last executing test programs:

666.934577ms ago: executing program 0 (id=10015):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0xea4, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x3a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0xb, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1ff, 0x6, 0x4, 0x9, 0x1, 0x5, 0x615c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0xd, 0x5, 0x6, 0x375, 0xff, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x2, 0x408, 0x2, 0x101, 0xfff, 0x1000, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xf5, 0x9, 0x3ff, 0x6, 0x6, 0xaa44, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x8, 0x4, 0x5, 0xffff, 0x7, 0xe2, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x1}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x7, 0x2}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0xa}, {0x1, 0xa}, {0x2, 0x7}, {0x6, 0x8}, {0x1, 0x2}, {0x6}, {0x5, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x3, 0x8}, {0x1, 0x7}, {0x2, 0x4}, {0x4, 0x3}, {0x0, 0x1}, {0x6, 0x5}, {0x0, 0x2}, {0x6, 0x3}, {0x4, 0x4}, {0x4, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x5, 0x2}, {0x5, 0x8}, {0x6, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x10, 0xfffe, 0x8, 0xb4c4, 0x4fd, 0x4, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x22, 0x7fff, 0x1, 0xb, 0x6, 0x7, 0x6, 0x6417]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0xa, 0x2, 0x3ff, 0x706, 0x68]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0xc, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x1, 0x1, 0x73, 0x9, 0x9, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x16, 0x2, 0x18, 0x48, 0x1, 0x1b, 0x6c, 0x1, 0x24, 0x0, 0xb, 0x24, 0x36, 0x1, 0x18, 0x12, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5e, 0xa, 0xaa, 0x6, 0x53f, 0x0, 0x86e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xb, 0x4, 0x9, 0x5, 0x8, 0x9, 0xa]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x60, 0x36, 0x4, 0x18, 0x0, 0x2, 0x36, 0x1, 0x16, 0x21, 0x5, 0x1, 0x18, 0x1b, 0x9, 0x48, 0x1b, 0x3b, 0x6c, 0x3, 0x9, 0x6, 0x48, 0x1b, 0x41]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x6}, {0x2, 0x7}, {0x4, 0x7}, {0x6, 0x4}, {0x5, 0x9}, {0x4}, {0x5, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x9}, {0x3, 0x8}, {0x2, 0x8}, {0x3, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x2}, {0x3, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x4, 0x7}, {0x4, 0x7}, {0x2}, {0x2, 0x2}, {0x6, 0x5}, {0x6, 0x1}, {0x0, 0x8}, {0x2, 0x7}, {0x2, 0x8}, {0x2, 0xa}, {0x5, 0x1}, {0x4, 0x8}, {0x7, 0x8}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0xa}, {0x3, 0x6}, {0x7, 0x3}, {0x0, 0xa}, {0x7, 0xa}, {0x7, 0x1}, {0x5, 0x9}, {0x5, 0x6}, {0x2, 0x9}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5a, 0x1, 0x5, 0x24, 0x48, 0x6, 0x6, 0x3, 0x6, 0x48, 0x12, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x60, 0x1b, 0x24, 0x18, 0x16, 0x30, 0xb, 0x2, 0x4, 0x36, 0x9, 0x6c, 0x18, 0x18, 0x12, 0x0, 0xb, 0x16, 0x5, 0x4, 0x0, 0x1b, 0x1, 0x48, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x8, 0x4, 0x9, 0x3, 0x0, 0x3]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x4}, {0x6, 0x1}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x2}, {0x0, 0xa}, {0x4, 0x6}, {0x5, 0xa}, {0x3, 0x4}, {0x5, 0x8}, {0x2, 0x1}, {0x3, 0x3}, {0x1, 0x4}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x2}, {0x5, 0x5}, {0x5, 0x9}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x5}, {0x1}, {0x4}, {0x5, 0x2}, {0x0, 0x9}, {0x7, 0x7}, {0x4, 0xa}, {0x1, 0x1}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x1, 0x7}, {0x7}, {0x1, 0xa}, {0x7}, {0x2, 0x6}, {0x2, 0x4}, {0x0, 0x2}, {0x6, 0x2}, {0x5, 0x2}, {0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x5}, {0x7, 0x9}, {}]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x101, 0xfff, 0x5, 0xc, 0xffff, 0x3, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x9}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x3, 0xfff8, 0x672, 0x9, 0x81, 0xadf6]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x3}, {0x1, 0x5}, {0x4, 0x5}, {0x6, 0x3}, {0x3, 0x5}, {0x3, 0x1}, {0x7, 0x4}, {0x7, 0x3}, {0x4, 0x2}, {}, {0x7, 0x5}, {0x5, 0x4}, {0x2, 0x3}, {0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x4, 0xa}, {0x6, 0x5}, {0x3}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0x5}, {0x2, 0x1}, {0x6, 0x2}, {0x0, 0x9}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0xa}, {0x0, 0x2}, {0x0, 0x2}, {0x7, 0x4}, {0x5, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x4}, {0x2, 0xa}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0xa}, {0x7, 0x7}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xfff4, 0x9, 0x9, 0x9, 0x40, 0x40, 0x5]}}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x1}, {0x3, 0x7}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0x2}, {0x3, 0x1}, {0x1, 0x9}, {0x7, 0x3}, {0x3, 0x5}, {0x0, 0x8}, {0x3, 0x9}, {0x6, 0x9}, {0x6, 0x6}, {0x0, 0x7}, {0x4}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x1}, {0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x1}, {0x1, 0x7}, {0x1, 0x8}, {0x4, 0x8}, {}, {0x3, 0x4}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x1}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x7}, {0x6, 0x1}, {0x5, 0x7}, {0x2, 0x5}, {0x5, 0x1}, {0x5, 0x3}, {0x3, 0x2}, {0x6, 0x2}, {0x7, 0x6}, {0x3, 0x1}, {0x1, 0xa}, {0x5, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x1, 0x7}, {0x6, 0x9}, {0x0, 0x8}, {0x7, 0x5}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x6}, {0x5, 0xa}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x6, 0x7}, {0x6, 0x8}, {0x4, 0x8}, {0x6}, {0x0, 0x6}, {0x2, 0x4}, {}, {0x6, 0x2}, {0x1, 0xa}, {0x0, 0xa}, {0x7, 0xa}, {0x7, 0x2}, {0x6, 0x8}, {}, {0x0, 0x2}, {0x1, 0x4}, {0x3, 0xa}, {0x6, 0x9}, {0x6, 0x1}, {0x6, 0x5}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x10, 0x5, 0x40, 0x5, 0x53, 0x141, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x7, 0x8, 0x3, 0xa, 0x1, 0x6, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xa, 0x101, 0x0, 0x3, 0x2, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x12, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x5b9e, 0x4, 0x7, 0x0, 0x5, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x0, 0x60, 0x3, 0x4, 0x1, 0x6c, 0x1b, 0x18, 0x3, 0x24, 0xc, 0x6c, 0x1b, 0x4, 0x6, 0x48, 0x60, 0x6, 0x1, 0x60, 0x4, 0x2, 0x60, 0x1b, 0x5, 0x36]}]}]}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x9, 0x7, 0x5, 0x9, 0x1800, 0x3, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x1, 0x8001, 0x1, 0x5, 0x205c, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x4, 0x9, 0x3, 0xffeb, 0x4, 0x6]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x3}, {0x4, 0x6}, {0x5, 0xa}, {0x4, 0x8}, {0x6, 0x1}, {0x0, 0x9}, {0x1}, {0x6, 0x8}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x6, 0x4}, {0x2, 0x3}, {0x1, 0x8}, {0x0, 0xa}, {0x3}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x5}, {0x6, 0x3}, {0x1, 0x9}, {0x1, 0xa}, {0x7, 0x9}, {0x6, 0x4}, {0x5, 0x2}, {0x5, 0x1}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x5}, {0x3, 0x5}, {0x5, 0x8}, {0x4, 0x1}, {0x5, 0x8}, {0x3, 0x8}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x5, 0xa}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x5}, {0x6, 0x2}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x8}, {0x1, 0x7}, {0x5, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x3, 0x6}, {0x6}, {0x4, 0x4}, {0x5, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x1}, {0x4, 0x7}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x3}, {0x1, 0x9}, {0x3, 0x9}, {0x7, 0x4}, {0x5, 0x4}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x8}, {0x4, 0x4}, {0x1, 0x5}, {0x4, 0x6}, {0x2, 0x3}, {0x5, 0xa}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0x6}, {0x7, 0x2}, {0x4, 0x8}, {0x2, 0x5}, {0x3, 0x2}, {0x6, 0x1}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xa, 0x213b, 0xd775, 0x2e4, 0x9, 0x5, 0x8]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x4}, {0x1, 0x2}, {0x7, 0x8}, {0x2, 0x5}, {0x7, 0x6}, {0x1, 0x3}, {0x7, 0x4}, {0x1}, {0x6, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0x7}, {0x3, 0x2}, {0x3}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x3, 0x1}, {0x3, 0x6}, {0x1, 0xa}, {0x7, 0x7}, {0x3, 0x1}, {0x5, 0xa}, {0x4, 0x2}, {0x1, 0x3}, {0x2, 0x5}, {0x5}, {0x6, 0x9}, {0x4, 0x9}, {0x5, 0x5}, {0x3, 0x5}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x3, 0x8}, {0x3}, {0x2, 0x8}, {0x4, 0x1}, {0x0, 0x5}, {0x2, 0x9}, {0x2}, {0x4, 0xa}, {0x7, 0x9}, {0x1, 0x2}, {0x1, 0x1}, {0x5, 0x6}, {0x4, 0x4}, {0x1, 0x6}, {0x5, 0x6}, {0x0, 0x1}, {0x2, 0x5}, {0x7}, {0x5, 0x1}, {0x1, 0x6}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x6}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf6, 0x2, 0x7fff, 0x6d8, 0x7, 0xfffb, 0x1, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x4, 0x0, 0xf8, 0x1, 0x9, 0x33e]}}]}]}, @NL80211_ATTR_TX_RATES={0x204, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x2, 0x12, 0xc, 0x30, 0x12, 0x3, 0x24, 0x5, 0x24, 0x1, 0x9, 0x6, 0x4, 0x7cd52c7a2feb4364, 0x6, 0x18, 0x5, 0x1, 0xb]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0xb, 0x9, 0x48, 0x5, 0x2, 0x30, 0x1, 0x4, 0x54, 0x1, 0x4, 0x30, 0x2, 0x30, 0x9, 0x12, 0x18, 0x3, 0x36, 0x48, 0x3, 0x18, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x7, 0x3, 0x1000, 0x8, 0x477, 0x8001]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x19, 0x9, 0x6c, 0x18, 0xc, 0x48, 0x60, 0x24, 0x5, 0x5, 0x6c, 0x6, 0x30, 0x9, 0x24, 0x6, 0x12, 0x0, 0x60, 0x5, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x6}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x4}, {0x5, 0x2}, {0x3, 0x4}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {0x7, 0x4}, {0x0, 0x9}, {0x0, 0x3}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0xa}, {0x4, 0x2}, {0x0, 0x7}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x6}, {0x5, 0x7}, {0x0, 0x9}, {0x5, 0xa}, {0x6, 0x4}, {0x1, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x1}, {0x0, 0x6}, {0x1, 0x5}, {0x2, 0x8}, {0x6, 0xa}, {0x6, 0x3}, {0x6, 0x3}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x1}, {0x3, 0x8}, {0x4, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x6}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x12, 0xd20cff7448570311, 0x18, 0x5, 0x3, 0x6c, 0x18, 0x10, 0x48, 0x1, 0x1b, 0x16, 0xb, 0x4, 0x1b, 0x24, 0x1b, 0x6, 0x7c, 0x6c, 0x6, 0x4, 0x2, 0x9, 0x4, 0x18, 0x1b, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0xf8b8, 0x7, 0x7f, 0x5, 0x5, 0x25]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x0, 0x1, 0x9, 0x300, 0x2, 0x3, 0x281d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7f, 0x8, 0x1, 0x400, 0x4, 0x54c, 0xa]}}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xa1, 0x1797, 0x0, 0x2, 0x2, 0x1, 0x3]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x7, 0x4}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0x9}, {0x5, 0x1}, {0x5, 0x7}, {0x6, 0x6}, {0x0, 0x2}, {}, {0x6, 0xa}, {0x4}, {0x4, 0x7}, {0x2, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x2, 0x7}, {0x5, 0x4}, {0x2, 0x4}, {0x4, 0x3}, {0x3, 0x6}, {0x0, 0x9}, {0x7, 0xa}, {0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x5, 0xa}, {0x7, 0x7}, {0x6, 0x4}, {0x3, 0x2}, {0x7, 0x2}, {0x5, 0x8}, {0x5, 0x8}, {0x5, 0x4}, {0x4, 0x9}, {0x5, 0x7}, {0x2}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x5}, {0x1, 0x8}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0xa}, {0x6, 0x1}, {0x3, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x4}, {0x4, 0x6}, {0x7, 0x1}, {0x1, 0x7}, {0x5, 0x7}, {0x3, 0x1}, {0x6, 0x1}, {0x2, 0x5}, {0x7, 0x9}, {0x7, 0x4}, {0x3, 0x1}, {0x2}, {0x3, 0xa}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x5, 0x1}, {0x3, 0x5}, {0x2}, {0x3, 0xa}, {0x7}, {0x4, 0x7}, {0x3, 0x4}, {0x4}, {}, {0x6}, {0x6, 0xa}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x9}, {0x1, 0x4}, {0x6}, {0x6, 0x5}, {0x4, 0x1}, {0x7, 0x6}, {0x1, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {}, {0x4, 0x1}, {}, {0x6, 0x3}, {0x1, 0x9}, {0x5, 0x8}, {0x7, 0x6}, {0x1, 0xa}, {0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd470, 0x3, 0x40, 0x38, 0x6, 0xb76, 0x6, 0x5ae]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x1, 0x6, 0x2, 0x5, 0x50, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x36, 0x36, 0x4, 0xc, 0x60, 0x48, 0x24, 0x1, 0x48, 0x2, 0x16, 0x24, 0x3, 0x9, 0x9, 0x1b, 0x12, 0x2, 0x12, 0x24, 0x18, 0x2, 0x5, 0x2, 0xf]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0xff, 0x8000, 0x0, 0x9, 0x1, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb9d9, 0xfff5, 0x1000, 0xbf3f, 0x101, 0x3, 0x9, 0xd]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x60, 0x6c, 0xc, 0x4, 0x16, 0x1, 0x2, 0xc, 0x3, 0x3, 0x4, 0x44, 0x5, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x0, 0x4, 0x1, 0x7fff, 0x4, 0x33]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x3}, {0x2, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x5, 0x2}, {0x7, 0x9}, {0x2, 0x2}, {0x6, 0x7}, {0x4, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x4, 0x4}, {0x3, 0xa}, {0x1, 0x8}, {0x7, 0x9}, {0x0, 0x5}, {0x7, 0x8}, {0x1, 0x6}, {0x2, 0x6}, {0x4, 0x5}, {0x3, 0xa}, {0x3, 0x4}, {0x7}, {0x7, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x2, 0x6}, {}, {0x4, 0x7}, {0x3, 0x3}, {0x6, 0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x3, 0x3}, {0x6, 0x2}, {0x4, 0x5}, {0x4, 0x8}, {0x5}, {0x6, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7db, 0x10, 0x0, 0x8, 0x8, 0x406, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x5, 0x401, 0xcd, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x8001, 0x4, 0x4, 0x1, 0xfffc, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x3, 0x7, 0x4, 0xa, 0x9, 0x8]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x48, 0x6c, 0x6c]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0xc, 0x1, 0x2, 0x48, 0x18, 0x18, 0x9, 0x6c, 0x27, 0x2, 0x6, 0xff6458bf756dfdcd, 0x3, 0x2, 0x48, 0x60, 0x48, 0x0, 0x36, 0x6, 0x30]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x1, 0xa}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0x8}, {0x7, 0x9}, {0x7, 0x9}, {0x4, 0x5}, {0x1, 0x8}, {0x3, 0x5}, {0x2, 0x2}, {0x5, 0x8}, {0x0, 0x2}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x4}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x3, 0x8}, {0x0, 0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x2, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x561f, 0x0, 0x8001, 0x401, 0x4, 0x9fc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xe, 0xc6d1, 0x9, 0x1, 0xfeff, 0x1, 0x5a1d]}}]}]}, @NL80211_ATTR_TX_RATES={0x168, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa22f, 0x3, 0x32, 0x5, 0x7, 0x1, 0xb, 0x21e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x2, 0x8, 0x1, 0xc0, 0xfff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf7, 0x5, 0xc, 0xd2, 0x8, 0xa4, 0x8, 0xb]}}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x9, 0xc, 0x52, 0x6, 0x5, 0x2, 0x511c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x5, 0x8001, 0xa765, 0x7f, 0x4, 0x1, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x100, 0x0, 0x6, 0x7fff, 0x70, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x8}, {0x2, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x1}, {0x4, 0x7}, {0x6, 0x3}, {0x6, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x6, 0x7}, {0x4, 0x6}, {0x5}, {0x2, 0x3}, {0x2, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x4}]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x8bc, 0xfff5, 0x14a, 0x9, 0xfff7, 0x2181, 0x3]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x2, 0x3}, {0x0, 0xa}, {0x0, 0x4}, {0x6, 0x2}, {0x7, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x3}, {0x3, 0x7}, {0x5, 0x2}, {}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x7}, {0x4, 0x8}, {0x5, 0x9}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x6, 0x4}, {0x0, 0xa}, {0x2, 0x9}, {0x1, 0x6}, {0x2, 0x7}, {0x4, 0x7}, {0x5, 0x8}, {0x1, 0x3}, {0x3, 0x6}, {0x3, 0x1}, {0x0, 0x5}, {0x5, 0x5}, {0x7}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0xa}, {0x5, 0x8}, {0x2, 0x8}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x2, 0x1}, {0x3}, {0x4, 0xa}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0xa}, {0x5, 0x2}, {0x2, 0x3}, {0x6, 0x4}, {0x7, 0x5}, {0x1, 0x1}, {0x0, 0x8}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x5}, {0x2, 0xa}, {0x7, 0x3}, {0x2, 0x2}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x3}, {0x7, 0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x2}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x36, 0x1b, 0x24, 0x60]}]}]}, @NL80211_ATTR_TX_RATES={0x128, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xa1, 0x7, 0xd, 0x5, 0x9, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x3}, {0x4, 0x7}, {0x6}, {0x3, 0x6}, {0x6, 0x2}, {0x4}, {0x6, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x3, 0x3}, {0x1, 0x9}, {0x5, 0x6}, {0x2, 0x7}, {0x1, 0x5}, {0x4}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x2, 0x1}, {0x1, 0x6}, {0x1, 0xa}, {0x2, 0x3}, {0x4, 0x7}, {0x2, 0x8}, {0x0, 0x2}, {0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x6}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0x2}, {0x2, 0x8}, {}, {0x3, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x6}, {0x3, 0x3}, {0x2, 0x8}, {0x4, 0x7}, {0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfff8, 0xc, 0x8, 0xb, 0x8, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0x30, 0xb, 0x1b, 0x12, 0x5, 0x6c, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1df, 0x8, 0xff2a, 0x3, 0xa, 0x5, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x8, 0x6fa, 0x3, 0xf8, 0xff, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x0, 0xc852, 0xe, 0x0, 0x3, 0x8]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x5a, 0xf039ad6c785658cb, 0x18, 0x1, 0x6c, 0x30, 0x6, 0x4, 0xb, 0x0, 0x3, 0x12, 0xb, 0x6, 0x36, 0x30, 0xc, 0x12, 0x6c, 0x18, 0x1b, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x28c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0xe26c, 0x9, 0x3, 0x5, 0x6, 0x1600]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x0, 0x3dd0, 0x4b, 0x9, 0x1, 0x2, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x1}, {0x1, 0x9}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0x7}, {0x1, 0x3}, {0x6, 0x8}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0xa}, {0x2}, {0x1, 0xa}, {0x3, 0x6}, {0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x6, 0x5}, {0x0, 0x7}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x5}, {0x2, 0x8}, {0x7, 0x5}, {0x2, 0x2}, {0x2, 0x2}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0x3}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x1}, {0x0, 0x8}, {0x3, 0x5}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xe07, 0x3, 0x7ff, 0xa35, 0x2, 0x4800, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x10, 0x10, 0x3, 0x6, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x488c, 0xef, 0x8, 0xffdb, 0x6, 0xf774, 0x4, 0x7c76]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0x9}, {0x2}, {0x3, 0x6}, {0x1, 0x2}, {0x1}, {0x5, 0x5}, {0x7}, {0x2, 0x8}, {0x1, 0x1}, {0x6, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x3, 0x1}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x9}, {0x4, 0x6}, {0x5, 0x1}, {0x7, 0x9}, {}, {0x2, 0x9}, {0x7, 0xa}, {0x1, 0x7}, {0x7}, {0x1, 0x7}, {0x7, 0x7}, {0x2, 0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x3}, {0x3, 0x4}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0xa}, {0x6, 0x5}, {0x0, 0x3}, {0x0, 0x2}, {0x6}, {0x1}, {0x5, 0x2}, {0x6, 0x5}, {0x4, 0x3}, {0x1, 0x9}, {0x5, 0x5}, {0x1, 0x2}, {0x2}, {0x3, 0x1}, {0x5, 0x3}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0xa}, {0x3, 0x5}, {0x2, 0x9}, {0x2, 0x1}, {0x0, 0x6}, {0x5, 0x5}, {0x4, 0x4}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x37, 0x7fff, 0x0, 0x7, 0x8, 0xfffe, 0x6, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2cf, 0x0, 0x5, 0x8, 0x3, 0x0, 0xa]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x2, 0xff, 0x1, 0x2, 0x8, 0x4da9, 0x4]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffc, 0xe, 0x3, 0x4, 0x80, 0x3, 0x2]}}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x3ff, 0x9, 0x0, 0x2, 0x50, 0xfeff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x5, 0x86, 0xd42, 0x5, 0x2, 0xb]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x5, 0x4, 0x5, 0x18, 0x0, 0x16, 0x24, 0x60, 0x30, 0x3, 0x1b, 0x3f, 0x36, 0xb, 0x36, 0x4, 0x18, 0x60, 0x2, 0x12, 0x1, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x2, 0x8}, {0x3, 0x8}, {0x3, 0x9}, {0x5, 0x7}, {0x5, 0x2}, {0x6, 0x7}, {0x7, 0x1}, {0x6, 0x2}, {0x3, 0x6}, {0x5, 0x4}, {0x2, 0x8}, {0x3, 0x5}, {0x7, 0x9}, {0x5, 0x9}, {0x2, 0x8}, {0x6, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x2, 0x36, 0xb, 0x12, 0x12, 0x1, 0x6c, 0x1, 0x24, 0x16, 0x1b, 0x6, 0x24, 0x18, 0x4, 0x18, 0x0, 0x2, 0xb, 0x1, 0xc, 0x6c, 0x24, 0x4, 0x6c, 0x16, 0x48, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x54}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x1}, {0x4, 0xa}, {0x6, 0x2}, {0x5, 0x4}, {0x3}, {0x1, 0x3}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x5}, {}, {0x1, 0x8}, {0x5, 0x7}, {0x7, 0x8}, {0x6, 0x3}, {0x1, 0xa}, {0x5}, {0x4, 0x1}, {0x3, 0x3}, {0x6, 0x5}, {0x3, 0x8}, {0x3}, {0x2, 0x9}, {0x2, 0x6}, {0x4, 0x8}, {0x3, 0x7}, {0x4, 0x6}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x5}, {0x4, 0x9}, {0x7, 0x2}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x36, 0x1b, 0x16, 0xc, 0x36, 0x6d, 0x3, 0x65]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x5, 0x0, 0x5, 0x8, 0xff80, 0x1, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0xea4}, 0x1, 0x0, 0x0, 0x80}, 0x4008810)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2974, 0x48056}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xce, 0x2}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc4b8}]}, 0x50}, 0x1, 0x0, 0x0, 0x890}, 0x200088c4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x0, 0x840)
sendmsg(r3, &(0x7f0000000140)={&(0x7f0000000040)=@xdp={0x2c, 0x5, 0x0, 0x7}, 0xd0, 0x0, 0x11}, 0x44)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33)

602.768822ms ago: executing program 0 (id=10019):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000480)=ANY=[@ANYRES16=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000006aee849500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000d105ed3556b54d0005000000bca90000000000003509010000523fb646278a0995000000bf9800000000000056080000000000008500000007000000b700f300"/83], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000001080002"], 0xa4}}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000370429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4b010000000000002c0012800b0001006d616373656300001c000280050003000d"], 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r11, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x800, @loopback={0xff000000}, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad6e911b5181", 0x2a}], 0x1}, 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
writev(r12, &(0x7f00000002c0), 0x2c5)
ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000340))
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@delqdisc={0x254, 0x25, 0xa00, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xc, 0xe}, {0x10, 0x3}, {0xe, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x81}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa382, 0x3, 0x5, 0xffff, 0x7, 0xffffffff, 0xa, 0x4, 0x9}}}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa2, 0x1ff, 0x7, 0x5, 0x1, 0xc57, 0x5, 0x3, 0x4}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x7f, 0xfffffffb, 0x1, 0x1, 0x2e1, 0x2}}, {0x8, 0x2, [0x1, 0x60]}}, {{0x1c, 0x1, {0x1, 0x6, 0x2, 0xd, 0x1, 0x1, 0x3, 0x7}}, {0x12, 0x2, [0x7, 0x1000, 0x6, 0xea, 0x9, 0xfffc, 0x6]}}]}, @TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xf8, 0x2, 0x4, 0x1, 0x5, 0xfffffffe, 0x5}}, {0xe, 0x2, [0x3c7b, 0x9, 0x8000, 0x9, 0xff]}}, {{0x1c, 0x1, {0x1, 0x1, 0xc, 0x8, 0x2, 0x3, 0x7f, 0x8}}, {0x14, 0x2, [0xa6, 0xff01, 0xff, 0xa3a, 0x574d, 0x6, 0x5, 0x2]}}, {{0x1c, 0x1, {0x8, 0xa2, 0x3, 0x2, 0x1, 0x11, 0xf3, 0x4}}, {0xc, 0x2, [0x8001, 0x10, 0x5, 0x5]}}, {{0x1c, 0x1, {0x4, 0x9, 0x7, 0x3, 0x0, 0x400, 0x800fff, 0x5}}, {0xe, 0x2, [0xfff8, 0x9, 0x3, 0x10, 0x6]}}, {{0x1c, 0x1, {0x4, 0x9, 0xffff, 0x5, 0x1, 0x1, 0x1000, 0x3}}, {0xa, 0x2, [0x7ff, 0x2, 0x800]}}, {{0x1c, 0x1, {0x80, 0xd, 0xdf, 0xbd, 0x2, 0x4, 0x7fffffff, 0x2}}, {0x8, 0x2, [0x3, 0x6]}}]}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x6, 0xd88, 0x1fc000, 0x1, 0x2, 0xa6, 0x5}}, {0xe, 0x2, [0x200, 0x2, 0x6, 0xfffa, 0x7]}}, {{0x1c, 0x1, {0x4, 0x8, 0x8, 0x7, 0x1, 0x7, 0x80, 0x3}}, {0xa, 0x2, [0x9, 0x8, 0xfb0f]}}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

472.539295ms ago: executing program 2 (id=10022):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(r3, &(0x7f00000000c0)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff3}, {}, {0x3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x91d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0)
recvmmsg$unix(r7, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000020, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe)
recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000025c0)=""/83, 0x53}], 0x1, &(0x7f0000002680)}, 0x800}], 0x1, 0x40000002, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000000}, 0x20004804)
socket$kcm(0xa, 0x922000000003, 0x11)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

419.581691ms ago: executing program 0 (id=10023):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000ed03014000000000000000000000000a14000000fa03"], 0x28}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2f}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0xcc, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x2, 0x0, 0x0, {0xfffffffffffffffb, 0xff, 0x0, 0xb, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x400, 0x3ff, 0xf9}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x3a000a0, {0x4, 0x1, 0x4000, 0x80}}}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x7f, 0x8, 0x1, 0x3, 0x8, 0x2, 0x9, 0xe, 0x9, 0x8, 0x8, 0x0, 0x8001, 0xa73, 0x91f0, 0x6]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x9, 0x68, 0x80, 0x9, 0x3, 0x8001, 0x5, 0x10, 0x2fb, 0x9, 0x1, 0xfffd, 0xde, 0x6, 0x3, 0x400]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040004}, 0x62e8fa702e05491b)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x93}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r6, @ANYBLOB="8b04040000000000300012800b00010065727370616e0000200002800400120006001800000040000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x40000)
r7 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800)
getsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xc, 0x8}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0xe00, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

354.047447ms ago: executing program 1 (id=10024):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44044)

353.04769ms ago: executing program 2 (id=10025):
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
accept$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x20040000)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x97}}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xfff3}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000006c0)="bb", 0x1}], 0x1}}], 0x1, 0x4)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000600)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
connect$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x9, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x10001, 0x1, 0x3b, 0x3}, 0x400000000a}}]}, {0x4}, {0x4e}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x2000}, 0x4)
r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r10, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)

283.884852ms ago: executing program 0 (id=10026):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r0}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x100]}, @NL80211_ATTR_CQM_TXE_RATE={0x0, 0x5, 0x1d}]}]}, 0x30}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000040)=@xdp={0x2c, 0x5, 0x0, 0x7}, 0xd0, 0x0, 0x11}, 0x44)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)

282.899073ms ago: executing program 1 (id=10027):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe804a73847100ea1}}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="000000c5eb8ab32b2ad58461"], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f00000000c0)=0x68) (async)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f00000000c0)=0x68)

213.767988ms ago: executing program 1 (id=10028):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) (async)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) (async)
close(r2) (async)
r6 = socket(0x10, 0x803, 0x0) (async)
r7 = epoll_create(0x7)
r8 = epoll_create1(0x0)
r9 = epoll_create(0x7) (async)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000140)={0x60000000}) (async)
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r10, &(0x7f0000000000)={0x2})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000140)={'gretap0\x00', <r11=>0x0, 0x1, 0x40, 0x61, 0x1, {{0x23, 0x4, 0x3, 0x7, 0x8c, 0x64, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@cipso={0x86, 0x42, 0x2, [{0x0, 0x12, "4df1e4b54f6d5565b4acc334535b71a5"}, {0x5, 0xe, "d84cac69dcce82ae7f76934a"}, {0x6, 0xe, "f727ed1b23286f0298011e45"}, {0x5, 0xe, "8cb748a2c8e57168c464f5ce"}]}, @rr={0x7, 0x27, 0xf6, [@local, @private=0xa010102, @multicast1, @local, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote]}, @ra={0x94, 0x4}, @generic={0x8f, 0x9, "9017a9a1a5e49b"}]}}}}})
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r11)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={0x24, r12, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="eaffffff", @ANYRES16=r12, @ANYBLOB="040028bd7000fddbdf257a00000008000300", @ANYRES32=r13, @ANYBLOB="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"], 0x1228}, 0x1, 0x0, 0x0, 0x4000}, 0x20000804) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

212.976261ms ago: executing program 0 (id=10029):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000605000400000000000900020073797a3200ba000014000780080013400000040008001240000000000500050002000000050001000600000014000300686173683a69702c706f72742c697000"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40000010)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
socket$netlink(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2b, 0x80801, 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES8=r4], 0x30}, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r2, {0x1, 0xffe0}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x3}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0xfe}]}}]}, 0x44}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50)
r6 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$sock(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0)

113.99167ms ago: executing program 1 (id=10030):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffe50, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r3 = socket(0x2a, 0x2, 0x0) (async)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb}, {0x1, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x81}]}}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

111.529251ms ago: executing program 2 (id=10031):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106a99039"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) (async)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007f000000000000000700000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000b7090080000000005509010000000000950000000000000085000000b5000000bf91000000000000b7020000000000008500000089000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x48}, 0x94)
sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="f4a1000000000000290000000b00000000080000000000000740000000000e000300000000000000000000000000000000000100000000000000060000000000000000020000000000000500"/88], 0x5c}, 0xff00) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) (async)
r2 = epoll_create1(0x80000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) (async)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
close(0x3) (async)
connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x0, 0x2, {0xa, 0x4e22, 0x200, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffffffc}}}, 0x3a) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r5 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c000018003780130003007114d6bba919736d3429"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f00000000c0)={{r5}, 0x4, &(0x7f0000000080)=[0x19, 0x1d4ad2e0, 0xffffffff, 0x401], 0x0, 0x8})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

110.944232ms ago: executing program 1 (id=10032):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x26000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xe}, {0x0, 0x9}, {0xf, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x792}, @TCA_FLOW_MASK={0x8, 0x6, 0xdb56}, @TCA_FLOW_MASK={0x8, 0x6, 0x10001}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

108.890009ms ago: executing program 2 (id=10033):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x301301, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x20000003)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1400000004000000fa4706000000000000377c6b"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000404)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000002100), r3)
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f00000002c0)=0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="0100813106bd7000fcdfdf1c020000000800", @ANYBLOB="83dbf6329ff794350cbac121b8b5adf5aff5d4a88371bb4078df74ad15e1cd2b3d57e3c4c5b0a6fba9acba61957a93eec10c901924dc81fcc393b3e18fd307046119a254be27761ef61a47caee01148233d270126ed18c9f0d651c2d2a15bcacbe4b2647d40905b3b5f95d61a9e0836172078459a3921824242ccbc7562a9b8321f8357181eb436d63fc580c8dec5f09c1dca6d4c433b23e4dab1e"], 0x1c}}, 0x4010)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=<r7=>0x0)
sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf251b00000008000100", @ANYRES32=r7, @ANYBLOB="922a780c25867717f2"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040080)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0x8918, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "724987c4b5f66a17", "211d0ca3fadefee4e2e09ef59ef6dcaad89a6aa5ceedcaf7cd0487b3150973bc", "ebcf4627", "fa1883bd568d788f"}, 0x38)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000500)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000afcff00000003000500088a2acb02"], 0x70}, 0x1, 0x7}, 0x0)
setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r11, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
sendmsg$NFC_CMD_VENDOR(r3, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000680)=ANY=[@ANYRES8=0x0, @ANYRES16=r5, @ANYBLOB="cd7c2cbd7000fbdbdf251d00000008000100", @ANYRES32=0x0, @ANYBLOB="1362f30e66cc3cc4fe476d5855049e564a4438f2c3b88f8bab2ff8c2b8fca47d39b3a9797462390cec1083ffa30df512de600eead8083104de4651cbbdfcbaf7999cf05957fbbe00ffffffffffffff7fba73e4149e90f21ec38d855246dc2f82017ba9851d677fdfe1cfb1b1ae85b080b6ee90bd667f93d64951329d90b88e1541158872d860b58780dafbde73a3aa0cbf446d183febd12008b26ae0e6c066952f9c8774c886955db999c4b870"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

1.828746ms ago: executing program 2 (id=10034):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="110000000000000000000000010000000100000000000000ac0000000000000000000000070000000083078f64010102444c7401ac1e0101000000047f000001000000007f00000100000005ac1414aa000000bcffffffff0000000700000000000000070a01010100000007ac1414aa00000006ffffffff00000007440b45dbd0b8be05dd02c389232364010101ffffffffac1414aaac1e0101ac1e0101e00000027f000001ac1e0101830c92bf5f2199e286a39e5b01830b7f7f0000017f00000100000000000011000000000000000000000001000000000000000000000014000100"], 0xf8}, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xc}, {0x0, 0x9}, {0x0, 0xfffb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5e41}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x8013)

1.195061ms ago: executing program 0 (id=10035):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@generic={0x4, 0x0, 0x5, 0x9, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0xf120, 0xee, &(0x7f0000000100)=""/238, 0x41000, 0x7f5844ab360ec7d2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xf, 0xf}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000280)=[{0x1, 0x1, 0x10, 0x8}, {0x1, 0x5, 0xa, 0x6}, {0x5, 0x3, 0x3, 0xc}], 0x10, 0x8}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) (async, rerun: 32)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/245, 0xf5}], 0x1}, 0x2}], 0x1, 0x160, 0x0) (async, rerun: 32)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0xc0000, 0x0)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000580))
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) (async)
r4 = accept4$rose(0xffffffffffffffff, &(0x7f00000005c0)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f0000000600)=0x1c, 0x80000)
bind$rose(r4, &(0x7f0000000640)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, [@default, @null, @bcast, @default, @bcast, @default]}, 0x40) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x1, 0xfffffff3, 0x1, 0xa26, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0xe}, 0x50)
ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000800)={<r6=>0xffffffffffffffff, &(0x7f0000000700)='\x00', 0x0, &(0x7f0000000740)={@_ha_fsid={[0x3, 0xfffffffe]}, {0x0, 0x40, 0x1, 0x7fffffff}}, 0x1, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x94, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x101}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, @CTA_TUPLE_REPLY={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) (async)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x8c0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, 0x1, 0x8, 0x600, 0x0, 0x0, {0x4, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000000d00)={&(0x7f0000000bc0), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x90, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0x1d, 0x0, @random="db87d1ca349f3770a0209f5fa8b3dfab67d1227a15e1dd33a1"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x11, 0x0, @random="f217d2692549221a35e6d64fc9"}, {0xe, 0x0, @random="e2d26c22e983f1106260"}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24041}, 0x20000040)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d40)={'bridge_slave_1\x00', <r7=>0x0}) (async)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000d80)) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r6)
sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000f00)={&(0x7f0000000dc0), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x54, r8, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x1000)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f40)={0xffffffffffffffff, 0x8000000, 0x8}, 0xc) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002440)={r6, 0xe0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r10=>0x0, 0xd6, &(0x7f0000002240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000002280), &(0x7f00000022c0), 0x8, 0x19, 0x8, 0x8, &(0x7f0000002300)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0xb, 0x22, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ec7b9c8}, [@ldst={0x3, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffc0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}]}, &(0x7f00000010c0)='syzkaller\x00', 0xa, 0x1000, &(0x7f0000001100)=""/4096, 0x40f00, 0x8, '\x00', r7, @fallback=0xe, r6, 0x8, &(0x7f0000002100)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000002140)={0x5, 0xb, 0x3a58, 0x2}, 0x10, r10, r6, 0x5, 0x0, &(0x7f0000002480)=[{0x3, 0x4, 0x5, 0x5}, {0x0, 0x4, 0x3, 0x9}, {0x4, 0x5, 0x5, 0x3}, {0x1, 0x3, 0x2, 0x6}, {0x5, 0x1, 0xe}], 0x10, 0x3}, 0x94)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002800)=@bpf_tracing={0x1a, 0x5, &(0x7f00000025c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5136}]}, &(0x7f0000002600)='syzkaller\x00', 0xc9, 0xe2, &(0x7f0000002640)=""/226, 0x40f00, 0x60, '\x00', r7, 0x18, r6, 0x8, &(0x7f0000002740)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000002780)={0x2, 0x8, 0x35, 0x4}, 0x10, 0x23278, r6, 0x0, &(0x7f00000027c0)=[r6, r5, r6], 0x0, 0x10, 0xc}, 0x94) (async)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002900)={0xcb, <r12=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000028c0)={@map=r9, r11, 0x2, 0x20, 0x0, @void, @void, @void, @value=r12}, 0x20) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x858008}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x48, 0x1409, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x824}, 0x48010) (async)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000002a80)=0x80001)

352.066µs ago: executing program 2 (id=10036):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0xffffffffffffff60, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r3, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x7})
ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000040)={0x5, 0xb})
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x44}}, 0x24000000)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 1 (id=10037):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x8, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x301, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40845}, 0x8404)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x5ec, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x3}}, 0x7f, 0x1, 0x10000, 0x8, 0x0, 0xfffffffc, 0x1}, 0x9c)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f00000000c0)=0x1)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x304}, "52178fc5d65bbf76", "e54c3d6652bee68f528ec91f48a6f264", "f56cf36f", "49186a7b5232830b"}, 0x28)

kernel console output (not intermixed with test programs):

ts
[  518.675049][T30065] ipt_REJECT: TCP_RESET invalid for non-tcp
[  518.722495][T30070] nbd: socks must be embedded in a SOCK_ITEM attr
[  518.725802][T30070] block nbd1: shutting down sockets
[  518.739763][T30070] netlink: 'syz.0.6849': attribute type 1 has an invalid length.
[  518.780691][T30074] lo speed is unknown, defaulting to 1000
[  518.783945][T30074] gre0 speed is unknown, defaulting to 1000
[  519.026446][T30074] lo speed is unknown, defaulting to 1000
[  519.564394][T30101] syzkaller0: entered promiscuous mode
[  519.575356][T30101] syzkaller0: entered allmulticast mode
[  519.680194][T30105] syzkaller1: entered promiscuous mode
[  519.682243][T30105] syzkaller1: entered allmulticast mode
[  519.822866][T30107] xt_hashlimit: size too large, truncated to 1048576
[  519.875049][T30109] syzkaller1: entered promiscuous mode
[  519.877450][T30109] syzkaller1: entered allmulticast mode
[  520.769942][T30148] __nla_validate_parse: 14 callbacks suppressed
[  520.770005][T30148] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6870'.
[  520.809076][T30151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6871'.
[  520.845571][T30152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6871'.
[  520.892912][T30159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6873'.
[  520.902184][T30159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6873'.
[  521.049187][T30168] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6875'.
[  521.095172][T30175] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  521.129787][T30178] netlink: 'syz.0.6879': attribute type 1 has an invalid length.
[  521.140115][T30180] netlink: 'syz.2.6878': attribute type 1 has an invalid length.
[  521.213063][T30180] veth275: entered promiscuous mode
[  521.252247][T30186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6878'.
[  521.363820][T30192] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  521.606673][T30214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6888'.
[  521.612117][T30214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6888'.
[  521.617121][T30214] netlink: 'syz.2.6888': attribute type 12 has an invalid length.
[  521.620119][T30214] netlink: 'syz.2.6888': attribute type 13 has an invalid length.
[  521.848151][T30233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6893'.
[  522.042541][T30247] pim6reg1: entered promiscuous mode
[  522.044327][T30247] pim6reg1: entered allmulticast mode
[  522.048201][T30247] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  522.314285][T30251] bond5: entered allmulticast mode
[  522.316607][T30251] vti0: entered allmulticast mode
[  522.851090][T30244] bond5: left allmulticast mode
[  522.855485][T30244] vti0: left allmulticast mode
[  523.014170][T30274] bond5: entered allmulticast mode
[  523.015868][T30274] vti0: entered allmulticast mode
[  523.020091][T30273] bond5: left allmulticast mode
[  523.023945][T30273] vti0: left allmulticast mode
[  523.418245][T30294] netlink: 'syz.1.6913': attribute type 89 has an invalid length.
[  523.538866][T30305] bond7: option mode: unable to set because the bond device has slaves
[  524.367801][T30367] bond9: invalid ARP target 0.0.0.0 specified for addition
[  524.370043][T30367] bond9: option arp_ip_target: invalid value (0)
[  524.373812][T30367] bond9 (unregistering): Released all slaves
[  525.138150][T30420] netlink: 'syz.0.6951': attribute type 9 has an invalid length.
[  525.302237][T30424] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  525.851455][T30496] __nla_validate_parse: 25 callbacks suppressed
[  525.851466][T30496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6969'.
[  525.889982][T30496] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6969'.
[  526.054518][T30520] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6976'.
[  526.058385][T30520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6976'.
[  526.108829][T30522] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6977'.
[  526.111585][T30522] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check.
[  526.164387][T30527] bond16: option xmit_hash_policy: invalid value (10)
[  526.167741][T30527] bond16 (unregistering): Released all slaves
[  526.194293][T30530] netlink: 'syz.0.6979': attribute type 3 has an invalid length.
[  526.336976][T30538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6981'.
[  526.375261][T30540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6982'.
[  526.378969][T30541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6982'.
[  526.414443][T30541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6982'.
[  526.417745][T30540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6982'.
[  526.482762][T30543] netlink: 'syz.2.6983': attribute type 11 has an invalid length.
[  526.596514][T30550] bridge0: entered promiscuous mode
[  526.598872][T30550] macsec1: entered promiscuous mode
[  526.935713][T30581] netlink: 'syz.2.6994': attribute type 7 has an invalid length.
[  527.096516][T30589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  554.320483][T30612] __nla_validate_parse: 8 callbacks suppressed
[  554.320498][T30612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7002'.
[  554.357958][T30611] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  554.382007][T30615] pimreg: left allmulticast mode
[  554.384181][T30615] dvmrp8: left allmulticast mode
[  554.428120][T30618] gre0: entered promiscuous mode
[  554.429849][T30618] gre0: entered allmulticast mode
[  554.612026][T30627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7008'.
[  554.648897][T30634] syzkaller0: left promiscuous mode
[  554.651182][T30634] syzkaller0: left allmulticast mode
[  554.687009][T30638] netlink: 'syz.2.7011': attribute type 12 has an invalid length.
[  554.700381][T30641] netlink: 'syz.0.7012': attribute type 10 has an invalid length.
[  554.718211][T30641] netlink: 'syz.0.7012': attribute type 10 has an invalid length.
[  554.742975][T30643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7013'.
[  554.756989][T30643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7013'.
[  554.987458][T30663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7019'.
[  555.032962][T30665] netlink: 'syz.2.7020': attribute type 1 has an invalid length.
[  555.036337][T30665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.218727][T30676] netlink: 'syz.1.7025': attribute type 3 has an invalid length.
[  555.346263][T30689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7029'.
[  555.356643][T30689] bond0: entered promiscuous mode
[  555.360124][T30689] bond0: left promiscuous mode
[  555.411452][T30690] syzkaller0: entered promiscuous mode
[  555.414950][T30690] syzkaller0: entered allmulticast mode
[  555.430581][T30692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7030'.
[  555.435268][T30693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7030'.
[  555.452327][T30692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7030'.
[  555.534102][T30704] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7034'.
[  555.691611][T30722] netlink: 'syz.1.7039': attribute type 1 has an invalid length.
[  555.700472][T30721] bond9: entered promiscuous mode
[  555.704314][T30721] 8021q: adding VLAN 0 to HW filter on device bond9
[  555.720950][T30721] 8021q: adding VLAN 0 to HW filter on device bond9
[  555.724168][T30721] bond9: (slave sit4): The slave device specified does not support setting the MAC address
[  555.728622][T30721] bond9: (slave sit4): Error -95 calling set_mac_address
[  555.730966][T30721] sit4: mtu greater than device maximum
[  555.893246][T30748] netlink: 'syz.1.7046': attribute type 4 has an invalid length.
[  555.896249][T30748] netlink: 'syz.1.7046': attribute type 1 has an invalid length.
[  555.976237][T30750] IPVS: Unknown mcast interface: vcan0
[  556.093205][T30759] netlink: 'syz.2.7049': attribute type 15 has an invalid length.
[  556.166956][T30764] bond16: entered promiscuous mode
[  556.169516][T30764] bond16: entered allmulticast mode
[  556.173854][T30764] 8021q: adding VLAN 0 to HW filter on device bond16
[  556.301002][T30785] netlink: 'syz.2.7054': attribute type 3 has an invalid length.
[  556.320157][T30767] syzkaller0: entered promiscuous mode
[  556.322826][T30767] syzkaller0: entered allmulticast mode
[  557.038050][T30794] Set syz1 is full, maxelem 65536 reached
[  557.171458][T30823] bond5: entered allmulticast mode
[  557.173910][T30823] vti0: entered allmulticast mode
[  557.186231][T30824] dvmrp8: entered allmulticast mode
[  557.195714][T30821] bond5: left allmulticast mode
[  557.200213][T30821] vti0: left allmulticast mode
[  557.618125][T30863] syzkaller0: entered promiscuous mode
[  557.620274][T30863] syzkaller0: entered allmulticast mode
[  558.108997][T30852] Set syz1 is full, maxelem 65536 reached
[  558.275986][T30888] syz.0.7084: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  558.281624][T30888] CPU: 1 UID: 0 PID: 30888 Comm: syz.0.7084 Not tainted syzkaller #0 PREEMPT(full) 
[  558.281635][T30888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  558.281640][T30888] Call Trace:
[  558.281644][T30888]  <TASK>
[  558.281650][T30888]  dump_stack_lvl+0x1a9/0x280
[  558.281665][T30888]  ? __pfx_dump_stack_lvl+0x10/0x10
[  558.281675][T30888]  ? __pfx__printk+0x10/0x10
[  558.281683][T30888]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  558.281690][T30888]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  558.281717][T30888]  ? cpuset_print_current_mems_allowed+0x2f1/0x360
[  558.281726][T30888]  warn_alloc+0x249/0x340
[  558.281739][T30888]  ? __pfx_warn_alloc+0x10/0x10
[  558.281752][T30888]  ? __get_vm_area_node+0x28f/0x300
[  558.281762][T30888]  ? packet_set_ring+0x76a/0x2490
[  558.281772][T30888]  __vmalloc_node_range_noprof+0x690/0x12d0
[  558.281794][T30888]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  558.281804][T30888]  ? alloc_pages_mpol+0x3cd/0x4a0
[  558.281816][T30888]  ? packet_set_ring+0x76a/0x2490
[  558.281823][T30888]  vzalloc_noprof+0xb2/0xe0
[  558.281833][T30888]  ? packet_set_ring+0x76a/0x2490
[  558.281841][T30888]  packet_set_ring+0x76a/0x2490
[  558.281857][T30888]  ? __pfx_packet_set_ring+0x10/0x10
[  558.281872][T30888]  ? _copy_from_user+0x94/0xb0
[  558.281882][T30888]  packet_setsockopt+0xd9c/0x1510
[  558.281889][T30888]  ? __pfx___might_resched+0x10/0x10
[  558.281900][T30888]  ? __pfx_packet_setsockopt+0x10/0x10
[  558.281908][T30888]  ? file_init_path+0x3b/0x590
[  558.281919][T30888]  ? aa_sk_perm+0x853/0x990
[  558.281931][T30888]  ? __pfx_aa_sk_perm+0x10/0x10
[  558.281940][T30888]  ? aa_sock_opt_perm+0xff/0x1b0
[  558.281950][T30888]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  558.281958][T30888]  ? __pfx_packet_setsockopt+0x10/0x10
[  558.281967][T30888]  do_sock_setsockopt+0x17c/0x1b0
[  558.281980][T30888]  __x64_sys_setsockopt+0x13d/0x1b0
[  558.281991][T30888]  do_syscall_64+0xf0/0xfa0
[  558.281999][T30888]  ? lockdep_hardirqs_on+0x9b/0x150
[  558.282008][T30888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.282015][T30888]  ? exc_page_fault+0xa7/0xf0
[  558.282023][T30888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.282029][T30888] RIP: 0033:0x7f5a77f9c819
[  558.282038][T30888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  558.282044][T30888] RSP: 002b:00007f5a761b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  558.282052][T30888] RAX: ffffffffffffffda RBX: 00007f5a78216180 RCX: 00007f5a77f9c819
[  558.282057][T30888] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 000000000000000b
[  558.282061][T30888] RBP: 00007f5a78032c91 R08: 000000000000001c R09: 0000000000000000
[  558.282065][T30888] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  558.282069][T30888] R13: 00007f5a78216218 R14: 00007f5a78216180 R15: 00007ffdc7398118
[  558.282081][T30888]  </TASK>
[  558.388582][T30888] Mem-Info:
[  558.389688][T30888] active_anon:13767 inactive_anon:0 isolated_anon:0
[  558.389688][T30888]  active_file:1644 inactive_file:38499 isolated_file:0
[  558.389688][T30888]  unevictable:1768 dirty:89 writeback:0
[  558.389688][T30888]  slab_reclaimable:12870 slab_unreclaimable:124852
[  558.389688][T30888]  mapped:18465 shmem:2445 pagetables:1125
[  558.389688][T30888]  sec_pagetables:0 bounce:0
[  558.389688][T30888]  kernel_misc_reclaimable:0
[  558.389688][T30888]  free:1082563 free_pcp:20347 free_cma:0
[  558.404714][T30888] Node 0 active_anon:17452kB inactive_anon:0kB active_file:2316kB inactive_file:144676kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37860kB dirty:104kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7080kB pagetables:2016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  558.424472][T30888] Node 1 active_anon:37516kB inactive_anon:0kB active_file:4260kB inactive_file:9320kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35600kB dirty:252kB writeback:0kB shmem:4968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6236kB pagetables:2584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  558.435892][T30888] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  558.446557][T30888] lowmem_reserve[]: 0 1593 2124 2124 2124
[  558.452250][T30888] Node 0 DMA32 free:1421428kB boost:0kB min:25096kB low:31368kB high:37640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7964kB inactive_anon:0kB active_file:828kB inactive_file:112kB unevictable:0kB writepending:16kB zspages:0kB present:2080636kB managed:1631672kB mlocked:0kB bounce:0kB free_pcp:23360kB local_pcp:13644kB free_cma:0kB
[  558.465653][T30888] lowmem_reserve[]: 0 0 531 531 531
[  558.468374][T30888] Node 0 Normal free:10588kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9640kB inactive_anon:0kB active_file:1488kB inactive_file:144564kB unevictable:3536kB writepending:88kB zspages:0kB present:1572868kB managed:544132kB mlocked:0kB bounce:0kB free_pcp:2936kB local_pcp:12kB free_cma:0kB
[  558.479461][T30888] lowmem_reserve[]: 0 0 0 0 0
[  558.482459][T30888] Node 1 Normal free:2882624kB boost:0kB min:56256kB low:70320kB high:84384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37616kB inactive_anon:0kB active_file:4260kB inactive_file:9320kB unevictable:3536kB writepending:252kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:55256kB local_pcp:34916kB free_cma:0kB
[  558.496499][T30888] lowmem_reserve[]: 0 0 0 0 0
[  558.498240][T30888] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  558.503567][T30888] Node 0 DMA32: 149*4kB (M) 220*8kB (UME) 124*16kB (UM) 492*32kB (UME) 328*64kB (UME) 148*128kB (UME) 62*256kB (UME) 62*512kB (UME) 31*1024kB (UM) 14*2048kB (U) 306*4096kB (UM) = 1421428kB
[  558.510347][T30888] Node 0 Normal: 93*4kB (UME) 257*8kB (UME) 156*16kB (UME) 77*32kB (UME) 19*64kB (UM) 2*128kB (U) 1*256kB (U) 1*512kB (E) 1*1024kB (U) 0*2048kB 0*4096kB = 10652kB
[  558.515969][T30888] Node 1 Normal: 465*4kB (ME) 295*8kB (UME) 1542*16kB (UM) 494*32kB (UM) 475*64kB (UM) 148*128kB (UM) 57*256kB (UME) 34*512kB (UME) 28*1024kB (UM) 4*2048kB (ME) 664*4096kB (UM) = 2882652kB
[  558.522494][T30888] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  558.525317][T30888] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  558.528166][T30888] 42588 total pagecache pages
[  558.529670][T30888] 0 pages in swap cache
[  558.530963][T30888] Free swap  = 124996kB
[  558.533442][T30888] Total swap = 124996kB
[  558.534766][T30888] 1834877 pages RAM
[  558.535961][T30888] 0 pages HighMem/MovableOnly
[  558.537450][T30888] 388413 pages reserved
[  558.538778][T30888] 0 pages cma reserved
[  559.009555][T30934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  559.015113][T30935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  559.638041][T30964] lo speed is unknown, defaulting to 1000
[  559.655437][T30964] gre0 speed is unknown, defaulting to 1000
[  559.752297][T30972] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20000
[  559.809406][T30964] lo speed is unknown, defaulting to 1000
[  560.050478][T30985] __nla_validate_parse: 25 callbacks suppressed
[  560.050494][T30985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7113'.
[  560.094932][T30985] lo speed is unknown, defaulting to 1000
[  560.098592][T30985] gre0 speed is unknown, defaulting to 1000
[  560.255762][T30985] lo speed is unknown, defaulting to 1000
[  560.632420][T30998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7117'.
[  560.643159][T30998] validate_nla: 1 callbacks suppressed
[  560.643173][T30998] netlink: 'syz.2.7117': attribute type 1 has an invalid length.
[  560.650870][T30998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7117'.
[  561.033294][T31022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7122'.
[  561.049348][T31022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7122'.
[  561.175914][T31034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7125'.
[  561.188326][T31032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7123'.
[  561.224133][T31032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7123'.
[  561.449805][T31050] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7127'.
[  561.477142][T31048] pim6reg: left allmulticast mode
[  561.852573][T31074] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  561.889369][T31074] veth235: entered promiscuous mode
[  561.984215][T31089] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7136'.
[  561.987737][T31089] netlink: 'syz.2.7136': attribute type 6 has an invalid length.
[  561.990784][T31089] netlink: 'syz.2.7136': attribute type 5 has an invalid length.
[  561.995447][T31089] netlink: 'syz.2.7136': attribute type 6 has an invalid length.
[  561.998509][T31089] netlink: 'syz.2.7136': attribute type 5 has an invalid length.
[  562.002188][T31089] netlink: 'syz.2.7136': attribute type 6 has an invalid length.
[  562.009441][T31083] bond10: (slave bond_slave_1): Device is not bonding slave
[  562.016944][T31083] bond10: option active_slave: invalid value (bond_slave_1)
[  562.021351][T31089] netlink: 'syz.2.7136': attribute type 5 has an invalid length.
[  562.027724][T31083] bond10 (unregistering): Released all slaves
[  562.068275][T31092] lo speed is unknown, defaulting to 1000
[  562.071462][T31092] gre0 speed is unknown, defaulting to 1000
[  562.251207][T31092] lo speed is unknown, defaulting to 1000
[  562.749374][T31144] netlink: 'syz.2.7150': attribute type 33 has an invalid length.
[  562.999326][T31151] syzkaller1: entered promiscuous mode
[  563.002135][T31151] syzkaller1: entered allmulticast mode
[  563.648892][T31163] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  563.743840][T31165] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  563.768315][T31168] Cannot find del_set index 1536 as target
[  563.815745][T31168] netlink: 'syz.0.7157': attribute type 39 has an invalid length.
[  563.901118][T31187] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  564.210631][T31220] IPVS: length: 67 != 8
[  564.379353][T31230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  564.464490][T31236] netlink: 'syz.1.7176': attribute type 10 has an invalid length.
[  564.552961][T31241] lo speed is unknown, defaulting to 1000
[  564.555667][T31241] gre0 speed is unknown, defaulting to 1000
[  564.651441][T31241] lo speed is unknown, defaulting to 1000
[  565.108323][T31259] __nla_validate_parse: 20 callbacks suppressed
[  565.108334][T31259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7183'.
[  565.216258][T31272] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  565.230179][T31272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7186'.
[  565.461457][T31304] xt_ecn: cannot match TCP bits for non-tcp packets
[  565.646008][T31319] lo speed is unknown, defaulting to 1000
[  565.646190][T31322] openvswitch: netlink: Message has 8 unknown bytes.
[  565.650475][T31319] gre0 speed is unknown, defaulting to 1000
[  565.762893][T31319] lo speed is unknown, defaulting to 1000
[  565.784043][T31330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7203'.
[  565.812658][T31330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7203'.
[  565.972344][T31334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7204'.
[  566.794470][T31339] syzkaller0: entered promiscuous mode
[  566.796163][T31339] syzkaller0: entered allmulticast mode
[  566.924608][T31351] validate_nla: 1 callbacks suppressed
[  566.924623][T31351] netlink: 'syz.0.7207': attribute type 5 has an invalid length.
[  566.931566][T31357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7209'.
[  566.961878][T31357] nbd: must specify at least one socket
[  566.967353][T31357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7209'.
[  567.258995][T31373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7212'.
[  567.379881][T31376] netlink: 'syz.2.7214': attribute type 1 has an invalid length.
[  567.389127][T31378] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7215'.
[  567.434335][T31385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7217'.
[  567.438267][T31385] 8021q: VLANs not supported on ip6_vti0
[  567.486101][T31382] netlink: 'syz.1.7216': attribute type 4 has an invalid length.
[  567.514917][T31382] netlink: 'syz.1.7216': attribute type 4 has an invalid length.
[  567.595919][T31395] xt_TCPMSS: Only works on TCP SYN packets
[  567.758057][T31399] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  568.049517][T31437] batadv0: entered promiscuous mode
[  568.053643][T31437] bond0: entered promiscuous mode
[  568.055882][T31437] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  568.059595][T31437] debugfs: 'hsr1' already exists in 'hsr'
[  568.063582][T31437] Cannot create hsr debugfs directory
[  568.066948][T31437] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  568.071300][T31437] hsr1: entered allmulticast mode
[  568.074239][T31437] batadv0: entered allmulticast mode
[  568.076444][T31437] bond0: entered allmulticast mode
[  568.078663][T31437] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  568.088678][T31437] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  568.591383][T31483] dvmrp6: entered allmulticast mode
[  568.621064][T31485] netlink: 'syz.0.7248': attribute type 3 has an invalid length.
[  568.798628][T31485] netlink: 'syz.0.7248': attribute type 2 has an invalid length.
[  568.807427][T31485] l24): entered promiscuous mode
[  569.366324][T31497] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  569.842430][T31532] lo speed is unknown, defaulting to 1000
[  569.849092][T31532] gre0 speed is unknown, defaulting to 1000
[  569.965522][T31537] netlink: 'syz.0.7263': attribute type 4 has an invalid length.
[  569.975252][T31537] bridge18: entered promiscuous mode
[  569.977152][T31537] bridge18: entered allmulticast mode
[  570.029806][T31532] lo speed is unknown, defaulting to 1000
[  570.059312][T31535] batadv_slave_1: entered promiscuous mode
[  570.149427][T31540] __nla_validate_parse: 19 callbacks suppressed
[  570.149447][T31540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7264'.
[  570.197702][T31542] netlink: 236 bytes leftover after parsing attributes in process `syz.0.7265'.
[  570.201857][T31542] netlink: 236 bytes leftover after parsing attributes in process `syz.0.7265'.
[  570.280664][T31545] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7267'.
[  570.363456][T31552] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.7268'.
[  570.374894][T31552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7268'.
[  570.453785][T31530] batadv_slave_1: left promiscuous mode
[  570.648449][T31566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7273'.
[  570.704455][T31566] bond17: entered promiscuous mode
[  570.706157][T31566] bond17: entered allmulticast mode
[  570.708047][T31566] 8021q: adding VLAN 0 to HW filter on device bond17
[  570.819453][T31579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7276'.
[  570.842657][T31581] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7277'.
[  570.845844][T31581] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7277'.
[  571.355571][T31611] lo speed is unknown, defaulting to 1000
[  571.358480][T31611] gre0 speed is unknown, defaulting to 1000
[  571.457441][T31611] lo speed is unknown, defaulting to 1000
[  571.683278][T31620] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  572.001130][T31639] netlink: 'syz.0.7291': attribute type 10 has an invalid length.
[  572.013169][T31635] lo speed is unknown, defaulting to 1000
[  572.015247][T31639] netlink: 'syz.0.7291': attribute type 2 has an invalid length.
[  572.018326][T31635] gre0 speed is unknown, defaulting to 1000
[  572.143867][T31635] lo speed is unknown, defaulting to 1000
[  572.395310][T31669] netlink: zone id is out of range
[  572.397287][T31669] netlink: zone id is out of range
[  572.398902][T31669] netlink: zone id is out of range
[  572.400549][T31669] netlink: zone id is out of range
[  572.413798][T31669] netlink: zone id is out of range
[  572.415997][T31669] netlink: zone id is out of range
[  572.417608][T31669] netlink: zone id is out of range
[  572.419293][T31669] netlink: zone id is out of range
[  572.479605][T31673] bond13: Removing last arp target with arp_interval on
[  572.894577][T31706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.066751][T31728] xfrm0: Caught tx_queue_len zero misconfig
[  573.347132][T31741] Timeout policy `syz1' can only be used by L3 protocol number 41216
[  573.437351][T31745] netlink: 'syz.0.7321': attribute type 2 has an invalid length.
[  573.606578][T31757] vlan0: Caught tx_queue_len zero misconfig
[  574.285133][T31773] netlink: 'syz.2.7330': attribute type 1 has an invalid length.
[  574.287773][T31773] nbd: couldn't find device at index -427251215
[  574.826890][T31779] x_tables: duplicate underflow at hook 1
[  575.243138][T31801] __nla_validate_parse: 14 callbacks suppressed
[  575.243152][T31801] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7338'.
[  575.659181][T31822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7347'.
[  576.894238][T31828] pimreg9: entered allmulticast mode
[  576.897332][T31830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7349'.
[  576.923785][T31830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7349'.
[  576.995794][T31834] netlink: 'syz.0.7350': attribute type 13 has an invalid length.
[  576.998345][T31834] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.7350'.
[  577.001618][T31834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7350'.
[  577.005145][T31834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7350'.
[  577.050479][T31840] netlink: 'syz.1.7352': attribute type 2 has an invalid length.
[  577.302217][T31863] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7358'.
[  577.305790][T31863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7358'.
[  577.576257][T31884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7364'.
[  578.693108][T31928] net_ratelimit: 5 callbacks suppressed
[  578.693130][T31928] openvswitch: netlink: Key 3 has unexpected len 108 expected 4
[  580.339444][T31996] __nla_validate_parse: 9 callbacks suppressed
[  580.339457][T31996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7395'.
[  580.507860][T32021] xfrm0: entered promiscuous mode
[  580.520006][T32021] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7400'.
[  580.555759][T32026] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7401'.
[  580.559700][T32026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7401'.
[  580.726155][T32044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7405'.
[  580.797622][T32048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7407'.
[  580.803301][T32048] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  580.891680][T32052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7409'.
[  581.913806][T32088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7422'.
[  582.471691][T32124] bond5: entered allmulticast mode
[  582.476969][T32124] vti0: entered allmulticast mode
[  582.479303][T32124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7432'.
[  582.485031][T32123] bond5: left allmulticast mode
[  582.486653][T32123] vti0: left allmulticast mode
[  582.766510][T32160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7443'.
[  582.812298][T32162] netlink: 'syz.1.7443': attribute type 3 has an invalid length.
[  582.871666][T32169] ipt_rpfilter: unknown options
[  583.070123][T32183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  583.689056][T32205] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  583.696189][T32205] netlink: 'syz.2.7459': attribute type 11 has an invalid length.
[  583.699290][T32205] netlink: 'syz.2.7459': attribute type 4 has an invalid length.
[  584.445916][T32238] lo speed is unknown, defaulting to 1000
[  584.449635][T32238] gre0 speed is unknown, defaulting to 1000
[  584.560074][T32242] lo speed is unknown, defaulting to 1000
[  584.603222][T32238] lo speed is unknown, defaulting to 1000
[  584.603242][T32242] gre0 speed is unknown, defaulting to 1000
[  584.725075][T32242] lo speed is unknown, defaulting to 1000
[  585.161639][T32267] tls: option downdelay: invalid value (18446744073709547007)
[  585.164224][T32267] tls: option downdelay: allowed values 0 - 2147483647
[  585.167637][T32267] tls (unregistering): Released all slaves
[  585.318353][T32267] netlink: 'syz.2.7474': attribute type 1 has an invalid length.
[  585.428387][T32286] __nla_validate_parse: 14 callbacks suppressed
[  585.428406][T32286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7478'.
[  585.439273][T32287] x_tables: duplicate underflow at hook 3
[  585.478864][T32286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7478'.
[  586.550455][T32304] netlink: 'syz.1.7483': attribute type 14 has an invalid length.
[  586.628864][T32316] netlink: 'syz.2.7486': attribute type 3 has an invalid length.
[  586.775244][T32335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7491'.
[  586.813259][T32337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7492'.
[  586.834252][T32340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7493'.
[  586.836776][T32341] Cannot find add_set index 3 as target
[  586.920111][T32345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7495'.
[  586.949569][T32343] xt_hashlimit: size too large, truncated to 1048576
[  586.982679][T32353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7498'.
[  587.000568][T32356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7496'.
[  587.020961][T32356] 8021q: adding VLAN 0 to HW filter on device batadv2
[  587.041324][T32359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7499'.
[  587.070977][T32362] netlink: 'syz.0.7500': attribute type 1 has an invalid length.
[  587.073854][T32362] netlink: 'syz.0.7500': attribute type 2 has an invalid length.
[  587.409917][T32397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7509'.
[  587.647620][T32418] netlink: 'syz.1.7514': attribute type 1 has an invalid length.
[  587.650705][T32418] netlink: 'syz.1.7514': attribute type 2 has an invalid length.
[  587.757921][T32423] hsr_slave_0: left promiscuous mode
[  587.760858][T32423] hsr_slave_1: left promiscuous mode
[  588.478489][T32462] netlink: 'syz.0.7527': attribute type 11 has an invalid length.
[  588.481535][T32462] netlink: 'syz.0.7527': attribute type 11 has an invalid length.
[  589.756874][T32513] netlink: 'syz.0.7541': attribute type 1 has an invalid length.
[  589.792742][T32513] netlink: 'syz.0.7541': attribute type 1 has an invalid length.
[  589.939030][T32521] lo speed is unknown, defaulting to 1000
[  589.941671][T32521] gre0 speed is unknown, defaulting to 1000
[  590.037715][T32521] lo speed is unknown, defaulting to 1000
[  590.529290][T32531] __nla_validate_parse: 19 callbacks suppressed
[  590.529309][T32531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7545'.
[  590.565156][T32531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7545'.
[  590.569101][T32531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7545'.
[  590.658424][T32536] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.7547'.
[  590.664012][T32536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7547'.
[  590.743274][T32538] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7548'.
[  590.748610][T32538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7548'.
[  590.757783][T32538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7548'.
[  590.790890][T32541] geneve5: entered promiscuous mode
[  590.792824][T32541] geneve5: entered allmulticast mode
[  590.933657][T32559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7553'.
[  590.933693][T32560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7553'.
[  591.044857][T32562] syzkaller1: entered promiscuous mode
[  591.047171][T32562] syzkaller1: entered allmulticast mode
[  592.572675][T32635] netlink: 'syz.2.7576': attribute type 13 has an invalid length.
[  592.575274][T32635] netlink: 'syz.2.7576': attribute type 17 has an invalid length.
[  592.615980][T32635] 8021q: adding VLAN 0 to HW filter on device team0
[  592.620151][T32635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  592.626674][    T9] lo speed is unknown, defaulting to 1000
[  592.628608][    T9] syz2: Port: 1 Link ACTIVE
[  592.837601][T32646] sctp: [Deprecated]: syz.0.7580 (pid 32646) Use of struct sctp_assoc_value in delayed_ack socket option.
[  592.837601][T32646] Use struct sctp_sack_info instead
[  592.849401][T32646] bond0: Device is already in use.
[  593.557685][T32677] x_tables: ip6_tables: udplite match: only valid for protocol 136
[  593.639167][T32683] x_tables: ip_tables: icmp match: only valid for protocol 1
[  593.669928][T32686] openvswitch: netlink: Duplicate or invalid key (type 0).
[  593.674305][T32686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  593.678140][T32686] netlink: 'syz.0.7590': attribute type 14 has an invalid length.
[  594.239152][T32714] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  595.058099][T32756] netlink: 'syz.2.7611': attribute type 15 has an invalid length.
[  595.063909][T32756] netlink: 'syz.2.7611': attribute type 15 has an invalid length.
[  595.127239][T32763] netlink: 'syz.0.7613': attribute type 2 has an invalid length.
[  595.538103][  T324] __nla_validate_parse: 23 callbacks suppressed
[  595.538119][  T324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7621'.
[  595.993322][  T343] SET target dimension over the limit!
[  596.310954][  T350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7628'.
[  596.315018][  T351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7628'.
[  596.319213][  T350] Cannot find add_set index 3 as target
[  598.971592][  T360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7630'.
[  598.975810][  T360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7630'.
[  598.979591][  T360] netlink: 'syz.2.7630': attribute type 6 has an invalid length.
[  598.986153][  T360] netlink: 'syz.2.7630': attribute type 5 has an invalid length.
[  598.990172][  T360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7630'.
[  598.994972][  T360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7630'.
[  599.000025][  T360] netlink: 'syz.2.7630': attribute type 6 has an invalid length.
[  599.004254][  T360] netlink: 'syz.2.7630': attribute type 5 has an invalid length.
[  599.030800][  T363] netlink: 'syz.0.7631': attribute type 1 has an invalid length.
[  599.057769][  T363] 8021q: adding VLAN 0 to HW filter on device bond10
[  599.083991][  T363] vlan6: entered allmulticast mode
[  599.086833][  T363] bond10: entered allmulticast mode
[  599.109602][  T363] bond10: (slave geneve2): making interface the new active one
[  599.113895][  T363] geneve2: entered allmulticast mode
[  599.117550][  T363] bond10: (slave geneve2): Enslaving as an active interface with an up link
[  599.120357][ T5871] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  599.125439][ T5871] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  599.128049][ T5871] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  599.130217][  T370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7633'.
[  599.131105][ T5871] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  599.139368][  T370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7633'.
[  599.145760][  T372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7634'.
[  599.181231][  T374] xt_ecn: cannot match TCP bits for non-tcp packets
[  599.482731][  T404] netlink: 'syz.2.7643': attribute type 1 has an invalid length.
[  599.978617][  T439] netlink: 'syz.1.7654': attribute type 1 has an invalid length.
[  599.981424][  T439] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.320433][  T475] bond5: entered allmulticast mode
[  600.322379][  T475] vti0: entered allmulticast mode
[  600.399189][  T474] bond5: left allmulticast mode
[  600.401221][  T474] vti0: left allmulticast mode
[  600.546894][  T488] __nla_validate_parse: 16 callbacks suppressed
[  600.546907][  T488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7669'.
[  600.670057][  T505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7675'.
[  600.695409][  T505] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7675'.
[  600.706552][  T511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7675'.
[  600.758342][  T509] syzkaller0: entered promiscuous mode
[  600.760183][  T509] syzkaller0: entered allmulticast mode
[  600.768849][  T517] IPVS: Error connecting to the multicast addr
[  600.805593][  T517] xfrm0: left promiscuous mode
[  600.808226][  T517] bond11: left promiscuous mode
[  600.809972][  T517] gretap2: left promiscuous mode
[  600.815783][  T517] syzkaller0: left promiscuous mode
[  600.817924][  T517] tipc: Resetting bearer <eth:syzkaller0>
[  600.820095][  T517] tipc: Resetting bearer <eth:syzkaller0>
[  600.827560][  T517] macsec1: left promiscuous mode
[  600.830023][  T517] bond16: left promiscuous mode
[  600.834582][  T517] bond17: left promiscuous mode
[  600.889017][  T519] ip6gre2: entered promiscuous mode
[  600.891479][  T519] ip6gre2: entered allmulticast mode
[  600.924998][  T529] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  601.066014][  T538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7683'.
[  601.098144][  T538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7683'.
[  601.128254][  T541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7684'.
[  601.253745][  T551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7687'.
[  601.337733][  T556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7688'.
[  601.343260][  T565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7690'.
[  601.394267][  T569] netlink: 'syz.1.7692': attribute type 1 has an invalid length.
[  601.397867][  T570] netlink: 'syz.1.7692': attribute type 1 has an invalid length.
[  601.401076][  T570] netlink: 'syz.1.7692': attribute type 2 has an invalid length.
[  601.606318][  T579] lo speed is unknown, defaulting to 1000
[  601.609034][  T579] gre0 speed is unknown, defaulting to 1000
[  601.712153][  T579] lo speed is unknown, defaulting to 1000
[  602.048173][  T592] ksmbd: Unknown IPC event: 0, ignore.
[  602.278169][  T607] 8021q: adding VLAN 0 to HW filter on device bond18
[  602.302471][  T607] bond18: (slave veth293): Enslaving as an active interface with a down link
[  602.312912][  T607] bond18: (slave gretap4): making interface the new active one
[  602.316930][  T607] gretap4: entered promiscuous mode
[  602.318923][  T607] bond18: (slave gretap4): Enslaving as an active interface with an up link
[  602.396273][  T611] lo speed is unknown, defaulting to 1000
[  602.399404][  T611] gre0 speed is unknown, defaulting to 1000
[  602.493835][  T621] syzkaller0: entered promiscuous mode
[  602.495817][  T621] tipc: Resetting bearer <eth:syzkaller0>
[  602.515192][  T611] lo speed is unknown, defaulting to 1000
[  603.153841][  T615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  603.307433][  T632] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  603.498819][  T641] 8021q: adding VLAN 0 to HW filter on device bond11
[  603.752834][  T648] syzkaller0: entered promiscuous mode
[  603.756959][  T648] syzkaller0: entered allmulticast mode
[  604.470744][  T705] validate_nla: 7 callbacks suppressed
[  604.470763][  T705] netlink: 'syz.2.7726': attribute type 3 has an invalid length.
[  604.511516][  T701] ip6tnl0: Caught tx_queue_len zero misconfig
[  604.720979][  T713] netlink: 'syz.0.7728': attribute type 1 has an invalid length.
[  605.029484][  T732] veth0: Caught tx_queue_len zero misconfig
[  605.092443][  T737] netlink: 'syz.1.7733': attribute type 1 has an invalid length.
[  605.426098][  T759] lo speed is unknown, defaulting to 1000
[  605.429388][  T759] gre0 speed is unknown, defaulting to 1000
[  605.506119][  T775] netlink: 'syz.1.7741': attribute type 1 has an invalid length.
[  605.510006][  T774] netlink: 'syz.1.7741': attribute type 1 has an invalid length.
[  605.568761][  T759] lo speed is unknown, defaulting to 1000
[  605.874357][  T800] netlink: 'syz.0.7747': attribute type 5 has an invalid length.
[  606.099115][  T807] lo: Caught tx_queue_len zero misconfig
[  606.139485][  T810] smc: net device wlan0 erased user defined pnetid SYZ0
[  606.148153][  T810] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0
[  606.150714][  T810] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2
[  606.322992][  T811] __nla_validate_parse: 11 callbacks suppressed
[  606.323004][  T811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7748'.
[  607.066322][  T840] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.7760'.
[  607.301515][  T862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7766'.
[  607.307932][  T862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7766'.
[  607.312481][  T862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7766'.
[  607.316176][  T862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7766'.
[  607.405584][  T866] netlink: 'syz.2.7768': attribute type 1 has an invalid length.
[  607.615447][  T879] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7771'.
[  607.619019][  T878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7772'.
[  607.624067][  T879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7771'.
[  607.662974][  T881] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7773'.
[  607.935833][  T891] netlink: 'syz.0.7776': attribute type 9 has an invalid length.
[  607.938712][  T891] netlink: 'syz.0.7776': attribute type 11 has an invalid length.
[  607.941308][  T891] netlink: 'syz.0.7776': attribute type 12 has an invalid length.
[  607.944407][  T891] openvswitch: netlink: Message has 4 unknown bytes.
[  607.987341][  T893] syzkaller1: entered promiscuous mode
[  607.989466][  T893] syzkaller1: entered allmulticast mode
[  608.178754][  T912] ip6gre3: entered promiscuous mode
[  608.180775][  T912] ip6gre3: entered allmulticast mode
[  608.324252][  T917] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  608.341501][T32312] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  608.348261][T32312] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  608.358250][T32312] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  608.361356][T32312] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  608.788180][  T957] geneve5: entered promiscuous mode
[  608.791624][T32312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  608.794832][T32312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  608.797754][T32312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  608.800612][T32312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  608.891176][  T968] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  609.662163][ T1016] openvswitch: netlink: Flow key attr not present in new flow.
[  609.742163][ T1027] validate_nla: 1 callbacks suppressed
[  609.742183][ T1027] netlink: 'syz.2.7814': attribute type 4 has an invalid length.
[  609.788232][ T1027] bridge30: entered promiscuous mode
[  609.791583][ T1030] can: request_module (can-proto-5) failed.
[  609.795469][ T1027] bridge30: entered allmulticast mode
[  610.225841][ T1051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  610.868834][ T1101] bond6: (slave ip6gretap3): making interface the new active one
[  610.875959][ T1101] ip6gretap3: entered allmulticast mode
[  610.878852][ T1101] bond6: (slave ip6gretap3): Enslaving as an active interface with an up link
[  610.887794][ T1101] bond6: left allmulticast mode
[  610.889372][ T1101] ip6gretap3: left allmulticast mode
[  611.341108][ T1137] __nla_validate_parse: 26 callbacks suppressed
[  611.341118][ T1137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7837'.
[  611.346855][ T1137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7837'.
[  611.360539][ T1137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7837'.
[  611.363865][ T1137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7837'.
[  611.389987][ T1144] netlink: 'syz.2.7838': attribute type 2 has an invalid length.
[  611.397223][ T1139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7838'.
[  611.397742][ T1146] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7840'.
[  611.402580][ T1139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7838'.
[  611.417484][ T1148] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  611.521691][ T1160] siw: device registration error -23
[  611.532856][ T1162] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  611.535870][ T1162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7844'.
[  611.548631][ T1162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7844'.
[  611.553841][ T1162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7844'.
[  611.919581][ T1196] netlink: 'syz.0.7855': attribute type 1 has an invalid length.
[  613.524357][T32312] gretap4: left promiscuous mode
[  613.649133][ T1212] netlink: 'syz.1.7862': attribute type 3 has an invalid length.
[  613.814900][ T1235] syzkaller0: entered promiscuous mode
[  613.816672][ T1235] syzkaller0: entered allmulticast mode
[  614.262149][ T1280] netlink: 'syz.0.7880': attribute type 1 has an invalid length.
[  614.411273][ T1288] vlan2: entered promiscuous mode
[  614.413339][ T1288] bridge0: entered promiscuous mode
[  614.687418][ T1311] netlink: 'syz.1.7891': attribute type 8 has an invalid length.
[  614.941313][ T1323] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  615.415541][ T1335] bond12: (slave vlan0): Opening slave failed
[  615.633964][ T1349] syz.1.7902 (1349) used obsolete PPPIOCDETACH ioctl
[  616.019695][ T1375] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  616.309200][ T1394] tipc: Resetting bearer <ib:wg1>
[  616.387348][ T1404] __nla_validate_parse: 22 callbacks suppressed
[  616.387359][ T1404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7918'.
[  616.395113][ T1396] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  616.398483][ T1396] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  616.442793][ T1414] netlink: 'syz.2.7920': attribute type 1 has an invalid length.
[  616.445350][ T1414] netlink: 'syz.2.7920': attribute type 2 has an invalid length.
[  616.449726][ T1414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7920'.
[  616.453004][ T1414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7920'.
[  616.530694][ T1427] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7925'.
[  617.211035][ T1442] syzkaller0: entered promiscuous mode
[  617.221098][ T1442] syzkaller0: entered allmulticast mode
[  617.298671][ T1447] netlink: 'syz.1.7930': attribute type 1 has an invalid length.
[  617.313260][ T1447] 8021q: adding VLAN 0 to HW filter on device bond15
[  617.329566][ T1447] bond15: (slave veth285): Enslaving as an active interface with a down link
[  617.350122][ T1447] bond15: (slave veth287): Enslaving as an active interface with a down link
[  617.355700][ T1447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7930'.
[  617.372137][ T1447] bond15: (slave bridge16): Enslaving as an active interface with a down link
[  617.378104][ T1447] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7930'.
[  617.489778][ T1453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7933'.
[  617.636880][ T1468] netlink: 'syz.1.7936': attribute type 1 has an invalid length.
[  617.703406][ T1479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7941'.
[  617.721688][ T1479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7941'.
[  617.897647][ T1499] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7947'.
[  618.865016][ T1610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  618.886840][ T1610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  618.956566][ T1615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  619.030856][ T1626] bond8: (slave vlan0): Enslaving as a backup interface with a down link
[  619.309499][ T1652] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  619.707018][ T1691] netlink: 'syz.1.8003': attribute type 13 has an invalid length.
[  619.777054][ T1691] lo: Caught tx_queue_len zero misconfig
[  620.714498][ T1764] netlink: 'syz.2.8021': attribute type 10 has an invalid length.
[  620.750467][ T1768] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe
[  620.922284][ T1781] dvmrp0: left allmulticast mode
[  620.924065][ T1781] dvmrp8: left allmulticast mode
[  621.265142][ T1812] tunl0: Caught tx_queue_len zero misconfig
[  621.403042][ T1832] __nla_validate_parse: 29 callbacks suppressed
[  621.403052][ T1832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8046'.
[  621.505537][ T1852] netlink: 'syz.2.8052': attribute type 10 has an invalid length.
[  621.508287][ T1852] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8052'.
[  621.606827][ T1858] bond13 (unregistering): Released all slaves
[  621.999093][ T1904] sctp: [Deprecated]: syz.0.8067 (pid 1904) Use of int in max_burst socket option.
[  621.999093][ T1904] Use struct sctp_assoc_value instead
[  622.296536][ T1929] netlink: 'syz.0.8072': attribute type 98 has an invalid length.
[  622.308348][ T1938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  622.317230][ T1936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8073'.
[  622.827970][ T1975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8078'.
[  622.891977][ T1092] wlan1: Trigger new scan to find an IBSS to join
[  622.896598][ T1975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8078'.
[  623.278140][ T1978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8079'.
[  623.300284][ T1978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8079'.
[  623.661032][ T1997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8085'.
[  623.683165][ T1997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8085'.
[  623.947992][ T2021] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.8090'.
[  624.245550][ T2046] netlink: 'syz.2.8095': attribute type 11 has an invalid length.
[  624.248790][ T2046] netlink: 'syz.2.8095': attribute type 4 has an invalid length.
[  624.486835][ T2051] team1: entered promiscuous mode
[  624.488983][ T2051] team1: entered allmulticast mode
[  624.491519][ T2051] 8021q: adding VLAN 0 to HW filter on device team1
[  624.498397][ T2051] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  624.516515][ T2051] team2: entered promiscuous mode
[  624.518577][ T2051] team2: entered allmulticast mode
[  624.520955][ T2051] 8021q: adding VLAN 0 to HW filter on device team2
[  624.906541][ T2064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  624.958011][ T2068] syzkaller0: entered promiscuous mode
[  624.960507][ T2068] syzkaller0: entered allmulticast mode
[  625.935386][   T27] wlan1: Trigger new scan to find an IBSS to join
[  626.336763][ T2095] tls: option downdelay: invalid value (18446744073709547007)
[  626.340103][ T2095] tls: option downdelay: allowed values 0 - 2147483647
[  626.352758][ T2095] tls (unregistering): Released all slaves
[  626.373360][ T2100] IPv6: NLM_F_CREATE should be specified when creating new route
[  626.633447][ T2110] syzkaller1: entered promiscuous mode
[  626.639989][ T2110] syzkaller1: entered allmulticast mode
[  626.905027][ T2122] __nla_validate_parse: 6 callbacks suppressed
[  626.905082][ T2122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8115'.
[  626.915255][ T2122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8115'.
[  627.104029][ T2125] IPVS: Unknown mcast interface: vcan0
[  627.107416][ T2125] netlink: 'syz.0.8117': attribute type 4 has an invalid length.
[  627.122935][ T2125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8117'.
[  627.248868][ T2133] netlink: 'syz.0.8119': attribute type 11 has an invalid length.
[  627.267564][ T2133] netlink: 504 bytes leftover after parsing attributes in process `syz.0.8119'.
[  627.620201][ T2148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8123'.
[  627.729963][ T2158] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8126'.
[  627.738910][ T2158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8126'.
[  627.818178][ T2163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8129'.
[  627.895337][ T2169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8130'.
[  628.029092][ T2183] netlink: 'syz.1.8135': attribute type 1 has an invalid length.
[  628.064058][ T2182] bond16: (slave ip6gretap5): Enslaving as a backup interface with an up link
[  628.068958][ T2183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8135'.
[  628.079200][ T2182] veth293: entered promiscuous mode
[  628.085173][ T2182] bond16: (slave veth293): Enslaving as a backup interface with a down link
[  628.096960][   T13] bond16: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  628.108652][ T2183] 8021q: adding VLAN 0 to HW filter on device bond16
[  628.186690][ T2197] netlink: 'syz.2.8139': attribute type 11 has an invalid length.
[  628.212322][T32312] bond16: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  628.838931][ T2223] syzkaller0: entered promiscuous mode
[  628.840867][ T2223] syzkaller0: entered allmulticast mode
[  628.973696][T14203] wlan1: Trigger new scan to find an IBSS to join
[  629.874204][   T27] wlan1: Creating new IBSS network, BSSID 1e:da:32:7f:65:94
[  630.099209][ T2233] netlink: 'syz.2.8151': attribute type 21 has an invalid length.
[  630.106564][ T2233] netlink: 'syz.2.8151': attribute type 22 has an invalid length.
[  630.109854][ T2233] netlink: 'syz.2.8151': attribute type 23 has an invalid length.
[  630.113812][ T2233] netlink: 'syz.2.8151': attribute type 25 has an invalid length.
[  630.273847][ T2246] lo speed is unknown, defaulting to 1000
[  630.277244][ T2246] gre0 speed is unknown, defaulting to 1000
[  630.429005][ T2246] lo speed is unknown, defaulting to 1000
[  630.635514][ T2275] lo speed is unknown, defaulting to 1000
[  630.664428][ T2275] gre0 speed is unknown, defaulting to 1000
[  630.841072][ T2275] lo speed is unknown, defaulting to 1000
[  630.980165][ T2299] ip6tnl0: Caught tx_queue_len zero misconfig
[  631.239144][ T2307] netlink: 'syz.2.8169': attribute type 2 has an invalid length.
[  631.312005][ T2307] lo speed is unknown, defaulting to 1000
[  631.316313][ T2307] gre0 speed is unknown, defaulting to 1000
[  631.425151][ T2307] lo speed is unknown, defaulting to 1000
[  631.897353][ T2325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  632.285131][ T2342] lo speed is unknown, defaulting to 1000
[  632.288544][ T2342] gre0 speed is unknown, defaulting to 1000
[  632.449686][ T2342] lo speed is unknown, defaulting to 1000
[  632.966829][ T2365] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001
[  633.018397][ T2362] __nla_validate_parse: 18 callbacks suppressed
[  633.019268][ T2362] netlink: 52314 bytes leftover after parsing attributes in process `syz.2.8185'.
[  633.050659][ T2374] netlink: 'syz.1.8188': attribute type 3 has an invalid length.
[  633.380443][ T2398] Timeout policy `syz1' can only be used by L3 protocol number 41216
[  634.200569][ T2407] netlink: 'syz.2.8196': attribute type 2 has an invalid length.
[  634.273317][ T2427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8200'.
[  634.316936][ T2433] syzkaller0: entered promiscuous mode
[  634.318727][ T2433] syzkaller0: entered allmulticast mode
[  634.349561][ T2437] netlink: 'syz.2.8203': attribute type 1 has an invalid length.
[  634.353158][ T2437] netlink: 476 bytes leftover after parsing attributes in process `syz.2.8203'.
[  634.356769][ T2437] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.8203'.
[  634.449099][ T2443] xt_ecn: cannot match TCP bits for non-tcp packets
[  634.457698][ T2445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8207'.
[  634.499001][ T2445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8207'.
[  634.564495][ T2452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8208'.
[  634.611504][ T2456] x_tables: duplicate underflow at hook 3
[  634.624240][ T2452] xt_hashlimit: size too large, truncated to 1048576
[  634.632004][ T2452] xt_hashlimit: invalid interval
[  634.825913][ T2471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8213'.
[  635.169982][ T2478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8215'.
[  635.397689][ T2510] netlink: 'syz.0.8222': attribute type 64 has an invalid length.
[  635.479796][ T2516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8223'.
[  635.628739][ T2525] netlink: 'syz.0.8225': attribute type 3 has an invalid length.
[  635.700914][ T2534] Cannot find del_set index 0 as target
[  636.014834][ T2549] lo speed is unknown, defaulting to 1000
[  636.017546][ T2549] gre0 speed is unknown, defaulting to 1000
[  636.131604][ T2549] lo speed is unknown, defaulting to 1000
[  637.204109][ T2622] netlink: 'syz.2.8244': attribute type 2 has an invalid length.
[  637.278962][ T2622] lo speed is unknown, defaulting to 1000
[  637.281611][ T2622] gre0 speed is unknown, defaulting to 1000
[  637.399746][ T2622] lo speed is unknown, defaulting to 1000
[  638.103995][ T2680] syzkaller1: entered promiscuous mode
[  638.106105][ T2680] syzkaller1: entered allmulticast mode
[  638.120061][ T2680] __nla_validate_parse: 10 callbacks suppressed
[  638.120076][ T2680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8259'.
[  638.248124][ T2711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8263'.
[  638.292992][ T2714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8264'.
[  638.296506][ T2714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8264'.
[  638.305245][ T2714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8264'.
[  638.308953][ T2714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8264'.
[  638.313087][ T2714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8264'.
[  638.316810][ T2714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8264'.
[  638.401098][ T2723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8267'.
[  638.427775][ T2723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8267'.
[  638.685794][ T2745] tc_dump_action: action bad kind
[  639.044864][ T2789] netlink: 'syz.0.8285': attribute type 4 has an invalid length.
[  639.260512][ T2796] tipc: Resetting bearer <eth:syzkaller0>
[  639.439892][   T47] lo speed is unknown, defaulting to 1000
[  639.452074][   T47] syz2: Port: 1 Link DOWN
[  639.458088][ T5819] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.479071][ T5819] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.483334][ T5819] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.489810][ T5819] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.687362][ T2847] veth0_to_bridge: entered promiscuous mode
[  639.690108][ T2847] veth0_to_bridge: left promiscuous mode
[  640.114625][ T2893] syzkaller0: entered promiscuous mode
[  640.116337][ T2893] syzkaller0: entered allmulticast mode
[  640.128986][ T2893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  640.996262][ T2909] netlink: 'syz.1.8310': attribute type 29 has an invalid length.
[  641.396875][ T2908] vti3: entered promiscuous mode
[  641.522879][ T2925] 8021q: adding VLAN 0 to HW filter on device bond0
[  641.777231][ T2965] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  642.064088][ T3010] netlink: 'syz.2.8337': attribute type 1 has an invalid length.
[  642.079463][ T3010] bond19: entered promiscuous mode
[  642.081572][ T3010] 8021q: adding VLAN 0 to HW filter on device bond19
[  642.110463][ T3010] bond19: (slave veth313): making interface the new active one
[  642.113481][ T3010] veth313: entered promiscuous mode
[  642.116479][ T3010] bond19: (slave veth313): Enslaving as an active interface with an up link
[  642.206357][ T3015] openvswitch: netlink: Duplicate or invalid key (type 0).
[  642.209303][ T3015] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  642.576038][ T3038] macsec2: entered allmulticast mode
[  642.766639][ T3047] tipc: Resetting bearer <eth:syzkaller0>
[  643.152317][ T3082] __nla_validate_parse: 36 callbacks suppressed
[  643.152331][ T3082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8360'.
[  643.335610][ T3095] netlink: 124 bytes leftover after parsing attributes in process `syz.0.8364'.
[  643.339172][ T3095] netlink: 124 bytes leftover after parsing attributes in process `syz.0.8364'.
[  643.608676][ T3121] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8373'.
[  643.701245][ T3135] ip6t_REJECT: ECHOREPLY is not supported
[  643.724795][ T3136] netlink: 'syz.0.8374': attribute type 16 has an invalid length.
[  643.727419][ T3136] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8374'.
[  643.747066][ T3137] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8376'.
[  644.476797][ T3141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8378'.
[  644.491935][ T3143] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8379'.
[  644.495507][ T3143] netem: unknown loss type 4
[  644.497181][ T3143] netem: change failed
[  644.578204][ T3151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8382'.
[  644.582794][ T3151] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8382'.
[  644.635743][ T3158] netlink: 'syz.1.8385': attribute type 3 has an invalid length.
[  644.993713][ T3180] netlink: 'syz.2.8392': attribute type 14 has an invalid length.
[  645.305368][ T3205] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  645.747592][ T3251] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xe
[  646.068370][ T3276] syzkaller0: entered promiscuous mode
[  646.070598][ T3276] syzkaller0: entered allmulticast mode
[  647.674877][ T3295] xt_TCPMSS: Only works on TCP SYN packets
[  647.895877][ T3312] xfrm0: Caught tx_queue_len zero misconfig
[  647.966731][ T3328] IPVS: set_ctl: invalid protocol: 2 100.1.1.0:20001
[  648.169169][ T3347] __nla_validate_parse: 65 callbacks suppressed
[  648.169190][ T3347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8439'.
[  648.878288][ T3358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8443'.
[  648.924635][ T3362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8445'.
[  648.929085][ T3362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8445'.
[  648.934199][ T3362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8445'.
[  648.956526][ T3364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8446'.
[  649.004632][ T3369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8448'.
[  649.058368][ T3366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  649.236470][ T3384] IPVS: Scheduler module ip_vs_sip not found
[  649.327657][ T3395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8454'.
[  649.631641][ T3413] netlink: 'syz.2.8460': attribute type 29 has an invalid length.
[  649.639732][ T3413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8460'.
[  649.643503][ T3414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8460'.
[  649.738436][ T3421] netlink: 'syz.2.8462': attribute type 11 has an invalid length.
[  650.264339][ T3436] "syz.2.8466" (3436) uses obsolete ecb(arc4) skcipher
[  650.525381][ T3473] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  650.818786][ T3499] syzkaller0: entered promiscuous mode
[  650.825365][ T3499] syzkaller0: entered allmulticast mode
[  651.109907][ T3521] netlink: 'syz.0.8488': attribute type 1 has an invalid length.
[  651.548455][ T3557] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  651.774024][ T3576] netlink: 'syz.0.8503': attribute type 1 has an invalid length.
[  652.272577][ T3546] delete_channel: no stack
[  652.337587][ T3601] netlink: 'syz.2.8511': attribute type 1 has an invalid length.
[  653.050010][ T3634] syzkaller0: entered promiscuous mode
[  653.052705][ T3634] syzkaller0: entered allmulticast mode
[  653.197713][ T3641] __nla_validate_parse: 16 callbacks suppressed
[  653.197726][ T3641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8526'.
[  653.260292][ T3645] sctp: [Deprecated]: syz.1.8527 (pid 3645) Use of struct sctp_assoc_value in delayed_ack socket option.
[  653.260292][ T3645] Use struct sctp_sack_info instead
[  653.679107][ T3680] netlink: 'syz.2.8537': attribute type 1 has an invalid length.
[  653.776079][ T3683] syzkaller1: entered promiscuous mode
[  653.778295][ T3683] syzkaller1: entered allmulticast mode
[  654.120217][ T3700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8543'.
[  654.307856][ T3716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8545'.
[  654.483068][ T3724] netlink: 'syz.1.8547': attribute type 1 has an invalid length.
[  654.486817][ T3724] netlink: 'syz.1.8547': attribute type 1 has an invalid length.
[  654.490220][ T3723] netlink: 'syz.1.8547': attribute type 1 has an invalid length.
[  654.508287][ T3723] netlink: 'syz.1.8547': attribute type 1 has an invalid length.
[  654.791456][ T3731] openvswitch: netlink: IPv4 tun info is not correct
[  654.931164][ T3736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8549'.
[  655.438441][ T3751] vlan4: entered allmulticast mode
[  655.716480][ T3760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8557'.
[  655.744851][ T3760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8557'.
[  655.748021][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8557'.
[  656.483983][ T3781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8560'.
[  656.503275][ T3781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8560'.
[  656.887874][ T3796] netlink: 'syz.1.8564': attribute type 28 has an invalid length.
[  656.891113][ T3796] netlink: 'syz.1.8564': attribute type 3 has an invalid length.
[  656.903446][ T3796] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8564'.
[  657.106403][ T3807] netlink: 'syz.2.8569': attribute type 1 has an invalid length.
[  657.466473][ T3820] netlink: 'syz.0.8573': attribute type 1 has an invalid length.
[  658.505631][ T3858] __nla_validate_parse: 10 callbacks suppressed
[  658.505643][ T3858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8581'.
[  658.515834][ T3858] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8581'.
[  658.519262][ T3858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8581'.
[  658.624490][ T3860] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8582'.
[  658.642745][ T3860] netlink: 'syz.0.8582': attribute type 14 has an invalid length.
[  658.645951][ T3860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8582'.
[  658.649595][ T3860] netlink: 'syz.0.8582': attribute type 14 has an invalid length.
[  658.660004][ T3860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8582'.
[  658.670764][ T3860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8582'.
[  658.706193][ T3862] tc_dump_action: action bad kind
[  658.855802][ T3873] netlink: 'syz.1.8586': attribute type 1 has an invalid length.
[  658.894021][ T3875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8588'.
[  658.894403][ T3878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  658.910446][ T3873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8586'.
[  658.936223][ T3882] batadv0: Caught tx_queue_len zero misconfig
[  658.982725][ T3884] sctp: [Deprecated]: syz.1.8591 (pid 3884) Use of struct sctp_assoc_value in delayed_ack socket option.
[  658.982725][ T3884] Use struct sctp_sack_info instead
[  659.206548][T14207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.209696][T14207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  659.214724][ T3906] netlink: 'syz.1.8598': attribute type 2 has an invalid length.
[  659.403093][ T3915] syzkaller0: entered promiscuous mode
[  659.405418][ T3915] syzkaller0: entered allmulticast mode
[  659.467874][ T3917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8602'.
[  659.977005][ T3952] Timeout policy `syz1' can only be used by L3 protocol number 33024
[  660.351595][ T3997] netlink: 'syz.2.8620': attribute type 2 has an invalid length.
[  660.444262][ T4013] netlink: 'syz.2.8624': attribute type 5 has an invalid length.
[  660.790041][ T4038] sctp: [Deprecated]: syz.2.8631 (pid 4038) Use of struct sctp_assoc_value in delayed_ack socket option.
[  660.790041][ T4038] Use struct sctp_sack_info instead
[  660.795469][ T4038] sctp: [Deprecated]: syz.2.8631 (pid 4038) Use of struct sctp_assoc_value in delayed_ack socket option.
[  660.795469][ T4038] Use struct sctp_sack_info instead
[  660.982113][ T4077] No such timeout policy "syz1"
[  661.609489][ T4131] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  661.768531][ T4141] No such timeout policy "syz1"
[  661.907856][ T4153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  661.991673][ T4155] lo speed is unknown, defaulting to 1000
[  661.996181][ T4155] gre0 speed is unknown, defaulting to 1000
[  662.111058][ T4155] lo speed is unknown, defaulting to 1000
[  662.328510][ T4164] Timeout policy `syz1' can only be used by L3 protocol number 41216
[  662.357234][ T4165] syzkaller1: entered promiscuous mode
[  662.359518][ T4165] syzkaller1: entered allmulticast mode
[  662.865210][ T4202] Timeout policy `syz1' can only be used by L3 protocol number 41216
[  662.989881][ T4221] xt_ecn: cannot match TCP bits for non-tcp packets
[  663.048354][ T4224] Timeout policy `syz1' can only be used by L3 protocol number 33024
[  663.088811][ T4230] pimreg: tun_chr_ioctl cmd 2147767520
[  663.138571][ T4234] validate_nla: 2 callbacks suppressed
[  663.138587][ T4234] netlink: 'syz.1.8689': attribute type 11 has an invalid length.
[  663.597424][ T4281] netlink: 'syz.1.8701': attribute type 1 has an invalid length.
[  663.607678][ T4283] __nla_validate_parse: 37 callbacks suppressed
[  663.607693][ T4283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8702'.
[  663.656400][ T4285] netlink: 'syz.0.8703': attribute type 2 has an invalid length.
[  663.903582][ T4300] bond9: entered allmulticast mode
[  663.913955][ T4300] dvmrp8: entered allmulticast mode
[  663.924904][ T4299] bond9: left allmulticast mode
[  663.933276][ T3993] wlan1: Trigger new scan to find an IBSS to join
[  663.998053][ T4302] syzkaller0: entered promiscuous mode
[  664.000263][ T4302] syzkaller0: entered allmulticast mode
[  665.300875][ T4310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8710'.
[  665.381377][ T4310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8710'.
[  665.385114][ T4310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8710'.
[  665.467350][ T4318] Timeout policy `syz1' can only be used by L3 protocol number 41216
[  665.585482][ T4327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8717'.
[  665.784441][ T4346] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.8722'.
[  666.021956][ T4380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8730'.
[  666.029418][ T4379] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8731'.
[  666.034653][ T4382] netlink: 'syz.2.8732': attribute type 2 has an invalid length.
[  666.042933][ T4382] netlink: 'syz.2.8732': attribute type 2 has an invalid length.
[  666.147342][ T4386] netlink: 'syz.2.8733': attribute type 21 has an invalid length.
[  666.150090][ T4386] netlink: 'syz.2.8733': attribute type 6 has an invalid length.
[  666.153909][ T4386] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8733'.
[  666.268134][ T4392] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8737'.
[  666.858500][ T4398] syzkaller0: entered promiscuous mode
[  666.860370][ T4398] syzkaller0: entered allmulticast mode
[  666.989653][ T3993] wlan1: Trigger new scan to find an IBSS to join
[  667.059414][ T4406] netlink: 'syz.2.8741': attribute type 2 has an invalid length.
[  667.685000][ T4481] syzkaller0: left promiscuous mode
[  667.687545][ T4481] syzkaller0: left allmulticast mode
[  667.690016][ T4481] tipc: Resetting bearer <eth:syzkaller0>
[  667.913469][ T4504] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  667.948169][ T4508] bridge0: left promiscuous mode
[  667.951207][ T4508] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping
[  668.264572][ T4519] netlink: 'syz.1.8777': attribute type 14 has an invalid length.
[  668.974630][ T4534] __nla_validate_parse: 19 callbacks suppressed
[  668.974647][ T4534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8782'.
[  668.985234][ T4534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8782'.
[  669.206684][ T4547] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8788'.
[  669.210538][ T4547] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8788'.
[  669.217241][ T4547] netlink: 'syz.0.8788': attribute type 5 has an invalid length.
[  669.220426][ T4547] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8788'.
[  669.328592][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8789'.
[  669.402632][ T4555] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8790'.
[  669.569450][ T4562] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8792'.
[  669.695560][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8796'.
[  669.758293][ T4580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8798'.
[  669.762890][ T4581] netlink: 'syz.2.8798': attribute type 1 has an invalid length.
[  669.809533][ T4586] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  669.895520][ T4590] lo speed is unknown, defaulting to 1000
[  669.903343][ T4590] gre0 speed is unknown, defaulting to 1000
[  669.933344][ T1092] wlan1: Trigger new scan to find an IBSS to join
[  670.112570][ T4590] lo speed is unknown, defaulting to 1000
[  670.873334][ T1094] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  671.174991][ T4674] netlink: 'syz.1.8826': attribute type 2 has an invalid length.
[  671.186001][ T4674] : entered promiscuous mode
[  671.245553][ T4679] netlink: 'syz.0.8827': attribute type 83 has an invalid length.
[  671.296331][ T4674] lo speed is unknown, defaulting to 1000
[  671.301032][ T4674] gre0 speed is unknown, defaulting to 1000
[  671.447378][ T4674] lo speed is unknown, defaulting to 1000
[  671.450774][ T4694] bridge0: entered allmulticast mode
[  671.727975][ T4718] syzkaller0: entered promiscuous mode
[  671.729733][ T4718] syzkaller0: entered allmulticast mode
[  671.732253][ T4718] tipc: Resetting bearer <eth:syzkaller0>
[  672.038883][ T4741] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  672.964637][ T4788] xt_CT: You must specify a L4 protocol and not use inversions on it
[  672.968018][ T4788] netlink: 'syz.1.8866': attribute type 14 has an invalid length.
[  673.074903][ T4794] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  673.167497][ T4803] tunl0: Caught tx_queue_len zero misconfig
[  673.177306][ T4801] netlink: 'syz.2.8870': attribute type 2 has an invalid length.
[  673.248276][ T4801] lo speed is unknown, defaulting to 1000
[  673.250926][ T4801] gre0 speed is unknown, defaulting to 1000
[  673.316172][ T4814] netlink: 'syz.0.8872': attribute type 2 has an invalid length.
[  673.319484][ T4814] netlink: 'syz.0.8872': attribute type 2 has an invalid length.
[  673.322988][ T4814] netlink: 'syz.0.8872': attribute type 1 has an invalid length.
[  673.351098][ T4801] lo speed is unknown, defaulting to 1000
[  673.415220][ T4821] syzkaller0: entered promiscuous mode
[  673.417007][ T4821] syzkaller0: entered allmulticast mode
[  673.945125][ T4846] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xe
[  674.237430][ T4873] sock: sock_timestamping_bind_phc: sock not bind to device
[  674.373538][ T4892] __nla_validate_parse: 92 callbacks suppressed
[  674.373548][ T4892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8899'.
[  674.541600][ T4917] netlink: 'syz.2.8906': attribute type 1 has an invalid length.
[  674.973928][ T4948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8912'.
[  675.159697][ T4965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8918'.
[  675.256508][ T4975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8922'.
[  675.452454][ T5003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8928'.
[  675.456253][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8928'.
[  675.483914][ T5006] syzkaller0: left allmulticast mode
[  675.485792][ T5006] tipc: Resetting bearer <eth:syzkaller0>
[  675.659578][ T5024] openvswitch: netlink: nsh attribute has 8 unknown bytes.
[  675.678415][ T5024] bond13: ARP target 9.0.0.0 is already present
[  675.680578][ T5024] bond13: option arp_ip_target: invalid value (9)
[  675.692371][ T5024] bond13 (unregistering): Released all slaves
[  675.705917][ T5031] "syz.1.8935" (5031) uses obsolete ecb(arc4) skcipher
[  675.944811][ T5039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8939'.
[  676.015576][ T5060] netlink: 'syz.1.8944': attribute type 14 has an invalid length.
[  676.042580][ T5061] netlink: 'syz.2.8942': attribute type 1 has an invalid length.
[  676.278389][ T5080] xt_ecn: cannot match TCP bits for non-tcp packets
[  676.421300][ T5091] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8954'.
[  676.451059][ T5093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8955'.
[  676.458582][ T5093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8955'.
[  676.660362][ T5119] tipc: Invalid UDP bearer configuration
[  676.660392][ T5119] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  676.770229][ T5132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  676.858533][ T5138] delete_channel: no stack
[  677.015894][ T5147] ip_vti0: Caught tx_queue_len zero misconfig
[  677.113151][ T5150] netlink: 'syz.0.8975': attribute type 4 has an invalid length.
[  677.261574][ T5175] netlink: 'syz.1.8982': attribute type 1 has an invalid length.
[  677.624615][ T5212] bond5: entered allmulticast mode
[  677.627742][ T5212] vti0: entered allmulticast mode
[  677.645929][ T5211] bond5: left allmulticast mode
[  677.647505][ T5211] vti0: left allmulticast mode
[  677.669444][ T5215] lo speed is unknown, defaulting to 1000
[  677.678294][ T5215] gre0 speed is unknown, defaulting to 1000
[  677.779851][ T5215] lo speed is unknown, defaulting to 1000
[  678.000757][ T5254] : renamed from veth0_vlan
[  678.379154][ T5275] syzkaller0: entered allmulticast mode
[  678.381655][ T5275] tipc: Resetting bearer <eth:syzkaller0>
[  679.319043][ T5358] bond17: Unable to set up delay as MII monitoring is disabled
[  679.324302][ T5358] bond17 (unregistering): Released all slaves
[  679.390537][ T5361] __nla_validate_parse: 55 callbacks suppressed
[  679.390549][ T5361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9032'.
[  679.491950][ T5378] netlink: 'syz.0.9035': attribute type 1 has an invalid length.
[  679.498929][ T5378] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  679.531504][ T5381] bond5: entered allmulticast mode
[  679.535123][ T5381] vti0: entered allmulticast mode
[  679.538718][ T5381] netlink: 272 bytes leftover after parsing attributes in process `syz.1.9037'.
[  679.569117][ T5380] bond5: left allmulticast mode
[  679.573377][ T5380] vti0: left allmulticast mode
[  679.838161][ T5408] netlink: 'syz.0.9046': attribute type 14 has an invalid length.
[  679.955508][ T5415] syzkaller0: entered promiscuous mode
[  679.957339][ T5415] syzkaller0: entered allmulticast mode
[  680.099870][ T5429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9052'.
[  681.354845][ T5424] lo speed is unknown, defaulting to 1000
[  681.390126][ T5424] gre0 speed is unknown, defaulting to 1000
[  681.468456][ T5443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9056'.
[  681.471407][ T5445] syzkaller0: left allmulticast mode
[  681.473399][ T5445] tipc: Resetting bearer <eth:syzkaller0>
[  681.485436][ T5424] lo speed is unknown, defaulting to 1000
[  681.525967][ T5447] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  681.528929][ T5447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9059'.
[  681.576031][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9060'.
[  681.578843][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9060'.
[  681.582670][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9060'.
[  681.587161][ T5451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9060'.
[  681.693725][ T5459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9063'.
[  681.850281][ T5465] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  682.074205][ T5491] netlink: 'syz.2.9074': attribute type 1 has an invalid length.
[  682.077006][ T5491] netlink: 'syz.2.9074': attribute type 1 has an invalid length.
[  682.510789][ T5545] syzkaller0: entered promiscuous mode
[  682.514764][ T5545] syzkaller0: entered allmulticast mode
[  683.927714][ T5611] syzkaller0: entered allmulticast mode
[  683.929712][ T5611] tipc: Resetting bearer <eth:syzkaller0>
[  683.954441][ T5611] netlink: 'syz.2.9105': attribute type 2 has an invalid length.
[  684.056377][ T5627] bond5: entered allmulticast mode
[  684.058244][ T5627] vti0: entered allmulticast mode
[  684.127383][ T5627] lo speed is unknown, defaulting to 1000
[  684.130829][ T5627] gre0 speed is unknown, defaulting to 1000
[  684.290838][ T5627] lo speed is unknown, defaulting to 1000
[  684.407390][ T5667] Bluetooth: hci1: too big key_count value 29096
[  684.536287][ T5678] __nla_validate_parse: 17 callbacks suppressed
[  684.536298][ T5678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9118'.
[  684.556309][ T5626] bond5: left allmulticast mode
[  684.557890][ T5626] vti0: left allmulticast mode
[  684.640977][ T5690] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9122'.
[  684.686999][ T5685] macsec3: entered promiscuous mode
[  684.688671][ T5685] bond0: entered promiscuous mode
[  684.690310][ T5685] macsec3: entered allmulticast mode
[  684.706512][ T5685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9121'.
[  684.757429][ T5698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9123'.
[  684.816534][ T5698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9123'.
[  684.881810][ T5711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9125'.
[  685.061055][ T5729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9131'.
[  685.064008][ T5729] netlink: 61 bytes leftover after parsing attributes in process `syz.1.9131'.
[  685.066775][ T5729] netlink: 19 bytes leftover after parsing attributes in process `syz.1.9131'.
[  685.094930][ T5724] delete_channel: no stack
[  685.251604][ T5751] netlink: 'syz.0.9137': attribute type 1 has an invalid length.
[  685.255497][ T5751] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9137'.
[  685.258319][ T5751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  685.462526][ T5770] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y
[  685.462526][ T5770] 3UH5rtn
[  686.443016][ T5876] netlink: 'syz.1.9160': attribute type 1 has an invalid length.
[  686.622922][ T5894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  686.668868][ T5897] IPv6: NLM_F_CREATE should be specified when creating new route
[  687.209222][ T5943] veth0_to_bond: Caught tx_queue_len zero misconfig
[  687.380103][ T5958] netlink: 'syz.0.9186': attribute type 14 has an invalid length.
[  687.504494][ T5978] geneve4: entered promiscuous mode
[  687.507670][ T5819] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 51077 - 0
[  687.521160][ T5819] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 51077 - 0
[  687.526395][ T5819] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 51077 - 0
[  687.528997][ T5819] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 51077 - 0
[  687.536462][ T5982] netlink: 'syz.1.9192': attribute type 3 has an invalid length.
[  687.540991][ T5982] netlink: 'syz.1.9192': attribute type 21 has an invalid length.
[  687.606442][ T5992] Cannot find del_set index 1536 as target
[  687.640732][ T5998] netlink: 'syz.2.9196': attribute type 3 has an invalid length.
[  687.689967][ T6000] openvswitch: netlink: Actions may not be safe on all matching packets
[  688.603120][ T6070] openvswitch: netlink: Key 12 has unexpected len 7 expected 2
[  688.610596][ T6070] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  688.637244][ T6070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  688.642704][ T6069] tipc: Disabling bearer <eth:syzkaller0>
[  688.656519][ T6074] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  688.703256][ T6077] 8021q: VLANs not supported on syzkaller0
[  689.997509][ T6109] IPVS: set_ctl: invalid protocol: 95 100.1.1.2:20002
[  690.000195][ T6114] IPVS: set_ctl: invalid protocol: 95 100.1.1.2:20002
[  690.051354][ T6116] netlink: 'syz.1.9234': attribute type 1 has an invalid length.
[  690.062177][ T6116] netlink: 'syz.1.9234': attribute type 4 has an invalid length.
[  690.065148][ T6116] __nla_validate_parse: 35 callbacks suppressed
[  690.065159][ T6116] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.9234'.
[  690.072869][ T6116] netlink: 'syz.1.9234': attribute type 1 has an invalid length.
[  690.076005][ T6116] netlink: 'syz.1.9234': attribute type 4 has an invalid length.
[  690.079121][ T6116] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.9234'.
[  690.127081][ T6122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9235'.
[  690.170468][ T6125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9236'.
[  690.200864][ T6125] bridge23: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  690.211052][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9236'.
[  690.221296][ T6127] netlink: 41 bytes leftover after parsing attributes in process `syz.1.9237'.
[  690.224575][ T6127] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9237'.
[  690.230604][ T6127] netlink: 41 bytes leftover after parsing attributes in process `syz.1.9237'.
[  690.236391][ T6127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9237'.
[  690.257463][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9237'.
[  690.348417][ T6138] : renamed from team_slave_1
[  690.524566][ T6148] netlink: 'syz.0.9245': attribute type 1 has an invalid length.
[  690.527617][ T6148] netlink: 'syz.0.9245': attribute type 2 has an invalid length.
[  690.750997][ T6178] bridge0: port 1(syz_tun) entered blocking state
[  690.753959][ T6178] bridge0: port 1(syz_tun) entered disabled state
[  690.756611][ T6178] syz_tun: entered allmulticast mode
[  690.761426][ T6178] syz_tun: entered promiscuous mode
[  690.766741][ T6178] bridge0: port 1(syz_tun) entered blocking state
[  690.769265][ T6178] bridge0: port 1(syz_tun) entered forwarding state
[  690.855404][ T6188] syzkaller0: entered promiscuous mode
[  690.860354][ T6188] syzkaller0: entered allmulticast mode
[  690.932968][ T6194] netlink: 'syz.2.9261': attribute type 3 has an invalid length.
[  691.156806][ T6202] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  692.266821][ T6246] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  692.723849][ T6292] netlink: 'syz.1.9293': attribute type 10 has an invalid length.
[  692.762253][ T6283] tipc: Resetting bearer <ib:wg1>
[  692.857932][ T6283] geneve1: left allmulticast mode
[  692.861577][ T6283] geneve1: left promiscuous mode
[  693.003518][T32312] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  693.007618][T32312] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  693.010539][T32312] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 51077 - 0
[  693.017052][T32312] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  693.019682][T32312] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  693.024076][T32312] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 51077 - 0
[  693.027203][T32312] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  693.029853][T32312] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  693.033192][T32312] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 51077 - 0
[  693.036062][T32312] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  693.038597][T32312] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  693.045838][T32312] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 51077 - 0
[  694.021298][ T6341] ip6gretap0: entered promiscuous mode
[  694.027327][ T6341] ip6gretap0: left promiscuous mode
[  694.479003][ T6372] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  694.540183][ T6374] IPVS: length: 14 != 8
[  694.872139][ T6410] syzkaller0: entered promiscuous mode
[  694.879904][ T6410] syzkaller0: entered allmulticast mode
[  695.119165][ T6432] netlink: 'syz.0.9330': attribute type 13 has an invalid length.
[  695.123454][ T6432] netlink: 'syz.0.9330': attribute type 17 has an invalid length.
[  695.133142][ T6432] gre0: left promiscuous mode
[  695.134706][ T6432] gre0: left allmulticast mode
[  695.162980][ T6432] bridge0: left promiscuous mode
[  695.167718][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0
[  695.170588][ T6432] bridge0: port 1(vlan2) entered blocking state
[  695.172834][ T6432] bridge0: port 1(vlan2) entered forwarding state
[  695.178241][ T6432] 8021q: adding VLAN 0 to HW filter on device `
[  695.182262][ T6430] __nla_validate_parse: 99 callbacks suppressed
[  695.182274][ T6430] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9329'.
[  695.187264][ T6432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  695.193544][   T47] lo speed is unknown, defaulting to 1000
[  695.197804][   T47] syz0: Port: 1 Link ACTIVE
[  695.205423][   T47] lo speed is unknown, defaulting to 1000
[  695.355017][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9332'.
[  695.369445][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9332'.
[  695.934942][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9339'.
[  696.075929][ T6484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9343'.
[  696.372794][ T6498] lo speed is unknown, defaulting to 1000
[  696.375372][ T6498] gre0 speed is unknown, defaulting to 1000
[  696.477198][ T6498] lo speed is unknown, defaulting to 1000
[  697.052539][ T6547] syzkaller0: entered promiscuous mode
[  697.054213][ T6547] syzkaller0: entered allmulticast mode
[  697.077793][ T6550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9361'.
[  697.176892][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9362'.
[  697.221667][ T6557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9363'.
[  697.257735][ T6561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9365'.
[  697.277554][ T6564] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  697.368739][ T6577] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9370'.
[  697.470245][ T6585] syzkaller0: entered promiscuous mode
[  697.472245][ T6585] syzkaller0: entered allmulticast mode
[  699.065002][ T6590] xt_cgroup: invalid path, errno=-2
[  699.127210][ T6594] openvswitch: netlink: Unknown nsh attribute 0
[  699.394477][ T6624] netlink: 'syz.1.9386': attribute type 61 has an invalid length.
[  699.528529][ T6631] netlink: 'syz.0.9389': attribute type 1 has an invalid length.
[  699.531217][ T6631] netlink: 'syz.0.9389': attribute type 2 has an invalid length.
[  699.715651][ T6644] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  700.245947][ T6664] __nla_validate_parse: 10 callbacks suppressed
[  700.245967][ T6664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9400'.
[  700.251844][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9398'.
[  700.316436][ T6671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9403'.
[  700.527947][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9405'.
[  700.532360][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9405'.
[  700.585042][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9407'.
[  700.589647][ T6694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9406'.
[  700.593494][ T6695] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  700.598446][ T6695] nbd: must specify an index to disconnect
[  700.618576][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9407'.
[  700.621988][ T6694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9406'.
[  700.624828][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9406'.
[  702.072834][ T6776] lo speed is unknown, defaulting to 1000
[  702.075476][ T6776] gre0 speed is unknown, defaulting to 1000
[  702.162167][ T6776] lo speed is unknown, defaulting to 1000
[  702.190983][ T6788] netlink: 'syz.0.9435': attribute type 3 has an invalid length.
[  702.194513][ T6788] netlink: 'syz.0.9435': attribute type 1 has an invalid length.
[  702.213728][ T6789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  702.216753][ T6789] IPv6: NLM_F_CREATE should be set when creating new route
[  702.219717][ T6789] IPv6: NLM_F_CREATE should be set when creating new route
[  702.238573][ T6789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  702.350148][ T6795] syzkaller0: entered promiscuous mode
[  702.352843][ T6795] syzkaller0: entered allmulticast mode
[  702.375439][ T6801] netlink: 'syz.2.9438': attribute type 27 has an invalid length.
[  702.479541][ T6810] netlink: 'syz.1.9441': attribute type 8 has an invalid length.
[  702.541131][ T6810] bond17: entered promiscuous mode
[  702.543061][ T6810] bond17: entered allmulticast mode
[  702.545294][ T6810] 8021q: adding VLAN 0 to HW filter on device bond17
[  702.566713][ T6814] netlink: 'syz.1.9441': attribute type 8 has an invalid length.
[  702.692322][ T6823] netlink: 'syz.1.9443': attribute type 2 has an invalid length.
[  702.701112][ T6823] l24): entered promiscuous mode
[  703.132173][   T27] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  704.234973][ T6920] lo speed is unknown, defaulting to 1000
[  704.237623][ T6920] gre0 speed is unknown, defaulting to 1000
[  704.301215][ T6929] bridge23: port 1(veth345) entered blocking state
[  704.303614][ T6929] bridge23: port 1(veth345) entered disabled state
[  704.305992][ T6929] veth345: entered allmulticast mode
[  704.308868][ T6929] veth345: entered promiscuous mode
[  704.317840][ T6929] bridge23: port 2(veth0_to_bond) entered blocking state
[  704.320236][ T6929] bridge23: port 2(veth0_to_bond) entered disabled state
[  704.323169][ T6929] veth0_to_bond: entered allmulticast mode
[  704.326473][ T6929] veth0_to_bond: entered promiscuous mode
[  704.341671][ T6929] bridge23: port 3(veth347) entered blocking state
[  704.344108][ T6929] bridge23: port 3(veth347) entered disabled state
[  704.346833][ T6929] veth347: entered allmulticast mode
[  704.350248][ T6929] veth347: entered promiscuous mode
[  704.353112][ T6920] lo speed is unknown, defaulting to 1000
[  704.355299][ T6929] team0: Caught tx_queue_len zero misconfig
[  705.005971][ T6963] bond5: entered allmulticast mode
[  705.008692][ T6963] vti0: entered allmulticast mode
[  705.018632][ T6963] bond5: left allmulticast mode
[  705.020400][ T6963] vti0: left allmulticast mode
[  733.115488][ T6984] __nla_validate_parse: 19 callbacks suppressed
[  733.115500][ T6984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9488'.
[  733.120960][ T6984] netlink: 'syz.1.9488': attribute type 1 has an invalid length.
[  733.125699][ T6984] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9488'.
[  733.130507][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9488'.
[  733.318221][ T7002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9493'.
[  733.563968][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9498'.
[  734.492129][ T1094] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  734.521677][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9515'.
[  734.531602][ T7081] netlink: 'syz.0.9516': attribute type 1 has an invalid length.
[  734.596037][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9517'.
[  734.700646][ T7093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9520'.
[  734.729365][ T7093] syzkaller0: entered promiscuous mode
[  734.731470][ T7093] syzkaller0: entered allmulticast mode
[  734.764467][ T7098] netlink: 316 bytes leftover after parsing attributes in process `syz.2.9522'.
[  734.800444][ T7102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9524'.
[  734.950052][ T7119] netlink: 'syz.2.9528': attribute type 15 has an invalid length.
[  734.954541][ T7118] netlink: 'syz.2.9528': attribute type 15 has an invalid length.
[  735.059881][ T7131] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  735.064279][ T7131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  735.320165][ T7167] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  735.344021][ T7169] lo speed is unknown, defaulting to 1000
[  735.347686][ T7169] gre0 speed is unknown, defaulting to 1000
[  735.498795][ T7169] lo speed is unknown, defaulting to 1000
[  735.536475][ T7176] netlink: 'syz.2.9541': attribute type 9 has an invalid length.
[  735.572371][ T7182] syzkaller0: entered promiscuous mode
[  735.574630][ T7182] syzkaller0: entered allmulticast mode
[  736.332337][   T47] page_pool_release_retry() stalled pool shutdown: id 97, 1 inflight 60 sec
[  738.214212][ T7310] __nla_validate_parse: 10 callbacks suppressed
[  738.214229][ T7310] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9578'.
[  738.329055][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9581'.
[  738.424123][ T7314] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  738.680916][ T7336] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  738.762300][ T7337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9586'.
[  738.782478][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9587'.
[  738.786226][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9587'.
[  738.794903][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9587'.
[  738.797226][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9588'.
[  738.799127][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9587'.
[  738.804100][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9587'.
[  738.806967][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9587'.
[  739.405356][ T7393] bridge25: entered promiscuous mode
[  739.408292][ T7393] bridge25: entered allmulticast mode
[  739.763805][ T7420] netlink: 'syz.2.9613': attribute type 1 has an invalid length.
[  739.769679][ T7420] netlink: 'syz.2.9613': attribute type 5 has an invalid length.
[  766.492130][   T27] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  767.677500][ T7430] __nla_validate_parse: 19 callbacks suppressed
[  767.677511][ T7430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9616'.
[  767.699404][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9617'.
[  767.703185][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9617'.
[  767.706488][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9617'.
[  767.709630][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9617'.
[  767.713220][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9617'.
[  767.716702][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9617'.
[  767.719703][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9617'.
[  767.722854][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9617'.
[  767.725757][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9617'.
[  768.306212][ T7476] xt_nfacct: accounting object `syz0' does not exist
[  768.407017][ T7478] lo speed is unknown, defaulting to 1000
[  768.410893][ T7478] gre0 speed is unknown, defaulting to 1000
[  768.525921][ T7478] lo speed is unknown, defaulting to 1000
[  768.995938][ T7502] netlink: 'syz.0.9642': attribute type 2 has an invalid length.
[  769.055704][ T7505] netlink: 'syz.2.9641': attribute type 1 has an invalid length.
[  769.262430][ T7511] nbd1: detected capacity change from 0 to 127
[  769.270467][   T58] block nbd1: Receive control failed (result -104)
[  769.393105][ T7517] netlink: 'syz.0.9646': attribute type 15 has an invalid length.
[  769.737028][ T7522] xt_policy: output policy not valid in PREROUTING and INPUT
[  769.934879][ T7528] syzkaller0: entered promiscuous mode
[  769.937678][ T7528] syzkaller0: entered allmulticast mode
[  770.095994][ T7533] netlink: 'syz.2.9653': attribute type 89 has an invalid length.
[  770.134482][ T7532] delete_channel: no stack
[  770.209883][ T7539] bond20 (unregistering): Released all slaves
[  770.440425][ T7553] netlink: 'syz.1.9656': attribute type 1 has an invalid length.
[  770.607936][ T7563] atomic_op ffff888118964198 conn xmit_atomic 0000000000000000
[  770.640049][ T7563] netlink: 'syz.0.9662': attribute type 1 has an invalid length.
[  770.780018][ T7579] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  771.064953][ T7608] openvswitch: netlink: IPv4 tun info is not correct
[  771.370902][ T7631] syzkaller1: entered promiscuous mode
[  771.374264][ T7631] syzkaller1: entered allmulticast mode
[  771.673696][ T7648] nbd2: detected capacity change from 0 to 63
[  771.680427][   T57] block nbd2: Receive control failed (result -104)
[  771.709937][ T7656] netlink: 'syz.2.9688': attribute type 2 has an invalid length.
[  771.716594][ T7656] l24): entered promiscuous mode
[  771.725488][ T7656] sch_fq: defrate 0 ignored.
[  771.763001][ T7658] x_tables: duplicate underflow at hook 1
[  772.301223][ T7680] x_tables: duplicate underflow at hook 1
[  772.574886][   T11] block nbd1: Connection timed out, retrying (0/1 alive)
[  772.578553][   T11] block nbd1: Connection timed out, retrying (0/1 alive)
[  772.581443][   T11] block nbd1: Connection timed out, retrying (0/1 alive)
[  772.584650][   T11] block nbd1: Connection timed out, retrying (0/1 alive)
[  772.587940][   T11] block nbd1: Dead connection, failed to find a fallback
[  772.590970][   T11] block nbd1: shutting down sockets
[  772.595646][   T11] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  772.599684][   T11] Buffer I/O error on dev nbd1, logical block 3, async page read
[  772.603098][   T11] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  772.606728][   T11] Buffer I/O error on dev nbd1, logical block 2, async page read
[  772.609904][   T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  772.613599][   T11] Buffer I/O error on dev nbd1, logical block 1, async page read
[  772.617347][   T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  772.621360][   T11] Buffer I/O error on dev nbd1, logical block 0, async page read
[  772.628483][ T7453] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  772.631448][ T7453] Buffer I/O error on dev nbd1, logical block 0, async page read
[  772.642622][ T7453] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  772.648384][ T7453] Buffer I/O error on dev nbd1, logical block 1, async page read
[  772.652157][ T7453] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  772.656108][ T7453] Buffer I/O error on dev nbd1, logical block 2, async page read
[  772.659975][ T7453] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  772.663982][ T7453] Buffer I/O error on dev nbd1, logical block 3, async page read
[  772.667305][ T7453] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  772.670926][ T7453] Buffer I/O error on dev nbd1, logical block 0, async page read
[  772.674277][ T7453] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  772.678273][ T7453] Buffer I/O error on dev nbd1, logical block 1, async page read
[  772.687038][ T7453] ldm_validate_partition_table(): Disk read failed.
[  772.691561][ T7453] Dev nbd1: unable to read RDB block 0
[  772.697672][ T7453]  nbd1: unable to read partition table
[  772.711225][ T7453] ldm_validate_partition_table(): Disk read failed.
[  772.715713][ T7453] Dev nbd1: unable to read RDB block 0
[  772.719499][ T7453]  nbd1: unable to read partition table
[  773.080544][ T7728] netlink: 'syz.1.9711': attribute type 11 has an invalid length.
[  773.081540][ T7727] __nla_validate_parse: 32 callbacks suppressed
[  773.081553][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9709'.
[  773.137018][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9710'.
[  773.382666][ T7748] lo speed is unknown, defaulting to 1000
[  773.386365][ T7748] gre0 speed is unknown, defaulting to 1000
[  773.494403][ T7768] xt_TCPMSS: Only works on TCP SYN packets
[  773.497672][ T7769] xt_TCPMSS: Only works on TCP SYN packets
[  773.560900][ T7748] lo speed is unknown, defaulting to 1000
[  774.107922][ T7746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  774.298637][ T7773] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9721'.
[  774.800260][ T7797] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  774.935098][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9729'.
[  774.996942][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9730'.
[  775.000656][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9730'.
[  775.186859][ T7811] lo speed is unknown, defaulting to 1000
[  775.189649][ T7811] gre0 speed is unknown, defaulting to 1000
[  775.234425][ T7813] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9734'.
[  775.260168][ T7813] bridge0: port 1(vlan2) entered disabled state
[  775.284431][ T7813] vlan2 (unregistering): left allmulticast mode
[  775.286689][ T7813] bond0 (unregistering): left allmulticast mode
[  775.288666][ T7813] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  775.291044][ T7813] vlan2 (unregistering): left promiscuous mode
[  775.293831][ T7813] bridge0: port 1(vlan2) entered disabled state
[  775.297793][ T7815] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9734'.
[  775.306688][ T7813] bond0 (unregistering): left promiscuous mode
[  775.308830][ T7813] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  775.314277][ T7813] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  775.318829][ T7813] bond0 (unregistering): Released all slaves
[  775.335890][ T7811] lo speed is unknown, defaulting to 1000
[  775.656987][ T7824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9737'.
[  775.774653][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9737'.
[  776.006129][ T7831] netlink: 'syz.0.9738': attribute type 89 has an invalid length.
[  776.343673][ T7861] ve4h1_macvtap: renamed from vlan1 (while UP)
[  776.635670][ T7887] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  777.328040][ T7889] netlink: 'syz.1.9757': attribute type 13 has an invalid length.
[  777.424141][ T5819] bond16: (slave ip6gretap5): link status up again after 0 ms
[  777.443100][ T2691] bond16: (slave ip6gretap5): link status up again after 0 ms
[  777.462391][ T2691] bond16: (slave ip6gretap5): link status up again after 0 ms
[  777.482623][ T2691] bond16: (slave ip6gretap5): link status up again after 0 ms
[  777.504177][ T5819] bond16: (slave ip6gretap5): link status up again after 0 ms
[  777.521962][ T5819] bond16: (slave ip6gretap5): link status up again after 0 ms
[  777.525031][ T5819] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  777.632167][ T2691] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  777.742371][ T5819] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  777.926176][ T7937] syzkaller0: entered promiscuous mode
[  777.928500][ T7937] syzkaller0: entered allmulticast mode
[  778.124357][ T7949] syzkaller0: entered promiscuous mode
[  778.126703][ T7949] syzkaller0: entered allmulticast mode
[  778.295146][ T7955] netlink: 'syz.0.9775': attribute type 1 has an invalid length.
[  778.344190][ T7962] __nla_validate_parse: 15 callbacks suppressed
[  778.344208][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9777'.
[  778.430312][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9779'.
[  778.472957][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9779'.
[  778.494231][ T7971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9780'.
[  778.521230][ T7971] netlink: 14020 bytes leftover after parsing attributes in process `syz.0.9780'.
[  778.655708][ T7974] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  778.726923][ T7976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9782'.
[  778.750309][ T7978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9783'.
[  778.782797][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9782'.
[  778.785989][ T7978] netlink: 7524 bytes leftover after parsing attributes in process `syz.2.9783'.
[  778.943950][ T7985] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9786'.
[  779.249027][ T8006] netlink: 'syz.1.9794': attribute type 5 has an invalid length.
[  779.559135][ T8036] tipc: New replicast peer: 255.255.255.255
[  779.563667][ T8036] tipc: Enabled bearer <udp:syz1>, priority 10
[  779.567500][ T8036] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535)
[  779.882279][ T8060] lo speed is unknown, defaulting to 1000
[  779.895276][ T8060] gre0 speed is unknown, defaulting to 1000
[  779.958118][ T8067] sctp: [Deprecated]: syz.0.9812 (pid 8067) Use of int in max_burst socket option.
[  779.958118][ T8067] Use struct sctp_assoc_value instead
[  779.963963][ T8068] sctp: [Deprecated]: syz.0.9812 (pid 8068) Use of int in max_burst socket option.
[  779.963963][ T8068] Use struct sctp_assoc_value instead
[  780.229174][ T8060] lo speed is unknown, defaulting to 1000
[  780.265208][ T8082] lo: Caught tx_queue_len zero misconfig
[  780.437694][ T8088] syzkaller0: entered promiscuous mode
[  780.439520][ T8088] syzkaller0: entered allmulticast mode
[  780.764158][ T8109] netlink: 'syz.1.9825': attribute type 1 has an invalid length.
[  780.766669][ T8109] netlink: 'syz.1.9825': attribute type 1 has an invalid length.
[  781.461346][ T8156] netlink: 'syz.1.9843': attribute type 1 has an invalid length.
[  781.609835][ T8172] lo speed is unknown, defaulting to 1000
[  781.620890][ T8172] gre0 speed is unknown, defaulting to 1000
[  781.651894][T32312] net_ratelimit: 32 callbacks suppressed
[  781.651906][T32312] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  781.730318][ T8172] lo speed is unknown, defaulting to 1000
[  781.756945][ T8190] veth0: entered promiscuous mode
[  781.761959][T32312] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  781.774766][ T8189] veth0: left promiscuous mode
[  781.855995][ T8197] delete_channel: no stack
[  781.872006][T32312] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  782.002163][ T2691] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  782.134318][   T12] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  782.245756][ T2691] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  782.353336][   T12] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  782.462286][T32312] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  782.594813][   T12] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  782.614054][ T8281] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  782.701854][   T12] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  782.937277][ T8309] xt_hashlimit: size too large, truncated to 1048576
[  783.004087][ T8314] syzkaller1: entered promiscuous mode
[  783.006241][ T8314] syzkaller1: entered allmulticast mode
[  784.002629][ T8363] netlink: 'syz.0.9899': attribute type 4 has an invalid length.
[  784.016186][ T8363] netlink: 'syz.0.9899': attribute type 4 has an invalid length.
[  784.030342][   T47] lo speed is unknown, defaulting to 1000
[  784.033632][ T5831] lo speed is unknown, defaulting to 1000
[  784.035578][   T47] lo speed is unknown, defaulting to 1000
[  784.077235][ T8369] __nla_validate_parse: 45 callbacks suppressed
[  784.077245][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9899'.
[  784.966731][ T8383] netlink: 384 bytes leftover after parsing attributes in process `syz.1.9903'.
[  785.035047][ T8385] netlink: 'syz.1.9904': attribute type 1 has an invalid length.
[  785.713499][ T8421] bond0: option xmit_hash_policy: invalid value (10)
[  785.724779][ T8421] bond0 (unregistering): Released all slaves
[  785.953294][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9916'.
[  785.998020][ T8442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9916'.
[  786.014502][ T8439] nbd: must specify an index to disconnect
[  786.131788][ T8446] netlink: 'syz.1.9917': attribute type 2 has an invalid length.
[  786.147761][ T8446] !: entered promiscuous mode
[  786.154256][ T8446] netlink: 'syz.1.9917': attribute type 2 has an invalid length.
[  786.179129][ T8448] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9918'.
[  786.182316][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9918'.
[  786.275687][ T8450] syzkaller0: entered promiscuous mode
[  786.277513][ T8450] syzkaller0: entered allmulticast mode
[  786.428152][ T8465] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9923'.
[  786.712659][T32312] net_ratelimit: 32 callbacks suppressed
[  786.712671][T32312] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  786.821914][   T12] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  786.915656][ T8513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9934'.
[  786.983585][   T12] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  787.091791][   T12] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  787.212229][T32312] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  787.258698][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9944'.
[  787.306581][ T8548] syzkaller0: entered promiscuous mode
[  787.308227][ T8548] syzkaller0: entered allmulticast mode
[  788.381530][ T8556] netlink: 'syz.2.9946': attribute type 14 has an invalid length.
[  788.401869][ T5819] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  788.419246][ T8558] netlink: 'syz.2.9947': attribute type 1 has an invalid length.
[  788.451457][ T8560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9948'.
[  788.512357][   T12] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  788.515769][ T8570] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  788.537458][ T8567] bond0: Device is already in use.
[  788.671988][   T12] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  788.825939][   T12] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  788.931921][   T12] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  789.149766][ T8640] __nla_validate_parse: 6 callbacks suppressed
[  789.149776][ T8640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9969'.
[  789.156194][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9969'.
[  789.158964][ T8640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9969'.
[  789.162845][ T8640] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9969'.
[  789.247592][ T8649] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  789.513093][ T8673] syzkaller0: entered promiscuous mode
[  789.515609][ T8673] syzkaller0: entered allmulticast mode
[  789.647262][ T8678] netlink: 'syz.1.9981': attribute type 1 has an invalid length.
[  789.667039][ T8678] 8021q: adding VLAN 0 to HW filter on device bond18
[  789.678063][ T8678] bond18: entered allmulticast mode
[  790.424336][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9990'.
[  790.428804][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9990'.
[  790.442045][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9990'.
[  790.445786][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9990'.
[  790.452117][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9990'.
[  790.455101][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9990'.
[  790.533383][ T8706] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  790.779958][ T8713] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20001
[  791.109304][ T8726] netpci0: tun_chr_ioctl cmd 1074025678
[  791.111648][ T8726] netpci0: group set to 0
[  791.331985][ T8732] netlink: 'syz.2.10001': attribute type 1 has an invalid length.
[  791.335358][ T8735] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  791.343595][ T8735] bond0: Caught tx_queue_len zero misconfig
[  791.438078][ T8740] netlink: 'syz.2.10005': attribute type 3 has an invalid length.
[  791.555196][ T8760] netlink: 'syz.0.10010': attribute type 1 has an invalid length.
[  791.811872][ T5819] net_ratelimit: 29 callbacks suppressed
[  791.811885][ T5819] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  791.991905][ T5819] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  792.102220][T32312] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  792.222917][T32312] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  792.289148][ T8829] netlink: 'syz.2.10034': attribute type 1 has an invalid length.
[  792.331915][T32312] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  792.361874][ T7754] 
[  792.362687][ T7754] ============================================
[  792.364682][ T7754] WARNING: possible recursive locking detected
[  792.366669][ T7754] syzkaller #0 Not tainted
[  792.368172][ T7754] --------------------------------------------
[  792.370249][ T7754] kworker/u10:1/7754 is trying to acquire lock:
[  792.372208][ T7754] ffffe8ffffca3118 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x707/0xb80
[  792.375104][ T7754] 
[  792.375104][ T7754] but task is already holding lock:
[  792.377430][ T7754] ffffe8ffffca37b0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80
[  792.380431][ T7754] 
[  792.380431][ T7754] other info that might help us debug this:
[  792.382911][ T7754]  Possible unsafe locking scenario:
[  792.382911][ T7754] 
[  792.385321][ T7754]        CPU0
[  792.386379][ T7754]        ----
[  792.387470][ T7754]   lock(&pd_list->lock);
[  792.388863][ T7754]   lock(&pd_list->lock);
[  792.390321][ T7754] 
[  792.390321][ T7754]  *** DEADLOCK ***
[  792.390321][ T7754] 
[  792.392880][ T7754]  May be due to missing lock nesting notation
[  792.392880][ T7754] 
[  792.395496][ T7754] 3 locks held by kworker/u10:1/7754:
[  792.397156][ T7754]  #0: ffff8881697eb148 ((wq_completion)pdecrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17d0
[  792.400930][ T7754]  #1: ffffc9000844fba0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17d0
[  792.404680][ T7754]  #2: ffffe8ffffca37b0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80
[  792.407719][ T7754] 
[  792.407719][ T7754] stack backtrace:
[  792.409520][ T7754] CPU: 1 UID: 0 PID: 7754 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  792.409530][ T7754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  792.409535][ T7754] Workqueue: pdecrypt_parallel padata_parallel_worker
[  792.409549][ T7754] Call Trace:
[  792.409553][ T7754]  <TASK>
[  792.409557][ T7754]  dump_stack_lvl+0x1a9/0x280
[  792.409568][ T7754]  ? __pfx_dump_stack_lvl+0x10/0x10
[  792.409577][ T7754]  ? __pfx__printk+0x10/0x10
[  792.409584][ T7754]  ? print_lock_name+0x68/0x90
[  792.409590][ T7754]  print_deadlock_bug+0x28b/0x2a0
[  792.409598][ T7754]  validate_chain+0x1a3d/0x2130
[  792.409605][ T7754]  ? irqentry_exit+0x74/0x90
[  792.409613][ T7754]  ? lockdep_hardirqs_on+0x9b/0x150
[  792.409620][ T7754]  ? look_up_lock_class+0x74/0x170
[  792.409627][ T7754]  ? register_lock_class+0x51/0x320
[  792.409637][ T7754]  __lock_acquire+0xab8/0xd20
[  792.409646][ T7754]  ? padata_do_serial+0x707/0xb80
[  792.409654][ T7754]  lock_acquire+0x11f/0x350
[  792.409662][ T7754]  ? padata_do_serial+0x707/0xb80
[  792.409672][ T7754]  _raw_spin_lock+0x2e/0x40
[  792.409679][ T7754]  ? padata_do_serial+0x707/0xb80
[  792.409687][ T7754]  padata_do_serial+0x707/0xb80
[  792.409697][ T7754]  ? padata_parallel_worker+0x44/0x1d0
[  792.409704][ T7754]  padata_parallel_worker+0x75/0x1d0
[  792.409712][ T7754]  ? process_scheduled_works+0xa0f/0x17d0
[  792.409722][ T7754]  process_scheduled_works+0xafc/0x17d0
[  792.409736][ T7754]  ? __pfx_process_scheduled_works+0x10/0x10
[  792.409745][ T7754]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  792.409751][ T7754]  ? schedule+0x90/0x360
[  792.409759][ T7754]  worker_thread+0xda6/0x1360
[  792.409768][ T7754]  ? __kthread_parkme+0x19c/0x1f0
[  792.409775][ T7754]  kthread+0x726/0x8b0
[  792.409782][ T7754]  ? __pfx_worker_thread+0x10/0x10
[  792.409788][ T7754]  ? __pfx_kthread+0x10/0x10
[  792.409799][ T7754]  ? _raw_spin_unlock_irq+0x23/0x50
[  792.409806][ T7754]  ? lockdep_hardirqs_on+0x9b/0x150
[  792.409812][ T7754]  ? __pfx_kthread+0x10/0x10
[  792.409819][ T7754]  ret_from_fork+0x4d3/0x870
[  792.409827][ T7754]  ? __pfx_ret_from_fork+0x10/0x10
[  792.409834][ T7754]  ? __switch_to_asm+0x39/0x70
[  792.409843][ T7754]  ? __switch_to_asm+0x33/0x70
[  792.409851][ T7754]  ? __pfx_kthread+0x10/0x10
[  792.409858][ T7754]  ret_from_fork_asm+0x1a/0x30
[  792.409870][ T7754]  </TASK>
[  792.501813][ T5819] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  792.571981][ T5809] Bluetooth: hci0: command tx timeout
[  792.612480][ T5819] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  792.721859][ T5819] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  792.831880][ T5819] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  792.951889][T32312] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  796.841906][ T5819] net_ratelimit: 34 callbacks suppressed
[  796.841918][ T5819] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  796.951948][ T2691] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  797.061899][ T5819] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  797.171866][ T5819] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  797.292155][ T2691] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  797.401930][ T5819] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  797.522116][ T2691] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  797.631950][ T5819] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  797.751853][ T2691] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  797.861854][ T2691] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  801.692250][   T25] block nbd2: Possible stuck request ffff888109e30000: control (read@0,1024B). Runtime 30 seconds
[  801.695667][   T25] block nbd2: Possible stuck request ffff888109e30200: control (read@1024,1024B). Runtime 30 seconds
[  801.699020][   T25] block nbd2: Possible stuck request ffff888109e30400: control (read@2048,1024B). Runtime 30 seconds
[  801.702480][   T25] block nbd2: Possible stuck request ffff888109e30600: control (read@3072,1024B). Runtime 30 seconds
[  801.861907][T32312] net_ratelimit: 35 callbacks suppressed
[  801.861925][T32312] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  801.971895][ T2691] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  802.081918][ T2691] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  802.191897][T32312] bond16: (slave ip6gretap5): failed to get link speed/duplex
[  802.311883][ T2691] bond16: (slave ip6gretap5): failed to get link speed/duplex
