last executing test programs:

35.087405914s ago: executing program 2 (id=2781):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="58110000", @ANYRES32, @ANYBLOB="00000000000000dcca9a74cb348259047b8af8ff00000000bfa200000000000007020000f8ff200ae546db045e3ba18a3208000000b70400000200000077000000000000", @ANYRES32=0x1, @ANYBLOB="000000884ad8ec0f165ca89c28a003ae825a2920500708afa2f30df2eb8d6627ed855599e5c787fe8b0976a6802953992a1bf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x0, 0x0, 0x3d0, 0x160, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffff000, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="58110000", @ANYRES32, @ANYBLOB="00000000000000dcca9a74cb348259047b8af8ff00000000bfa200000000000007020000f8ff200ae546db045e3ba18a3208000000b70400000200000077000000000000", @ANYRES32=0x1, @ANYBLOB="000000884ad8ec0f165ca89c28a003ae825a2920500708afa2f30df2eb8d6627ed855599e5c787fe8b0976a6802953992a1bf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x0, 0x0, 0x3d0, 0x160, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffff000, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) (async)

29.260633348s ago: executing program 2 (id=2781):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="58110000", @ANYRES32, @ANYBLOB="00000000000000dcca9a74cb348259047b8af8ff00000000bfa200000000000007020000f8ff200ae546db045e3ba18a3208000000b70400000200000077000000000000", @ANYRES32=0x1, @ANYBLOB="000000884ad8ec0f165ca89c28a003ae825a2920500708afa2f30df2eb8d6627ed855599e5c787fe8b0976a6802953992a1bf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x0, 0x0, 0x3d0, 0x160, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffff000, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="58110000", @ANYRES32, @ANYBLOB="00000000000000dcca9a74cb348259047b8af8ff00000000bfa200000000000007020000f8ff200ae546db045e3ba18a3208000000b70400000200000077000000000000", @ANYRES32=0x1, @ANYBLOB="000000884ad8ec0f165ca89c28a003ae825a2920500708afa2f30df2eb8d6627ed855599e5c787fe8b0976a6802953992a1bf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x0, 0x0, 0x3d0, 0x160, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffff000, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) (async)

23.110404469s ago: executing program 2 (id=2781):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="58110000", @ANYRES32, @ANYBLOB="00000000000000dcca9a74cb348259047b8af8ff00000000bfa200000000000007020000f8ff200ae546db045e3ba18a3208000000b70400000200000077000000000000", @ANYRES32=0x1, @ANYBLOB="000000884ad8ec0f165ca89c28a003ae825a2920500708afa2f30df2eb8d6627ed855599e5c787fe8b0976a6802953992a1bf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x0, 0x0, 0x3d0, 0x160, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffff000, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="58110000", @ANYRES32, @ANYBLOB="00000000000000dcca9a74cb348259047b8af8ff00000000bfa200000000000007020000f8ff200ae546db045e3ba18a3208000000b70400000200000077000000000000", @ANYRES32=0x1, @ANYBLOB="000000884ad8ec0f165ca89c28a003ae825a2920500708afa2f30df2eb8d6627ed855599e5c787fe8b0976a6802953992a1bf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x0, 0x0, 0x3d0, 0x160, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffff000, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) (async)

16.568950369s ago: executing program 2 (id=2781):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="58110000", @ANYRES32, @ANYBLOB="00000000000000dcca9a74cb348259047b8af8ff00000000bfa200000000000007020000f8ff200ae546db045e3ba18a3208000000b70400000200000077000000000000", @ANYRES32=0x1, @ANYBLOB="000000884ad8ec0f165ca89c28a003ae825a2920500708afa2f30df2eb8d6627ed855599e5c787fe8b0976a6802953992a1bf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x0, 0x0, 0x3d0, 0x160, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffff000, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="58110000", @ANYRES32, @ANYBLOB="00000000000000dcca9a74cb348259047b8af8ff00000000bfa200000000000007020000f8ff200ae546db045e3ba18a3208000000b70400000200000077000000000000", @ANYRES32=0x1, @ANYBLOB="000000884ad8ec0f165ca89c28a003ae825a2920500708afa2f30df2eb8d6627ed855599e5c787fe8b0976a6802953992a1bf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x0, 0x0, 0x3d0, 0x160, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffff000, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) (async)

9.578580364s ago: executing program 2 (id=2781):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="58110000", @ANYRES32, @ANYBLOB="00000000000000dcca9a74cb348259047b8af8ff00000000bfa200000000000007020000f8ff200ae546db045e3ba18a3208000000b70400000200000077000000000000", @ANYRES32=0x1, @ANYBLOB="000000884ad8ec0f165ca89c28a003ae825a2920500708afa2f30df2eb8d6627ed855599e5c787fe8b0976a6802953992a1bf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x0, 0x0, 0x3d0, 0x160, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffff000, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="58110000", @ANYRES32, @ANYBLOB="00000000000000dcca9a74cb348259047b8af8ff00000000bfa200000000000007020000f8ff200ae546db045e3ba18a3208000000b70400000200000077000000000000", @ANYRES32=0x1, @ANYBLOB="000000884ad8ec0f165ca89c28a003ae825a2920500708afa2f30df2eb8d6627ed855599e5c787fe8b0976a6802953992a1bf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x0, 0x0, 0x3d0, 0x160, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffff000, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) (async)

3.377605189s ago: executing program 2 (id=2781):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="58110000", @ANYRES32, @ANYBLOB="00000000000000dcca9a74cb348259047b8af8ff00000000bfa200000000000007020000f8ff200ae546db045e3ba18a3208000000b70400000200000077000000000000", @ANYRES32=0x1, @ANYBLOB="000000884ad8ec0f165ca89c28a003ae825a2920500708afa2f30df2eb8d6627ed855599e5c787fe8b0976a6802953992a1bf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x0, 0x0, 0x3d0, 0x160, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffff000, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="58110000", @ANYRES32, @ANYBLOB="00000000000000dcca9a74cb348259047b8af8ff00000000bfa200000000000007020000f8ff200ae546db045e3ba18a3208000000b70400000200000077000000000000", @ANYRES32=0x1, @ANYBLOB="000000884ad8ec0f165ca89c28a003ae825a2920500708afa2f30df2eb8d6627ed855599e5c787fe8b0976a6802953992a1bf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x0, 0x0, 0x3d0, 0x160, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffff000, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) (async)

1.540642253s ago: executing program 0 (id=3110):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000ffffffffffffff80010000000032000000e000000200000000000000000000000023030000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2200000000ac1414bb0000000000000000000000001c00040002004e2100000000fc00000000000000000000000000000108000c000400000008000b00070000002c0017"], 0x1ac}}, 0x0)

1.379625113s ago: executing program 0 (id=3113):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x1000, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x80}]}}}}}}}}, 0x0)
sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0x1}, {&(0x7f0000000280)=""/22, 0x16}, &(0x7f0000002740)=[{&(0x7f00000002c0)=""/103, 0x67}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/122, 0x7a}, {&(0x7f0000001540)=""/174, 0xae}, {&(0x7f0000001600)=""/60, 0x3c}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/223, 0xdf}], 0x9, 0x52, 0xa}}, @rdma_dest={0x18, 0x114, 0x2, {0x401, 0x6}}], 0x60, 0x20000000}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x5c, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8022}, 0x14)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)="1e", 0x1}], 0x1, 0x0, 0x0, 0x4090}, 0x0)
read$alg(r1, &(0x7f0000003780)=""/4096, 0x1000)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r3 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r3, &(0x7f0000003e40)={&(0x7f0000002800)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002840)=""/136, 0x88}], 0x1, &(0x7f0000003d40)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002940)=""/203, 0xcb}, &(0x7f0000002a40), 0x2d6e81ece81863e7}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0xee}, {&(0x7f0000002a80)=""/44, 0x2c}, &(0x7f0000003c80)=[{&(0x7f0000002ac0)=""/154, 0x9a}, {&(0x7f0000002b80)=""/70, 0x46}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/70, 0x46}], 0x4, 0x48, 0x3}}, @mask_cswp={0x58, 0x114, 0x9, {{0x80000001, 0x7}, &(0x7f0000003cc0)=0x401, &(0x7f0000003d00)=0x8, 0x9, 0xb07, 0x7, 0x707, 0x2, 0x2}}], 0xd0, 0x4}, 0x0)

1.28100794s ago: executing program 0 (id=3114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000000200)) (async)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r3}]}, 0x30}}, 0x0)
sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) (async)
r4 = socket(0x2a, 0x6, 0x4) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000006c0000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) (async)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
sendmsg$802154_dgram(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x24, @short={0x2, 0x2}}, 0x14, &(0x7f0000000740)={&(0x7f0000000700)="38865db53bce58bcb9beb6468da4345c3cc639c32d0dbe1960698f2186782f58f797d382bafec8598e6f8e75d7cdb6f5d3970b0c76d3c6cbfe3c271180", 0x3d}, 0x1, 0x0, 0x0, 0x40040}, 0x44801) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) (async)
connect$can_bcm(r4, &(0x7f00000002c0)={0x1d, r6}, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000011c0)={0x34, r10, 0x1, 0x1ffffe, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x48882)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(r8, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1a8, r10, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x3d, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x14}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x1a8}}, 0x0) (async, rerun: 32)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="100100001dcf5e6f08ac40304b8f5b6b74ff4823ebb7e87a21260365", @ANYRES16=r7, @ANYBLOB="02002cbd7000fddbdf2508000000840001800d0001007564703a73797a320000000044000400200001000a004e2100000003fe8000000000000000000000000000bb07000000200002000a004e230000000320010000000000000000000000000001050000002c0004001400010002004e20ffffffff00000000000000001400020002004e227f0000010000000000000000780004800c000780080001000400000014000780080002000900000008000200100000000900010073797a310000000034000780080002000200000008000400ff03000008000200060000000800030000000000080003000000000008000200020000001300010062726f6164636173742d6c696e6b0000"], 0x110}, 0x1, 0x0, 0x0, 0x24000850}, 0x0) (rerun: 32)

1.280688901s ago: executing program 1 (id=3115):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61124f00000000006113970000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000002d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff3d1401000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c4e704000000000000a04d1ffc187fa1a2ba7ba0c0d507b92de00435fd233cc0f0d9b2c312b68856656ca9caa2ee4dc258d72e690098804de235cf020e35245c9f5526d35df627a64ac7efde50fd7f1d8bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6f902b261848d74096636ab6d8c63c8d62861cbc38d1e6bef45e672ac3d3d5243b85b3b15c7499ff39a3dadcbfbea9e050fb6940344dfbeebbf3e7e37d0a9a387518f926fba75479eacd4f51aeb28b6c56a75144ef6df55a275799897ca000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c00148008000c"], 0x34}, 0x1, 0x0, 0x0, 0x24040080}, 0xc000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r4=>0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e20, 0x8, @empty, 0x1000}}, 0x2, 0x401, 0xe6, 0xcb6d, 0x82, 0x4, 0x1}, &(0x7f0000000000)=0x9c)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r4, 0x6}, &(0x7f00000000c0)=0x8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61124f00000000006113970000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000002d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff3d1401000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c4e704000000000000a04d1ffc187fa1a2ba7ba0c0d507b92de00435fd233cc0f0d9b2c312b68856656ca9caa2ee4dc258d72e690098804de235cf020e35245c9f5526d35df627a64ac7efde50fd7f1d8bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6f902b261848d74096636ab6d8c63c8d62861cbc38d1e6bef45e672ac3d3d5243b85b3b15c7499ff39a3dadcbfbea9e050fb6940344dfbeebbf3e7e37d0a9a387518f926fba75479eacd4f51aeb28b6c56a75144ef6df55a275799897ca000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c00148008000c"], 0x34}, 0x1, 0x0, 0x0, 0x24040080}, 0xc000) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket(0x2, 0x80805, 0x0) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, 0x0) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e20, 0x8, @empty, 0x1000}}, 0x2, 0x401, 0xe6, 0xcb6d, 0x82, 0x4, 0x1}, &(0x7f0000000000)=0x9c) (async)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r4, 0x6}, &(0x7f00000000c0)=0x8) (async)

1.208971535s ago: executing program 0 (id=3116):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)

1.207719224s ago: executing program 1 (id=3117):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000000000000000008b"], 0x0, 0x34, 0x0, 0xa}, 0x28)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1395466360c3d9b7, 0x803, 0x40000072)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000040603000000630000000000000000000500010007e7ff000900020073797a30000000000900020073797a3200000000090a000000000000000000000900020073797a3200000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x40, r5, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x40}, 0x2, 0x34005, 0x0, 0x24080040}, 0x24000000)
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)={0xd84, 0x8, 0x2, 0x4, 0x4})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x8, 0x80, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x37a83bc9540ce401, 0x495}, [@IFLA_PHYS_SWITCH_ID={0xffffffffffffffd5, 0x24, "bc"}]}, 0x28}}, 0x40084)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x70}}], 0x1, 0x80)

1.206181175s ago: executing program 0 (id=3118):
unshare(0x6a040000)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32, @ANYBLOB="3000c70001020177"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c3a0081e949b93897bc3b0000000000007d01ff0200000000050000000000000000011200"], 0xfdef)

1.148986566s ago: executing program 1 (id=3119):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = gettid() (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
writev(r4, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000314010028bd7000fcdbdf25090002007379a7000000000000004100727865001400330076657468305f746f5f7465616d0000000900020073797a30000000000800410072786400140033006970766c616e31000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x44014) (async)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000200)=@assoc_value={<r7=>0x0}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000000)={r7, 0x2, 0x5, 0x100, 0x80, 0x2}, &(0x7f0000000080)=0x14) (async)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r8, &(0x7f0000009d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x8000, 0x8004, 0x6, 0xfffffffc, 0x80000000, 0x5, 0x8}}], 0x30, 0x44000040}], 0x1, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
r10 = socket$xdp(0x2c, 0x3, 0x0) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r9)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)={0xea0, r11, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x184, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x97}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xba}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x57}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x35}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}]}]}, @NL80211_ATTR_TID_CONFIG={0x35c, 0x11d, 0x0, 0x1, [{0x17c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xde}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf49, 0x6, 0x9, 0x7, 0x2b1, 0x2, 0x400, 0x8]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x3}, {0x4, 0x4}, {0x0, 0xa}, {0x3, 0x8}, {0x6, 0x5}, {0x0, 0x1}, {0x2, 0x7}, {0x7}, {0x6, 0x5}, {0x7, 0x1}, {0x7, 0x7}, {0x6, 0x2}, {0x1, 0x3}, {0x1}, {0x3, 0x9}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x0, 0x7a, 0x9, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcb08, 0x9, 0x5, 0x8001, 0x2, 0x2, 0x401, 0x7]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x36, 0x36, 0x0, 0x6, 0xb, 0x63, 0x1, 0xb, 0xc, 0x12, 0x3, 0x16, 0x1b, 0xb, 0x16, 0x30, 0xb, 0xb, 0x0, 0x6, 0x19, 0x5, 0x3]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd59, 0xe, 0x7ff, 0xff6a, 0xa195, 0x400, 0xc13, 0x46]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x101, 0x6, 0x5, 0x1, 0x1ff, 0x2, 0x8bf]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x661, 0x6, 0x0, 0xc, 0xcc53, 0x3, 0x250]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x4}, {0x1, 0xa}, {0x7, 0x1}, {0x2, 0x6}, {0x6, 0x8}, {0x2, 0x3}, {0x2, 0x9}, {0x1, 0x6}, {0x2, 0x9}, {0x5}, {0x5, 0x8}, {0x0, 0x4}, {0x7, 0xa}, {0x0, 0xa}, {0x4, 0x7}, {0x5, 0x9}, {}, {0x3, 0x3}, {0x1, 0x6}, {0x6, 0x3}, {0x2, 0x6}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x7, 0x7}, {0x6, 0x6}, {0x3, 0x4}, {0x1}, {0x3, 0x4}, {0x1, 0x6}, {0x5, 0x6}, {0x7}, {0x1, 0x3}, {0x6, 0x8}, {0x4}, {0x4, 0x7}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x7}, {0x3}, {0x2, 0x9}, {0x6, 0x6}, {0x7, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x9}, {0x3, 0x5}, {0x7, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x0, 0x7}, {0x2, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x5, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x3}, {0x5, 0x8}, {0x0, 0x7}, {0x6, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x15}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x190, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0x6}, {0x5, 0x4}, {0x6, 0x5}, {0x5, 0x3}, {0x1, 0x6}, {0x3, 0x6}, {0x7, 0x7}, {0x1, 0x5}, {0x6, 0x2}, {0x1, 0x5}, {0x4, 0x6}, {0x0, 0x8}, {0x7, 0x6}, {0x7, 0x3}, {0x4, 0x6}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0x1}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0x8}, {0x5, 0x4}, {0x0, 0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x3, 0xa}, {0x1, 0xa}, {0x7, 0x2}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x4}, {0x4, 0x3}, {0x5, 0x5}, {0x5, 0x9}, {0x7, 0x8}, {0x4, 0x8}, {0x2, 0x3}, {0x0, 0x2}, {0x4, 0x3}, {0x1, 0x6}, {0x3, 0x6}, {0x2, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0xa}, {0x6, 0x1}, {0x1, 0x3}, {0x3, 0x7}, {0x3, 0x9}, {0x5, 0x4}, {0x4, 0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x1, 0x7}, {}, {0x4}, {0x6, 0x7}, {0x1, 0x2}, {0x3, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x5, 0x5}, {0x6, 0x4}, {0x6, 0x1}, {0x3, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x7, 0x6}, {0x6, 0x4}, {0x4, 0xa}, {0x3, 0x9}, {0x1, 0x8}, {0x1}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x9}, {0x6, 0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x6, 0x8}, {0x3, 0x6}, {0x2, 0x6}, {0x1, 0x6}, {0x4, 0x1}, {0x2, 0x2}, {0x1, 0x4}, {0x6, 0xa}, {0x5, 0x7}, {0x3, 0x3}, {0x3, 0xa}, {0x2, 0x6}, {0x1, 0x4}, {0x3, 0x6}, {0x5, 0xa}, {0x7, 0x9}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x3}, {0x3, 0x4}, {0x3}, {0x4}, {0x7, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0x3}, {0x2, 0x8}, {0x5, 0x2}, {0x6, 0x5}, {0x5, 0x6}, {0x2, 0x8}, {0x4, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x4, 0x9}, {0x7, 0x6}, {0x7, 0x8}, {0x7, 0x9}, {0x4, 0x3}, {0x1, 0x5}, {0x6, 0xa}, {0x5, 0x3}, {0x2, 0x4}, {}, {0x4}, {0x6}, {0x6, 0x2}, {0x6, 0x3}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x6}, {0x3, 0x5}, {0x3, 0x5}, {0x1, 0x4}, {0x1, 0x3}, {0x4}, {0x3, 0xa}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0x9}, {0x1}, {0x6, 0x3}, {0x2, 0x6}, {0x4, 0x7}, {0x0, 0x5}, {0x2, 0x7}, {0x2, 0x1}, {0x5, 0x9}, {0x2, 0x2}, {0x4, 0x6}, {0x4, 0x4}, {0x3, 0x8}, {0x5}, {0x3, 0x5}, {0x4}, {0x7, 0x1}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x6}, {0x3, 0x4}, {0x4, 0xa}, {0x5, 0x1}, {0x6, 0x6}]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x6}, {0x6, 0x9}, {0x1, 0xa}, {0x4, 0x7}, {0x5, 0x9}, {0x4}, {0x2}, {0x7, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x2, 0x9}, {0x4, 0x3}, {0x4, 0x6}, {0x4, 0x8}, {0x7, 0x4}, {0x3, 0xa}, {0x1, 0x3}, {0x2}, {0x1, 0x6}, {0x2, 0x9}, {0x2, 0x7}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x4}, {0x5}, {0x4, 0x4}, {0x7}, {0x3, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x1c}, {0x6, 0x4}, {0x1, 0xa}, {0x2, 0x3}, {0x2, 0x2}, {0x6, 0x3}, {0x5, 0xa}, {}, {0x1, 0x7}, {}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {}, {0x4, 0x7}, {0x5, 0x3}, {0x5}, {0x4, 0x9}, {0x1, 0x2}, {0x3, 0x8}, {0x0, 0x5}, {0x7, 0x2}, {0x3, 0x4}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8001, 0x7f, 0x7, 0x6d80, 0x8f, 0x7, 0x1000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x8, 0x4, 0x9, 0x9, 0xc]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0x3}, {0x1, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x7}, {0x6, 0x7}, {0x7, 0x6}, {0x4, 0xa}, {0x6, 0x9}, {0x3, 0x4}, {0x1, 0x3}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x5, 0x5}, {0x5, 0x6}, {0x1}, {0x7, 0x5}, {0x2, 0xa}, {}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x2b8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3, 0x1, 0x36, 0xb, 0x3, 0xe6d4ca92fe27d689, 0x24, 0x5, 0x2, 0x36, 0x6c, 0x2, 0x5, 0x3, 0x4, 0x60, 0x0, 0x5, 0xc, 0x12, 0x1b, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x4, 0x0, 0x1, 0x0, 0xcb75, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0x5, 0xc, 0x36, 0x16, 0xb, 0x2, 0x18, 0xb, 0x60, 0x4, 0x24, 0x12, 0x48]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0xb, 0xc, 0x6c, 0xc, 0x16, 0x12, 0x6, 0x2, 0x24, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x60, 0x1, 0x12, 0x6c, 0x6c, 0x3, 0xb, 0x36, 0x6, 0xb, 0x12, 0x6a, 0x2, 0x1, 0x36, 0x60, 0x4, 0xb, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x0, 0xc, 0x7f, 0x4, 0x3, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xe000, 0xfff7, 0x10, 0x4, 0xa, 0xff, 0xc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf07, 0x5, 0x5340, 0xfffe, 0x2, 0xfff, 0x8001, 0x4000]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x24, 0x30, 0x9, 0x0, 0x6c, 0x16, 0x30, 0x9, 0x1, 0x36, 0xb, 0x5, 0xc, 0x2, 0x48, 0xb, 0x6, 0x1, 0xc, 0x16, 0xb, 0x34, 0x4]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x200, 0x0, 0xc, 0x1, 0x1, 0xf, 0xfffb]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0xff7f, 0x3, 0x1, 0x200, 0x4, 0xc6, 0x8]}}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x8, 0x2, 0x0, 0x1, 0x7ff, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x200, 0x1, 0x5, 0x5, 0x8, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0xb, 0xfff, 0xa, 0x0, 0x8, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x83, 0x8000, 0x9, 0x45fb, 0x6, 0xb9, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x27}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdb}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x26d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x51}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0x6f4, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x822}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000001}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x44}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x244, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x238, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6f0, 0x8, 0x5, 0x3, 0x0, 0x1, 0x9, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb373, 0x2, 0x8, 0x0, 0x4, 0x3, 0x5, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x2, 0xff, 0x3, 0x0, 0xaf6d, 0x101]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0x60, 0xc, 0x19]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x8, 0x800, 0x4, 0x298e, 0x7, 0x97ab, 0xff0c]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xbb3, 0x6, 0xc9b, 0x7, 0x3, 0x4, 0x8, 0x6]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0xc, 0x1, 0xc, 0x24, 0x6, 0x1, 0x24, 0x16, 0x4, 0x16, 0x1, 0x24, 0x6, 0x36, 0xb, 0x18, 0x6c, 0x2, 0x4, 0xc, 0x1b, 0x24, 0xc, 0xc, 0x60, 0x5, 0x48, 0xc, 0x36, 0x6a, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x2, 0x7, 0xf, 0x6, 0x6, 0x6180]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x9}, {0x1, 0x9}, {0x1, 0x9}, {0x3, 0x7}, {0x0, 0x8}, {0x6, 0x6}, {0x5}, {0x0, 0x6}, {0x5, 0x3}, {0x7, 0x7}, {}, {0x3, 0x3}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x3}, {0x2, 0x2}, {0x7, 0x4}, {0x0, 0x5}, {0x4, 0x3}, {0x3, 0x5}, {0x0, 0xa}, {0x3, 0x5}, {}, {0x4, 0x4}, {0x0, 0x2}, {0x4}, {0x7, 0x3}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6, 0x9, 0x1b, 0x16, 0xb, 0xb, 0x1, 0x3, 0x60, 0x6c, 0x4, 0xb, 0x6c, 0xb, 0xb, 0x5, 0x18, 0x2, 0x1, 0x9, 0x0, 0x18, 0x4, 0x9, 0x9, 0x9, 0x5, 0x16, 0x48, 0xc]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x4, 0x2}, {0x4, 0x8}, {0x5, 0x2}, {0x7, 0x9}, {0x6, 0x4}, {0x3, 0x2}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0x2}, {0x5}, {0x4}, {0x4, 0xa}]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xfffb, 0x6fe4, 0x4, 0x1, 0x9, 0x6, 0x5]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x1}, {0x2, 0xa}, {0x2}, {0x4, 0x2}, {0x1, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x7}, {0x4, 0x8}, {0x2, 0x8}, {0x7, 0x4}, {0x6, 0x4}, {0x0, 0x4}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0x15}, {0x5, 0x5}, {0x3, 0x4}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0x8}, {0x2, 0x8}, {0x5, 0x2}, {0x1, 0x3}, {0x5}, {0x4, 0x6}, {0x7, 0x6}, {0x1, 0x3}, {0x6, 0x6}, {0x3, 0x1}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0x5}, {0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x400, 0xd964, 0x200, 0x2, 0x6, 0xfff9, 0x8]}}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x3}, {0x3, 0x7}, {0x2, 0x8}, {0x4, 0x9}, {0x6, 0x1}, {0x1, 0x8}, {0x1, 0x9}, {0x3, 0x4}, {}, {0x1, 0x5}, {0x0, 0x6}, {0x3, 0x1}, {0x4}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x3, 0x3}, {0x3, 0xa}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0xa}, {0x4, 0x2}, {0x4, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x5}, {0x6, 0x1}, {0x5, 0x4}, {0x6, 0x8}, {0x2, 0x5}, {0x7, 0x6}, {0x3, 0x6}, {0x5, 0x8}, {0x6, 0xa}, {0x1}, {0x4, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x36, 0x36, 0x1b, 0x60, 0xb, 0x6c, 0x9, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x1, 0x16, 0x48, 0x24, 0x12, 0x16, 0x6, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x7, 0x4, 0x5, 0x43, 0x3d6f, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7b, 0x8, 0x1, 0x9, 0x2, 0x7, 0x2, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcb}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2c74, 0x5, 0xd3, 0x9, 0x0, 0xfff, 0x6, 0x7]}}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x7}, {0x6, 0x1}, {0x4, 0x6}, {0x0, 0x8}, {0x0, 0x1}, {0x7, 0x5}, {0x0, 0x2}, {0x0, 0x9}, {0x6}, {0x5, 0x4}, {0x4, 0x3}, {0x5, 0x2}, {0x2}, {0x7, 0x1}, {0x2}, {0x6}, {0x4}, {0x7, 0x8}, {0x4}, {0x6, 0x5}, {0x7, 0x9}, {0x7, 0x9}, {0x1, 0x9}, {0x0, 0x2}, {0x2, 0x1}, {0x3}, {0x5, 0x6}, {0x5}, {0x2, 0x7}, {0x3}, {0x6, 0x9}, {0x5, 0x1}, {0x0, 0xa}, {0x4, 0x7}, {0x6, 0x4}, {0x5, 0x14}, {0x7, 0x5}, {0x5, 0x5}, {0x7, 0x7}, {0x0, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x6}, {0x2}, {0x0, 0x2}, {}, {0x6, 0x1f}, {0x5, 0x2}, {0x7, 0x4}, {0x4, 0x2}, {0x7, 0xa}, {0x7}, {0x0, 0xa}, {0x4, 0x8}, {0x1, 0xa}, {}, {0x6, 0x1}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0xb, 0x1b, 0x60, 0x6, 0x3, 0x4, 0x6c, 0x9, 0x5, 0x3, 0x16, 0x6c, 0x6c, 0x24, 0x9, 0x9, 0x60, 0x9, 0x36, 0x2]}]}]}]}, {0x2b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x290, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x4, 0xc, 0x9, 0x2, 0x1, 0xc, 0x5, 0x9, 0x16, 0x24]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5, 0xa}, {0x6}, {0x3, 0x1}, {0x4, 0xa}, {0x3, 0x6}, {0x6, 0x2}, {0x7}, {0x4, 0x9}, {0x4, 0xa}, {0x2, 0x2}, {}, {0x5, 0x4}, {0x6, 0x8}, {0x6, 0x6}, {0x0, 0x7}, {0x2, 0x5}, {0x3}, {0x2, 0x3}, {0x7, 0x9}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x7}, {0x3, 0x4}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x9}, {0x5, 0x1}, {0x4, 0x3}, {}, {0x6, 0x5}, {0x4, 0x8}, {0x4, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x5, 0x5}, {0x5, 0x6}, {0x7, 0x2}, {0x3, 0x8}, {0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0x3}, {0x0, 0x9}, {0x3, 0x8}, {0x2, 0x4}, {0x1, 0x3}, {0x2}, {0x0, 0x3}, {0x7, 0x6}, {0x1, 0xa}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x7, 0xa}, {0x2}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x4}, {0x6, 0xa}, {0x4, 0x8}, {0x7, 0x8}, {0x5, 0xa}, {0x2, 0x9}, {0x7, 0x8}, {0x1, 0x4}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x8}, {0x6, 0x9}]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7202, 0x9, 0x6, 0x994a, 0x5, 0x2, 0x5, 0xd59]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6}, {0x7, 0x9}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x7, 0x2}, {0x0, 0x9}, {0x3}, {0x7, 0x9}, {0x5, 0x5}, {0x1, 0x8}, {0x3}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0x1}, {0x2, 0x7}, {0x7, 0x2}, {0x2, 0x2}, {0x1}, {0x5, 0x8}, {0x1, 0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x6}, {0x3, 0x8}, {0x5}, {0x4}, {0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x4, 0x9}, {0x4, 0x6}, {0x5}, {0x0, 0x2}, {0x6, 0x12}, {0x1, 0x5}, {0x1, 0x5}, {0x5, 0x9}, {0x2, 0x5}, {0x5, 0x8}, {0x4, 0x1}, {0x0, 0x6}, {0x3, 0x6}, {0x6, 0x7}, {0x7, 0x8}, {0x4, 0x8}, {0x6, 0x9}, {0x1, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x6, 0x7}, {0x4}, {0x3, 0x8}, {0x0, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x3}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x0, 0x5, 0x4, 0x3ff, 0x37f3, 0x8]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x12, 0x2, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x48, 0x5, 0x36, 0x3b0b1ee0bbe97191, 0x16, 0x60, 0x18, 0x4, 0x6c, 0x6f, 0x2, 0x6, 0x2, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x3, 0x6a9, 0x8, 0x2, 0x0, 0xf34a, 0xbc09]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x7}, {0x6}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x4}, {0x3, 0x3}, {0x3, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x2, 0x2}, {0x7, 0x6}, {}, {0x6, 0x8}, {0x5, 0x6}, {0x4, 0x4}, {0x6, 0x2}, {0x6, 0x6}, {0x3, 0x9}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x7}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x1}, {0x7, 0x3}, {0x7, 0x7}, {0x1}, {0x3, 0xa}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x4}, {0x2, 0x6}, {0x6, 0x5}, {0x2, 0x1}, {0x7, 0x7}, {0x5, 0x7}, {0x6, 0x1}, {0x6, 0x9}, {0x6, 0x4}, {0x6, 0x3}, {0x0, 0x2}, {0x6, 0x3}, {0x1, 0x1}, {0x7, 0x9}, {0x3, 0x9}, {0x2}, {0x1, 0x5}, {0x4, 0x9}, {0x7, 0xa}, {0x0, 0x2}, {0x3, 0x4}, {0x0, 0x7}, {0x4, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x6, 0x5}, {0x2, 0x9}, {0x0, 0xa}, {0x2, 0x4}, {0x7, 0x4}, {0x7, 0x3}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0x9}, {0x2, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x7fff, 0x4, 0x92, 0x87, 0x6, 0x1, 0x6311]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0xffff, 0xbd36, 0xce, 0x1ff, 0x3, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb4f, 0x7, 0xd, 0x7, 0x1, 0x6dd, 0x4, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x11b, 0x8368, 0x31c, 0x2, 0xc, 0x8000, 0x8, 0x200]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x60, 0x36, 0x2, 0x60, 0x1, 0x6, 0x9, 0x5, 0x6, 0xc, 0x24, 0xc, 0x18, 0x16, 0x1b, 0x9, 0x16, 0x9, 0x5, 0x3, 0x3, 0x18, 0x48, 0x2, 0x9, 0x48, 0x30, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfb}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}]}]}]}, 0xea0}, 0x1, 0x0, 0x0, 0xc040}, 0x800)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x11000, 0x1000, 0x0, 0x1}, 0x20) (async)
r12 = openat$cgroup_pressure(r3, &(0x7f0000000480)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r12, &(0x7f00000004c0)={'some', 0x20, 0xfffffffffffffffe, 0x20, 0x3}, 0x2f)
setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r14=>0x0}) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
bind$xdp(r10, &(0x7f0000000100)={0x2c, 0x0, r14}, 0x10)
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40}, 0x0) (async)
syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/cgroup\x00') (async)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x24, 0x10, 0x400, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1801, 0x931b}, [@IFLA_IFALIASn={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.08051032s ago: executing program 1 (id=3120):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}}, 0x0)

867.538329ms ago: executing program 1 (id=3121):
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000100))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002"], 0x2c}}, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
sendmsg$sock(r3, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x401, @loopback, 0x4}, 0x80, 0x0}, 0xff00)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r4 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r4, &(0x7f00000002c0)="17", 0x1, 0x804, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r6, 0x28, 0x6, 0xfffffffffffffffc, &(0x7f0000000000)=0x5e)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@gettaction={0x178, 0x32, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb7f3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6f}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r9, &(0x7f0000000200)=0x10001, 0x12)
sendfile(r9, r8, 0x0, 0xf03a0005)
unshare(0x24040400)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r11, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20044810)
r12 = socket$tipc(0x1e, 0x5, 0x0)
listen(r12, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="06000000191c8f939a00b191a20b00"/34], 0x50)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r7, 0x2, 0x6, 0x4b, 0x6, 0xb, @local, @loopback, 0x40, 0x8, 0x80000001, 0x8}})

420.382222ms ago: executing program 0 (id=3122):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="57001837d87c9b69ae0000100009eec0abfe3382dbdec2b1fc60b8186df6a1f5c2d66769a0ce2fc243b150bf9d71d34ab11788e56f8aff92e1e79d2695cff22b04a763bf55add799c2623e7e6332877b5b057992df02b699b2918a4309ee39f71aa378609753cf0fcfd0ac0eb2e6945b9f89706a2febafa0fb5f473d48105629e8f2817b70281e4d70c7cadda3f9f525b4", @ANYRES32=0x0, @ANYBLOB="a7ffa88808000100140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x80, 0xd]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0)
r9 = socket(0x10, 0x803, 0x8)
pread64(r7, &(0x7f0000000180)=""/114, 0x72, 0x3)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="98000000", @ANYRES16=r11, @ANYBLOB="080025bd7000fedbdf25060000000c009900ff0700000f0000001c00e7001fd0fa85e357e77d54e647089b07ec2819df01846ed2079f1c00e7001f36a8d07cc10419709e9d50291f445d1576a857ef0d2f960a00e80008021100000000000a00e800080211000001000008000500070000000800050006000000080005000100000008000500100000000800050000000000b9dbe31a42db88d0dd2f6a27f4d4aa49ca39aa4544a1c2927cf21ef5b6981ea4fb06dce7e2ce7c50c7a82c24e7df398c8517e9c39fa4de35eb236158e59267280cb261aaf9b694415fca3faf0480c4aa589794d37d70db2c94f791057682cbc7d5552b5c014cd3196d2f0100d3ffafdd81a214971fabf90088d97184778a1d598d558262b0e3d4c9705242c649c75feccf0578b8b5ba58b994d28d19ce1041161e9b"], 0x98}}, 0x4004)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900, 0x4064}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r12, 0x1, 0x3e, &(0x7f00000000c0)=0x4, 0x4)
bind$llc(r12, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x4, 0x1, 0x0, @local}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 1 (id=3123):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa855}, 0x40)

kernel console output (not intermixed with test programs):

32.488102][T10404] sctp: [Deprecated]: syz.2.1211 (pid 10404) Use of int in max_burst socket option.
[  132.488102][T10404] Use struct sctp_assoc_value instead
[  132.638624][T10412] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  132.647504][T10412] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  132.780626][T10417] xt_hashlimit: size too large, truncated to 1048576
[  132.911353][T10426] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20004
[  132.912073][T10422] netlink: 'syz.1.1215': attribute type 1 has an invalid length.
[  132.932205][T10422] 8021q: adding VLAN 0 to HW filter on device bond4
[  132.980339][T10432] netlink: 'syz.0.1217': attribute type 32 has an invalid length.
[  133.062258][T10438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.225253][T10450] openvswitch: netlink: IP tunnel dst address not specified
[  133.780147][T10472] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  133.783548][T10472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.355924][T10494] Cannot find del_set index 2 as target
[  134.506651][T10515] x_tables: duplicate underflow at hook 1
[  134.510899][T10517] SET target dimension over the limit!
[  134.682319][T10525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.110237][T10557] netlink: 'syz.2.1247': attribute type 11 has an invalid length.
[  135.312748][T10571] netlink: 'syz.0.1250': attribute type 32 has an invalid length.
[  135.427402][T10583] __nla_validate_parse: 13 callbacks suppressed
[  135.427420][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1251'.
[  135.676406][T10601] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1254'.
[  135.685794][T10601] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1254'.
[  135.689915][T10601] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1254'.
[  135.693891][T10601] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1254'.
[  135.699170][T10601] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1254'.
[  135.704077][T10601] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1254'.
[  135.731672][T10601] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1254'.
[  135.741869][T10601] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1254'.
[  135.775897][T10601] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1254'.
[  135.943436][T10617] sit1: entered promiscuous mode
[  136.127103][T10628] netlink: 'syz.1.1260': attribute type 32 has an invalid length.
[  136.612095][T10667] netlink: 'syz.2.1269': attribute type 32 has an invalid length.
[  137.047762][T10687] wg2: entered promiscuous mode
[  137.049815][T10687] wg2: entered allmulticast mode
[  137.221829][T10708] netlink: 'syz.1.1280': attribute type 32 has an invalid length.
[  137.469074][T10724] xfrm1: entered promiscuous mode
[  137.472331][T10724] xfrm1: entered allmulticast mode
[  137.498183][T10725] xt_hashlimit: size too large, truncated to 1048576
[  137.585379][T10733] netlink: 'syz.2.1284': attribute type 21 has an invalid length.
[  137.595427][T10724] netlink: 'syz.2.1284': attribute type 21 has an invalid length.
[  137.622821][T10735] netlink: 'syz.1.1286': attribute type 7 has an invalid length.
[  137.634107][T10735] : entered promiscuous mode
[  137.733839][T10741] netlink: 'syz.2.1289': attribute type 1 has an invalid length.
[  137.738402][T10741] netlink: 'syz.2.1289': attribute type 4 has an invalid length.
[  137.801245][T10750] netlink: 'syz.0.1291': attribute type 32 has an invalid length.
[  137.828242][T10753] syz_tun: tun_net_xmit 42
[  137.830366][T10753] syz_tun: tun_net_xmit 42
[  137.845104][T10753] syz_tun: tun_net_xmit 42
[  137.846681][T10753] syz_tun: tun_net_xmit 42
[  137.848165][T10753] syz_tun: tun_net_xmit 42
[  137.849752][T10753] syz_tun: tun_net_xmit 42
[  137.851496][T10753] syz_tun: tun_net_xmit 42
[  137.853007][T10753] syz_tun: tun_net_xmit 42
[  137.861580][T10753] syz_tun: tun_net_xmit 42
[  137.863648][T10753] syz_tun: tun_net_xmit 42
[  137.866431][T10753] syz_tun: tun_net_xmit 42
[  137.869392][T10753] syz_tun: tun_net_xmit 42
[  137.871573][T10753] syz_tun: tun_net_xmit 42
[  137.873625][T10753] syz_tun: tun_net_xmit 42
[  137.876669][T10753] syz_tun: tun_net_xmit 42
[  137.879352][T10753] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  138.028569][T10767] xt_HMARK: spi-set and port-set can't be combined
[  138.152774][T10789] openvswitch: netlink: Flow key attr not present in new flow.
[  138.217538][T10792] netlink: 'syz.2.1302': attribute type 32 has an invalid length.
[  138.366137][T10803] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  138.390733][T10805] xt_TCPMSS: Only works on TCP SYN packets
[  138.551001][T10816] IPVS: set_ctl: invalid protocol: 94 100.1.1.2:20000
[  138.553670][T10815] IPVS: set_ctl: invalid protocol: 94 100.1.1.2:20000
[  138.645376][   T33] audit: type=1804 audit(1751730353.688:4): pid=10824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1313" name="/newroot/432/cgroup.controllers" dev="tmpfs" ino=2234 res=1 errno=0
[  138.655797][   T33] audit: type=1800 audit(1751730353.688:5): pid=10824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1313" name="cgroup.controllers" dev="tmpfs" ino=2234 res=0 errno=0
[  138.913337][T10849] netlink: 'syz.1.1320': attribute type 11 has an invalid length.
[  138.998564][T10855] xt_hashlimit: size too large, truncated to 1048576
[  139.180892][T10874] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (47)
[  139.290366][T10881] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  140.490851][T10948] __nla_validate_parse: 50 callbacks suppressed
[  140.490870][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1347'.
[  140.537082][T10948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1347'.
[  140.540426][T10948] netem: unknown loss type 13
[  140.569041][T10948] netem: change failed
[  140.697212][T10964] pimreg: entered allmulticast mode
[  140.703637][T10964] dvmrp0: left allmulticast mode
[  140.706644][T10964] pimreg: left allmulticast mode
[  140.956271][T10983] xt_SECMARK: invalid mode: 0
[  141.003059][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'.
[  141.007410][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'.
[  141.056608][T10990] TCP: TCP_TX_DELAY enabled
[  141.196455][T11002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1361'.
[  141.535165][T11027] validate_nla: 10 callbacks suppressed
[  141.535179][T11027] netlink: 'syz.1.1368': attribute type 32 has an invalid length.
[  141.730374][T11043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1372'.
[  141.808386][T11049] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1375'.
[  141.811582][T11049] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1375'.
[  141.942169][T11065] netlink: 'syz.0.1381': attribute type 32 has an invalid length.
[  141.960105][T11064] netlink: 'syz.2.1380': attribute type 5 has an invalid length.
[  141.962622][T11064] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1380'.
[  142.337364][T11105] netlink: 'syz.2.1390': attribute type 32 has an invalid length.
[  142.384594][T11109] netlink: 'syz.0.1391': attribute type 1 has an invalid length.
[  142.432808][T11109] bond7: (slave gretap1): making interface the new active one
[  142.444146][T11109] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  142.808743][T11134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1395'.
[  145.782405][T11157] netlink: 'syz.2.1401': attribute type 32 has an invalid length.
[  145.822910][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'.
[  145.835759][T11170] syz_tun: tun_net_xmit 86
[  146.120984][T11210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1418'.
[  146.138430][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1418'.
[  146.214204][T11216] netlink: 'syz.2.1419': attribute type 32 has an invalid length.
[  146.396746][T11226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1420'.
[  146.400379][T11226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1420'.
[  146.519322][T11236] openvswitch: netlink: Key type 2688 is out of range max 32
[  146.689224][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'.
[  146.703890][T11249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.802598][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'.
[  146.914557][    C1] syz_tun: tun_net_xmit 86
[  147.003866][T11278] syzkaller1: entered promiscuous mode
[  147.006075][T11278] syzkaller1: entered allmulticast mode
[  147.021031][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1437'.
[  147.025188][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1437'.
[  147.042306][  T371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.045666][  T371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.072958][T11284] netlink: 'syz.1.1438': attribute type 32 has an invalid length.
[  147.106331][T11288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1439'.
[  147.377594][T11317] veth0: entered promiscuous mode
[  147.379990][T11319] veth0: left promiscuous mode
[  147.954558][    C1] syz_tun: tun_net_xmit 86
[  148.087325][T11360] netlink: 'syz.2.1453': attribute type 1 has an invalid length.
[  148.273835][T11371] netlink: 'syz.1.1455': attribute type 4 has an invalid length.
[  148.310546][T11371] netlink: 'syz.1.1455': attribute type 10 has an invalid length.
[  148.383367][T11378] netlink: 'syz.0.1459': attribute type 1 has an invalid length.
[  148.877570][T11402] Unknown options in mask 700
[  149.040359][T11414] netlink: 'syz.1.1469': attribute type 10 has an invalid length.
[  149.061152][T11417] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  149.141693][T11414] tipc: Resetting bearer <eth:macvtap0>
[  149.189787][T11414] tipc: Disabling bearer <eth:macvtap0>
[  149.300363][T11433] netlink: 'syz.0.1474': attribute type 32 has an invalid length.
[  149.479494][T11459] netlink: 'syz.2.1479': attribute type 1 has an invalid length.
[  149.482799][T11459] netlink: 'syz.2.1479': attribute type 32 has an invalid length.
[  149.491488][T11459] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  149.527180][   T33] audit: type=1800 audit(1751730364.568:6): pid=11465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1483" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2768 res=0 errno=0
[  149.655828][T11487] netlink: 'syz.0.1489': attribute type 32 has an invalid length.
[  149.823578][T11503] xt_hashlimit: size too large, truncated to 1048576
[  150.053927][T11521] dvmrp0: entered allmulticast mode
[  150.241527][T11535] openvswitch: netlink: IP tunnel TTL not specified.
[  150.502601][T11555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.945357][T11583] __nla_validate_parse: 18 callbacks suppressed
[  150.945368][T11583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1517'.
[  151.062864][T11585] Cannot find add_set index 0 as target
[  151.669890][T11621] syzkaller1: entered promiscuous mode
[  151.672768][T11621] syzkaller1: entered allmulticast mode
[  152.388833][T11668] validate_nla: 5 callbacks suppressed
[  152.388848][T11668] netlink: 'syz.0.1539': attribute type 10 has an invalid length.
[  152.449371][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1539'.
[  152.453096][T11670] openvswitch: netlink: Flow actions attr not present in new flow.
[  152.466795][T11671] netlink: 'syz.1.1542': attribute type 32 has an invalid length.
[  152.705680][T11689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1546'.
[  152.747593][T11693] netlink: 'syz.0.1543': attribute type 11 has an invalid length.
[  153.142255][T11712] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1554'.
[  153.158067][T11712] netlink: 'syz.1.1554': attribute type 1 has an invalid length.
[  153.163069][T11712] netlink: 'syz.1.1554': attribute type 2 has an invalid length.
[  153.170077][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'.
[  153.419209][T11722] netlink: 'syz.2.1557': attribute type 32 has an invalid length.
[  153.521176][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'.
[  153.753036][T11741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1560'.
[  155.008979][T11770] netlink: 'syz.2.1568': attribute type 9 has an invalid length.
[  155.014571][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'.
[  155.072790][T11772] netlink: 'syz.2.1569': attribute type 32 has an invalid length.
[  155.270601][T11782] tipc: Started in network mode
[  155.272853][T11782] tipc: Node identity , cluster identity 4711
[  155.281176][T11782] tipc: Failed to set node id, please configure manually
[  155.284271][T11782] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  155.802364][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1573'.
[  155.818023][T11791] dummy0: Device is already in use.
[  155.912798][T11806] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1578'.
[  156.716527][T11822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.917052][T11830] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  156.966260][T11837] netlink: 'syz.2.1587': attribute type 1 has an invalid length.
[  156.969124][T11837] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1587'.
[  156.972265][T11837] netlink: 'syz.2.1587': attribute type 1 has an invalid length.
[  156.977406][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'.
[  157.016319][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'.
[  157.348584][T11866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1595'.
[  157.353160][T11862] delete_channel: no stack
[  157.491111][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1600'.
[  157.503320][T11874] IPVS: Unknown mcast interface: vcan0
[  157.686109][T11889] validate_nla: 1 callbacks suppressed
[  157.686126][T11889] netlink: 'syz.2.1604': attribute type 32 has an invalid length.
[  157.793469][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'.
[  157.890418][T11907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1609'.
[  157.941922][T11910] netlink: 'syz.0.1610': attribute type 2 has an invalid length.
[  157.949667][T11910] netlink: 'syz.0.1610': attribute type 8 has an invalid length.
[  157.952941][T11910] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1610'.
[  158.042848][T11917] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1613'.
[  158.167141][T11925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1612'.
[  158.350530][T11933] netlink: 'syz.1.1617': attribute type 1 has an invalid length.
[  158.426139][T11934] bond5: (slave gretap2): making interface the new active one
[  158.430550][T11934] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  158.503718][T11939] netlink: 'syz.0.1619': attribute type 32 has an invalid length.
[  158.623990][T11954] syz_tun: entered promiscuous mode
[  158.626469][T11954] syz_tun: entered allmulticast mode
[  158.771657][   T33] audit: type=1804 audit(1751730373.818:7): pid=11962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1624" name="/newroot/584/cgroup.controllers" dev="tmpfs" ino=3004 res=1 errno=0
[  158.794416][   T33] audit: type=1800 audit(1751730373.818:8): pid=11962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1624" name="cgroup.controllers" dev="tmpfs" ino=3004 res=0 errno=0
[  159.508685][T11979] netlink: 'syz.1.1630': attribute type 32 has an invalid length.
[  159.526434][T11983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  159.529476][T11983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  159.543285][T11983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  159.547661][T11983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  160.012182][T12023] xt_cgroup: invalid path, errno=-2
[  160.056977][T12028] netlink: 'syz.2.1643': attribute type 32 has an invalid length.
[  160.122774][T12037] IPVS: Scheduler module ip_vs_sip not found
[  160.127299][T12025] nbd: socks must be embedded in a SOCK_ITEM attr
[  160.392973][T12063] x_tables: duplicate underflow at hook 1
[  160.393858][T12058] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.402712][T12058] batadv_slave_0: entered promiscuous mode
[  160.590801][T12084] syzkaller0: entered promiscuous mode
[  160.593131][T12084] syzkaller0: entered allmulticast mode
[  161.687505][T12096] syzkaller1: entered promiscuous mode
[  161.689461][T12096] syzkaller1: entered allmulticast mode
[  161.800244][T12110] set match dimension is over the limit!
[  162.630864][T12149] __nla_validate_parse: 10 callbacks suppressed
[  162.630874][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'.
[  162.641111][T12149] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1677'.
[  162.656211][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'.
[  162.686484][T12155] netlink: 'syz.2.1680': attribute type 1 has an invalid length.
[  162.710196][T12155] 8021q: adding VLAN 0 to HW filter on device bond6
[  162.715652][T12160] openvswitch: netlink: Unknown key attributes 2
[  162.731270][T12155] bond6: (slave ip6gretap1): making interface the new active one
[  162.731670][T12160] x_tables: duplicate underflow at hook 1
[  162.734665][T12155] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link
[  162.882930][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'.
[  162.893401][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'.
[  162.897638][T12175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1686'.
[  162.951102][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'.
[  163.355530][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'.
[  163.493042][T12221] netlink: 'syz.2.1700': attribute type 32 has an invalid length.
[  163.685577][T12232] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1701'.
[  163.888296][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1707'.
[  163.900965][T12249] bridge9: port 1(veth0_to_bond) entered blocking state
[  163.903701][T12249] bridge9: port 1(veth0_to_bond) entered disabled state
[  163.909284][T12249] veth0_to_bond: entered allmulticast mode
[  163.916350][T12249] veth0_to_bond: entered promiscuous mode
[  164.613523][T12283] tipc: Started in network mode
[  164.616446][T12283] tipc: Node identity 4, cluster identity 4711
[  164.620017][T12283] tipc: Node number set to 4
[  165.023522][T12317] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  165.343230][T12337] netlink: 'syz.0.1724': attribute type 4 has an invalid length.
[  165.603017][T12361] tipc: Enabling of bearer <mth:syzkaller0> rejected, media not registered
[  165.641963][T12361] openvswitch: netlink: Flow key attr not present in new flow.
[  165.827429][T12387] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  166.099325][T12406] vlan0: entered promiscuous mode
[  166.101684][T12406] ip6gretap0: entered promiscuous mode
[  166.193601][T12408] netlink: 'syz.0.1741': attribute type 32 has an invalid length.
[  166.518810][T12436] netlink: 'syz.0.1748': attribute type 1 has an invalid length.
[  166.629192][T12440] netlink: 'syz.0.1749': attribute type 32 has an invalid length.
[  166.792888][T12449] netlink: 'syz.2.1750': attribute type 1 has an invalid length.
[  166.800846][T12449] netlink: 'syz.2.1750': attribute type 1 has an invalid length.
[  167.261936][T12470] netlink: 'syz.2.1758': attribute type 32 has an invalid length.
[  167.610660][T12487] sctp: [Deprecated]: syz.0.1761 (pid 12487) Use of int in max_burst socket option.
[  167.610660][T12487] Use struct sctp_assoc_value instead
[  167.674189][T12493] xt_ecn: cannot match TCP bits for non-tcp packets
[  168.851850][T12523] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  168.986971][T12527] netlink: 'syz.2.1772': attribute type 32 has an invalid length.
[  169.295966][T12536] netlink: 'syz.2.1773': attribute type 21 has an invalid length.
[  169.603368][T12553] sctp: [Deprecated]: syz.1.1777 (pid 12553) Use of int in maxseg socket option.
[  169.603368][T12553] Use struct sctp_assoc_value instead
[  169.612108][T12553] netlink: 'syz.1.1777': attribute type 4 has an invalid length.
[  169.618293][T12553] __nla_validate_parse: 14 callbacks suppressed
[  169.618309][T12553] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1777'.
[  169.698554][T12555] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1778'.
[  169.759072][T12562] bond0: Unable to set up delay as MII monitoring is disabled
[  169.832558][T12565] netlink: 'syz.1.1781': attribute type 32 has an invalid length.
[  170.063405][   T33] audit: type=1800 audit(1751730385.108:9): pid=12574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1782" name="@" dev="tmpfs" ino=2647 res=0 errno=0
[  170.072028][   T33] audit: type=1804 audit(1751730385.108:10): pid=12575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1782" name="@" dev="tmpfs" ino=2647 res=1 errno=0
[  170.138168][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1783'.
[  170.158960][T12578] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  170.162454][T12578] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  170.220674][T12578] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  170.224706][T12578] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  170.277184][T12578] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  170.282175][T12578] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  170.355784][T12578] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  170.359947][T12578] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  170.403074][T12588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1785'.
[  170.409338][T12589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1785'.
[  170.460921][T12578] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  170.463614][T12578] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  170.481012][T12578] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  170.484725][T12578] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  170.493164][T12578] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  170.496014][T12578] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  170.506079][T12578] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  170.508656][T12578] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  170.569716][T12600] netlink: 'syz.1.1788': attribute type 32 has an invalid length.
[  170.783115][T12624] netlink: 'syz.2.1797': attribute type 32 has an invalid length.
[  170.847366][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'.
[  170.851476][T12629] af_packet: tpacket_rcv: packet too big, clamped from 4080 to 3944. macoff=96
[  170.981195][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1800'.
[  171.364242][T12671] netlink: 'syz.2.1808': attribute type 32 has an invalid length.
[  171.683286][T12692] syzkaller1: entered promiscuous mode
[  171.685903][T12692] syzkaller1: entered allmulticast mode
[  171.691730][T12692] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  171.915959][T12699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1814'.
[  171.962152][T12701] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  172.006207][T12703] netlink: 'syz.2.1816': attribute type 32 has an invalid length.
[  172.189746][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.193187][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.202786][T12711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.048170][T12740] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1828'.
[  173.061981][T12740] syzkaller1: entered promiscuous mode
[  173.064608][T12740] syzkaller1: entered allmulticast mode
[  173.350566][T12752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1833'.
[  173.463937][T12757] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  173.468661][T12757] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  173.483593][T12757] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  173.849901][T12776] netlink: 'syz.0.1840': attribute type 2 has an invalid length.
[  173.970828][T12787] netlink: 'syz.0.1843': attribute type 5 has an invalid length.
[  174.849075][T12825] __nla_validate_parse: 5 callbacks suppressed
[  174.849089][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'.
[  174.850899][T12832] netlink: 'syz.0.1856': attribute type 32 has an invalid length.
[  174.861626][T12825] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  174.875298][T12825] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  174.933165][T12835] dvmrp0: entered allmulticast mode
[  175.230994][T12851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1860'.
[  175.406243][T12857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.650456][T12879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1870'.
[  175.664754][T12880] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  175.983931][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1873'.
[  176.766328][T12941] dvmrp8: entered allmulticast mode
[  176.771288][T12938] dvmrp8: left allmulticast mode
[  176.820487][T12943] netlink: 'syz.2.1889': attribute type 29 has an invalid length.
[  176.842610][T12943] netlink: 'syz.2.1889': attribute type 29 has an invalid length.
[  176.858881][T12943] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1889'.
[  177.122206][T12955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1893'.
[  177.128703][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'.
[  178.841191][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1911'.
[  178.940431][T13029] netlink: 'syz.2.1911': attribute type 21 has an invalid length.
[  180.834720][ T5816] Bluetooth: hci1: command 0x0406 tx timeout
[  181.370220][T13080] netlink: 'syz.0.1929': attribute type 1 has an invalid length.
[  181.373496][T13080] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1929'.
[  181.384482][T13080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1929'.
[  181.576557][T13086] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1931'.
[  181.591225][T13086] vxcan1: entered allmulticast mode
[  181.703773][T13092] ip6t_srh: unknown srh invflags 4000
[  181.786995][T13098] netlink: 'syz.0.1935': attribute type 25 has an invalid length.
[  181.793310][T13099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1936'.
[  181.804796][T13099] netlink: 'syz.2.1936': attribute type 6 has an invalid length.
[  182.013011][T13113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1940'.
[  182.064401][T13113] openvswitch: netlink: Flow key attr not present in new flow.
[  182.149667][T13122] netlink: 'syz.1.1941': attribute type 21 has an invalid length.
[  182.153862][T13123] openvswitch: netlink: Multiple metadata blocks provided
[  182.153862][T13124] openvswitch: netlink: Multiple metadata blocks provided
[  182.208800][T13128] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  182.267448][T13137] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  182.293304][T13138] bond0: (slave bridge0): Releasing backup interface
[  182.307576][T13138] bridge_slave_0: left allmulticast mode
[  182.309949][T13138] bridge_slave_0: left promiscuous mode
[  182.312483][T13138] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.319430][T13138] bridge_slave_1: left allmulticast mode
[  182.321751][T13138] bridge_slave_1: left promiscuous mode
[  182.324412][T13138] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.330976][T13138] veth0_to_bond: left allmulticast mode
[  182.333676][T13138] veth0_to_bond: left promiscuous mode
[  182.336705][T13128] netlink: 'syz.0.1944': attribute type 10 has an invalid length.
[  182.340230][T13138] bridge9: port 1(veth0_to_bond) entered disabled state
[  182.356012][T13138] bond0: (slave bond_slave_0): Releasing backup interface
[  182.360768][T13138] bond0: (slave bond_slave_1): Releasing backup interface
[  182.373523][T13138] bond3: (slave veth3): Releasing active interface
[  182.401154][T13138] bond7: (slave gretap1): Releasing active interface
[  182.422806][T13128] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  182.426089][T13128] bond0: (slave wlan1): refused to change device type
[  182.448442][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'.
[  182.452337][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'.
[  182.492686][T13128] xt_TCPMSS: Only works on TCP SYN packets
[  182.506580][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'.
[  182.510629][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'.
[  182.528379][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'.
[  182.605980][T13149] netlink: 'syz.0.1949': attribute type 3 has an invalid length.
[  183.026290][T13163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.666330][T13195] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  184.670843][T13195] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  184.673667][T13195] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  184.677987][T13195] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  184.814257][T13203] xt_CT: You must specify a L4 protocol and not use inversions on it
[  184.871849][T13211] nbd: couldn't find device at index 536870912
[  184.884134][T13211] netlink: 'syz.0.1965': attribute type 29 has an invalid length.
[  185.005034][T13221] netlink: 'syz.1.1969': attribute type 29 has an invalid length.
[  185.009685][T13221] netlink: 'syz.1.1969': attribute type 29 has an invalid length.
[  185.022317][T13224] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  185.031354][T13221] IPVS: stopping master sync thread 13224 ...
[  185.700508][T13254] openvswitch: netlink: IPv6 tunnel dst address is zero
[  186.181159][T13270] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  186.184030][T13270] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  186.198907][T13270] bond0: left promiscuous mode
[  186.201017][T13270] bond_slave_0: left promiscuous mode
[  186.203472][T13270] bond_slave_1: left promiscuous mode
[  186.206722][T13270] bond0: left allmulticast mode
[  186.208910][T13270] bond_slave_0: left allmulticast mode
[  186.211282][T13270] bond_slave_1: left allmulticast mode
[  186.219800][T13270] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  186.230469][T13270] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  186.233713][T13273] netlink: 'syz.0.1987': attribute type 32 has an invalid length.
[  186.263516][T13276] openvswitch: netlink: Message has 1 unknown bytes.
[  186.266936][T13276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.441862][T13292] netlink: 'syz.0.1992': attribute type 10 has an invalid length.
[  186.455818][T13292] __nla_validate_parse: 65 callbacks suppressed
[  186.455835][T13292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1992'.
[  186.462722][T13295] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1991'.
[  186.469192][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'.
[  186.565385][T13303] netlink: 'syz.2.1995': attribute type 30 has an invalid length.
[  186.628182][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'.
[  186.715597][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2000'.
[  186.764813][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1998'.
[  186.773730][T13321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2001'.
[  186.786922][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2001'.
[  186.792280][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2001'.
[  186.820794][T13321] 8021q: adding VLAN 0 to HW filter on device bond6
[  186.825786][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2001'.
[  187.418140][T13358] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  187.422395][T13358] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  188.121157][T13386] netlink: 'syz.2.2022': attribute type 8 has an invalid length.
[  188.571786][T13434] netlink: 'syz.1.2034': attribute type 11 has an invalid length.
[  189.120761][T13480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.217370][T13497] netlink: 'syz.0.2053': attribute type 2 has an invalid length.
[  189.253799][T13504] netlink: 'syz.2.2054': attribute type 10 has an invalid length.
[  189.263276][T13504] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.267102][T13504] bridge_slave_1: left allmulticast mode
[  189.270557][T13504] bridge_slave_1: left promiscuous mode
[  189.272909][T13504] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.283543][T13504] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  189.406234][T13480] syz.1.2050 (13480) used greatest stack depth: 17400 bytes left
[  189.447751][T13519] netlink: 'syz.2.2058': attribute type 11 has an invalid length.
[  189.986558][T13556] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  189.990126][T13556] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  190.000902][T13555] netlink: 'syz.1.2076': attribute type 29 has an invalid length.
[  190.065505][T13556] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  190.069187][T13556] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  190.171568][T13556] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  190.176407][T13556] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  190.251349][T13556] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  190.269273][T13571] netlink: 'syz.2.2079': attribute type 32 has an invalid length.
[  190.276804][T13556] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  190.403329][T13556] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.414548][T13556] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  190.437042][T13556] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.440111][T13556] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  190.474226][T13556] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.478383][T13556] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  190.491509][T13556] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.495028][T13556] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  190.498228][T13583] syz_tun: tun_net_xmit 63
[  190.666321][T13594] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 50136 - 0
[  190.669453][T13594] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 50136 - 0
[  190.672412][T13594] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 50136 - 0
[  190.676388][T13594] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 50136 - 0
[  190.679601][T13594] geneve5: entered promiscuous mode
[  190.681429][T13594] geneve5: entered allmulticast mode
[  190.875617][T13611] netlink: 'syz.0.2089': attribute type 32 has an invalid length.
[  191.723291][T13673] netlink: 'syz.1.2101': attribute type 3 has an invalid length.
[  191.727415][T13673] netlink: 'syz.1.2101': attribute type 1 has an invalid length.
[  191.730434][T13673] __nla_validate_parse: 27 callbacks suppressed
[  191.730442][T13673] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2101'.
[  191.960365][T13683] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2105'.
[  191.965194][T13683] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2105'.
[  191.977312][T13683] netlink: 'syz.0.2105': attribute type 16 has an invalid length.
[  191.980606][T13683] netlink: 'syz.0.2105': attribute type 17 has an invalid length.
[  192.014687][T13683] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20001 - 0
[  192.017708][T13683] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20001 - 0
[  192.020493][T13683] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20001 - 0
[  192.023294][T13683] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20001 - 0
[  192.031721][T13683] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.035158][T13683] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.037956][T13683] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.040774][T13683] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.049907][T13683] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 50136 - 0
[  192.052945][T13683] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 50136 - 0
[  192.056499][T13683] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 50136 - 0
[  192.059400][T13683] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 50136 - 0
[  192.063446][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2105'.
[  192.067231][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2102'.
[  192.075931][T13683] IPv6: NLM_F_REPLACE set, but no existing node found!
[  192.152981][T13691] sctp: [Deprecated]: syz.0.2106 (pid 13691) Use of int in max_burst socket option deprecated.
[  192.152981][T13691] Use struct sctp_assoc_value instead
[  192.162833][T13691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2106'.
[  192.248034][T13696] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  192.273779][T13698] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  192.356548][T13703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2111'.
[  192.364039][T13703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2111'.
[  192.504270][T13712] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2114'.
[  192.552132][T13715] netlink: 'syz.0.2115': attribute type 32 has an invalid length.
[  192.906881][T13730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2117'.
[  192.956092][T13730] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  192.959855][T13730] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  193.919263][T13766] netlink: 'syz.0.2125': attribute type 12 has an invalid length.
[  194.851676][T13795] netlink: 'syz.1.2133': attribute type 32 has an invalid length.
[  195.360650][T13863] netlink: 'syz.1.2138': attribute type 1 has an invalid length.
[  195.455640][T13863] 8021q: adding VLAN 0 to HW filter on device bond7
[  195.502322][T13863] vlan2: entered allmulticast mode
[  195.504029][T13863] geneve1: entered allmulticast mode
[  195.507790][T13863] bond7: (slave vlan2): making interface the new active one
[  195.511115][T13863] bond7: (slave vlan2): Enslaving as an active interface with an up link
[  195.527084][T13872] netlink: 'syz.2.2140': attribute type 32 has an invalid length.
[  195.759759][T13896] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  195.768334][T13897] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  195.773283][T13896] syzkaller1: entered promiscuous mode
[  195.775685][T13896] syzkaller1: entered allmulticast mode
[  195.815622][T13902] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  195.823251][T13902] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  195.863723][T13911] netlink: 'syz.2.2150': attribute type 32 has an invalid length.
[  196.674047][T13932] pim6reg: entered allmulticast mode
[  196.678309][T13930] pim6reg: left allmulticast mode
[  196.900349][T13941] sit3: entered promiscuous mode
[  196.970684][T13953] netlink: 'syz.2.2161': attribute type 1 has an invalid length.
[  197.180589][T13967] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  197.213004][T13958] __nla_validate_parse: 24 callbacks suppressed
[  197.213020][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2163'.
[  197.294959][T13971] netlink: 'syz.2.2166': attribute type 4 has an invalid length.
[  197.351614][T13974] netlink: 'syz.2.2166': attribute type 4 has an invalid length.
[  197.638050][T13998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2174'.
[  197.675043][T13998] bond8: entered promiscuous mode
[  197.677557][T13998] 8021q: adding VLAN 0 to HW filter on device bond8
[  197.860524][T13998] bond8 (unregistering): Released all slaves
[  198.031895][T14017] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2180'.
[  198.050968][T14017] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2180'.
[  198.055059][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2180'.
[  198.058686][T14017] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2180'.
[  198.257311][T14034] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2185'.
[  198.261078][T14034] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  198.267607][T14034] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  198.270323][T14034] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  198.349553][T14042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2188'.
[  198.516992][T14060] netlink: 'syz.2.2193': attribute type 2 has an invalid length.
[  198.568342][T14063] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3
[  198.719190][T14073] openvswitch: netlink: Message has 8 unknown bytes.
[  198.820357][T14081] can: request_module (can-proto-0) failed.
[  198.850159][T14081] can: request_module (can-proto-0) failed.
[  199.022568][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2204'.
[  199.416957][T14108] sctp: [Deprecated]: syz.0.2207 (pid 14108) Use of int in maxseg socket option.
[  199.416957][T14108] Use struct sctp_assoc_value instead
[  199.451835][T14110] syzkaller1: entered promiscuous mode
[  199.453730][T14110] syzkaller1: entered allmulticast mode
[  199.457503][T14110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2208'.
[  202.070451][T14123] netlink: 'syz.2.2212': attribute type 4 has an invalid length.
[  202.086646][T14126] netlink: 'syz.0.2213': attribute type 1 has an invalid length.
[  202.090052][T14126] netlink: 'syz.0.2213': attribute type 2 has an invalid length.
[  202.093509][T14126] netlink: 'syz.0.2213': attribute type 8 has an invalid length.
[  202.187773][T14136] netlink: 'syz.0.2216': attribute type 1 has an invalid length.
[  202.258734][T14137] veth0_to_bond: entered allmulticast mode
[  202.277143][T14134] __nla_validate_parse: 5 callbacks suppressed
[  202.277153][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2215'.
[  202.339809][T14150] tipc: Cannot configure node identity twice
[  202.521976][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'.
[  202.677625][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'.
[  202.682929][T14167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2226'.
[  202.694511][T14167] netlink: 'syz.2.2226': attribute type 7 has an invalid length.
[  202.700792][T14167] netlink: 'syz.2.2226': attribute type 8 has an invalid length.
[  202.704167][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'.
[  202.761746][T14173] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2227'.
[  202.767451][T14173] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  203.047442][T14188] netlink: 'syz.0.2233': attribute type 4 has an invalid length.
[  203.056196][T14188] netlink: 'syz.0.2233': attribute type 4 has an invalid length.
[  203.126439][T14191] netlink: 'syz.0.2234': attribute type 22 has an invalid length.
[  203.380649][T14201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.563067][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2241'.
[  203.575166][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2241'.
[  203.716368][T14231] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2245'.
[  204.205975][T14245] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2248'.
[  204.356632][T14251] gtp0: entered promiscuous mode
[  204.557887][T14269] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  204.562186][T14269] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  204.592000][T14266] xfrm1: entered promiscuous mode
[  204.594054][T14266] xfrm1: entered allmulticast mode
[  204.627893][T14271] x_tables: duplicate underflow at hook 2
[  205.036421][T14292] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  205.439446][T14310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.510302][T14311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.519448][T14310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.080549][T14320] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  206.104757][T14320] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  207.150802][T14373] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  207.154069][T14373] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  208.183472][T14417] __nla_validate_parse: 13 callbacks suppressed
[  208.183485][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2304'.
[  208.184101][T14418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2303'.
[  208.209387][T14417] 8021q: adding VLAN 0 to HW filter on device team1
[  208.493621][T14441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2312'.
[  208.501382][T14441] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2312'.
[  208.556099][T14443] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  208.691975][T14448] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2315'.
[  208.699851][T14448] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2315'.
[  208.710011][T14448] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2315'.
[  208.866711][T14452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.003578][T14474] netlink: 'syz.2.2320': attribute type 1 has an invalid length.
[  209.025646][T14474] 8021q: adding VLAN 0 to HW filter on device bond14
[  209.033283][T14478] syzkaller1: entered promiscuous mode
[  209.035421][T14478] syzkaller1: entered allmulticast mode
[  209.038353][T14475] dummy0: entered promiscuous mode
[  209.054271][T14475] bond14: (slave dummy0): making interface the new active one
[  209.057894][T14475] bond14: (slave dummy0): Enslaving as an active interface with an up link
[  209.130393][T14485] netlink: 'syz.2.2321': attribute type 4 has an invalid length.
[  209.226992][T14491] netlink: 'syz.1.2323': attribute type 12 has an invalid length.
[  209.321714][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2325'.
[  209.463751][T14500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2327'.
[  209.552538][T14505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2328'.
[  209.565044][T14505] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  209.568169][T14505] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  210.649421][T14561] netlink: 'syz.1.2343': attribute type 8 has an invalid length.
[  212.067268][T14582] netlink: 'syz.1.2350': attribute type 16 has an invalid length.
[  212.549010][T14598] vlan0: entered allmulticast mode
[  212.551082][T14598] bridge_slave_0: entered allmulticast mode
[  212.843924][T14606] sctp: [Deprecated]: syz.0.2359 (pid 14606) Use of struct sctp_assoc_value in delayed_ack socket option.
[  212.843924][T14606] Use struct sctp_sack_info instead
[  212.925066][T14610] netlink: 'syz.0.2360': attribute type 23 has an invalid length.
[  212.933680][T14610] netlink: 'syz.0.2360': attribute type 2 has an invalid length.
[  212.944571][T14610] netlink: 'syz.0.2360': attribute type 1 has an invalid length.
[  213.095307][T14619] netlink: 'syz.1.2362': attribute type 83 has an invalid length.
[  213.381445][T14645] __nla_validate_parse: 8 callbacks suppressed
[  213.381465][T14645] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2367'.
[  213.390299][T14645] gretap0: entered promiscuous mode
[  213.397550][T14645] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2367'.
[  213.401836][T14645] 0XD: renamed from gretap0
[  213.407172][T14645] 0XD: left promiscuous mode
[  213.409380][T14645] 0XD: entered allmulticast mode
[  213.413542][T14645] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check.
[  213.461587][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2368'.
[  213.472291][T14647] bond0: Device is already in use.
[  213.711596][T14661] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2373'.
[  213.736851][T14661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2373'.
[  213.940025][T14685] netlink: 9612 bytes leftover after parsing attributes in process `syz.2.2379'.
[  213.943900][T14685] openvswitch: netlink: Flow key attr not present in new flow.
[  213.987809][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2381'.
[  213.991378][T14690] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535)
[  214.012821][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'.
[  214.078949][T14699] delete_channel: no stack
[  214.100927][ T5864] syz_tun: tun_net_xmit 90
[  214.137304][ T5864] syz_tun: tun_net_xmit 90
[  214.185133][T14712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.236400][T14720] netlink: 'syz.0.2392': attribute type 1 has an invalid length.
[  214.243421][T14722] netlink: 'syz.0.2392': attribute type 1 has an invalid length.
[  214.245863][T14712] tipc: Resetting bearer <eth:syzkaller0>
[  214.291577][T14730] netlink: 'syz.2.2394': attribute type 5 has an invalid length.
[  214.369838][ T5864] syz_tun: tun_net_xmit 90
[  214.407741][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2398'.
[  214.411283][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2398'.
[  214.583318][T14755] netlink: 'syz.0.2403': attribute type 10 has an invalid length.
[  214.683422][T14757] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  214.741122][T14759] xt_hashlimit: max too large, truncated to 1048576
[  214.745658][T14759] Cannot find add_set index 3 as target
[  215.236098][   T51] tipc: Node number set to 20905985
[  215.797901][T14763] limit: renamed from batadv_slave_1
[  215.825906][T14756] delete_channel: no stack
[  215.941107][T14771] netlink: 'syz.2.2408': attribute type 21 has an invalid length.
[  216.615286][T14823] mac80211_hwsim hwsim4 ": renamed from wlan0 (while UP)
[  216.959565][T14846] netlink: 'syz.0.2430': attribute type 9 has an invalid length.
[  216.980859][T14846] netlink: 'syz.0.2430': attribute type 9 has an invalid length.
[  217.324817][T14853] netlink: 'syz.0.2431': attribute type 1 has an invalid length.
[  217.327572][T14853] nbd: error processing sock list
[  217.329978][T14853] block nbd0: shutting down sockets
[  217.374786][T13842] smc: removing ib device syz1
[  217.406901][  T789] syz1: Port: 1 Link DOWN
[  217.565842][T13852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.569139][T13852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.278148][T14883] netlink: 'syz.0.2440': attribute type 2 has an invalid length.
[  218.641321][T14900] __nla_validate_parse: 15 callbacks suppressed
[  218.641334][T14900] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2445'.
[  218.785486][T14910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2447'.
[  218.824680][T14910] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  218.828169][T14910] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  218.832868][T14910] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  218.837549][T14910] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  218.845376][T14907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2447'.
[  218.904557][T14918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'.
[  218.918428][T14918] netlink: 'syz.1.2450': attribute type 1 has an invalid length.
[  218.940588][T14918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2450'.
[  219.021007][T14924] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  219.058165][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2453'.
[  219.177170][T14934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2455'.
[  219.292955][T14939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  219.304554][T14939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.417685][T14939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  219.421454][T14939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.528642][T14939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  219.533053][T14939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.614666][T14939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  219.618428][T14939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.779951][T14939] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  219.783214][T14939] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.823315][T14950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2460'.
[  219.828095][T14939] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  219.841059][T14939] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.873236][T14939] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  219.887644][T14939] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.904392][T14950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2460'.
[  219.911407][T14939] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  219.914128][T14939] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.116216][T14931] Set syz1 is full, maxelem 65536 reached
[  220.219841][T14970] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  220.222771][T14970] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  220.226171][T14970] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  220.229343][T14970] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  220.237516][T14972] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2466'.
[  220.614175][T14992] delete_channel: no stack
[  220.903027][T15010] macvtap0: entered promiscuous mode
[  220.905286][T15010] macvtap0: entered allmulticast mode
[  220.907323][T15010] dummy0: entered allmulticast mode
[  220.913740][T15010] dummy0: left allmulticast mode
[  221.437508][T15036] lter: renamed from batadv_slave_1 (while UP)
[  221.689189][T15059] ip6t_srh: unknown srh invflags 4449
[  221.798216][T15065] xt_hashlimit: size too large, truncated to 1048576
[  221.800644][T15065] xt_hashlimit: overflow, try lower: 3/0
[  221.923695][T15085] validate_nla: 1 callbacks suppressed
[  221.923710][T15085] netlink: 'syz.0.2503': attribute type 1 has an invalid length.
[  222.556161][T15135] dummy0: entered allmulticast mode
[  223.759506][T15156] __nla_validate_parse: 39 callbacks suppressed
[  223.759524][T15156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2522'.
[  224.138071][T15123] Set syz1 is full, maxelem 65536 reached
[  224.235626][T15188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'.
[  224.863096][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2544'.
[  225.033587][T15262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2547'.
[  225.243311][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2549'.
[  225.254750][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2549'.
[  225.258532][T15277] netlink: 'syz.0.2549': attribute type 5 has an invalid length.
[  225.323050][T15285] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2551'.
[  225.335003][T15289] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  225.438573][T15303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2558'.
[  225.499773][T15308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.659005][T15319] syzkaller1: entered promiscuous mode
[  225.666758][T15319] syzkaller1: entered allmulticast mode
[  225.785674][T15330] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2566'.
[  226.533236][T15370] netlink: ct family unspecified
[  226.535990][T15370] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.540862][T15372] netlink: ct family unspecified
[  226.543055][T15372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.554252][T15366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2579'.
[  226.784523][T15394] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.958721][T15412] netlink: 'syz.2.2590': attribute type 1 has an invalid length.
[  227.072851][T15412] bond17: (slave gretap0): making interface the new active one
[  227.079008][T15412] bond17: (slave gretap0): Enslaving as an active interface with an up link
[  227.088339][T15413] 8021q: adding VLAN 0 to HW filter on device bond17
[  227.143990][T15429] openvswitch: netlink: IP tunnel dst address not specified
[  227.490194][T15461] xt_hashlimit: size too large, truncated to 1048576
[  227.493289][T15461] xt_hashlimit: overflow, try lower: 3/0
[  227.634563][    C0] syz_tun: tun_net_xmit 54
[  227.864488][    C0] syz_tun: tun_net_xmit 54
[  228.028877][T15500] vlan0: entered promiscuous mode
[  228.031386][T15500] vlan0: entered allmulticast mode
[  228.033671][T15500] hsr_slave_1: entered allmulticast mode
[  228.219341][T15512] netlink: 'syz.2.2618': attribute type 11 has an invalid length.
[  228.297966][T15521] bridge: RTM_NEWNEIGH with invalid ether address
[  228.394774][    C0] syz_tun: tun_net_xmit 54
[  228.604494][    C0] syz_tun: tun_net_xmit 54
[  228.936864][T15569] __nla_validate_parse: 7 callbacks suppressed
[  228.936875][T15569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2631'.
[  229.119504][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'.
[  229.123009][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'.
[  229.449819][T15590] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  229.599411][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2644'.
[  229.606126][T15604] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  229.609958][T15604] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.694826][T14835] udevd[14835]: failed to send result of seq 19257 to main daemon: Connection refused
[  229.940158][T15629] syzkaller0: entered promiscuous mode
[  229.942048][T15629] syzkaller0: entered allmulticast mode
[  229.948460][T15631] netlink: 'syz.2.2654': attribute type 32 has an invalid length.
[  230.062236][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'.
[  230.067078][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'.
[  230.086131][T15641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.399870][T15666] ip6tnl3: entered promiscuous mode
[  231.402154][T15666] ip6tnl3: entered allmulticast mode
[  232.397834][T15696] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2667'.
[  232.479012][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2671'.
[  232.483129][T15703] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  232.488340][T15703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.499708][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2672'.
[  232.506626][T15707] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.510356][T15707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2672'.
[  232.516141][T15707] netlink: 'syz.2.2672': attribute type 1 has an invalid length.
[  232.974223][T15752] veth0: entered promiscuous mode
[  233.158323][T15766] bond0: (slave dummy0): Releasing backup interface
[  233.173282][T15766] bond2: (slave vti0): Releasing backup interface
[  233.181100][T15766] bond5: (slave gretap2): Releasing active interface
[  233.189473][T15766] bond7: (slave vlan2): Releasing active interface
[  233.216986][T15771] netlink: 'syz.0.2692': attribute type 32 has an invalid length.
[  233.418415][ T3945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.421794][ T3945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.569270][T15798] netlink: 'syz.0.2699': attribute type 32 has an invalid length.
[  233.654455][    C1] syz_tun: tun_net_xmit 58
[  233.704567][    C0] syz_tun: tun_net_xmit 58
[  233.910449][T15827] xt_hashlimit: size too large, truncated to 1048576
[  234.036106][    C1] syz_tun: tun_net_xmit 58
[  234.094567][    C1] syz_tun: tun_net_xmit 58
[  234.099723][T15841] __nla_validate_parse: 3 callbacks suppressed
[  234.099735][T15841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2709'.
[  234.365700][T15875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2719'.
[  234.473379][T15880] netlink: 'syz.0.2721': attribute type 82 has an invalid length.
[  234.665552][T15903] bridge0: port 2(syz_tun) entered blocking state
[  234.670808][T15903] bridge0: port 2(syz_tun) entered disabled state
[  234.673714][T15903] syz_tun: entered allmulticast mode
[  234.677850][T15903] syz_tun: entered promiscuous mode
[  234.682030][T15903] bridge0: port 2(syz_tun) entered blocking state
[  234.685113][T15903] bridge0: port 2(syz_tun) entered forwarding state
[  234.914956][    C1] syz_tun: tun_net_xmit 58
[  235.071288][T15915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2729'.
[  235.082121][T15915] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2729'.
[  235.341375][T15934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2734'.
[  235.452827][T15943] netlink: 'syz.0.2735': attribute type 2 has an invalid length.
[  235.460681][T15943] netlink: 'syz.0.2735': attribute type 8 has an invalid length.
[  235.463917][T15943] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2735'.
[  235.486573][T15943] x_tables: duplicate underflow at hook 1
[  235.492432][T15943] netlink: 'syz.0.2735': attribute type 32 has an invalid length.
[  235.544668][T15947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2736'.
[  235.703383][T15965] x_tables: duplicate underflow at hook 3
[  235.707753][T15966] x_tables: duplicate underflow at hook 3
[  235.806125][T15978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2744'.
[  235.860341][T15980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2743'.
[  236.149321][T15995] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  237.405627][T16035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2760'.
[  237.461691][T16043] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  238.016530][T16073] x_tables: duplicate underflow at hook 1
[  238.245626][T16094] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  238.481382][ T5818] bridge0: port 2(syz_tun) entered disabled state
[  238.513040][ T5818] syz_tun (unregistering): left allmulticast mode
[  238.518676][ T5818] syz_tun (unregistering): left promiscuous mode
[  238.521827][ T5818] bridge0: port 2(syz_tun) entered disabled state
[  238.656710][T16126] 8021q: VLANs not supported on ip6_vti0
[  238.669456][ T5844] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.673638][ T5844] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.759461][ T5844] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.763092][ T5844] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.826513][ T5844] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.830163][ T5844] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.867104][ T5844] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.870658][ T5844] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.976202][ T5844] bridge_slave_0: left allmulticast mode
[  238.978545][ T5844] bridge_slave_0: left promiscuous mode
[  238.981370][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.011599][T16142] netlink: 'syz.1.2786': attribute type 32 has an invalid length.
[  239.139009][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  239.145076][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  239.148965][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  239.152569][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  239.158884][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  239.192271][ T5844] bond6 (unregistering): (slave ip6gretap1): Releasing active interface
[  239.306982][T16161] __nla_validate_parse: 4 callbacks suppressed
[  239.306997][T16161] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2789'.
[  239.365382][T16159] netlink: 'syz.0.2788': attribute type 1 has an invalid length.
[  239.386000][T16167] No such timeout policy "syz0"
[  239.392783][ T5844] bond2 (unregistering): (slave gretap1): Releasing active interface
[  239.438892][ T5844] bond17 (unregistering): (slave gretap0): Releasing backup interface
[  239.490164][ T5844] dvmrp0 (unregistering): left allmulticast mode
[  239.524220][ T5844] team0: Port device vxlan1 removed
[  239.886705][ T5844] team0: Port device bond0 removed
[  239.890421][ T5844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  239.897961][ T5844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  239.903044][ T5844] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  239.907213][ T5844] bond0 (unregistering): Released all slaves
[  239.972743][ T5844] bond1 (unregistering): Released all slaves
[  240.033897][ T5844] bond2 (unregistering): Released all slaves
[  240.041002][ T5844] bond3 (unregistering): Released all slaves
[  240.048625][ T5844] bond4 (unregistering): Released all slaves
[  240.055407][ T5844] bond5 (unregistering): Released all slaves
[  240.128708][ T5844] bond6 (unregistering): Released all slaves
[  240.135310][ T5844] bond7 (unregistering): Released all slaves
[  240.141632][ T5844] bond8 (unregistering): Released all slaves
[  240.148213][ T5844] bond9 (unregistering): Released all slaves
[  240.154612][ T5844] bond10 (unregistering): Released all slaves
[  240.160988][ T5844] bond11 (unregistering): Released all slaves
[  240.172757][ T5844] bond12 (unregistering): Released all slaves
[  240.182439][ T5844] bond13 (unregistering): Released all slaves
[  240.253316][ T5844] bond14 (unregistering): (slave dummy0): Releasing active interface
[  240.259731][ T5844] bond14 (unregistering): Released all slaves
[  240.266829][ T5844] bond15 (unregistering): Released all slaves
[  240.273173][ T5844] bond16 (unregistering): Released all slaves
[  240.346753][ T5844] bond17 (unregistering): Released all slaves
[  240.411054][T16177] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  240.434724][T16179] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  240.483083][ T5844] k*]: left promiscuous mode
[  240.530936][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2795'.
[  240.545514][T16187] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  240.548057][T16187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.588520][ T5844] tipc: Disabling bearer <eth:syzkaller0>
[  240.591702][ T5844] tipc: Left network mode
[  240.671899][ T5844] IPVS: stopping backup sync thread 12880 ...
[  240.711873][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'.
[  240.715430][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'.
[  240.883836][T16150] chnl_net:caif_netlink_parms(): no params data found
[  240.973092][T16150] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.977403][T16150] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.980751][T16150] bridge_slave_0: entered allmulticast mode
[  240.986289][T16150] bridge_slave_0: entered promiscuous mode
[  240.991491][T16150] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.996993][T16150] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.000361][T16150] bridge_slave_1: entered allmulticast mode
[  241.005001][T16150] bridge_slave_1: entered promiscuous mode
[  241.033582][ T5844] hsr_slave_0: left promiscuous mode
[  241.178007][ T5844] team0 (unregistering): Port device team_slave_1 removed
[  241.206181][ T5844] team0 (unregistering): Port device team_slave_0 removed
[  241.236515][ T5816] Bluetooth: hci2: command tx timeout
[  241.491684][T16150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.501865][T16150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.541109][T16150] team0: Port device team_slave_0 added
[  241.553549][T16150] team0: Port device team_slave_1 added
[  241.591314][T16150] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.597852][T16150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.609016][T16150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.613754][T16218] netlink: 'syz.0.2799': attribute type 21 has an invalid length.
[  241.616220][T16150] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.616233][T16150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.616255][T16150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.637335][T16218] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2799'.
[  241.647094][T16216] netlink: 'syz.1.2798': attribute type 1 has an invalid length.
[  241.650516][T16216] netlink: 'syz.1.2798': attribute type 4 has an invalid length.
[  241.653558][T16216] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2798'.
[  241.655300][T16150] hsr_slave_0: entered promiscuous mode
[  241.659871][T16150] hsr_slave_1: entered promiscuous mode
[  241.662776][T16218] netlink: 'syz.0.2799': attribute type 5 has an invalid length.
[  241.668050][T16218] netlink: 'syz.0.2799': attribute type 6 has an invalid length.
[  241.678055][T16218] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2799'.
[  241.827155][ T5844] IPVS: stop unused estimator thread 0...
[  242.043991][T16150] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  242.050238][T16150] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  242.056558][T16150] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  242.061946][T16150] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  242.121630][T16150] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.141823][T16150] 8021q: adding VLAN 0 to HW filter on device team0
[  242.152173][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.155413][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.166028][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.169107][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.347806][T16150] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.380160][T16150] veth0_vlan: entered promiscuous mode
[  242.387252][T16150] veth1_vlan: entered promiscuous mode
[  242.406218][T16150] veth0_macvtap: entered promiscuous mode
[  242.410536][T16150] veth1_macvtap: entered promiscuous mode
[  242.421346][T16150] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.430534][T16150] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.436907][T16150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.439820][T16150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.443185][T16150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.446826][T16150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.501620][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.509749][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.553545][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.560951][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.574957][T16237] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  243.065111][T16262] 8021q: adding VLAN 0 to HW filter on device bond9
[  243.069744][T16262] bond0: (slave bond9): Enslaving as an active interface with a down link
[  243.182167][T16281] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  243.267179][T16288] x_tables: duplicate underflow at hook 2
[  243.380977][T16296] netlink: 'syz.1.2819': attribute type 32 has an invalid length.
[  243.572277][T16313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2824'.
[  243.600739][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2825'.
[  243.619060][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2825'.
[  243.623602][T16317] netlink: 'syz.1.2826': attribute type 2 has an invalid length.
[  243.702085][T16325] netlink: 'syz.0.2829': attribute type 9 has an invalid length.
[  243.948763][T16353] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  244.331870][T16370] __nla_validate_parse: 4 callbacks suppressed
[  244.331882][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2841'.
[  244.509285][ T5843] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.786269][T16389] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  244.863985][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  244.869126][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  244.873785][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  244.877980][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  244.883292][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  244.940271][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'.
[  245.229620][T16393] chnl_net:caif_netlink_parms(): no params data found
[  245.319539][T16393] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.322702][T16393] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.326211][T16393] bridge_slave_0: entered allmulticast mode
[  245.330068][T16393] bridge_slave_0: entered promiscuous mode
[  245.334758][T16393] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.337696][T16393] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.340629][T16393] bridge_slave_1: entered allmulticast mode
[  245.344855][T16393] bridge_slave_1: entered promiscuous mode
[  245.363265][T16422] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2856'.
[  245.382943][T16393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.395852][T16393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  245.430783][T16393] team0: Port device team_slave_0 added
[  245.437953][T16393] team0: Port device team_slave_1 added
[  245.448011][T16427] sctp: [Deprecated]: syz.1.2857 (pid 16427) Use of struct sctp_assoc_value in delayed_ack socket option.
[  245.448011][T16427] Use struct sctp_sack_info instead
[  245.469559][T16393] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.472371][T16393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.484215][T16393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.491590][T16393] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.494576][T16393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.505929][T16393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.541705][T16386] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  245.553839][T16393] hsr_slave_0: entered promiscuous mode
[  245.560694][T16393] hsr_slave_1: entered promiscuous mode
[  245.566115][T16393] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  245.569478][T16393] Cannot create hsr debugfs directory
[  245.678822][T16434] netlink: 'syz.0.2860': attribute type 11 has an invalid length.
[  245.797944][T16445] validate_nla: 2 callbacks suppressed
[  245.797959][T16445] netlink: 'syz.0.2864': attribute type 32 has an invalid length.
[  245.851322][T16450] netlink: 184104 bytes leftover after parsing attributes in process `syz.1.2863'.
[  245.857163][T16450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2863'.
[  246.088472][T16468] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2868'.
[  246.156999][ T5843] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.225899][ T5843] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.237250][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2869'.
[  246.247674][T16470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2869'.
[  246.306226][ T5843] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.449336][ T5843] bridge_slave_1: left allmulticast mode
[  246.451262][ T5843] bridge_slave_1: left promiscuous mode
[  246.452850][T16487] netlink: 'syz.0.2872': attribute type 32 has an invalid length.
[  246.453862][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.462664][ T5843] bridge_slave_0: left allmulticast mode
[  246.466435][ T5843] bridge_slave_0: left promiscuous mode
[  246.468427][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.793224][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.800020][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.804907][ T5843] bond0 (unregistering): Released all slaves
[  246.884639][    C1] syz_tun: tun_net_xmit 58
[  246.914822][ T5816] Bluetooth: hci2: command tx timeout
[  247.044600][    C1] syz_tun: tun_net_xmit 58
[  247.059897][T16510] netlink: 'syz.0.2876': attribute type 1 has an invalid length.
[  247.128639][T16515] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2877'.
[  247.271130][ T5843] hsr_slave_0: left promiscuous mode
[  247.275078][ T5843] hsr_slave_1: left promiscuous mode
[  247.278321][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.281862][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.292189][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.295577][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.316822][ T5843] veth1_macvtap: left promiscuous mode
[  247.319692][ T5843] veth0_macvtap: left promiscuous mode
[  247.321977][ T5843] veth1_vlan: left promiscuous mode
[  247.323774][ T5843] veth0_vlan: left promiscuous mode
[  247.640258][ T5843] team0 (unregistering): Port device team_slave_1 removed
[  247.673778][ T5843] team0 (unregistering): Port device team_slave_0 removed
[  247.989056][T16529] netlink: 'syz.1.2881': attribute type 32 has an invalid length.
[  248.031047][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2879'.
[  248.118279][    C1] syz_tun: tun_net_xmit 58
[  248.219349][T16393] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  248.248419][T16393] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  248.277054][T16393] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  248.286350][T16393] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  248.296186][ T5864] syz_tun: tun_net_xmit 90
[  248.436326][T16393] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.465827][T16393] 8021q: adding VLAN 0 to HW filter on device team0
[  248.508777][T13852] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.511528][T13852] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.526718][T13852] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.529849][T13852] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.628127][T16567] netlink: 'syz.1.2888': attribute type 32 has an invalid length.
[  248.779867][T16393] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.807099][T16393] veth0_vlan: entered promiscuous mode
[  248.812973][T16393] veth1_vlan: entered promiscuous mode
[  248.832717][T16393] veth0_macvtap: entered promiscuous mode
[  248.854059][T16393] veth1_macvtap: entered promiscuous mode
[  248.869941][T16393] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.886425][T16393] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.893953][T16393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.900155][T16393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.904835][T16393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.926065][  T790] syz_tun: tun_net_xmit 90
[  248.929291][T16393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.945316][T16581] vlan0: entered promiscuous mode
[  248.947199][T16581] bridge0: entered promiscuous mode
[  248.994505][ T5816] Bluetooth: hci2: command tx timeout
[  249.015233][T16584] syzkaller1: entered promiscuous mode
[  249.017704][T16584] syzkaller1: entered allmulticast mode
[  249.064755][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.069706][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.108100][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.115303][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.462678][T16600] SET target dimension over the limit!
[  249.874007][T16603] netlink: 'syz.0.2895': attribute type 32 has an invalid length.
[  250.851292][ T5844] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.908486][T16636] xt_CT: No such helper "syz0"
[  251.106530][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  251.112020][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  251.116882][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  251.123183][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  251.132471][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  251.172157][T16653] netlink: 'syz.0.2907': attribute type 32 has an invalid length.
[  251.488526][T16647] chnl_net:caif_netlink_parms(): no params data found
[  251.539709][T16647] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.542977][T16647] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.546496][T16647] bridge_slave_0: entered allmulticast mode
[  251.551438][T16647] bridge_slave_0: entered promiscuous mode
[  251.557540][T16647] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.560700][T16647] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.563908][T16647] bridge_slave_1: entered allmulticast mode
[  251.576709][T16647] bridge_slave_1: entered promiscuous mode
[  251.631868][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'.
[  251.638324][T16694] netlink: 'syz.0.2915': attribute type 21 has an invalid length.
[  251.660781][T16647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.686956][T16647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.729997][T16647] team0: Port device team_slave_0 added
[  251.737285][T16647] team0: Port device team_slave_1 added
[  251.797166][T16647] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.803731][T16647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.818679][T16647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.831660][T16647] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.834171][T16647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.845437][T16647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.923035][T16647] hsr_slave_0: entered promiscuous mode
[  251.926378][T16647] hsr_slave_1: entered promiscuous mode
[  252.022325][T16710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2919'.
[  252.026782][T16710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2919'.
[  252.060810][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'.
[  252.162800][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2922'.
[  252.360055][T16731] netlink: 'syz.1.2926': attribute type 32 has an invalid length.
[  252.551087][ T5844] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.566403][T16744] tipc: New replicast peer: 255.255.255.255
[  252.569296][T16744] tipc: Enabled bearer <udp:syz2>, priority 10
[  252.572664][T16744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2928'.
[  252.576785][T16744] tipc: Disabling bearer <udp:syz2>
[  252.584533][    C1] syz_tun: tun_net_xmit 58
[  252.626184][ T5844] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.684658][    C1] syz_tun: tun_net_xmit 58
[  252.697005][ T5844] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.839385][ T5844] bridge_slave_1: left allmulticast mode
[  252.841556][ T5844] bridge_slave_1: left promiscuous mode
[  252.843690][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.850099][ T5844] bridge_slave_0: left allmulticast mode
[  252.852321][ T5844] bridge_slave_0: left promiscuous mode
[  252.854479][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.140256][ T5844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.146311][ T5844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.150207][ T5844] bond0 (unregistering): Released all slaves
[  253.164492][ T5823] Bluetooth: hci2: command tx timeout
[  253.404506][    C1] syz_tun: tun_net_xmit 58
[  253.493514][ T5844] hsr_slave_0: left promiscuous mode
[  253.505444][ T5844] hsr_slave_1: left promiscuous mode
[  253.507685][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.510059][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.512981][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.521702][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.533899][ T5844] veth1_macvtap: left promiscuous mode
[  253.540881][ T5844] veth0_macvtap: left promiscuous mode
[  253.542877][ T5844] veth1_vlan: left promiscuous mode
[  253.545313][ T5844] veth0_vlan: left promiscuous mode
[  253.761420][T16765] netlink: 'syz.1.2934': attribute type 32 has an invalid length.
[  254.118749][ T5844] team0 (unregistering): Port device team_slave_1 removed
[  254.153660][ T5844] team0 (unregistering): Port device team_slave_0 removed
[  254.574792][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2935'.
[  254.681906][T16647] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  254.689900][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2937'.
[  254.709095][T16647] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  254.734196][T16647] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  254.755874][T16647] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  254.847137][T16647] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.870107][T16647] 8021q: adding VLAN 0 to HW filter on device team0
[  254.875872][ T3945] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.878242][ T3945] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.887491][ T3945] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.889929][ T3945] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.152569][T16647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.213009][T16647] veth0_vlan: entered promiscuous mode
[  255.238065][ T5823] Bluetooth: hci2: command tx timeout
[  255.269739][T16647] veth1_vlan: entered promiscuous mode
[  255.345992][T16647] veth0_macvtap: entered promiscuous mode
[  255.358720][T16647] veth1_macvtap: entered promiscuous mode
[  255.378358][T16647] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.390145][T16647] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.409084][T16647] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.412909][T16647] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.425571][T16647] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.429264][T16647] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.482252][T16829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2947'.
[  255.539505][T16831] openvswitch: netlink: IPv4 tunnel dst address is zero
[  255.548347][ T5143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.551643][ T5143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.580773][T16833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.585879][ T5143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.589565][ T5143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.647605][T16840] xt_hashlimit: size too large, truncated to 1048576
[  255.718739][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'.
[  255.759043][T16844] bridge0: port 1(batadv0) entered blocking state
[  255.762021][T16844] bridge0: port 1(batadv0) entered disabled state
[  255.772367][T16844] batadv0: entered allmulticast mode
[  255.776734][T16844] batadv0: entered promiscuous mode
[  255.798986][T16844] : renamed from bridge_slave_0 (while UP)
[  256.117010][T16872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.265070][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  256.268312][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  256.504142][T16895] netlink: 'syz.0.2967': attribute type 1 has an invalid length.
[  256.539760][T16897] netlink: 'syz.1.2968': attribute type 32 has an invalid length.
[  256.808359][T16905] __nla_validate_parse: 5 callbacks suppressed
[  256.808373][T16905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2969'.
[  256.814815][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2969'.
[  257.220853][T14113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.813599][T16925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2973'.
[  257.817344][T16925] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  257.843092][T16928] netlink: 'syz.0.2975': attribute type 21 has an invalid length.
[  257.847296][T16928] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2975'.
[  257.910560][T16932] netlink: 'syz.1.2976': attribute type 32 has an invalid length.
[  257.978930][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  257.984259][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  257.992669][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  257.999747][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  258.003886][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  258.215569][T16945] netlink: 'syz.1.2978': attribute type 1 has an invalid length.
[  258.218864][T16945] netlink: 'syz.1.2978': attribute type 2 has an invalid length.
[  258.265226][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2978'.
[  258.370546][T16935] chnl_net:caif_netlink_parms(): no params data found
[  258.462457][T16935] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.466372][T16935] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.469613][T16935] bridge_slave_0: entered allmulticast mode
[  258.473797][T16935] bridge_slave_0: entered promiscuous mode
[  258.511212][T14113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.529203][T16935] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.532699][T16935] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.539686][T16935] bridge_slave_1: entered allmulticast mode
[  258.543160][T16960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2981'.
[  258.543845][T16935] bridge_slave_1: entered promiscuous mode
[  258.616767][T14113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.630359][T16935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.640533][T16935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.681889][T16964] netlink: 'syz.1.2983': attribute type 32 has an invalid length.
[  258.708313][T14113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.728718][T16935] team0: Port device team_slave_0 added
[  258.739991][T16935] team0: Port device team_slave_1 added
[  258.797672][T16935] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.800092][T16935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.812335][T16935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.841559][T16935] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.852781][T16935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.866144][T16935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.874202][T16978] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2987'.
[  258.895937][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2987'.
[  258.901382][T16978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2987'.
[  258.953879][T16986] bridge0: port 1(gretap0) entered blocking state
[  258.960706][T16986] bridge0: port 1(gretap0) entered disabled state
[  258.963683][T16986] gretap0: entered allmulticast mode
[  258.968203][T16986] gretap0: entered promiscuous mode
[  258.976961][T16935] hsr_slave_0: entered promiscuous mode
[  258.979480][T16935] hsr_slave_1: entered promiscuous mode
[  258.981807][T16935] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  258.988182][T16935] Cannot create hsr debugfs directory
[  259.022321][T14113] bridge_slave_1: left allmulticast mode
[  259.024257][T14113] bridge_slave_1: left promiscuous mode
[  259.028219][T14113] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.035468][T14113] bridge_slave_0: left allmulticast mode
[  259.037404][T14113] bridge_slave_0: left promiscuous mode
[  259.039564][T14113] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.366766][T14113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.371848][T14113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.376669][T14113] bond0 (unregistering): Released all slaves
[  259.387442][T16995] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  259.870557][T14113] hsr_slave_0: left promiscuous mode
[  259.873018][T14113] hsr_slave_1: left promiscuous mode
[  259.881181][T14113] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.883965][T14113] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.888780][T14113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.891482][T14113] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.917691][T14113] veth1_macvtap: left promiscuous mode
[  259.920051][T14113] veth0_macvtap: left promiscuous mode
[  259.924076][T14113] veth1_vlan: left promiscuous mode
[  259.928417][T14113] veth0_vlan: left promiscuous mode
[  260.055350][ T5816] Bluetooth: hci2: command tx timeout
[  260.309439][T17024] netlink: 'syz.1.2995': attribute type 32 has an invalid length.
[  260.537023][T14113] team0 (unregistering): Port device team_slave_1 removed
[  260.571807][T14113] team0 (unregistering): Port device team_slave_0 removed
[  260.954198][T17036] bond0: (slave bond9): Releasing backup interface
[  260.961960][T17036] batadv0: left allmulticast mode
[  260.965234][T17036] batadv0: left promiscuous mode
[  260.967682][T17036] bridge0: port 1(batadv0) entered disabled state
[  261.080580][T17043] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2999'.
[  261.229762][T16935] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  261.243062][T16935] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  261.266549][T16935] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  261.271862][T16935] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  261.334031][T17064] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  261.338125][T17064] CPU: 0 UID: 0 PID: 17064 Comm: syz.1.3002 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  261.338138][T17064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  261.338143][T17064] Call Trace:
[  261.338146][T17064]  <TASK>
[  261.338151][T17064]  dump_stack_lvl+0x189/0x250
[  261.338168][T17064]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.338180][T17064]  ? __pfx__printk+0x10/0x10
[  261.338190][T17064]  ? kernfs_path_from_node+0x2c/0x260
[  261.338200][T17064]  ? kernfs_path_from_node+0x2c/0x260
[  261.338208][T17064]  ? kernfs_path_from_node+0x2c/0x260
[  261.338218][T17064]  ? kernfs_path_from_node+0x22c/0x260
[  261.338226][T17064]  ? kernfs_path_from_node+0x2c/0x260
[  261.338270][T17064]  sysfs_warn_dup+0x8e/0xa0
[  261.338286][T17064]  sysfs_do_create_link_sd+0xc0/0x110
[  261.338299][T17064]  device_add_class_symlinks+0x1cf/0x240
[  261.338314][T17064]  device_add+0x475/0xb50
[  261.338329][T17064]  wiphy_register+0x199a/0x26b0
[  261.338355][T17064]  ? __pfx_wiphy_register+0x10/0x10
[  261.338364][T17064]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  261.338377][T17064]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  261.338388][T17064]  ieee80211_register_hw+0x33e1/0x4120
[  261.338406][T17064]  ? ieee80211_register_hw+0x14b1/0x4120
[  261.338419][T17064]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  261.338429][T17064]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  261.338443][T17064]  ? __hrtimer_setup+0x187/0x210
[  261.338453][T17064]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  261.338463][T17064]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  261.338488][T17064]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  261.338499][T17064]  ? trace_kmalloc+0x1f/0xd0
[  261.338505][T17064]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  261.338512][T17064]  ? kstrndup+0xbf/0x160
[  261.338524][T17064]  hwsim_new_radio_nl+0xea4/0x1b10
[  261.338534][T17064]  ? __pfx___nla_validate_parse+0x10/0x10
[  261.338552][T17064]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  261.338561][T17064]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  261.338575][T17064]  ? __nla_parse+0x40/0x60
[  261.338587][T17064]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  261.338600][T17064]  genl_family_rcv_msg_doit+0x215/0x300
[  261.338613][T17064]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  261.338629][T17064]  ? bpf_lsm_capable+0x9/0x20
[  261.338635][T17064]  ? security_capable+0x7e/0x2e0
[  261.338648][T17064]  genl_rcv_msg+0x60e/0x790
[  261.338662][T17064]  ? __pfx_genl_rcv_msg+0x10/0x10
[  261.338672][T17064]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  261.338685][T17064]  netlink_rcv_skb+0x208/0x470
[  261.338693][T17064]  ? __pfx_genl_rcv_msg+0x10/0x10
[  261.338704][T17064]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  261.338718][T17064]  ? down_read+0x1ad/0x2e0
[  261.338732][T17064]  genl_rcv+0x28/0x40
[  261.338741][T17064]  netlink_unicast+0x75b/0x8d0
[  261.338752][T17064]  netlink_sendmsg+0x805/0xb30
[  261.338765][T17064]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.338777][T17064]  ? aa_sock_msg_perm+0x94/0x160
[  261.338788][T17064]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  261.338798][T17064]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.338808][T17064]  __sock_sendmsg+0x21c/0x270
[  261.338822][T17064]  ____sys_sendmsg+0x505/0x830
[  261.338834][T17064]  ? __pfx_____sys_sendmsg+0x10/0x10
[  261.338847][T17064]  ? import_iovec+0x74/0xa0
[  261.338859][T17064]  ___sys_sendmsg+0x21f/0x2a0
[  261.338870][T17064]  ? __pfx____sys_sendmsg+0x10/0x10
[  261.338893][T17064]  ? __fget_files+0x2a/0x420
[  261.338900][T17064]  ? __fget_files+0x3a0/0x420
[  261.338913][T17064]  __x64_sys_sendmsg+0x19b/0x260
[  261.338923][T17064]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  261.338936][T17064]  ? rcu_is_watching+0x15/0xb0
[  261.338949][T17064]  ? do_syscall_64+0xbe/0x3b0
[  261.338957][T17064]  do_syscall_64+0xfa/0x3b0
[  261.338963][T17064]  ? lockdep_hardirqs_on+0x9c/0x150
[  261.338973][T17064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.338980][T17064]  ? exc_page_fault+0x9f/0xf0
[  261.338991][T17064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.338998][T17064] RIP: 0033:0x7fac41b8e929
[  261.339006][T17064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.339013][T17064] RSP: 002b:00007fac42935038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  261.339021][T17064] RAX: ffffffffffffffda RBX: 00007fac41db5fa0 RCX: 00007fac41b8e929
[  261.339027][T17064] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  261.339031][T17064] RBP: 00007fac41c10b39 R08: 0000000000000000 R09: 0000000000000000
[  261.339036][T17064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  261.339040][T17064] R13: 0000000000000000 R14: 00007fac41db5fa0 R15: 00007ffda6752cc8
[  261.339052][T17064]  </TASK>
[  261.551524][T17067] netlink: 'syz.1.3003': attribute type 32 has an invalid length.
[  261.559419][T16935] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.569829][T16935] 8021q: adding VLAN 0 to HW filter on device team0
[  261.591222][T16935] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  261.595580][T16935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  261.610756][T13842] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.613405][T13842] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.617013][T13842] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.619564][T13842] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.710834][T16935] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.743921][T16935] veth0_vlan: entered promiscuous mode
[  261.750317][T16935] veth1_vlan: entered promiscuous mode
[  261.770149][T16935] veth0_macvtap: entered promiscuous mode
[  261.774126][T16935] veth1_macvtap: entered promiscuous mode
[  261.785004][T16935] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.791710][T16935] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.800402][T16935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.803480][T16935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.807374][T16935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.810319][T16935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.878101][ T3945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.880878][ T3945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.947428][ T3945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.950804][ T3945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.270510][T17095] __nla_validate_parse: 1 callbacks suppressed
[  262.270520][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3008'.
[  262.347024][T17100] netlink: 'syz.0.3010': attribute type 32 has an invalid length.
[  262.532599][T17109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3011'.
[  262.656173][T17113] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3013'.
[  262.694440][T17116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.739853][T17125] openvswitch: netlink: IP tunnel TTL not specified.
[  262.969907][T17136] openvswitch: netlink: IP tunnel dst address not specified
[  263.127744][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3024'.
[  263.131242][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3024'.
[  263.197277][T17154] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3026'.
[  264.178305][T14113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.885675][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3033'.
[  264.933402][T17182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3033'.
[  264.963439][T17188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3035'.
[  264.990603][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  264.993930][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  264.994876][T17190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3036'.
[  265.000726][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  265.005455][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  265.013916][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  265.016424][    C1] syz_tun: tun_net_xmit 58
[  265.074464][    C1] syz_tun: tun_net_xmit 58
[  265.158186][T17207] batadv_slave_0: entered promiscuous mode
[  265.283252][T17221] netlink: 'syz.0.3044': attribute type 4 has an invalid length.
[  265.287956][T17191] chnl_net:caif_netlink_parms(): no params data found
[  265.358486][T17191] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.361382][T17191] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.364105][T17191] bridge_slave_0: entered allmulticast mode
[  265.367961][T17191] bridge_slave_0: entered promiscuous mode
[  265.372459][T17191] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.375554][T17191] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.378251][T17191] bridge_slave_1: entered allmulticast mode
[  265.381429][T17191] bridge_slave_1: entered promiscuous mode
[  265.444029][T17191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.450381][T17191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.463400][T17237] netlink: 'syz.1.3050': attribute type 6 has an invalid length.
[  265.471785][T17191] team0: Port device team_slave_0 added
[  265.477493][T17191] team0: Port device team_slave_1 added
[  265.480820][T17239] netlink: 'syz.1.3050': attribute type 6 has an invalid length.
[  265.481916][T17238] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  265.498925][T17191] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.501410][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.509978][T17191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.516644][T17191] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.519518][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.529535][T17191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.568711][T17191] hsr_slave_0: entered promiscuous mode
[  265.571732][T17191] hsr_slave_1: entered promiscuous mode
[  266.052289][T14113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.112960][T14113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.187259][T14113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.275871][T14113] bridge_slave_1: left allmulticast mode
[  266.277942][T14113] bridge_slave_1: left promiscuous mode
[  266.280225][T14113] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.287038][T14113] bridge_slave_0: left allmulticast mode
[  266.288968][T14113] bridge_slave_0: left promiscuous mode
[  266.290904][T14113] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.554092][T14113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.559784][T14113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.564054][T14113] bond0 (unregistering): Released all slaves
[  266.633788][T17263] bond0: Device is already in use.
[  266.875475][T17280] sctp: [Deprecated]: syz.1.3059 (pid 17280) Use of struct sctp_assoc_value in delayed_ack socket option.
[  266.875475][T17280] Use struct sctp_sack_info instead
[  266.886380][T17279] netlink: 'syz.0.3061': attribute type 32 has an invalid length.
[  266.993226][T14113] hsr_slave_0: left promiscuous mode
[  267.020521][T14113] hsr_slave_1: left promiscuous mode
[  267.023134][T14113] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.026495][T14113] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.031014][T14113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.033641][T14113] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.052445][T14113] veth1_macvtap: left promiscuous mode
[  267.054867][T14113] veth0_macvtap: left promiscuous mode
[  267.056889][T14113] veth1_vlan: left promiscuous mode
[  267.058872][T14113] veth0_vlan: left promiscuous mode
[  267.074819][ T5823] Bluetooth: hci2: command tx timeout
[  267.406551][T14113] team0 (unregistering): Port device team_slave_1 removed
[  267.433705][T14113] team0 (unregistering): Port device team_slave_0 removed
[  267.731605][T17289] 0: renamed from hsr_slave_1
[  267.736365][T17289] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  267.806551][T17191] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  267.820998][T17191] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  267.840449][T17191] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  267.847754][T17191] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  267.998875][T17318] netlink: 'syz.1.3068': attribute type 32 has an invalid length.
[  268.049217][T17191] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.072959][T17191] 8021q: adding VLAN 0 to HW filter on device team0
[  268.094020][T13857] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.097080][T13857] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.143678][ T3945] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.146730][ T3945] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.333549][T17343] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20002
[  268.346957][T17341] netlink: 'syz.1.3074': attribute type 23 has an invalid length.
[  268.392912][T17191] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.445252][T17191] veth0_vlan: entered promiscuous mode
[  268.450959][T17191] veth1_vlan: entered promiscuous mode
[  268.480317][T17191] veth0_macvtap: entered promiscuous mode
[  268.489225][T17191] veth1_macvtap: entered promiscuous mode
[  268.509465][T17351] __nla_validate_parse: 9 callbacks suppressed
[  268.509479][T17351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3076'.
[  268.522300][T17191] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.538724][T17191] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.543873][T17191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.549188][T17191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.552213][T17191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.555936][T17191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.686762][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.689424][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.718020][T13842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.720709][T13842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.782679][T17373] netlink: 'syz.1.3081': attribute type 32 has an invalid length.
[  268.819870][   T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  268.823642][   T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  268.827673][   T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  268.830303][   T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  268.833044][   T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  268.837948][   T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  268.845822][   T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3
[  268.865608][   T10] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  269.239340][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'.
[  269.242989][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'.
[  269.248623][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'.
[  270.345715][T17420] netlink: 'syz.1.3092': attribute type 32 has an invalid length.
[  270.399679][T14113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.222234][T17435] netlink: 'syz.0.3095': attribute type 1 has an invalid length.
[  271.238361][T17435] netlink: 'syz.0.3095': attribute type 2 has an invalid length.
[  271.371492][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  271.376511][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  271.380082][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  271.383705][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  271.386514][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  271.493929][T17454] netlink: 'syz.0.3101': attribute type 32 has an invalid length.
[  271.681845][T17470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'.
[  271.701756][T17446] chnl_net:caif_netlink_parms(): no params data found
[  271.769553][T17446] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.776239][T17446] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.781707][T17470] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3104'.
[  271.785240][T17446] bridge_slave_0: entered allmulticast mode
[  271.788271][T17446] bridge_slave_0: entered promiscuous mode
[  271.796903][T17479] macsec0: entered promiscuous mode
[  271.801218][T17446] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.806320][T17446] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.808998][T17446] bridge_slave_1: entered allmulticast mode
[  271.811778][T17446] bridge_slave_1: entered promiscuous mode
[  271.859272][T17446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.865921][T17446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.910253][T17446] team0: Port device team_slave_0 added
[  271.920452][T17446] team0: Port device team_slave_1 added
[  271.970978][T17446] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.973400][T17446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.982874][T17446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.005671][T17446] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.008616][T17446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.026600][T17446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.076557][T17446] hsr_slave_0: entered promiscuous mode
[  272.079198][T17446] hsr_slave_1: entered promiscuous mode
[  272.082611][T17446] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  272.087273][T17446] Cannot create hsr debugfs directory
[  272.091790][T17493] netlink: 'syz.0.3109': attribute type 5 has an invalid length.
[  272.104573][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3109'.
[  272.168453][T17495] netlink: 'syz.0.3110': attribute type 32 has an invalid length.
[  272.282192][T14113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.335846][T14113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.420284][T14113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.457604][T17520] netlink: ct family unspecified
[  272.459419][T17520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.567998][T14113] bridge_slave_1: left allmulticast mode
[  272.569979][T14113] bridge_slave_1: left promiscuous mode
[  272.572029][T14113] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.580933][T14113] bridge_slave_0: left allmulticast mode
[  272.582956][T14113] bridge_slave_0: left promiscuous mode
[  272.586549][T14113] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.589675][T17531] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3119'.
[  272.633050][T17537] netlink: 'syz.1.3120': attribute type 32 has an invalid length.
[  272.923732][T14113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.930777][T14113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.936679][T14113] bond0 (unregistering): Released all slaves
[  273.292663][T14113] hsr_slave_0: left promiscuous mode
[  273.302346][T14113] hsr_slave_1: left promiscuous mode
[  273.312238][T14113] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.318704][T14113] batman_adv: batadv0: Removing interface: batadv_slave_0
[  273.322234][T14113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  273.324903][T14113] batman_adv: batadv0: Removing interface: batadv_slave_1
[  273.337041][T14113] veth1_macvtap: left promiscuous mode
[  273.339032][T14113] veth0_macvtap: left promiscuous mode
[  273.341452][T14113] veth1_vlan: left promiscuous mode
[  273.343318][T14113] veth0_vlan: left promiscuous mode
[  273.394708][ T5823] Bluetooth: hci2: command tx timeout
[  273.738216][T14113] team0 (unregistering): Port device team_slave_1 removed
[  273.762123][T14113] team0 (unregistering): Port device team_slave_0 removed
[  274.043360][T17556] 8021q: adding VLAN 0 to HW filter on device bond10
[  274.072275][T17557] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  274.082987][T17558] tipc: Resetting bearer <eth:syzkaller0>
[  274.085937][T17558] tipc: Resetting bearer <eth:syzkaller0>
[  274.126701][ T5878] 
[  274.127834][ T5878] ============================================
[  274.130547][ T5878] WARNING: possible recursive locking detected
[  274.133134][ T5878] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  274.137452][ T5878] --------------------------------------------
[  274.140125][ T5878] kworker/1:5/5878 is trying to acquire lock:
[  274.142798][ T5878] ffff88810e7f2d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  274.146841][ T5878] 
[  274.146841][ T5878] but task is already holding lock:
[  274.149991][ T5878] ffff88810a184558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  274.154144][ T5878] 
[  274.154144][ T5878] other info that might help us debug this:
[  274.157529][ T5878]  Possible unsafe locking scenario:
[  274.157529][ T5878] 
[  274.160707][ T5878]        CPU0
[  274.162161][ T5878]        ----
[  274.163613][ T5878]   lock(&qdisc_xmit_lock_key#4);
[  274.165739][ T5878]   lock(&qdisc_xmit_lock_key#4);
[  274.167896][ T5878] 
[  274.167896][ T5878]  *** DEADLOCK ***
[  274.167896][ T5878] 
[  274.171250][ T5878]  May be due to missing lock nesting notation
[  274.171250][ T5878] 
[  274.174854][ T5878] 14 locks held by kworker/1:5/5878:
[  274.177186][ T5878]  #0: ffff888021e22548 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  274.181876][ T5878]  #1: ffffc900033efbc0 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  274.187583][ T5878]  #2: ffff88803e8f5538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xde0
[  274.191508][ T5878]  #3: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1de/0xd80
[  274.195295][ T5878]  #4: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0
[  274.199415][ T5878]  #5: ffffffff8e13eec0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  274.203475][ T5878]  #6: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0x101/0x1a90
[  274.207448][ T5878]  #7: ffffffff8e13eec0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  274.211541][ T5878]  #8: ffff88801ffe5258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  274.216740][ T5878]  #9: ffff88810a184558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  274.221071][ T5878]  #10: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  274.225082][ T5878]  #11: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  274.228872][ T5878]  #12: ffffffff8e13eec0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  274.233065][ T5878]  #13: ffff8880370cd258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  274.238362][ T5878] 
[  274.238362][ T5878] stack backtrace:
[  274.240865][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: kworker/1:5 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  274.240881][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.240890][ T5878] Workqueue: mld mld_ifc_work
[  274.240906][ T5878] Call Trace:
[  274.240912][ T5878]  <TASK>
[  274.240918][ T5878]  dump_stack_lvl+0x189/0x250
[  274.240938][ T5878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.240955][ T5878]  ? __pfx__printk+0x10/0x10
[  274.240969][ T5878]  ? print_lock_name+0xde/0x100
[  274.240982][ T5878]  print_deadlock_bug+0x28b/0x2a0
[  274.240994][ T5878]  validate_chain+0x1a3f/0x2140
[  274.241004][ T5878]  ? validate_xmit_xfrm+0xbf/0x1130
[  274.241021][ T5878]  ? unwind_next_frame+0xa5/0x2390
[  274.241038][ T5878]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  274.241057][ T5878]  __lock_acquire+0xab9/0xd20
[  274.241075][ T5878]  ? sch_direct_xmit+0x153/0x4b0
[  274.241086][ T5878]  lock_acquire+0x120/0x360
[  274.241127][ T5878]  ? sch_direct_xmit+0x153/0x4b0
[  274.241142][ T5878]  _raw_spin_lock+0x2e/0x40
[  274.241157][ T5878]  ? sch_direct_xmit+0x153/0x4b0
[  274.241167][ T5878]  sch_direct_xmit+0x153/0x4b0
[  274.241180][ T5878]  ? __pfx_sch_direct_xmit+0x10/0x10
[  274.241193][ T5878]  __dev_queue_xmit+0x17b6/0x3a70
[  274.241209][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.241228][ T5878]  ? __dev_queue_xmit+0x27e/0x3a70
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  274.241244][ T5878]  ? arpt_do_table+0x1dc4/0x1fd0
[  274.241261][ T5878]  ? __pfx___dev_queue_xmit+0x10/0x10
[  274.241278][ T5878]  ? arpt_do_table+0x238/0x1fd0
[  274.241292][ T5878]  ? __pfx_arpt_do_table+0x10/0x10
[  274.241312][ T5878]  ? NF_HOOK+0x9e/0x3a0
[  274.241329][ T5878]  NF_HOOK+0x310/0x3a0
[  274.241345][ T5878]  ? __pfx_arp_xmit_finish+0x10/0x10
[  274.241360][ T5878]  ? NF_HOOK+0x9e/0x3a0
[  274.241375][ T5878]  ? __pfx_NF_HOOK+0x10/0x10
[  274.241391][ T5878]  ? __pfx_arp_xmit_finish+0x10/0x10
[  274.241410][ T5878]  arp_xmit+0x16c/0x270
[  274.241425][ T5878]  ? arp_xmit+0x23/0x270
[  274.241440][ T5878]  arp_solicit+0xc1d/0xe60
[  274.241459][ T5878]  ? arp_solicit+0x11a/0xe60
[  274.241476][ T5878]  ? __pfx_arp_solicit+0x10/0x10
[  274.241495][ T5878]  ? __neigh_event_send+0xf08/0x1560
[  274.241522][ T5878]  ? __pfx_arp_solicit+0x10/0x10
[  274.241538][ T5878]  __neigh_event_send+0xf70/0x1560
[  274.241559][ T5878]  neigh_resolve_output+0x198/0x750
[  274.241571][ T5878]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  274.241590][ T5878]  ip_finish_output2+0xd40/0x1160
[  274.241605][ T5878]  ? ip_skb_dst_mtu+0x147/0xc50
[  274.241621][ T5878]  ? ip_finish_output2+0x452/0x1160
[  274.241637][ T5878]  ? __pfx_ip_finish_output2+0x10/0x10
[  274.241653][ T5878]  ? ip_skb_dst_mtu+0x147/0xc50
[  274.241668][ T5878]  ? ip_skb_dst_mtu+0x147/0xc50
[  274.241683][ T5878]  ? ip_skb_dst_mtu+0x970/0xc50
[  274.241698][ T5878]  ? __ip_finish_output+0x336/0x3f0
[  274.241715][ T5878]  iptunnel_xmit+0x571/0xa00
[  274.241731][ T5878]  ip_tunnel_xmit+0x1c3c/0x2380
[  274.241754][ T5878]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  274.241769][ T5878]  ? gre_build_header+0x3fd/0xa40
[  274.241787][ T5878]  ? __pfx_gre_build_header+0x10/0x10
[  274.241804][ T5878]  gre_tap_xmit+0x590/0x7a0
[  274.241820][ T5878]  ? __pfx_gre_tap_xmit+0x10/0x10
[  274.241834][ T5878]  ? __lock_acquire+0xab9/0xd20
[  274.241851][ T5878]  dev_hard_start_xmit+0x2d7/0x830
[  274.241871][ T5878]  sch_direct_xmit+0x241/0x4b0
[  274.241883][ T5878]  ? __pfx_sch_direct_xmit+0x10/0x10
[  274.241897][ T5878]  __dev_queue_xmit+0x17b6/0x3a70
[  274.241915][ T5878]  ? __dev_queue_xmit+0x27e/0x3a70
[  274.241930][ T5878]  ? __lock_acquire+0xab9/0xd20
[  274.241947][ T5878]  ? __pfx___dev_queue_xmit+0x10/0x10
[  274.241964][ T5878]  ? unwind_next_frame+0xa5/0x2390
[  274.241985][ T5878]  ? __pfx_bond_get_slave_by_id+0x10/0x10
[  274.242000][ T5878]  bond_start_xmit+0x1207/0x1a90
[  274.242016][ T5878]  ? __lock_acquire+0xab9/0xd20
[  274.242032][ T5878]  ? bond_start_xmit+0x101/0x1a90
[  274.242048][ T5878]  ? __pfx_bond_start_xmit+0x10/0x10
[  274.242063][ T5878]  ? skb_network_protocol+0x508/0x760
[  274.242078][ T5878]  ? validate_xmit_xfrm+0xbf/0x1130
[  274.242118][ T5878]  ? __pfx_skb_network_protocol+0x10/0x10
[  274.242135][ T5878]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  274.242152][ T5878]  ? __pfx_passthru_features_check+0x10/0x10
[  274.242169][ T5878]  dev_hard_start_xmit+0x2d7/0x830
[  274.242188][ T5878]  __dev_queue_xmit+0x1adf/0x3a70
[  274.242202][ T5878]  ? register_lock_class+0x51/0x320
[  274.242219][ T5878]  ? __dev_queue_xmit+0x27e/0x3a70
[  274.242237][ T5878]  ? __pfx___dev_queue_xmit+0x10/0x10
[  274.242252][ T5878]  ? read_seqbegin+0x122/0x250
[  274.242261][ T5878]  ? neigh_resolve_output+0x438/0x750
[  274.242270][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.242285][ T5878]  ? read_seqbegin+0x1ac/0x250
[  274.242295][ T5878]  ? __pfx_read_seqbegin+0x10/0x10
[  274.242305][ T5878]  ? __local_bh_enable_ip+0x12d/0x1c0
[  274.242321][ T5878]  ? eth_header+0x11b/0x200
[  274.242335][ T5878]  ? __asan_memcpy+0x40/0x70
[  274.242357][ T5878]  ip6_finish_output2+0x11fe/0x16a0
[  274.242373][ T5878]  ? ip6_finish_output2+0x701/0x16a0
[  274.242389][ T5878]  ? __pfx_ip6_finish_output2+0x10/0x10
[  274.242403][ T5878]  ? ip6_mtu+0x7d/0x3f0
[  274.242417][ T5878]  ? ip6_mtu+0x7d/0x3f0
[  274.242429][ T5878]  ip6_finish_output+0x234/0x7d0
[  274.242443][ T5878]  NF_HOOK+0x9e/0x380
[  274.242456][ T5878]  ? NF_HOOK+0x101/0x380
[  274.242469][ T5878]  ? __pfx_NF_HOOK+0x10/0x10
[  274.242482][ T5878]  ? __pfx_dst_output+0x10/0x10
[  274.242494][ T5878]  ? icmp6_dst_alloc+0x3a5/0x420
[  274.242507][ T5878]  ? icmp6_dst_alloc+0x3a5/0x420
[  274.242527][ T5878]  mld_sendpack+0x800/0xd80
[  274.242544][ T5878]  ? mld_sendpack+0x1de/0xd80
[  274.242558][ T5878]  ? __pfx_mld_sendpack+0x10/0x10
[  274.242576][ T5878]  mld_ifc_work+0x835/0xde0
[  274.242590][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.242604][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  274.242621][ T5878]  process_scheduled_works+0xae1/0x17b0
[  274.242645][ T5878]  ? __pfx_process_scheduled_works+0x10/0x10
[  274.242666][ T5878]  worker_thread+0x8a0/0xda0
[  274.242683][ T5878]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  274.242700][ T5878]  ? __kthread_parkme+0x7b/0x200
[  274.242714][ T5878]  kthread+0x711/0x8a0
[  274.242726][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  274.242742][ T5878]  ? __pfx_kthread+0x10/0x10
[  274.242755][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.242769][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.242783][ T5878]  ? __pfx_kthread+0x10/0x10
[  274.242795][ T5878]  ret_from_fork+0x3fc/0x770
[  274.242811][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  274.242828][ T5878]  ? __switch_to_asm+0x39/0x70
[  274.242839][ T5878]  ? __switch_to_asm+0x33/0x70
[  274.242849][ T5878]  ? __pfx_kthread+0x10/0x10
[  274.242861][ T5878]  ret_from_fork_asm+0x1a/0x30
[  274.242877][ T5878]  </TASK>
[  274.259500][T17446] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  275.047292][T14113] bridge_slave_1: left allmulticast mode
[  275.049119][T14113] bridge_slave_1: left promiscuous mode
[  275.051018][T14113] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.053978][T14113] bridge_slave_0: left allmulticast mode
[  275.056266][T14113] bridge_slave_0: left promiscuous mode
[  275.058165][T14113] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.118309][T14113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  275.121936][T14113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.125541][T14113] bond0 (unregistering): Released all slaves
[  275.435830][T14113] hsr_slave_0: left promiscuous mode
[  275.437755][T14113] hsr_slave_1: left promiscuous mode
[  275.439863][T14113] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.442410][T14113] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.502063][T14113] team0 (unregistering): Port device team_slave_1 removed
[  275.517483][T14113] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
15:48:09  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4d920 RBX=ffff88804b03b1c0 RCX=ffff8881084ed640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900030ff6c0 RSP=ffffc900030ff560
R8 =ffffffff8fa10cf7 R9 =1ffffffff1f4219e R10=dffffc0000000000 R11=fffffbfff1f4219f
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81b4d909 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556d15b500 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f28914e56c0 CR3=000000010a1ac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffff0000 XMM03=ffffffffffffff00 ffffffffffff0000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2890811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900033ed510
R8 =ffff888021170237 R9 =1ffff1100422e046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48fc R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fac428e56c0 CR3=000000011272e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fac41c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
