsim2 eth0: set [1, 3] type 2 family 0 port 19999 - 0
[  225.366054][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 46528 - 0
[  225.374997][   T13] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 38630 - 0
[  225.379840][   T13] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 256 - 0
[  225.382514][   T13] netdevsim netdevsim2 eth1: set [1, 3] type 2 family 0 port 19999 - 0
[  225.385159][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 46528 - 0
[  225.396230][   T13] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 38630 - 0
[  225.400770][   T13] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 256 - 0
[  225.404544][   T13] netdevsim netdevsim2 eth2: set [1, 3] type 2 family 0 port 19999 - 0
[  225.411319][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 46528 - 0
[  225.414070][   T13] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 38630 - 0
[  225.417571][   T13] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 256 - 0
[  225.420388][   T13] netdevsim netdevsim2 eth3: set [1, 3] type 2 family 0 port 19999 - 0
[  225.456457][T15082] netlink: 'syz.1.2459': attribute type 3 has an invalid length.
[  225.460197][T15073] netlink: 'syz.2.2455': attribute type 1 has an invalid length.
[  225.463550][T15084] 8021q: VLANs not supported on ip6_vti0
[  225.465630][T15073] nbd: error processing sock list
[  225.473332][T15073] block nbd3: shutting down sockets
[  225.646988][T15071] netlink: 'syz.2.2455': attribute type 1 has an invalid length.
[  225.651540][T15071] nbd: error processing sock list
[  225.653803][T15071] block nbd3: shutting down sockets
[  225.659110][T15094] netlink: 'syz.1.2461': attribute type 12 has an invalid length.
[  225.766398][T15100] pim6reg: entered allmulticast mode
[  225.772642][T15104] mac80211_hwsim hwsim13 wlan1: left allmulticast mode
[  225.778414][T15100] pim6reg: left allmulticast mode
[  225.855113][T15107] bond12: entered promiscuous mode
[  225.860260][T15107] bond12: entered allmulticast mode
[  225.862757][T15107] 8021q: adding VLAN 0 to HW filter on device bond12
[  225.951465][T15107] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  225.953989][T15107] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  226.025202][T15120] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  226.037740][T15120] tap0: tun_chr_ioctl cmd 1074025675
[  226.039823][T15120] tap0: persist disabled
[  226.108267][T15129] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.293431][T15141] __nla_validate_parse: 34 callbacks suppressed
[  226.293442][T15141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2475'.
[  226.471822][T15146] 8021q: adding VLAN 0 to HW filter on device bond13
[  226.490456][T15146] 8021q: adding VLAN 0 to HW filter on device bond13
[  226.493210][T15146] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  226.497989][T15146] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  226.511120][T15148] syzkaller1: entered promiscuous mode
[  226.513024][T15148] syzkaller1: entered allmulticast mode
[  226.542863][T15155] bond13: (slave bridge16): Enslaving as an active interface with a down link
[  226.727247][T15167] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  226.741932][T15167] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2480'.
[  227.810946][T15163] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  227.818240][T15163] macsec5: left promiscuous mode
[  227.819975][T15163] macsec6: left promiscuous mode
[  227.821979][T15163] bond12: left promiscuous mode
[  227.907793][T15183] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  227.910934][T15183] CPU: 1 UID: 0 PID: 15183 Comm: syz.1.2485 Not tainted syzkaller #0 PREEMPT(full) 
[  227.910947][T15183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  227.910953][T15183] Call Trace:
[  227.910958][T15183]  <TASK>
[  227.910963][T15183]  dump_stack_lvl+0x189/0x250
[  227.910982][T15183]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.910993][T15183]  ? __pfx__printk+0x10/0x10
[  227.911009][T15183]  ? kernfs_path_from_node+0x2f/0x290
[  227.911020][T15183]  ? kernfs_path_from_node+0x250/0x290
[  227.911030][T15183]  ? kernfs_path_from_node+0x2f/0x290
[  227.911042][T15183]  sysfs_warn_dup+0x8e/0xa0
[  227.911052][T15183]  sysfs_do_create_link_sd+0xc0/0x110
[  227.911064][T15183]  device_add_class_symlinks+0x1cf/0x240
[  227.911077][T15183]  device_add+0x475/0xb50
[  227.911091][T15183]  wiphy_register+0x1ba6/0x28d0
[  227.911112][T15183]  ? __pfx_wiphy_register+0x10/0x10
[  227.911121][T15183]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  227.911144][T15183]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  227.911161][T15183]  ieee80211_register_hw+0x3425/0x4080
[  227.911184][T15183]  ? ieee80211_register_hw+0x14a1/0x4080
[  227.911201][T15183]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  227.911216][T15183]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  227.911237][T15183]  ? __hrtimer_setup+0x187/0x210
[  227.911245][T15183]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  227.911261][T15183]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  227.911294][T15183]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  227.911305][T15183]  ? trace_kmalloc+0x1f/0xd0
[  227.911316][T15183]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  227.911328][T15183]  ? kstrndup+0xbf/0x160
[  227.911345][T15183]  hwsim_new_radio_nl+0xea4/0x1b10
[  227.911360][T15183]  ? __pfx___nla_validate_parse+0x10/0x10
[  227.911384][T15183]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  227.911406][T15183]  ? __nla_parse+0x40/0x60
[  227.911423][T15183]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  227.911441][T15183]  genl_family_rcv_msg_doit+0x215/0x300
[  227.911459][T15183]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  227.911479][T15183]  ? bpf_lsm_capable+0x9/0x20
[  227.911490][T15183]  ? security_capable+0x7e/0x2e0
[  227.911508][T15183]  genl_rcv_msg+0x60e/0x790
[  227.911524][T15183]  ? __pfx_genl_rcv_msg+0x10/0x10
[  227.911535][T15183]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  227.911557][T15183]  netlink_rcv_skb+0x208/0x470
[  227.911566][T15183]  ? __lock_acquire+0xab9/0xd20
[  227.911580][T15183]  ? __pfx_genl_rcv_msg+0x10/0x10
[  227.911592][T15183]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  227.911615][T15183]  ? down_read+0x1ad/0x2e0
[  227.911628][T15183]  genl_rcv+0x28/0x40
[  227.911668][T15183]  netlink_unicast+0x82f/0x9e0
[  227.911689][T15183]  ? __pfx_netlink_unicast+0x10/0x10
[  227.911704][T15183]  ? netlink_sendmsg+0x642/0xb30
[  227.911712][T15183]  ? skb_put+0x11b/0x210
[  227.911726][T15183]  netlink_sendmsg+0x805/0xb30
[  227.911741][T15183]  ? __pfx_netlink_sendmsg+0x10/0x10
[  227.911753][T15183]  ? aa_sock_msg_perm+0xf1/0x1d0
[  227.911764][T15183]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  227.911774][T15183]  ? __pfx_netlink_sendmsg+0x10/0x10
[  227.911784][T15183]  __sock_sendmsg+0x21c/0x270
[  227.911801][T15183]  ____sys_sendmsg+0x505/0x830
[  227.911815][T15183]  ? __pfx_____sys_sendmsg+0x10/0x10
[  227.911833][T15183]  ? import_iovec+0x74/0xa0
[  227.911847][T15183]  ___sys_sendmsg+0x21f/0x2a0
[  227.911861][T15183]  ? __pfx____sys_sendmsg+0x10/0x10
[  227.911895][T15183]  ? __fget_files+0x2a/0x420
[  227.911903][T15183]  ? __fget_files+0x3a0/0x420
[  227.911918][T15183]  __x64_sys_sendmsg+0x19b/0x260
[  227.911931][T15183]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  227.911949][T15183]  ? rcu_is_watching+0x15/0xb0
[  227.911963][T15183]  ? do_syscall_64+0xbe/0x3b0
[  227.911977][T15183]  do_syscall_64+0xfa/0x3b0
[  227.911986][T15183]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.911996][T15183]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.912007][T15183]  ? exc_page_fault+0x9f/0xf0
[  227.912018][T15183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.912028][T15183] RIP: 0033:0x7faff0f8ebe9
[  227.912038][T15183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.912046][T15183] RSP: 002b:00007faff1d62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  227.912058][T15183] RAX: ffffffffffffffda RBX: 00007faff11c6090 RCX: 00007faff0f8ebe9
[  227.912065][T15183] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  227.912071][T15183] RBP: 00007faff1011e19 R08: 0000000000000000 R09: 0000000000000000
[  227.912077][T15183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.912083][T15183] R13: 00007faff11c6128 R14: 00007faff11c6090 R15: 00007ffde528dbc8
[  227.912101][T15183]  </TASK>
[  228.155435][T15190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  228.237268][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2489'.
[  228.345767][T15204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  228.534392][T15206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2492'.
[  228.537533][T15206] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2492'.
[  228.540729][T15206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2492'.
[  228.543739][T15206] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2492'.
[  228.574542][T15208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2493'.
[  228.854653][T15210] lo speed is unknown, defaulting to 1000
[  228.857420][T15210] lo speed is unknown, defaulting to 1000
[  229.013219][T15239] IPVS: Error connecting to the multicast addr
[  229.051932][T15243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2502'.
[  229.055447][T15243] validate_nla: 4 callbacks suppressed
[  229.055455][T15243] netlink: 'syz.3.2502': attribute type 1 has an invalid length.
[  229.074337][T15243] netlink: 'syz.3.2502': attribute type 2 has an invalid length.
[  229.081504][T15243] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2502'.
[  229.137689][T15250] netlink: 'syz.1.2501': attribute type 10 has an invalid length.
[  229.151937][T15250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.155257][T15250] : (slave batadv0): Enslaving as an active interface with an up link
[  229.447077][T15258] erspan0: left allmulticast mode
[  229.518510][T15261] tipc: Trying to set illegal importance in message
[  229.521537][T15261] netlink: 'syz.1.2506': attribute type 30 has an invalid length.
[  229.625615][T15277] sctp: [Deprecated]: syz.3.2512 (pid 15277) Use of int in max_burst socket option.
[  229.625615][T15277] Use struct sctp_assoc_value instead
[  229.801763][T15297] : (slave batadv0): Releasing backup interface
[  229.808394][T15297] bond13: (slave bridge16): Releasing active interface
[  229.867261][T15309] netlink: 'syz.1.2515': attribute type 10 has an invalid length.
[  229.870305][T15309] wlan1: mtu less than device minimum
[  229.872256][T15309] : (slave wlan1): Error -22 calling dev_set_mtu
[  229.875874][T15309] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  229.882384][T15309] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  229.920320][T15307] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  229.922684][T15307] tipc: Enabled bearer <udp:syz2>, priority 10
[  230.057276][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  230.149852][T15317] netlink: 'syz.2.2522': attribute type 1 has an invalid length.
[  230.152518][T15317] netlink: 'syz.2.2522': attribute type 2 has an invalid length.
[  230.230451][T15324] netlink: 'syz.2.2524': attribute type 1 has an invalid length.
[  230.328123][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  230.585381][T15328] can: request_module (can-proto-0) failed.
[  230.589881][T15328] openvswitch: netlink: IP tunnel dst address not specified
[  230.615076][T15332] netlink: 'syz.3.2526': attribute type 1 has an invalid length.
[  230.691773][T15338] 0X: renamed from caif0
[  230.695371][T15338] 0X: entered allmulticast mode
[  230.698169][T15338] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  230.740391][T15345] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  230.813653][T15356] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  230.857003][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  231.058759][T15374] veth11: left allmulticast mode
[  231.304139][T15392] veth0_to_bond: entered allmulticast mode
[  231.336110][T15394] bridge17: entered promiscuous mode
[  231.384675][T15394] __nla_validate_parse: 81 callbacks suppressed
[  231.384686][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2542'.
[  231.391117][T15394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2542'.
[  231.436170][T15404] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.441980][T15404] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  231.533749][T15404] syzkaller0: mtu less than device minimum
[  231.634764][T15421] netlink: 'syz.3.2549': attribute type 2 has an invalid length.
[  231.833618][T15420] lo speed is unknown, defaulting to 1000
[  231.841769][T15420] lo speed is unknown, defaulting to 1000
[  231.916958][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  231.938065][T15421] erspan0: left allmulticast mode
[  232.439899][T15438] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.442855][T15437] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.449816][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'.
[  232.454625][T15437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2552'.
[  232.461171][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'.
[  232.464705][T15437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2552'.
[  232.519118][T15435] vlan0: entered allmulticast mode
[  232.558376][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2555'.
[  232.567529][T15443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2555'.
[  232.607582][T15447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2556'.
[  232.675254][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2557'.
[  232.829704][ T5907] lo speed is unknown, defaulting to 1000
[  232.831654][ T5907] syz2: Port: 1 Link ACTIVE
[  232.956970][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  233.360389][T15495] bridge0: entered allmulticast mode
[  233.370720][T15495] bridge0 (unregistering): left allmulticast mode
[  233.488174][T15498] syzkaller1: entered promiscuous mode
[  233.490402][T15498] syzkaller1: entered allmulticast mode
[  233.793688][T15524] IPv6: sit6: Disabled Multicast RS
[  233.799625][T15528] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  233.843162][T15533] k*]: entered promiscuous mode
[  233.849435][T15533] veth0_to_team: entered promiscuous mode
[  233.851788][T15533] veth0_to_team: entered allmulticast mode
[  234.303095][T15562] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.755908][T15591] validate_nla: 6 callbacks suppressed
[  234.755917][T15591] netlink: 'syz.3.2598': attribute type 1 has an invalid length.
[  234.765834][T15591] netlink: 'syz.3.2598': attribute type 1 has an invalid length.
[  234.779948][T15580] lo speed is unknown, defaulting to 1000
[  234.783791][T15580] lo speed is unknown, defaulting to 1000
[  234.825620][T15591] netlink: 'syz.3.2598': attribute type 1 has an invalid length.
[  234.841661][T15591] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  234.841962][T15593] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[  235.377995][T15610] netlink: 'syz.1.2601': attribute type 1 has an invalid length.
[  235.424329][T15610] 8021q: adding VLAN 0 to HW filter on device bond14
[  235.654379][T15628] netlink: 'syz.2.2605': attribute type 5 has an invalid length.
[  236.489100][T15652] lo speed is unknown, defaulting to 1000
[  236.492709][T15652] lo speed is unknown, defaulting to 1000
[  236.627120][T15664] __nla_validate_parse: 20 callbacks suppressed
[  236.627132][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2613'.
[  236.762020][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2618'.
[  236.814604][T15657] lo speed is unknown, defaulting to 1000
[  236.824686][T15657] lo speed is unknown, defaulting to 1000
[  236.922716][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2616'.
[  237.003082][T15679] ip6tnl2: entered promiscuous mode
[  237.005134][T15679] ip6tnl2: entered allmulticast mode
[  237.015545][T15679] team0: Device ip6tnl2 is of different type
[  237.092998][T15686] bpq0: left promiscuous mode
[  237.110701][T15675] lo speed is unknown, defaulting to 1000
[  237.113405][T15675] lo speed is unknown, defaulting to 1000
[  237.422275][T15694] netlink: 'syz.2.2622': attribute type 2 has an invalid length.
[  237.446694][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2624'.
[  237.452033][T15690] lo speed is unknown, defaulting to 1000
[  237.455877][T15690] lo speed is unknown, defaulting to 1000
[  238.446642][T15746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.513763][T15750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2637'.
[  238.551898][T15752] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  238.901506][T15757] lo speed is unknown, defaulting to 1000
[  238.905997][T15757] lo speed is unknown, defaulting to 1000
[  238.961767][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2640'.
[  239.097077][T15761] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  239.172638][T15777] sctp: [Deprecated]: syz.2.2644 (pid 15777) Use of int in max_burst socket option deprecated.
[  239.172638][T15777] Use struct sctp_assoc_value instead
[  239.212021][T15777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2644'.
[  239.231124][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2644'.
[  239.343280][T15789] netlink: 'syz.3.2648': attribute type 1 has an invalid length.
[  239.355578][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2648'.
[  239.370879][T15791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2649'.
[  239.429571][T15795] 8021q: VLANs not supported on ip_vti0
[  239.476460][T15798] netlink: 'syz.2.2651': attribute type 7 has an invalid length.
[  239.560614][T15794] lo speed is unknown, defaulting to 1000
[  239.563774][T15794] lo speed is unknown, defaulting to 1000
[  240.862794][T15878] lo speed is unknown, defaulting to 1000
[  240.878781][T15878] lo speed is unknown, defaulting to 1000
[  241.127503][T15896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.262440][T15905] sctp: [Deprecated]: syz.1.2673 (pid 15905) Use of struct sctp_assoc_value in delayed_ack socket option.
[  241.262440][T15905] Use struct sctp_sack_info instead
[  241.291762][T15909] netlink: 'syz.1.2674': attribute type 1 has an invalid length.
[  241.318688][T15911] netlink: 'syz.1.2675': attribute type 4 has an invalid length.
[  241.866064][T15966] netlink: 'syz.3.2688': attribute type 1 has an invalid length.
[  241.915736][T15966] bond14: entered promiscuous mode
[  241.922635][T15966] 8021q: adding VLAN 0 to HW filter on device bond14
[  241.943285][T15976] sctp: [Deprecated]: syz.2.2690 (pid 15976) Use of struct sctp_assoc_value in delayed_ack socket option.
[  241.943285][T15976] Use struct sctp_sack_info instead
[  241.953115][T15973] 8021q: adding VLAN 0 to HW filter on device bond14
[  241.955455][T15973] bond14: (slave wireguard1): The slave device specified does not support setting the MAC address
[  241.970629][T15973] bond14: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  241.982805][T15973] bond14: (slave wireguard1): making interface the new active one
[  241.985436][T15973] wireguard1: entered promiscuous mode
[  241.994305][T15973] bond14: (slave wireguard1): Enslaving as an active interface with an up link
[  242.047422][T15973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  242.050567][T15973] IPv6: NLM_F_CREATE should be set when creating new route
[  242.053533][T15973] IPv6: NLM_F_CREATE should be set when creating new route
[  242.076465][T15973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  242.085993][T15973] bond14: (slave wireguard2): The slave device specified does not support setting the MAC address
[  242.101542][T15973] bond14: (slave wireguard2): Enslaving as a backup interface with an up link
[  242.200264][T15981] lo speed is unknown, defaulting to 1000
[  242.203381][T15981] lo speed is unknown, defaulting to 1000
[  242.332381][T16001] __nla_validate_parse: 7 callbacks suppressed
[  242.332391][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2696'.
[  242.555764][T16015] netlink: 'syz.2.2699': attribute type 10 has an invalid length.
[  242.561918][T15994] lo speed is unknown, defaulting to 1000
[  242.565761][T15994] lo speed is unknown, defaulting to 1000
[  242.631247][T15993] lo speed is unknown, defaulting to 1000
[  242.748553][T15993] lo speed is unknown, defaulting to 1000
[  242.779915][T16025] syz.2.2701 uses old SIOCAX25GETINFO
[  243.144013][T16035] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2703'.
[  243.155600][T16033] sctp: [Deprecated]: syz.3.2703 (pid 16033) Use of int in max_burst socket option.
[  243.155600][T16033] Use struct sctp_assoc_value instead
[  243.284065][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2705'.
[  244.009890][T16078] lo speed is unknown, defaulting to 1000
[  244.015802][T16078] lo speed is unknown, defaulting to 1000
[  244.079723][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2718'.
[  244.235427][T16087] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2719'.
[  244.286259][T16095] IPVS: stopping backup sync thread 10140 ...
[  244.403647][T16102] bond10: (slave erspan0): Releasing active interface
[  244.440904][T16102] bond0: (slave team0): Releasing backup interface
[  244.454409][T16102] bond4: (slave veth1_to_team): Releasing backup interface
[  244.460527][T16102] bond10: (slave veth9): Releasing active interface
[  244.465812][T16102] bond14: (slave wireguard1): Releasing backup interface
[  244.474877][T16102] wireguard1: left promiscuous mode
[  244.478662][T16102] bond14: (slave wireguard2): making interface the new active one
[  244.482045][T16102] wireguard2: entered promiscuous mode
[  244.501732][T16102] bond14: (slave wireguard2): Releasing backup interface
[  244.504862][T16102] wireguard2: left promiscuous mode
[  244.564137][T16104] bond19: entered promiscuous mode
[  244.566141][T16104] bond19: entered allmulticast mode
[  244.568924][T16104] 8021q: adding VLAN 0 to HW filter on device bond19
[  244.582535][T16106] team0: Failed to send options change via netlink (err -105)
[  244.586390][T16106] team0: Mode changed to "activebackup"
[  244.747236][T16125] dvmrp6: entered allmulticast mode
[  244.816129][T16123] dvmrp6: left allmulticast mode
[  244.870218][T16132] ip6tnl5: entered promiscuous mode
[  244.872527][T16132] ip6tnl5: entered allmulticast mode
[  244.875051][T16132] team0: Device ip6tnl5 is up. Set it down before adding it as a team port
[  245.043696][T16148] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2734'.
[  245.102123][T16152] IPVS: Error connecting to the multicast addr
[  245.132090][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2733'.
[  245.380096][T16166] sctp: [Deprecated]: syz.3.2738 (pid 16166) Use of int in max_burst socket option.
[  245.380096][T16166] Use struct sctp_assoc_value instead
[  246.051286][T16193] netlink: 'syz.1.2746': attribute type 1 has an invalid length.
[  246.054072][T16193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.102095][T16195] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2747'.
[  246.408315][T16205] veth0_to_bond: left allmulticast mode
[  246.421266][T16205] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  246.424180][T16205] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  246.433726][T16205] macsec5: left allmulticast mode
[  246.435935][T16205] macsec6: left allmulticast mode
[  246.439646][T16205] bond12: left allmulticast mode
[  246.445606][T16205] bridge17: left promiscuous mode
[  246.576394][T16210] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2751'.
[  246.635416][T16210] netlink: 'syz.1.2751': attribute type 10 has an invalid length.
[  246.640537][T16215] netlink: 'syz.1.2751': attribute type 10 has an invalid length.
[  246.644854][T16215] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.649195][T16215] : (slave batadv0): Enslaving as an active interface with an up link
[  246.753611][T16233] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.938963][T16256] netlink: 'syz.2.2762': attribute type 5 has an invalid length.
[  246.986184][T16259] netlink: 'syz.2.2763': attribute type 7 has an invalid length.
[  247.004961][T16261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'.
[  247.012814][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  247.016424][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  247.026115][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  247.033517][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  247.065645][T16267] netlink: 'syz.1.2766': attribute type 1 has an invalid length.
[  247.155229][T16280] 8021q: adding VLAN 0 to HW filter on device bond15
[  247.238205][T16283] block nbd3: server does not support multiple connections per device.
[  247.241293][T16283] block nbd3: shutting down sockets
[  247.295823][T16295] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  247.385743][T16306] tap0: tun_chr_ioctl cmd 1074025677
[  247.392237][T16306] tap0: linktype set to 0
[  247.399636][T16307] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  247.402935][T16307] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  247.406102][T16306] netlink: 'syz.3.2775': attribute type 12 has an invalid length.
[  247.409031][T16307] netlink: 'syz.3.2775': attribute type 12 has an invalid length.
[  247.470240][T16313] __nla_validate_parse: 2 callbacks suppressed
[  247.470250][T16313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2777'.
[  247.520425][T16315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2779'.
[  247.535732][T16315] team0: Mode changed to "broadcast"
[  247.541793][T16315] tipc: Enabled bearer <eth:team0>, priority 0
[  247.662754][T16322] sctp: [Deprecated]: syz.3.2781 (pid 16322) Use of struct sctp_assoc_value in delayed_ack socket option.
[  247.662754][T16322] Use struct sctp_sack_info instead
[  249.436919][ T5233] Bluetooth: hci2: command 0x0405 tx timeout
[  249.877095][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'.
[  249.880351][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'.
[  249.883595][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'.
[  249.888488][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'.
[  249.891477][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'.
[  249.894397][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'.
[  249.898545][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'.
[  249.902473][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'.
[  249.982190][T16372] 0X: left allmulticast mode
[  249.991510][T16372] .70: left allmulticast mode
[  249.993513][T16372] hsr_slave_0: left allmulticast mode
[  249.995774][T16372] hsr_slave_1: left allmulticast mode
[  250.004587][T16372] ipvlan3: left promiscuous mode
[  250.007049][T16372] veth9: left promiscuous mode
[  250.010022][T16372] geneve3: left promiscuous mode
[  250.012195][T16372] geneve3: left allmulticast mode
[  250.029805][T16372] bond14: left promiscuous mode
[  250.039404][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  250.044934][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  250.049897][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  250.053739][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  250.139561][T16382] netlink: 'syz.3.2796': attribute type 1 has an invalid length.
[  250.143750][T16382] netlink: 'syz.3.2796': attribute type 6 has an invalid length.
[  250.158256][T16384] bond16: (slave gretap4): Releasing active interface
[  250.163004][T16384] bond18: (slave bridge10): Releasing active interface
[  250.166642][T16384] batadv0: left promiscuous mode
[  250.178536][T16384] team0: Port device batadv0 removed
[  250.195492][T16384] team0: Mode changed to "loadbalance"
[  250.341771][T16396] dvmrp6: entered allmulticast mode
[  250.348976][T16394] dvmrp6: left allmulticast mode
[  250.369237][T16390] lo speed is unknown, defaulting to 1000
[  250.372953][T16390] lo speed is unknown, defaulting to 1000
[  250.759162][T16410] 8021q: adding VLAN 0 to HW filter on device team0
[  250.761767][T16410] tipc: Resetting bearer <eth:team0>
[  250.763673][T16410] tipc: Resetting bearer <eth:team0>
[  250.767298][T16410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  250.812998][T16414] netlink: 'syz.3.2804': attribute type 1 has an invalid length.
[  250.821802][T16414] bond4: (slave vcan5): The slave device specified does not support setting the MAC address
[  250.827987][T16414] bond4: (slave vcan5): making interface the new active one
[  250.830815][T16414] bond4: (slave vcan5): Enslaving as an active interface with an up link
[  262.843732][T16426] openvswitch: netlink: IP tunnel dst address not specified
[  262.854374][T16424] can: request_module (can-proto-0) failed.
[  262.930454][T16436] pim6reg: entered allmulticast mode
[  262.935275][T16436] pim6reg: left allmulticast mode
[  262.940645][T16435] __nla_validate_parse: 33 callbacks suppressed
[  262.940657][T16435] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2814'.
[  262.959375][T16435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2814'.
[  262.963763][T16435] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2814'.
[  263.202676][T16454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  263.238494][T16456] netlink: 'syz.1.2818': attribute type 2 has an invalid length.
[  263.282339][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2819'.
[  263.285965][T16460] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2819'.
[  263.294381][T16454] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2817'.
[  263.524330][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'.
[  263.525093][T16471] netlink: 'syz.1.2821': attribute type 2 has an invalid length.
[  263.533923][T16471] netlink: 'syz.1.2821': attribute type 1 has an invalid length.
[  263.540629][T16471] netlink: 'syz.1.2821': attribute type 1 has an invalid length.
[  263.615823][T16473] netlink: 'syz.1.2822': attribute type 6 has an invalid length.
[  264.142261][T16486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.145975][T16486] syzkaller0: entered promiscuous mode
[  264.149136][T16486] syzkaller0: entered allmulticast mode
[  264.167289][T16486] tipc: Resetting bearer <eth:syzkaller0>
[  264.176615][T16485] tipc: Resetting bearer <eth:syzkaller0>
[  264.188791][T16485] tipc: Disabling bearer <eth:syzkaller0>
[  264.526164][T16496] openvswitch: netlink: IPv4 tunnel dst address is zero
[  264.665846][T16499] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.675929][T16499] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  264.681780][T16499] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  264.723560][T16501] netlink: 'syz.1.2831': attribute type 6 has an invalid length.
[  264.733380][T16501] netlink: 'syz.1.2831': attribute type 12 has an invalid length.
[  264.736393][T16501] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2831'.
[  264.939098][T16511] netlink: 'syz.1.2833': attribute type 1 has an invalid length.
[  264.942217][T16511] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2833'.
[  265.011800][T16508] lo speed is unknown, defaulting to 1000
[  265.015003][T16508] lo speed is unknown, defaulting to 1000
[  265.558941][T16546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2842'.
[  265.603570][T16547] tap0: tun_chr_ioctl cmd 1074025677
[  265.605427][T16547] tap0: linktype set to 0
[  265.609313][T16549] openvswitch: netlink: Tunnel attr 9 has unexpected len 7 expected 2
[  265.901177][T16560] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  266.019435][T16572] netlink: 'syz.3.2852': attribute type 13 has an invalid length.
[  266.022649][T16572] netlink: 'syz.3.2852': attribute type 17 has an invalid length.
[  266.035118][T16572] gretap0: refused to change device tx_queue_len
[  266.039917][T16572] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  266.048976][ T5847] lo speed is unknown, defaulting to 1000
[  266.056974][ T5847] syz1: Port: 1 Link ACTIVE
[  266.172502][T16594] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  266.175740][T16594] tipc: Resetting bearer <eth:syzkaller0>
[  266.877890][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  267.193698][T10948] block nbd3: Receive control failed (result -107)
[  267.247225][T16612] nbd3: detected capacity change from 0 to 32
[  267.349508][T16621] IPVS: length: 24 != 178974493752
[  267.359310][T16617] lo speed is unknown, defaulting to 1000
[  267.362982][T16617] lo speed is unknown, defaulting to 1000
[  267.917149][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  267.931225][T16641] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  268.013419][T16645] __nla_validate_parse: 9 callbacks suppressed
[  268.013434][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2872'.
[  268.020206][T16645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'.
[  268.119893][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2873'.
[  268.123509][T16654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2873'.
[  268.446484][T16677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2881'.
[  268.462467][T16677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2881'.
[  268.462489][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  268.471042][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  268.476556][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  268.479587][ T5873] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  268.957215][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  269.252551][T16689] tap0: tun_chr_ioctl cmd 1074025677
[  269.255206][T16689] tap0: linktype set to 0
[  269.563686][T16700] macsec0: entered promiscuous mode
[  269.571303][T16700] macsec0: entered allmulticast mode
[  269.574197][T16700] veth1_macvtap: entered allmulticast mode
[  269.578059][T16700] macsec0: left promiscuous mode
[  269.580227][T16700] macsec0: left allmulticast mode
[  269.582299][T16700] veth1_macvtap: left allmulticast mode
[  269.589993][T16700] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  269.594036][T16700] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  269.626620][T16699] lo speed is unknown, defaulting to 1000
[  269.629593][T16699] lo speed is unknown, defaulting to 1000
[  269.997237][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  270.104184][T16704] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  270.108668][T16704] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  270.194493][T16707] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.255995][T16707] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.266099][T16708] tipc: Disabling bearer <udp:syz0>
[  270.368345][T16707] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.453309][T16715] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2892'.
[  270.456572][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'.
[  270.458649][T16707] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.478945][T16715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'.
[  270.577663][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  270.614507][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  270.648348][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  270.651457][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  270.748946][T16736] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2896'.
[  270.771095][T16736] batadv3: entered promiscuous mode
[  270.783048][T16736] batadv3: entered allmulticast mode
[  270.804487][T16710] lo speed is unknown, defaulting to 1000
[  270.815080][T16710] lo speed is unknown, defaulting to 1000
[  271.037180][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  271.470582][T16785] validate_nla: 3 callbacks suppressed
[  271.470597][T16785] netlink: 'syz.1.2908': attribute type 2 has an invalid length.
[  271.481851][T16785] netlink: 'syz.1.2908': attribute type 1 has an invalid length.
[  271.704799][T16801] netlink: 'syz.2.2914': attribute type 1 has an invalid length.
[  271.710476][T16802] sctp: [Deprecated]: syz.2.2914 (pid 16802) Use of int in max_burst socket option deprecated.
[  271.710476][T16802] Use struct sctp_assoc_value instead
[  272.077028][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  272.585897][T16821] syzkaller1: entered promiscuous mode
[  272.589182][T16821] syzkaller1: entered allmulticast mode
[  272.684188][T16825] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  272.690447][T16825] CPU: 1 UID: 0 PID: 16825 Comm: syz.1.2919 Not tainted syzkaller #0 PREEMPT(full) 
[  272.690464][T16825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  272.690471][T16825] Call Trace:
[  272.690476][T16825]  <TASK>
[  272.690482][T16825]  dump_stack_lvl+0x189/0x250
[  272.690503][T16825]  ? __pfx_dump_stack_lvl+0x10/0x10
[  272.690516][T16825]  ? __pfx__printk+0x10/0x10
[  272.690536][T16825]  ? kernfs_path_from_node+0x2f/0x290
[  272.690549][T16825]  ? kernfs_path_from_node+0x250/0x290
[  272.690559][T16825]  ? kernfs_path_from_node+0x2f/0x290
[  272.690574][T16825]  sysfs_warn_dup+0x8e/0xa0
[  272.690586][T16825]  sysfs_do_create_link_sd+0xc0/0x110
[  272.690599][T16825]  device_add_class_symlinks+0x1cf/0x240
[  272.690615][T16825]  device_add+0x475/0xb50
[  272.690631][T16825]  wiphy_register+0x1ba6/0x28d0
[  272.690653][T16825]  ? __pfx_wiphy_register+0x10/0x10
[  272.690664][T16825]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  272.690685][T16825]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  272.690702][T16825]  ieee80211_register_hw+0x3425/0x4080
[  272.690730][T16825]  ? ieee80211_register_hw+0x14a1/0x4080
[  272.690750][T16825]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  272.690768][T16825]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  272.690791][T16825]  ? __hrtimer_setup+0x187/0x210
[  272.690802][T16825]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  272.690821][T16825]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  272.690858][T16825]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  272.690871][T16825]  ? trace_kmalloc+0x1f/0xd0
[  272.690884][T16825]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  272.690898][T16825]  ? kstrndup+0xbf/0x160
[  272.690924][T16825]  hwsim_new_radio_nl+0xea4/0x1b10
[  272.690941][T16825]  ? __pfx___nla_validate_parse+0x10/0x10
[  272.690969][T16825]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  272.690993][T16825]  ? __nla_parse+0x40/0x60
[  272.691012][T16825]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  272.691034][T16825]  genl_family_rcv_msg_doit+0x215/0x300
[  272.691054][T16825]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  272.691078][T16825]  ? bpf_lsm_capable+0x9/0x20
[  272.691091][T16825]  ? security_capable+0x7e/0x2e0
[  272.691111][T16825]  genl_rcv_msg+0x60e/0x790
[  272.691129][T16825]  ? __pfx_genl_rcv_msg+0x10/0x10
[  272.691142][T16825]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  272.691168][T16825]  netlink_rcv_skb+0x208/0x470
[  272.691178][T16825]  ? __lock_acquire+0xab9/0xd20
[  272.691194][T16825]  ? __pfx_genl_rcv_msg+0x10/0x10
[  272.691209][T16825]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  272.691268][T16825]  ? down_read+0x1ad/0x2e0
[  272.691283][T16825]  genl_rcv+0x28/0x40
[  272.691296][T16825]  netlink_unicast+0x82f/0x9e0
[  272.691318][T16825]  ? __pfx_netlink_unicast+0x10/0x10
[  272.691335][T16825]  ? netlink_sendmsg+0x642/0xb30
[  272.691345][T16825]  ? skb_put+0x11b/0x210
[  272.691361][T16825]  netlink_sendmsg+0x805/0xb30
[  272.691381][T16825]  ? __pfx_netlink_sendmsg+0x10/0x10
[  272.691395][T16825]  ? aa_sock_msg_perm+0xf1/0x1d0
[  272.691409][T16825]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  272.691420][T16825]  ? __pfx_netlink_sendmsg+0x10/0x10
[  272.691433][T16825]  __sock_sendmsg+0x21c/0x270
[  272.691452][T16825]  ____sys_sendmsg+0x505/0x830
[  272.691470][T16825]  ? __pfx_____sys_sendmsg+0x10/0x10
[  272.691491][T16825]  ? import_iovec+0x74/0xa0
[  272.691508][T16825]  ___sys_sendmsg+0x21f/0x2a0
[  272.691522][T16825]  ? __pfx____sys_sendmsg+0x10/0x10
[  272.691563][T16825]  ? __fget_files+0x2a/0x420
[  272.691574][T16825]  ? __fget_files+0x3a0/0x420
[  272.691592][T16825]  __x64_sys_sendmsg+0x19b/0x260
[  272.691608][T16825]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  272.691629][T16825]  ? rcu_is_watching+0x15/0xb0
[  272.691645][T16825]  ? do_syscall_64+0xbe/0x3b0
[  272.691661][T16825]  do_syscall_64+0xfa/0x3b0
[  272.691672][T16825]  ? lockdep_hardirqs_on+0x9c/0x150
[  272.691682][T16825]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.691693][T16825]  ? exc_page_fault+0x9f/0xf0
[  272.691706][T16825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.691716][T16825] RIP: 0033:0x7faff0f8ebe9
[  272.691728][T16825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.691737][T16825] RSP: 002b:00007faff1d83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  272.691751][T16825] RAX: ffffffffffffffda RBX: 00007faff11c5fa0 RCX: 00007faff0f8ebe9
[  272.691759][T16825] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  272.691765][T16825] RBP: 00007faff1011e19 R08: 0000000000000000 R09: 0000000000000000
[  272.691772][T16825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.691778][T16825] R13: 00007faff11c6038 R14: 00007faff11c5fa0 R15: 00007ffde528dbc8
[  272.691799][T16825]  </TASK>
[  272.734062][T16829] netlink: 'syz.2.2921': attribute type 1 has an invalid length.
[  272.757949][T16826] nbd: must specify a size in bytes for the device
[  272.787252][T16829] 8021q: adding VLAN 0 to HW filter on device bond21
[  272.936163][T16831] bond21: (slave veth1): Enslaving as an active interface with a down link
[  273.038162][T16852] __nla_validate_parse: 12 callbacks suppressed
[  273.038174][T16852] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2926'.
[  273.079416][T16855] team0: Device gtp1 is up. Set it down before adding it as a team port
[  273.117105][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  273.184156][T16861] netlink: 'syz.1.2929': attribute type 1 has an invalid length.
[  273.204275][T16861] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2929'.
[  274.157243][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  274.269333][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2935'.
[  275.112424][T16919] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  275.153838][T16921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2944'.
[  275.172135][T16921] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2944'.
[  275.197150][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  275.279620][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2948'.
[  275.286643][T16938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2948'.
[  275.355291][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2949'.
[  275.364460][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2949'.
[  275.376300][T16941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2949'.
[  275.394746][T16945] can: request_module (can-proto-0) failed.
[  275.432481][T16950] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.435749][T16950] syzkaller0: entered promiscuous mode
[  275.439560][T16950] syzkaller0: entered allmulticast mode
[  275.460024][T16950] tipc: Resetting bearer <eth:syzkaller0>
[  275.464161][T16949] tipc: Resetting bearer <eth:syzkaller0>
[  275.477039][T16949] tipc: Disabling bearer <eth:syzkaller0>
[  275.484958][T16952] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  276.032292][T16980] netlink: 'syz.1.2960': attribute type 1 has an invalid length.
[  276.046222][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  276.055749][T16981] netlink: 'syz.3.2959': attribute type 9 has an invalid length.
[  276.059600][T16981] netlink: 'syz.3.2959': attribute type 6 has an invalid length.
[  276.062398][T16981] netlink: 'syz.3.2959': attribute type 7 has an invalid length.
[  276.073632][T16981] netlink: 'syz.3.2959': attribute type 8 has an invalid length.
[  276.154001][T16992] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  276.211743][T16992] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  276.237122][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  276.281133][T16992] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
Connection to localhost closed by remote host.
[  276.343988][T16992] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  276.435346][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  276.455654][ T5855] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  276.486017][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  276.504262][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  276.597383][T16970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  277.277223][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  278.317083][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  279.357150][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  280.397108][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  281.037099][    C0] ------------[ cut here ]------------
[  281.039024][    C0] ODEBUG: free active (active state 0) object: ffff88810a389090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350
[  281.044528][    C0] WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0
[  281.048538][    C0] Modules linked in:
[  281.050522][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  281.054008][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.057418][    C0] RIP: 0010:debug_print_object+0x16b/0x1e0
[  281.059350][    C0] Code: 4c 89 ff e8 c7 d1 52 fd 4d 8b 0f 48 c7 c7 a0 41 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 aa ff b2 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 d7 70 d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  281.065952][    C0] RSP: 0018:ffffc90000007830 EFLAGS: 00010296
[  281.068628][    C0] RAX: c08c373c45f39d00 RBX: dffffc0000000000 RCX: ffffffff8de95100
[  281.071884][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  281.075195][    C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  281.078625][    C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6d2b80
[  281.081926][    C0] R13: ffffffff8be34320 R14: ffff88810a389090 R15: ffffffff8b8cdfa0
[  281.085227][    C0] FS:  0000000000000000(0000) GS:ffff8880b8616000(0000) knlGS:0000000000000000
[  281.088938][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  281.091646][    C0] CR2: 00007f465eef7d60 CR3: 000000000df36000 CR4: 00000000000006f0
[  281.094990][    C0] Call Trace:
[  281.096452][    C0]  <IRQ>
[  281.097864][    C0]  debug_check_no_obj_freed+0x3a2/0x470
[  281.100264][    C0]  ? do_raw_spin_lock+0x121/0x290
[  281.102433][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  281.104604][    C0]  kfree+0x112/0x440
[  281.106246][    C0]  rose_timer_expiry+0x4cb/0x600
[  281.108474][    C0]  ? call_timer_fn+0x155/0x5f0
[  281.110482][    C0]  call_timer_fn+0x17e/0x5f0
[  281.111982][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  281.113747][    C0]  ? call_timer_fn+0xbe/0x5f0
[  281.115329][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  281.117302][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.119169][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.121245][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  281.123285][    C0]  __run_timer_base+0x61a/0x860
[  281.125159][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  281.127043][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.128891][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.130647][    C0]  tmigr_handle_remote+0xa32/0x13d0
[  281.132467][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.134285][    C0]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  281.136255][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  281.138203][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  281.140363][    C0]  handle_softirqs+0x286/0x870
[  281.141990][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  281.143533][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  281.145526][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  281.147819][    C0]  __irq_exit_rcu+0xca/0x1f0
[  281.149799][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  281.152014][    C0]  irq_exit_rcu+0x9/0x30
[  281.153802][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  281.156175][    C0]  </IRQ>
[  281.157497][    C0]  <TASK>
[  281.158752][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  281.161251][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  281.163650][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 f6 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  281.171455][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  281.173566][    C0] RAX: c08c373c45f39d00 RBX: ffffffff819683c8 RCX: c08c373c45f39d00
[  281.176596][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b907c RDI: ffffffff8be33800
[  281.179812][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  281.182697][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38a30
[  281.185476][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  281.188533][    C0]  ? do_idle+0x1e8/0x510
[  281.190025][    C0]  default_idle+0x13/0x20
[  281.191665][    C0]  default_idle_call+0x74/0xb0
[  281.193336][    C0]  do_idle+0x1e8/0x510
[  281.194672][    C0]  ? __pfx_do_idle+0x10/0x10
[  281.196191][    C0]  cpu_startup_entry+0x44/0x60
[  281.197849][    C0]  rest_init+0x2de/0x300
[  281.199253][    C0]  start_kernel+0x3a9/0x410
[  281.200719][    C0]  x86_64_start_reservations+0x24/0x30
[  281.202462][    C0]  x86_64_start_kernel+0x143/0x1c0
[  281.204078][    C0]  common_startup_64+0x13e/0x147
[  281.205685][    C0]  </TASK>
[  281.206714][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  281.209265][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  281.212985][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.217314][    C0] Call Trace:
[  281.218763][    C0]  <IRQ>
[  281.220018][    C0]  dump_stack_lvl+0x99/0x250
[  281.221952][    C0]  ? __asan_memcpy+0x40/0x70
[  281.223958][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  281.226180][    C0]  ? __pfx__printk+0x10/0x10
[  281.228176][    C0]  vpanic+0x281/0x750
[  281.229852][    C0]  ? __pfx__printk+0x10/0x10
[  281.231831][    C0]  ? __pfx_vpanic+0x10/0x10
[  281.233786][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  281.235993][    C0]  panic+0xb9/0xc0
[  281.237609][    C0]  ? __pfx_panic+0x10/0x10
[  281.239469][    C0]  __warn+0x31b/0x4b0
[  281.241094][    C0]  ? debug_print_object+0x16b/0x1e0
[  281.243041][    C0]  ? debug_print_object+0x16b/0x1e0
[  281.244829][    C0]  report_bug+0x2be/0x4f0
[  281.246553][    C0]  ? debug_print_object+0x16b/0x1e0
[  281.248457][    C0]  ? debug_print_object+0x16b/0x1e0
[  281.250273][    C0]  ? debug_print_object+0x16d/0x1e0
[  281.252193][    C0]  handle_bug+0x84/0x160
[  281.253718][    C0]  exc_invalid_op+0x1a/0x50
[  281.255229][    C0]  asm_exc_invalid_op+0x1a/0x20
[  281.257209][    C0] RIP: 0010:debug_print_object+0x16b/0x1e0
[  281.259742][    C0] Code: 4c 89 ff e8 c7 d1 52 fd 4d 8b 0f 48 c7 c7 a0 41 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 aa ff b2 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 d7 70 d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  281.267564][    C0] RSP: 0018:ffffc90000007830 EFLAGS: 00010296
[  281.270076][    C0] RAX: c08c373c45f39d00 RBX: dffffc0000000000 RCX: ffffffff8de95100
[  281.273239][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  281.276323][    C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  281.279304][    C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6d2b80
[  281.282004][    C0] R13: ffffffff8be34320 R14: ffff88810a389090 R15: ffffffff8b8cdfa0
[  281.284601][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  281.286601][    C0]  debug_check_no_obj_freed+0x3a2/0x470
[  281.288720][    C0]  ? do_raw_spin_lock+0x121/0x290
[  281.290535][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  281.292223][    C0]  kfree+0x112/0x440
[  281.293516][    C0]  rose_timer_expiry+0x4cb/0x600
[  281.295121][    C0]  ? call_timer_fn+0x155/0x5f0
[  281.297032][    C0]  call_timer_fn+0x17e/0x5f0
[  281.298978][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  281.301345][    C0]  ? call_timer_fn+0xbe/0x5f0
[  281.303377][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  281.305556][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.307772][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.309948][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  281.311952][    C0]  __run_timer_base+0x61a/0x860
[  281.313670][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  281.315952][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.317781][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.319584][    C0]  tmigr_handle_remote+0xa32/0x13d0
[  281.321483][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.323324][    C0]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  281.325737][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  281.327983][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  281.330569][    C0]  handle_softirqs+0x286/0x870
[  281.332496][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  281.334038][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  281.335808][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  281.337592][    C0]  __irq_exit_rcu+0xca/0x1f0
[  281.339126][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  281.340821][    C0]  irq_exit_rcu+0x9/0x30
[  281.342219][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  281.344125][    C0]  </IRQ>
[  281.345156][    C0]  <TASK>
[  281.346255][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  281.348681][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  281.350646][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 f6 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  281.357561][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  281.360260][    C0] RAX: c08c373c45f39d00 RBX: ffffffff819683c8 RCX: c08c373c45f39d00
[  281.363536][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b907c RDI: ffffffff8be33800
[  281.366786][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  281.370107][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38a30
[  281.373422][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  281.376691][    C0]  ? do_idle+0x1e8/0x510
[  281.378456][    C0]  default_idle+0x13/0x20
[  281.380210][    C0]  default_idle_call+0x74/0xb0
[  281.382217][    C0]  do_idle+0x1e8/0x510
[  281.383978][    C0]  ? __pfx_do_idle+0x10/0x10
[  281.385964][    C0]  cpu_startup_entry+0x44/0x60
[  281.388012][    C0]  rest_init+0x2de/0x300
[  281.389821][    C0]  start_kernel+0x3a9/0x410
[  281.391731][    C0]  x86_64_start_reservations+0x24/0x30
[  281.393692][    C0]  x86_64_start_kernel+0x143/0x1c0
[  281.395353][    C0]  common_startup_64+0x13e/0x147
[  281.397322][    C0]  </TASK>
[  281.399363][    C0] Kernel Offset: disabled
[  281.401168][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:52:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006fd0
R8 =ffff888107ea0237 R9 =1ffff11020fd4046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99aff8ca R14=ffffffff99df4420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8616000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f465eef7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=7595ce2dc2826600 RBX=ffffffff819683c8 RCX=7595ce2dc2826600 RDX=0000000000000001
RSI=ffffffff8d9b907c RDI=ffffffff8be33800 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38a30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc9ea3aff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0064656e72757465 725f657269757163
XMM02=10000008000003b7 fffffff800000207 XMM03=0000000100000085 00000000000004b7
XMM04=9500000001000000 8500000000000004 XMM05=b710000008000003 b7fffffff8000002
XMM06=07000000000000a2 bf00000000fff88a XMM07=7b00000000000008 b700000000000000
XMM08=0040060008b60000 0040040008800200 XMM09=0000000000000000 00007f83eb012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
