last executing test programs:

2m22.411100399s ago: executing program 1 (id=679):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240))
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r4=>0x0})
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3f, 0x0, 0x8, 0x3f9a, 0x0, 0x10001}, 0x0, 0x0)

2m21.516835391s ago: executing program 1 (id=688):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x4000b}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "39a5fbb203015ce9", "3c5728d97d8362b0ef1b97b961646cc8b9d1f5b51a09ef1d291668d68a839530", "6df750f8", "cc6ad2ec65e92aac"}, 0x38)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
unshare(0x8040600)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
socket$alg(0x26, 0x5, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r5, &(0x7f0000000940), 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0)
close(r6)
listen(r5, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
shutdown(r7, 0x1)
connect$unix(r4, 0x0, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4)

2m21.335782884s ago: executing program 1 (id=691):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000002200000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000aeae87752c024594b7000000000000ebae8f289c669cd9f7"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

2m21.250901658s ago: executing program 1 (id=692):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000070010000305000000008600000000000000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYRESDEC=r3], 0x70}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)
socket$unix(0x1, 0x1, 0x0)

2m21.090454977s ago: executing program 1 (id=695):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
preadv(r4, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000100001040000000000005057e0eb316e", @ANYRES32=0x0, @ANYBLOB="0106000000000000340012800e00010069703665727370616e0000002000028008000d000d00000004001200050016000100000008001500"], 0x54}, 0x1, 0x0, 0x0, 0xcbf2b2b85a7692bb}, 0x40)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r5, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0)

2m20.219427368s ago: executing program 1 (id=710):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r3, 0x3, {0x0, 0xf1, 0x3}}, 0x18) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r5=>0x0}) (async)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0xfbfffffffffffffd, {0x0, 0xfe}, 0xfe}, 0x18) (async)
setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) (async)
sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r5, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
openat$cgroup_ro(r8, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x1, 0x7, 0x4) (async)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x0, 0x2, {0xa, 0x4e20, 0x7, @loopback, 0x14}}}, 0x3a)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0)

2m5.207923784s ago: executing program 32 (id=710):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r3, 0x3, {0x0, 0xf1, 0x3}}, 0x18) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r5=>0x0}) (async)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0xfbfffffffffffffd, {0x0, 0xfe}, 0xfe}, 0x18) (async)
setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) (async)
sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r5, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
openat$cgroup_ro(r8, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x1, 0x7, 0x4) (async)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x0, 0x2, {0xa, 0x4e20, 0x7, @loopback, 0x14}}}, 0x3a)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0)

1.016881159s ago: executing program 3 (id=3101):
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xc901}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000, 0x1}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x20048084)
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001200375f"], 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x8884)

1.016523666s ago: executing program 3 (id=3102):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x8040600)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a000100000000000000000081808000000000000000000014000100fc00000000000000000000000000000008000f"], 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async)
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000140))
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf2502000000d7d2c6e30ac32d3363315b0c4180c5f833840a4c13ba19d503ae32a71e3570c39b925943", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf2502000000d7d2c6e30ac32d3363315b0c4180c5f833840a4c13ba19d503ae32a71e3570c39b925943", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r5], 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r10 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=<r11=>0x0, &(0x7f0000000200)=0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000300)={'gre0\x00', r11, 0x7800, 0xf827, 0xffffffff, 0x3, {{0x2b, 0x4, 0x1, 0x6, 0xac, 0x64, 0x0, 0x46, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@noop, @ssrr={0x89, 0x13, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x34, 0xee, 0x3, 0xf, [{@multicast2, 0xf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x7}, {@multicast2, 0x2}, {@empty, 0x800}, {@local, 0x7d7a}]}, @rr={0x7, 0x1f, 0xf6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @local, @private=0xa010100, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x24, 0xf9, 0x1, 0x2, [{@loopback, 0x6}, {@rand_addr=0x64010101, 0x200}, {@multicast1, 0x9}, {@loopback}]}, @timestamp_prespec={0x44, 0xc, 0xc9, 0x3, 0x3, [{@empty}]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000300)={'gre0\x00', r11, 0x7800, 0xf827, 0xffffffff, 0x3, {{0x2b, 0x4, 0x1, 0x6, 0xac, 0x64, 0x0, 0x46, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@noop, @ssrr={0x89, 0x13, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x34, 0xee, 0x3, 0xf, [{@multicast2, 0xf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x7}, {@multicast2, 0x2}, {@empty, 0x800}, {@local, 0x7d7a}]}, @rr={0x7, 0x1f, 0xf6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @local, @private=0xa010100, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x24, 0xf9, 0x1, 0x2, [{@loopback, 0x6}, {@rand_addr=0x64010101, 0x200}, {@multicast1, 0x9}, {@loopback}]}, @timestamp_prespec={0x44, 0xc, 0xc9, 0x3, 0x3, [{@empty}]}]}}}}})
unshare(0x40010000)
r12 = accept(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000180)=0x80)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r12) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r12)
write$cgroup_pid(r9, &(0x7f00000000c0), 0x12)
pread64(r10, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

950.008106ms ago: executing program 3 (id=3104):
unshare(0x8040480)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x38)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x4508, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @loopback}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000040)=0xb, 0x4)
setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000180)=0x40000000, 0x4)
recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af96e4b28bd, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x20000080)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000041000701fcfffffffddbdf25017c0000040036802e0101"], 0x148}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040200", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c21000800", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}, 0x1, 0x0, 0x0, 0x800}, 0x400c010)
setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0x41200003, @loopback, 0xb}, 0x1c)
socket$inet6_mptcp(0xa, 0x1, 0x106)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000040)=@gettaction={0x4c, 0x32, 0x301, 0x70bd2e, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x29}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x44}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480a0}, 0x80)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600)

785.374623ms ago: executing program 2 (id=3110):
r0 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}]}]}, 0x4c}}, 0x4050) (async)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x38}, 0x200048d0)

731.817486ms ago: executing program 0 (id=3111):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={&(0x7f0000000040)="ced1cb71485769579bfbddd9ca8272783d382940763167e9d169f2d5998b38853e0808afe5d589c9c9b9c13e70afc4f5a29e279376e5485c31d9c85b229e997af362a8b5ae57d46373218b46", &(0x7f0000001180)=""/4096, &(0x7f00000000c0)="864e30290c2ef33346c51cc4b503b069f965dc5a98e2543b97abc9dbe9cf341e6c1eaa45f550f689bd91116af172aa05f8ede0c8d575135314cb31a6e0b2ce5874abfcc03cf3bb223f6d2f49332bdb98ba7e80f1963599414f8da72e9d58869e8c05a26f88c3abadf0", &(0x7f0000000140)="991e06b307e0caaed90d8d48e815555b2178a50a32ee3bb059924be04d785b66a8d2753d2c34fbd47dd8354333b021b3681f8ea9ded61c0892b12880a0caf8a9cbe196f0973793ba517cf4d1f46817ddb96b6cc0a7e4ab82c079251a1d6c6ec157d95e553df8d71fec7c30346d27bcdf0526468d0ebf70420612109d544b9f708e65864b67dc72ea8250799acaad807b", 0x1, r1}, 0x38)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x503, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12042}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}}, 0x0) (async)
syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="01008040000b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9fff8fef50000000000a2"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0)

731.523176ms ago: executing program 0 (id=3112):
unshare(0x22020400)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1002, 0x9, 0x1, 0xf65, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x4000008, 0x8000100, 0x3, 0x200, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0x400007, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x44, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x3, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0x5, 0x80, 0xb, 0x2, 0xd9a, 0x1000d, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5a, 0xffffffff]}})
socket$caif_seqpacket(0x25, 0x5, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kvm_userspace_exit\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)

703.971811ms ago: executing program 2 (id=3113):
r0 = socket(0x26, 0x5, 0x3)
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001400)=@filter={'filter\x00', 0x42, 0x4, 0x1390, 0xffffffff, 0x11d0, 0x11d0, 0x10f8, 0xffffffff, 0xffffffff, 0x12f8, 0x12f8, 0x12f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11, 0x0, 0x50}, 0x0, 0x10d0, 0x10f8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x80, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x27}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x7e, {0xffffffffffffffff}}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00', {}, {}, 0x1}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13f0) (async)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async, rerun: 64)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0xfffffffe}) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) (async)
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x5, 0x20000002, 0x5) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffefe, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40048a5) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000400)={r7, 0x39, "b1c18f70612939ec9920b77781b7addc6bc7f2bbfb1cd5017f4a85f67b8abb3c66269c42d7a238cb802ff1c984d8d842d176fef210dee530c1"}, &(0x7f00000000c0)=0x41)
pipe(&(0x7f0000000740)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000180)={r3, 0x10001, 0xc, "30a6ec92baf3b8744c0867c2772aa2497a2223ba60dd2edaf61e01cbd99141b86ef6e0caac97c24d1bdbe45328b0a9545be474967c77f990c4666eca3d3cf281cb97de14280279da3226"}) (async)
ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f00000009c0)={{r9}, 0x100000000, 0x418b, 0x8}) (async, rerun: 32)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 32)

650.11862ms ago: executing program 0 (id=3114):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaa1faaaaaaaaaaaaaaaa1986dd6c00000000082b010000000000000000000000fe8000000000000000000000000000aaff00"/62], 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x7, 0x8000, 0xe462, 0xfffffffb, 0x6, 0x0, 0x0, r1}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r6, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r7, 0xb4807000)
recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0)

649.649003ms ago: executing program 2 (id=3115):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x6)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
close(0x3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011000108000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="02100000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000000)={0x7, 'ip_vti0\x00', {0x7}, 0x5})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r11)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r14=>0x0})
sendmsg$BATADV_CMD_TP_METER(r11, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r14, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001680)=@deltfilter={0x38, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r8, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)

648.57936ms ago: executing program 0 (id=3116):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)="fbe65dc390da7ee179a4", 0xa}, {&(0x7f0000000700)="fdc913c5fb15c710950f8e561c846edc4223d841cad2a2154e3bad5fc74c8e5172171929da09a2e314c77de173e154838fc39c1684ea331216706f4d645dc0aea3d0e06b72545914394805a2513f1cc11bea6266382e51a10d7021329f79eb6067dfb71729c45f1c6833a0c39fab03fe8b0287fb43941b186dca8a2566859bd9d703269b72961338b8770982f94f867fb9cbdfbad33279788d610dc62ac87a843b674dcd97fd1ac6cb09047da172d781dd0a889441efaceaea", 0xb9}, {&(0x7f0000000f40)="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", 0x445}], 0x3}, 0x40080)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0x398}, 0x1, 0x0, 0x0, 0x4040860}, 0x0)

585.763616ms ago: executing program 0 (id=3117):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'})
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f00000002c0)={@multicast1, @remote, 0x6d, "48869b974846cc2135c6cfffe5fe8f324738c5f2589e9d7c255da6667dc47031", 0x6, 0x6, 0x9, 0xc5}, 0x3c)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000500)=0x60, 0x800)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f0000000040)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="e50000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="18005e800800020000000000040001"], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0xc0)

584.225555ms ago: executing program 0 (id=3118):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/165, 0xa5}], 0x1}, 0x5}], 0x1, 0x10000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffc68)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES64=r0, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1\x00', <r12=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000030c0)={0x12bc, r13, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x6d0, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x19c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x184, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff4, 0x2d09, 0x39, 0xc, 0x4, 0xde1, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x4, 0xffff, 0x7ff, 0x5, 0x1, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x3, 0x4, 0xffff, 0x16ef, 0x10, 0x2, 0xe3d]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x7, 0xfffc, 0x40, 0x400, 0x13, 0xfff]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x6}, {0x7, 0x7}, {0x1, 0x5}, {0x3, 0x8}, {0x6, 0x4}, {0x6, 0x4}, {0x5, 0x5}, {0x3, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x5}, {0x7}, {0x5, 0x9}, {0x5, 0x2}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x9}, {0x2, 0x6}, {0x7, 0x7}, {0x2, 0x7}, {0x7, 0x5}, {0x2, 0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x7, 0xa}, {0x6, 0x6}, {0x2}, {0x2}, {0x2}, {0x1, 0x6}, {0x6, 0x4}, {0x5, 0x5}, {0x3, 0x1}, {0x1, 0x4}, {0x7, 0x1}, {0x2, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {}, {0x1, 0xa}, {0x1, 0x2}, {0x1, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x4, 0x6}, {0x7, 0x2}, {0x4}, {0x3, 0x6}, {0x0, 0x4}, {0x6, 0x8}, {0x7, 0x5}, {0x1}, {0x3, 0x3}, {0x2, 0x2}, {0x0, 0x5}, {0x5, 0x6}, {0x7, 0xa}, {0x6, 0x2}, {0x2, 0x4}, {0x7, 0x8}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0xfff7, 0xe, 0x400, 0x1000, 0x0, 0x3, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x1, 0xff, 0x7, 0x3, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1, 0xb, 0x6, 0x5, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffa, 0x2, 0x0, 0x7fff, 0x4, 0x2, 0x2]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x7, 0x5, 0x2, 0x7, 0xff, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x4, 0xfffb, 0x3, 0x2, 0x3, 0xba70, 0x20]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe2, 0x9, 0x9c, 0x1, 0x18, 0x20, 0x9, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x270, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x23c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x81, 0x7, 0x6, 0x8000, 0x4, 0x10]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7fff, 0x100, 0xb, 0x236, 0x0, 0x5, 0x5]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6, 0x7}, {0x1, 0xa}, {0x4, 0x2}, {0x6, 0x2}, {0x3, 0x1}, {0x6, 0x6}, {0x4, 0x8}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x2}, {0x7, 0x7}, {0x7, 0x8}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0x8}, {0x4, 0x6}, {0x7}, {0x5, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x8}, {0x3}, {0x2, 0x3}, {0x2, 0x9}, {0x1, 0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x5, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa900, 0x6, 0x0, 0xe, 0x1, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x60, 0x24, 0x48, 0xb, 0x17, 0x2]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdaa5, 0xfeff, 0x5, 0x3, 0x9, 0x774, 0x6, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0xfff7, 0x7f9, 0x9f37, 0xffff, 0x7, 0x13]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0xe, 0xfff, 0x5, 0x8, 0x83, 0x2]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0xb, 0x60, 0x36, 0x1b, 0x24, 0x12, 0x30, 0x30, 0x1b, 0xb, 0x3, 0x5, 0x5, 0x18, 0x1, 0x6c, 0x24, 0x60, 0x4, 0x60, 0x9, 0x16, 0x4, 0x3, 0x30, 0x60, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x81, 0x9, 0x5, 0x5, 0x200, 0x5, 0xf]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x3}, {0x0, 0x1}, {0x5, 0x6}, {0x2, 0x4}, {0x7, 0x1}, {0x4, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x6, 0x8, 0x4, 0xd3, 0x7, 0x1]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x6, 0x3ff, 0x6, 0x5, 0x6b, 0x4]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x63, 0xffff, 0x0, 0x6, 0x5, 0x5, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x7f, 0x3, 0x0, 0x7, 0x4, 0xd, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6203, 0xa, 0x1cf, 0xe, 0x8, 0x5, 0x400, 0x7]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x1}, {0x3, 0xa}, {0x1, 0xa}, {0x4, 0x8}, {0x5, 0x1}, {0x1}, {0x1}, {0x4, 0xa}, {0x1, 0x5}, {0x3, 0x9}, {0x3, 0x8}, {0x0, 0x5}, {0x6, 0x1}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x5, 0x2}, {0x6, 0x4}, {0x4}, {0x4}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0x7}, {0x5, 0x1}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0xa}, {0x3, 0xa}, {0x1, 0x7}, {0x4}, {0x6, 0x7}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x16, 0x2, 0x9, 0xc, 0x18, 0xc, 0x6c, 0xc, 0x2, 0x6c, 0x6c, 0x68, 0x0, 0x4, 0x24, 0x5, 0x12, 0x5a, 0x6, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0xa}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x9}, {0x5, 0x9}, {0x7, 0x6}, {0x2, 0xa}, {0x4, 0x8}, {0x2, 0x6}, {0x0, 0xa}, {0x6, 0x4}, {0x1, 0x4}, {0x6, 0x1}, {0x0, 0x5}, {0x7, 0x5}, {0x3, 0x5}, {0x2, 0x1}, {0x4}, {0x7, 0x6}, {0x1}, {0x4, 0x6}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x80, 0xb36, 0x6e, 0x8d, 0x8, 0x7, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x18, 0x12, 0x4, 0x24, 0x3, 0x1b, 0x16, 0x38, 0x9, 0x1b]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x18, 0x3, 0x27]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x1e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x1, 0x5, 0x1ffd, 0x4, 0xa, 0x1000]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x5, 0xe5a, 0x3, 0xe, 0x4, 0x2]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x7}, {0x3, 0x3}, {0x3, 0x6}, {0x1, 0x9}, {0x6, 0x6}, {0x7, 0x4}, {0x5, 0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x5, 0x1}, {0x3, 0x5}, {0x3, 0x5}, {0x7, 0x1}, {0x5, 0x4}, {0x6, 0x1}, {0x3, 0x2}, {}, {0x0, 0x9}, {0x4}, {0x3, 0x4}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {0x7, 0x4}, {0x5}, {0x5}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x3}, {0x3, 0x6}, {0x6, 0x7}, {0x3, 0x1}, {0x6, 0x2}]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x7}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x8}, {0x5, 0xa}, {0x2, 0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x2, 0x3}, {0x4, 0x2}, {0x3, 0x1}, {0x5, 0x3}, {0x0, 0xa}, {0x6}, {0x2, 0x4}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x2}, {0x1, 0x3}, {0x3, 0x6}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0x6}, {0x6, 0x7}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe8, 0x40, 0x14, 0x11d, 0xc, 0x6, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfffd, 0x6, 0xf3, 0xfff9, 0x1, 0x0, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x9, 0x1, 0xfff1, 0x6, 0x5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x6eea, 0x8, 0x404, 0x4, 0x8, 0x7, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x6}, {0x5}, {0x3, 0x6}, {0x5, 0x3}, {0x6, 0x6}, {0x5, 0xa}, {0x1, 0x3}, {0x7, 0x2}, {0x4, 0x8}, {0x1, 0x5}, {0x7, 0x5}, {0x7, 0x8}, {0x3, 0x6}, {0x4, 0x9}, {0x3, 0x5}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0x7}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x3, 0x8}, {0x7}, {0x5, 0x9}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x6}, {0x2, 0x7}, {0x7, 0x8}, {0x4, 0x8}, {0x3, 0x5}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x8}, {0x1, 0x6}, {0x7, 0x8}, {0x5, 0x3}, {0x1, 0x1}, {0x7, 0x7}, {0x5, 0x1}, {0x6, 0x3}, {0x7, 0x9}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x6, 0x8}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x1}, {0x6, 0x1}, {0x3, 0x7}, {0x4, 0x3}, {0x6, 0x7}, {0x5, 0x3}, {0x1}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x18, 0xc, 0x6c, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x30d5}]}]}, @NL80211_ATTR_TID_CONFIG={0x5b0, 0x11d, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x7, 0xfff9, 0x3, 0x81, 0x40, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x24, 0xc, 0x6c, 0x48, 0x3, 0x1, 0xc, 0x5, 0x18, 0x4, 0x1b, 0x6c, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x7}, {0x4, 0x9}, {0x3, 0x9}, {0x4, 0xa}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x4}, {0x1, 0x3}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x7}, {0x7, 0xa}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x4, 0x9}, {0x4, 0x5}, {0x3, 0x6}, {0x4, 0x4}, {0x7, 0x5}, {0x2, 0x3}, {0x1, 0x4}, {0x1, 0x8}, {0x5, 0x5}, {0x4, 0x2}, {0x2, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {0x5, 0x4}, {0x3}, {0x2, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x2, 0x7}, {0x1, 0x5}, {0x2, 0x8}, {0x2}, {0x7, 0x8}, {0x7, 0x6}, {0x3, 0x9}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x6}, {0x4, 0x3}, {0x4, 0x8}, {0x4, 0x4}, {0x1, 0x5}, {0x1, 0xa}, {0x7, 0x1}, {0x5, 0x3}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x3}, {0x0, 0x2}, {0x3, 0x9}, {0x6, 0x7}, {0x5, 0x6}, {0x3, 0x3}, {0x6}, {0x6, 0x2}, {0x7, 0xa}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x6}, {0x3}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x6, 0xfff7, 0x8001, 0x847, 0x298, 0x7]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3e, 0x61, 0x5, 0x16, 0x12, 0x5, 0x9, 0x3, 0x6c, 0xb, 0x30, 0x5, 0x5, 0x6, 0x9, 0x0, 0x30, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2fa8, 0x8, 0x400, 0x1, 0x5574, 0x2, 0x40, 0x6]}}]}]}]}, {0x32c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x80, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x2}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7e, 0x5, 0x1, 0x6, 0x9, 0x5, 0xe0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x2, 0x3, 0x1ff, 0x8, 0xffff, 0x8, 0xfffe]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x3}, {0x7, 0x4}, {0x0, 0x5}, {0x1, 0xa}, {0x4, 0x1}, {0x6, 0x1}, {0x3}, {0x3, 0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x5, 0xa}, {0x3, 0x7}, {0x2}, {0x4}, {0x3, 0xa}, {0x0, 0x15}, {0x0, 0x3}, {0x5, 0x1}, {0x0, 0x6}, {0x7, 0x8}, {0x7, 0xa}, {0x0, 0x5}, {0x5, 0x8}, {0x7}, {0x7}, {0x4, 0xa}, {0x4}, {0x7, 0x5}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x1}, {0x0, 0xa}, {0x3}, {0x1}, {0x7, 0x4}, {0x1, 0x2}, {0x3, 0xa}, {0x1}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x294, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x6, 0x9, 0x6, 0x3, 0x1b, 0x2, 0x16, 0x36, 0x2, 0x24, 0x30, 0x1, 0x2, 0x18, 0x16, 0x1b, 0x6, 0x4, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0xc, 0x6a, 0x8, 0x1, 0x8000]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x4}, {0x1, 0x6}, {0x5, 0x4}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x1, 0x3}, {0x5, 0x4}, {0x2, 0x2}, {0x4, 0x8}, {0x7}, {0x2, 0x1}, {0x6, 0x3}, {0x6}, {0x1, 0x2}, {0x3, 0x8}, {0x7, 0x6}, {0x4, 0x1}, {0x5, 0x9}, {0x5, 0x3}, {0x4, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x2}, {0x4, 0x8}, {0x3, 0x8}, {0x0, 0x4}, {0x4, 0x6}, {0x7, 0x9}, {0x4}, {0x6, 0x4}, {0x2, 0x4}, {0x1, 0x1}, {0x6, 0x7}, {0x6, 0x8}, {0x7}, {0x1}, {0x2, 0x1}, {0x1, 0x2}, {0x0, 0x6}, {0x4, 0x9}, {0x1, 0xa}, {0x5}, {0x4, 0x5}, {0x3, 0x2}, {0x1, 0x2}, {0x3, 0x5}, {0x3, 0xa}, {0x0, 0x6}, {0x6, 0x2}, {0x4}, {0x6, 0x4}, {0x1, 0x4}, {0x6, 0xa}, {0x7, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x81, 0x5ebb, 0x3, 0x0, 0x2, 0xfffd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x9, 0x6, 0x2, 0x7f, 0x400, 0xfffa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0xd1e, 0xe6, 0x6, 0xaec5, 0xb4, 0x6, 0x80]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x24, 0x4, 0x18, 0x6, 0x30, 0xc, 0x9, 0x36, 0x4, 0x6, 0x5, 0x16, 0x36, 0xc, 0xc, 0x12, 0x1b, 0x48, 0x4, 0x2, 0x36, 0x33]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xf4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x5}, {0x1, 0x9}, {0x4}, {0x2, 0x6}, {0x5, 0x9}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0x9}, {0x5, 0x8}, {0x0, 0xa}, {0x7, 0x6}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x2}, {0x5}, {0x3, 0xa}, {0x3, 0x7}, {0x2, 0xa}, {0x4, 0x3}, {0x2, 0x7}, {0x4, 0x4}, {0x2}, {0x7, 0x9}, {0x1, 0x2}, {0x2, 0x6}, {0x3, 0x6}, {0x5, 0x7}, {0x2, 0x4}, {0x2, 0x2}, {0x6, 0x8}, {0x4, 0xa}, {0x1}, {0x7, 0xa}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x4}, {0x0, 0x5}, {0x1, 0x6}, {0x0, 0x1}, {0x3, 0xa}, {0x7, 0x7}, {0x4, 0x5}, {0x1, 0x1}, {0x4, 0x7}, {0x0, 0x1}, {0x7, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x4, 0x4}, {0x4, 0xa}, {0x5, 0x4}, {0x3, 0xa}, {0x1, 0x5}, {0x2, 0x5}, {0x7, 0x8}, {0x1, 0x6}, {0x0, 0x5}, {0x7, 0x3}, {0x4, 0x4}, {0x7, 0x2}, {0x7, 0x2}, {0x4, 0x4}, {0x7, 0x3}, {0x6, 0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x3, 0x8}, {0x2, 0x3}, {0x4, 0x7}, {0x4, 0x6}, {0x4, 0xa}, {0x2}, {0x7, 0x6}, {0x4}, {0x5, 0x5}, {0x4, 0x7}, {0x1, 0x9}, {0x2, 0x2}, {0x4, 0x6}, {0x5, 0x5}, {0x7, 0x4}, {}, {0x7, 0x8}, {0x3, 0x2}, {0x6, 0x8}, {0x5, 0x1}, {0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x2}, {0x3, 0x2}, {0x2}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0x4}, {0x6, 0x4}, {0x0, 0x2}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x8, 0xf519, 0x2, 0xffff, 0xec1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x55, 0xc9d1, 0xfa98, 0xfff, 0x9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6e, 0x12, 0xe5d88ea7e535da92, 0xb, 0x0, 0x24, 0x9, 0x18, 0x48, 0x2b, 0x16, 0x4, 0x5, 0x9, 0x30, 0x21, 0x6c, 0x2, 0x1b, 0x3, 0xc, 0x6c, 0x4, 0x48, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x48, 0x1, 0x1, 0x4, 0x2, 0x2, 0x5, 0x5, 0x4, 0xc, 0x12, 0xc, 0x18, 0x60, 0x30, 0x6c, 0x6c, 0x24, 0x6, 0x6c, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x1, 0x8, 0xa, 0xc86, 0x80, 0x6, 0xfff8]}}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x94, 0xf, 0x3, 0x7f, 0x0, 0x36a7, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff8, 0x6, 0x30d, 0x8001, 0xcd64, 0x4054, 0x6]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x60, 0x6, 0x9, 0x9, 0x12, 0x4, 0x36, 0x16, 0x72803e1fbf84322c, 0x24, 0x12, 0x60, 0x2, 0x2, 0x2, 0x3, 0x5, 0x7d]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x4}, {0x6, 0x4}, {0x1, 0xa}, {0x3, 0x5}, {0x6, 0x2}, {0x3, 0xa}, {0x0, 0x9}, {0x7, 0x6}, {0x0, 0x2}, {0x6, 0x9}, {0x7, 0x2}, {0x6}, {0x3, 0x5}, {0x1, 0x3}, {0x1, 0x1}, {0x5}, {0x7, 0x9}, {0x6, 0x8}, {0x3, 0x9}, {0x0, 0x9}, {0x5, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x36, 0x6, 0x6, 0x1b, 0x1b, 0x6, 0x1, 0x1b, 0x48, 0x16, 0x4, 0x2, 0x5, 0x16, 0x18, 0x5f]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0xb, 0x36, 0x36, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x104, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x9}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x4}, {0x5, 0x7}, {0x5, 0x7}, {0x2, 0x3}, {0x5, 0x7}, {0x5, 0x4}, {0x7, 0x5}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0x2}, {0x7, 0x8}, {0x4, 0x2}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0x3}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x7}, {0x2}, {0x3, 0x2}, {0x5, 0x1}, {0x2, 0x4}, {0x7}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x5}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0x9}, {0x0, 0x7}, {0x5, 0x5}, {0x6}, {0x1, 0x2}, {0x0, 0xa}, {0x6, 0x1}, {0x4}, {0x1, 0x2}, {0x6, 0x6}, {0x6, 0x1}, {0x3, 0x9}, {0x5, 0x9}, {0x4, 0x4}, {0x6, 0x4}, {0x1, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xaf66, 0xf001, 0xe, 0x9, 0x7, 0x4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x5, 0x0, 0x6c, 0x4, 0x22, 0x18, 0x60, 0x1, 0x18, 0x9, 0x717a2920bec915a3, 0x12, 0x12, 0x12, 0x4, 0xb, 0x2d8feed0a60991aa, 0x9, 0x6e, 0xb, 0x4, 0x36, 0x9, 0x5, 0x48, 0x6, 0xc, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xdd, 0x5, 0x400, 0x9, 0x3, 0xc, 0xa]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x4, 0xca, 0x8, 0xa2, 0x1, 0xf5, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7ff, 0x6, 0xfe00, 0x7, 0x8, 0x4, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x0, 0xc, 0x4, 0x53, 0x1b, 0x6b, 0x5, 0x0, 0x3, 0x4, 0x6c, 0xb]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6dbe8975}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x85e6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x7ff, 0xd, 0x54c, 0x2ff, 0x7, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x25}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x78}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1ff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x5e4, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x5, 0x5, 0x8649, 0x80, 0x7, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x5, 0x40, 0x2, 0x1, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x4, 0xa, 0x3, 0xf626, 0x4, 0x6]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x5}, {0x4, 0x3}, {0x1, 0x5}, {0x1}, {0x5, 0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0x4}, {0x2, 0x9}, {0x6, 0x5}, {0x7, 0x8}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x7}, {0x1, 0x3}, {0x5, 0x2}, {0x2}, {0x3, 0x5}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x1, 0x4cf, 0x4, 0x8000, 0x1000, 0x2]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x2210204c826881b9, 0x3, 0x36, 0x6, 0x30, 0x11, 0x60, 0x2, 0x5, 0x18, 0x3, 0x1b, 0x1b, 0x2, 0x3, 0x1b, 0x4, 0x3]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x5}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x4, 0x24, 0x0, 0xc, 0x3, 0x48, 0xb, 0x30, 0x18, 0x0, 0x60, 0x48, 0x36, 0x2, 0x12, 0x3, 0x2, 0x24]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x24, 0x6, 0x9, 0x16, 0x24, 0x17, 0x30, 0x18, 0x16, 0x36, 0xc, 0x12]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x36, 0x5, 0x6c, 0x1, 0x12, 0x60, 0x3, 0x60, 0xb]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x89}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x3d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3bc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x7}, {0x4, 0x8}, {0x4, 0x2}, {0x2, 0x1}, {0x3, 0x3}, {0x2, 0x1}, {0x5, 0x3}, {0x3, 0x9}, {0x2, 0xa}, {0x1, 0x2}, {0x5}, {0x6, 0x9}, {0x1, 0x6}, {}, {0x6, 0x3}, {0x6, 0x7}, {0x1, 0x2}, {0x6, 0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x6}, {0x4, 0xa}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x3}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x9}, {0x0, 0xa}, {0x5, 0x6}, {0x5, 0x8}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x7}, {0x7, 0x7}, {0x7, 0x2}, {0x5, 0x9}, {0x4, 0x2}, {0x7, 0x4}, {0x7, 0x4}, {0x0, 0x6}, {0x7, 0x3}, {0x5, 0xa}, {0x4, 0x6}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x6}, {0x6, 0xa}, {0x0, 0x6}, {}, {0x2, 0x8}, {0x2, 0x1}, {0x5, 0x9}, {0x3, 0x9}, {0x6, 0x8}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x3, 0x6, 0x0, 0xfbea, 0x782e, 0x8]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x2}, {0x3, 0xa}, {0x1, 0x1}, {0x6, 0x9}, {0x1}, {0x4}, {0x4, 0x8}, {0x6, 0x9}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x4}, {0x3, 0x4}, {0x6, 0x1}, {0x4, 0x3}, {0x0, 0x5}, {0x6, 0x6}, {0x4, 0x8}, {0x3, 0x4}, {0x6, 0x3}, {0x0, 0x9}, {0x4, 0x2}, {0x5, 0x3}, {0x2, 0x5}, {0x6, 0x5}, {0x1, 0x3}, {0x7, 0xa}, {0x2}, {0x3, 0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x0, 0x7, 0x0, 0x7c41, 0x6d3, 0xf40c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0xb, 0x40, 0x4b5, 0x0, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xc2, 0x4000, 0x3, 0xfff4, 0x6, 0x8, 0xa]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x5}, {0x0, 0x2}, {0x7}, {0x7, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x5, 0x8}, {0x4, 0x4}, {0x3, 0x4}, {0x3, 0x7}, {0x1, 0x6}, {0x4, 0x9}, {0x5, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x7, 0x5}, {0x0, 0x7}, {0x2}, {0x3, 0x8}, {0x3}, {0x3, 0x5}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x3, 0x3}, {0x4, 0x3}, {0x0, 0x2}, {0x2, 0x2}, {0x5, 0x2}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x9}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x9}, {0x7, 0x15}, {0x6, 0x1}, {0x5}, {0x2, 0x3}, {0x1, 0x1}, {0x6, 0x4}, {0x3, 0x7}, {0x6, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x1}, {0x6}, {0x4}, {0x3, 0x9}, {0x5, 0x9}, {0x0, 0x6}, {0x5, 0x4}, {0x3, 0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0x1}, {0x2, 0x5}, {0x6, 0x1}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0xd, 0x7, 0x2, 0xfc94, 0xf9, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd36, 0x9, 0xa, 0x0, 0x2, 0x9, 0x9336, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x7, 0xbb, 0x4, 0x400, 0x0, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x6, 0xc, 0x8001, 0x10, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x3, 0x0, 0x5, 0x6, 0x3, 0xfd98, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xf0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x6, 0x1}, {0x7}, {}, {0x0, 0x9}, {0x1, 0x4}, {0x4, 0x5}, {0x7}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0x4}, {0x1, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x7}, {0x6, 0x3}, {0x2, 0x8}, {0x3, 0x9}, {0x1}, {0x5, 0x3}, {0x0, 0xa}, {0x2, 0xa}, {0x3, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x5, 0x8}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x6}, {0x3, 0x6}, {0x6, 0x3}, {0x3, 0x3}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x6}, {0x7, 0x5}, {0x7, 0x8}, {0x7, 0xa}, {0x6, 0x3}, {0x3, 0x3}, {0x7, 0x3}, {0x1, 0x4}, {0x5, 0x1}, {0x1, 0x2}, {0x5, 0x4}, {0x1, 0x8}, {0x0, 0x2}, {0x1}, {0x6, 0x3}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x6}, {0x7}, {0x5, 0x8}, {0x7, 0x4}, {0x7, 0x9}, {0x3, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x0, 0x8}, {0x2, 0x8}, {0x2, 0x9}, {0x3, 0x7}, {0x2, 0xa}, {0x0, 0x19}, {0x1, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x5, 0x6, 0x2, 0x5, 0x7ff, 0xc983]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x828, 0x20b, 0xe1, 0x7, 0x1, 0x9, 0x3]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x7}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x8}, {0x3, 0x1}, {0x0, 0x9}, {0x6, 0x2}, {0x2, 0xa}, {0x6, 0x6}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0xa}, {0x1}, {0x4}, {0x6, 0x3}, {0x4, 0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x9}, {0x2, 0xa}, {0x1, 0x2}, {0x7}, {0x1, 0x2}, {0x7, 0x5}, {}, {0x5, 0x1}, {0x6, 0x9}, {0x5, 0x2}, {0x3, 0x6}, {0x2, 0x1}, {0x3, 0x9}, {0x3, 0x4}, {0x2, 0x2}, {0x7, 0x8}, {0x2, 0x19}, {0x0, 0xa}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x1}, {0x1, 0x6}, {0x6, 0x5}, {0x3, 0x6}, {0x1}, {0x2, 0x2}, {0x5, 0x5}, {0x6, 0x6}, {0x7, 0x1}, {0x1}, {0x6, 0x4}, {0x6, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0x9}, {0x4, 0x6}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x6, 0x5}, {0x1}, {0x1, 0x9}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x2}, {0x2, 0x2}, {0x7, 0x4}, {0x3, 0x3}, {0x2, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff7, 0x3, 0xfc00, 0x9, 0x2c3, 0x7, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x8, 0x40, 0x7, 0xfff8, 0xfff7, 0x2]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x6, 0xf, 0x1, 0x2, 0x100, 0xfff7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x800, 0x8, 0x1ff, 0x2a51, 0xf11f, 0x1ff, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x3, 0x10, 0x9, 0x6, 0x17, 0x8]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x5, 0x5}, {0x1, 0xa}, {0x3, 0x4}, {0x6, 0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x7, 0x9}, {0x6, 0x6}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x9}, {0x2, 0x7}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0x2}, {0x6, 0x8}, {0x5, 0x2}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0x6}, {0x6, 0x3}, {0x7, 0x6}, {0x5, 0x9}, {0x0, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x1, 0x4}, {0x3, 0x7}, {0x1}, {0x3, 0x8}]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x1, 0x5a, 0x6, 0x9, 0xb7, 0x2b]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x5}, {0x6, 0x6}, {0x4, 0x9}, {0x3}, {0x3, 0x6}, {0x3, 0xa}, {0x7, 0x5}, {0x3, 0xd}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x5, 0x4}, {0x0, 0x7}, {0x2, 0x2}, {0x5, 0x6}, {0x6, 0x3}, {0x5, 0x9}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x5, 0x7}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x7}, {0x4, 0x3}, {0x1, 0x9}, {0x7, 0x1}, {0x6, 0x5}, {0x0, 0x9}, {0x7, 0x6}, {0x0, 0x2}, {0x4, 0x3}, {0x5, 0x6}, {0x5, 0x4}, {0x2}, {0x5, 0x8}, {0x2}, {0x2, 0x1}, {0x5, 0x5}, {0x6, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x12bc}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

421.634825ms ago: executing program 2 (id=3119):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="f0a6e52c6e6fc90e0262ecce7dae8b989fb942e750061a4183ce23201d7dbdcb71942295886854183a188eac", 0x2c}, {&(0x7f0000000080)="22f9d84785c567a68f2fbff60a1f6e785587fd383fb24e3473e3e91a266029ad143648720ad6a78b7418356fc5b4", 0x2e}, {&(0x7f00000001c0)="13d7b63ca1139b9de87463332e36e51f670ae0d46e02097642da16aa603d67e182aa41749615254f48712d689daad789dfa435ff4a716d7c1b2b929133cef2853ee6b65c2b938b611c4d3c94c8d8", 0x4e}], 0x3)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r1, 0x439, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x36}]}, 0x24}}, 0x8000)

420.998872ms ago: executing program 2 (id=3120):
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000300)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f102140ea8", 0x18}, {&(0x7f00000005c0)="b72abab9439ca41f5cf14d6435575ba774ee5f5c23ff2f5176f5773d08a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67b6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f87d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceebc569478657aedeb62c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87bec86aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e333b391222e6b6665454892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22eaffce80405367931ef3eacbf5a663175acc306eb075c52265d", 0xe8b}, {&(0x7f0000001480)="c071d5aa4739301a7eae6d89cfca1807bfd67dc052ade42ac5270fcd9a09dd1a", 0x20}], 0x6}, 0x40000)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b05, &(0x7f0000000040)={'wlan0\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={<r5=>r4})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)={r5})
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r4, r6})
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0)

336.532895ms ago: executing program 2 (id=3121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0xc, 0x3, 0x35}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_LABELS={0x14, 0x7, "d415b9dde780a9ed9bbe2bc5a6064d41"}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0xa}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x12, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1c8b, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @generic={0x9, 0x4, 0x2, 0x7, 0x5}, @alu={0x4, 0x1, 0x5, 0x2, 0x9, 0x2, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000580)=""/193, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x1, 0x4fe, 0xb}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000700)=[{0x3, 0x1, 0x2, 0x9}, {0x1, 0x3, 0x6, 0x7}, {0x2, 0x2, 0xa, 0x7}], 0x10, 0x7ff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000100)='xen_mmu_pmd_clear\x00', r1, 0x0, 0x75}, 0x18)
unshare(0x22020400)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x3)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x1800}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
shutdown(r2, 0x1)
syz_emit_ethernet(0x64, &(0x7f0000000000)={@local, @broadcast, @void, {@generic={0x806, "9c6d225810e3f4cee11c38113026eb921a80ba36e31fed6d835949f352cbdd8d9fd5a866a54b3e6e8e1b1416a09a3dd9893dfda2a2483bf4d99e433984c2ea77e4d299e3ce52bc8da4882cc1bad1ee00f8b7528cc78a"}}}, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x1000)
r6 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
unshare(0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)
sendmsg$kcm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000980)}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0)

59.763642ms ago: executing program 3 (id=3122):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x9, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x1d}, 0x94)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x25dfdbfd, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x62, 0x2, {0x300, 0xfffffffd, 0xffffffffdfffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r3, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="dc", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000500"], 0x48}], 0x1, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x5)
write$bt_hci(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14, 0xe, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40040000}, 0x40000)
splice(r2, &(0x7f00000000c0)=0x10, r0, &(0x7f0000000280)=0x8, 0x5, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xb4db15096d050ed8, &(0x7f0000000000)={@mcast2, <r6=>0x0}, &(0x7f0000000040)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000140)={'syztnl2\x00', r6, 0x1, 0x40, 0x101, 0x40bf4113, {{0x45, 0x4, 0x0, 0x2, 0x114, 0x64, 0x0, 0xd3, 0x2f, 0x0, @local, @empty, {[@cipso={0x86, 0x25, 0x0, [{0x5, 0x10, "db389fec1defa756f1e1bd14c7c4"}, {0x7, 0xf, "b794790c9231d1ebaf8c222f72"}]}, @timestamp_prespec={0x44, 0x4c, 0x3d, 0x3, 0xb, [{@loopback, 0x1}, {@broadcast, 0x80000001}, {@empty, 0x10000}, {@multicast2, 0x74}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@multicast1}, {@multicast1, 0x4}, {@empty, 0x3}]}, @generic={0x7, 0xa, "d2e1f908fc3f7ae7"}, @cipso={0x86, 0x25, 0x0, [{0x1, 0x5, 'hH%'}, {0x1, 0x12, "a3c6285774d94662835c806f1a1dbfee"}, {0x5, 0x8, "1bf030bbf266"}]}, @ssrr={0x89, 0xf, 0x53, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x24, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0xfd, 0x0}, @private=0xa010101]}, @ssrr={0x89, 0xb, 0x63, [@multicast2, @multicast1]}, @generic={0x94, 0x4, "4ba3"}, @rr={0x7, 0x1f, 0xa7, [@broadcast, @multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x29}, @remote, @multicast1]}, @timestamp={0x44, 0x14, 0xc4, 0x0, 0x3, [0x9, 0x9, 0x1, 0x3]}]}}}}})

59.319569ms ago: executing program 3 (id=3123):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@fwd={0x1}, @union={0x2, 0x1, 0x0, 0x5, 0x0, 0x0, [{0xa, 0x1}]}]}, {0x0, [0x5f, 0x2e, 0x61, 0x30, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000001540)=""/88, 0x48, 0x58, 0x1}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000600)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, "341517c1b7df60c7"}}}}}, 0x0)

0s ago: executing program 3 (id=3124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'})
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f00000002c0)={@multicast1, @remote, 0x6d, "48869b974846cc2135c6cfffe5fe8f324738c5f2589e9d7c255da6667dc47031", 0x6, 0x6, 0x9, 0xc5}, 0x3c)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f0000000040)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="e50000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="18005e800800020000000000040001"], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0xc0)

kernel console output (not intermixed with test programs):

t enslave team device to itself
[   94.589919][ T8068] x_tables: duplicate underflow at hook 2
[   94.820279][ T8075] infiniband syz!: set down
[   94.831462][ T8075] infiniband syz!: added team_slave_0
[   94.878946][ T8075] RDS/IB: syz!: added
[   94.882852][ T8075] smc: adding ib device syz! with port count 1
[   94.884989][ T8075] smc:    ib device syz! port 1 has pnetid 
[   95.830445][ T8163] __nla_validate_parse: 42 callbacks suppressed
[   95.830458][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'.
[   95.837855][ T8163] tipc: Started in network mode
[   95.840646][ T8163] tipc: Node identity 96e3599bfa88, cluster identity 4711
[   95.854617][ T8163] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.859230][ T8163] syzkaller0: entered promiscuous mode
[   95.865191][ T8163] syzkaller0: entered allmulticast mode
[   95.895566][ T8163] sch_fq: defrate 257 ignored.
[   95.899434][ T8163] tipc: Resetting bearer <eth:syzkaller0>
[   95.926879][ T8162] tipc: Resetting bearer <eth:syzkaller0>
[   95.942310][ T8162] tipc: Disabling bearer <eth:syzkaller0>
[   96.124632][ T8186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.616'.
[   96.165760][ T8190] syzkaller0: entered promiscuous mode
[   96.167565][ T8190] syzkaller0: entered allmulticast mode
[   96.219053][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.619'.
[   96.224171][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.619'.
[   96.265726][ T8200] validate_nla: 1 callbacks suppressed
[   96.265738][ T8200] netlink: 'syz.2.620': attribute type 14 has an invalid length.
[   96.389154][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.624'.
[   96.412779][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.624'.
[   96.443190][ T8225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.626'.
[   96.561513][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'.
[   96.564323][ T8237] nbd: illegal input index -381222912
[   96.583484][ T8241] netlink: 44 bytes leftover after parsing attributes in process `syz.2.632'.
[   96.588282][ T8241] netlink: 'syz.2.632': attribute type 11 has an invalid length.
[   96.875533][ T8267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.638'.
[   96.957613][ T8269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.518047][ T8303] netlink: 'syz.2.642': attribute type 2 has an invalid length.
[   97.520765][ T8303] netlink: 'syz.2.642': attribute type 8 has an invalid length.
[   97.537688][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   97.542727][ T8305] netlink: 'syz.1.641': attribute type 20 has an invalid length.
[   97.552649][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[   97.867694][ T8327] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  100.136953][ T8457] tipc: Cannot configure node identity twice
[  100.262203][ T8463] can: request_module (can-proto-3) failed.
[  100.487169][ T8470] xt_CT: No such helper "snmp"
[  100.942193][ T8493] __nla_validate_parse: 15 callbacks suppressed
[  100.942206][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'.
[  101.155989][ T8511] ip6erspan0: entered allmulticast mode
[  101.193221][ T8514] sctp: [Deprecated]: syz.0.697 (pid 8514) Use of int in maxseg socket option.
[  101.193221][ T8514] Use struct sctp_assoc_value instead
[  101.199350][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'.
[  101.279844][ T8521] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  101.283768][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'.
[  101.286794][ T8521] IPv6: addrconf: prefix option has invalid lifetime
[  101.475947][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'.
[  101.485754][ T8539] erspan0: entered promiscuous mode
[  101.487668][ T8539] macvtap1: entered promiscuous mode
[  101.489487][ T8539] macvtap1: entered allmulticast mode
[  101.494117][ T8539] erspan0: entered allmulticast mode
[  101.499113][ T8539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.702'.
[  101.515071][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'.
[  101.515409][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.702'.
[  101.734533][ T8565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.779990][ T8569] netlink: 236 bytes leftover after parsing attributes in process `syz.0.708'.
[  101.956761][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'.
[  101.975299][ T8580] bond1: (slave vcan0): Releasing backup interface
[  101.977371][ T8580] vcan0 (unregistering): left promiscuous mode
[  101.999215][ T8580] bond1: Destroying bond
[  102.061433][ T8580] bond1 (unregistering): Released all slaves
[  102.093547][ T8587] macvlan3: entered promiscuous mode
[  102.095267][ T8587] macvlan3: entered allmulticast mode
[  102.264430][ T8608] netlink: 'syz.0.715': attribute type 282 has an invalid length.
[  102.422663][ T8630] netlink: 'syz.0.719': attribute type 21 has an invalid length.
[  102.425060][ T8630] netlink: 128 bytes leftover after parsing attributes in process `syz.0.719'.
[  102.427924][ T8630] netlink: 'syz.0.719': attribute type 4 has an invalid length.
[  102.430315][ T8630] netlink: 'syz.0.719': attribute type 5 has an invalid length.
[  102.523052][ T8643] netlink: 'syz.0.722': attribute type 10 has an invalid length.
[  102.563295][ T8647] netlink: 'syz.0.723': attribute type 32 has an invalid length.
[  102.565801][ T8647] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  102.655140][ T8656] netlink: 'syz.0.725': attribute type 4 has an invalid length.
[  102.791799][ T8668] nbd: must specify at least one socket
[  102.797019][ T8669] nbd: must specify at least one socket
[  102.861725][ T5878] tipc: Node number set to 2167506256
[  102.946894][ T8672] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  102.952662][ T8672] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  103.285002][ T8702] netlink: 'syz.2.731': attribute type 1 has an invalid length.
[  103.358121][ T8708] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  103.840539][ T8748] netlink: 'syz.2.742': attribute type 4 has an invalid length.
[  103.889782][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.893340][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.955697][ T8759] netlink: 'syz.2.744': attribute type 6 has an invalid length.
[  104.066183][ T8773] xt_bpf: check failed: parse error
[  104.268456][ T8799] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  105.167060][ T8856] xt_hashlimit: max too large, truncated to 1048576
[  106.045334][ T8921] bond5: (slave bridge1): making interface the new active one
[  106.048062][ T8921] bond5: (slave bridge1): Enslaving as an active interface with an up link
[  106.096445][ T8928] __nla_validate_parse: 18 callbacks suppressed
[  106.096457][ T8928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.772'.
[  106.573578][ T8949] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  107.829956][ T9017] netlink: 100 bytes leftover after parsing attributes in process `syz.0.784'.
[  107.835933][ T9018] netlink: 100 bytes leftover after parsing attributes in process `syz.0.784'.
[  107.983474][ T9031] netlink: 248 bytes leftover after parsing attributes in process `syz.0.788'.
[  108.152607][ T9048] x_tables: duplicate underflow at hook 1
[  108.620224][ T9075] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.627306][ T9075] syzkaller0: entered promiscuous mode
[  108.630551][ T9075] syzkaller0: entered allmulticast mode
[  108.649583][ T9075] tipc: Resetting bearer <eth:syzkaller0>
[  108.675629][ T9074] tipc: Resetting bearer <eth:syzkaller0>
[  108.689952][ T9074] tipc: Disabling bearer <eth:syzkaller0>
[  108.784585][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'.
[  108.846078][ T9093] macvlan4: entered allmulticast mode
[  108.847904][ T9093] veth1_vlan: entered allmulticast mode
[  108.851545][ T9093] veth1_vlan: left allmulticast mode
[  109.208657][ T9121] netlink: 32 bytes leftover after parsing attributes in process `syz.0.802'.
[  109.252826][ T9124] nbd: nbd0 already in use
[  109.254604][ T9124] block nbd0: NBD_DISCONNECT
[  109.256046][ T9124] block nbd0: Send disconnect failed -32
[  110.039563][ T9135] validate_nla: 4 callbacks suppressed
[  110.039581][ T9135] netlink: 'syz.2.806': attribute type 1 has an invalid length.
[  110.067168][ T9135] 8021q: adding VLAN 0 to HW filter on device bond4
[  110.083116][ T9135] bond4: (slave wlan0): Enslaving as an active interface with a down link
[  111.231532][ T9171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.816'.
[  111.447246][ T9191] netlink: 76 bytes leftover after parsing attributes in process `syz.2.823'.
[  111.450551][ T9191] sctp: [Deprecated]: syz.2.823 (pid 9191) Use of int in max_burst socket option.
[  111.450551][ T9191] Use struct sctp_assoc_value instead
[  111.756816][ T9219] syz.2.832 uses old SIOCAX25GETINFO
[  111.813036][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.834'.
[  111.816510][ T9223] openvswitch: netlink: Flow actions attr not present in new flow.
[  111.864031][ T9226] ieee802154 phy0 wpan0: encryption failed: -22
[  111.866345][ T9226] netlink: 196 bytes leftover after parsing attributes in process `syz.2.835'.
[  112.019331][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.837'.
[  112.022827][ T9233] netlink: 'syz.2.837': attribute type 1 has an invalid length.
[  112.025221][ T9233] netlink: 'syz.2.837': attribute type 2 has an invalid length.
[  112.128456][ T9239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.840'.
[  112.270310][ T9254] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.273450][ T9254] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.276413][ T9254] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.278970][ T9254] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.343815][ T9258] netlink: 'syz.0.844': attribute type 12 has an invalid length.
[  112.389994][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'.
[  112.565230][ T9272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.849'.
[  113.397525][ T9280] netlink: 164 bytes leftover after parsing attributes in process `syz.0.851'.
[  113.588569][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'.
[  113.588951][ T9299] netlink: 'syz.2.858': attribute type 5 has an invalid length.
[  113.600775][ T9299] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  113.605006][ T9299] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  113.606478][ T9298] netlink: 'syz.2.858': attribute type 5 has an invalid length.
[  113.608239][ T9299] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  113.616190][ T9299] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  113.620078][ T9299] geneve2: entered promiscuous mode
[  113.622639][ T9299] geneve2: entered allmulticast mode
[  113.661227][ T9306] netlink: 'syz.0.861': attribute type 1 has an invalid length.
[  113.679475][ T9306] 8021q: adding VLAN 0 to HW filter on device bond6
[  113.684335][ T9307] bond6: entered promiscuous mode
[  113.806422][ T9322] netlink: 'syz.0.863': attribute type 1 has an invalid length.
[  113.810127][ T9322] netlink: 'syz.0.863': attribute type 1 has an invalid length.
[  113.814773][ T9322] netlink: 'syz.0.863': attribute type 3 has an invalid length.
[  113.992513][ T9340] x_tables: duplicate underflow at hook 1
[  114.128790][ T9346] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  115.289980][ T9419] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  115.295231][ T9419] gretap2: entered promiscuous mode
[  115.296894][ T9419] gretap2: entered allmulticast mode
[  115.599012][ T9453] lo: entered promiscuous mode
[  116.419071][ T9452] lo: left promiscuous mode
[  116.694881][ T9473] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  116.699048][ T9473] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  116.699075][ T9474] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  117.060033][ T9488] __nla_validate_parse: 11 callbacks suppressed
[  117.060049][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'.
[  117.073767][ T9488] netlink: 'syz.2.910': attribute type 5 has an invalid length.
[  117.076700][ T9488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.910'.
[  117.227804][ T5221] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  117.232647][ T5221] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  117.235842][ T5221] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  117.244663][ T5221] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  117.247456][ T5221] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  117.371668][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'.
[  117.516082][ T9500] chnl_net:caif_netlink_parms(): no params data found
[  117.669676][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.673654][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.675893][ T9500] bridge_slave_0: entered allmulticast mode
[  117.683431][ T9500] bridge_slave_0: entered promiscuous mode
[  117.691729][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.693914][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.696084][ T9500] bridge_slave_1: entered allmulticast mode
[  117.699114][ T9500] bridge_slave_1: entered promiscuous mode
[  117.743841][ T9500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.750767][ T9500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.806916][ T9500] team0: Port device team_slave_0 added
[  117.830260][ T9500] team0: Port device team_slave_1 added
[  117.950668][ T9540] netlink: 256 bytes leftover after parsing attributes in process `syz.0.917'.
[  117.966688][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.968784][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.989885][ T9500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.002232][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.004429][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.020963][ T9500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.129307][ T9500] hsr_slave_0: entered promiscuous mode
[  118.154162][ T9500] hsr_slave_1: entered promiscuous mode
[  118.156236][ T9500] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  118.160410][ T9500] Cannot create hsr debugfs directory
[  118.423127][ T9500] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  118.427632][ T9500] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  118.432125][ T9500] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  118.436563][ T9500] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  118.458306][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.460532][ T9500] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.462844][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.464983][ T9500] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.513799][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.516916][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.529836][ T9500] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.544015][ T9500] 8021q: adding VLAN 0 to HW filter on device team0
[  118.549485][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.551735][ T6135] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.558346][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.560573][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.748773][ T9500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.798844][ T9500] veth0_vlan: entered promiscuous mode
[  118.813238][ T9500] veth1_vlan: entered promiscuous mode
[  118.844118][ T9500] veth0_macvtap: entered promiscuous mode
[  118.852276][ T9500] veth1_macvtap: entered promiscuous mode
[  118.872978][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.883878][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.894421][ T9500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.897122][ T9500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.911919][ T9500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.914583][ T9500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.998657][ T6135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.001583][ T6135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.057350][ T6135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.059918][ T6135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.201296][ T9601] netlink: 32 bytes leftover after parsing attributes in process `syz.3.909'.
[  119.260781][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'.
[  119.313118][   T55] Bluetooth: hci3: command tx timeout
[  119.405413][ T9619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.925'.
[  119.732567][ T9646] xt_cgroup: path and classid specified
[  119.734867][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'.
[  120.332607][ T9685] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  120.336005][ T9688] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  120.344353][ T9685] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  120.353961][ T9685] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  120.506447][ T9698] netlink: 'syz.0.940': attribute type 1 has an invalid length.
[  120.595147][ T9698] 8021q: adding VLAN 0 to HW filter on device bond7
[  120.619882][ T9701] bond7: (slave veth3): Enslaving as an active interface with a down link
[  120.699440][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'.
[  120.704611][ T9708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.941'.
[  120.886326][ T9729] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  121.136592][ T9761] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  121.137078][ T9755] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  121.170330][ T9755] netlink: 'syz.3.952': attribute type 7 has an invalid length.
[  121.198703][ T9755] : entered promiscuous mode
[  121.417136][ T5221] Bluetooth: hci3: command tx timeout
[  121.616115][ T9798] netlink: 'syz.2.959': attribute type 10 has an invalid length.
[  121.618526][ T9798] netem: change failed
[  121.705807][ T9808] netlink: 'syz.2.961': attribute type 20 has an invalid length.
[  121.749390][ T9811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.810789][ T9816] syzkaller1: entered promiscuous mode
[  121.813767][ T9816] syzkaller1: entered allmulticast mode
[  122.093715][ T9837] __nla_validate_parse: 10 callbacks suppressed
[  122.093727][ T9837] netlink: 108 bytes leftover after parsing attributes in process `syz.0.965'.
[  122.208349][ T9847] netlink: 'syz.0.966': attribute type 1 has an invalid length.
[  122.213751][ T9847] netlink: 240 bytes leftover after parsing attributes in process `syz.0.966'.
[  122.344215][ T9856] sctp: [Deprecated]: syz.0.969 (pid 9856) Use of struct sctp_assoc_value in delayed_ack socket option.
[  122.344215][ T9856] Use struct sctp_sack_info instead
[  122.573772][ T9876] netlink: 'syz.0.974': attribute type 2 has an invalid length.
[  122.583831][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'.
[  122.782312][ T9886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.977'.
[  122.785185][ T9886] tc_dump_action: action bad kind
[  122.835264][ T9892] bridge0: port 1(veth0_to_bridge) entered blocking state
[  122.837703][ T9892] bridge0: port 1(veth0_to_bridge) entered disabled state
[  122.839976][ T9892] veth0_to_bridge: entered allmulticast mode
[  122.844276][ T9892] veth0_to_bridge: entered promiscuous mode
[  122.846652][ T9892] bridge0: port 1(veth0_to_bridge) entered blocking state
[  122.848942][ T9892] bridge0: port 1(veth0_to_bridge) entered forwarding state
[  123.018352][ T9912] netlink: 'syz.0.986': attribute type 1 has an invalid length.
[  123.022438][ T9912] netlink: 224 bytes leftover after parsing attributes in process `syz.0.986'.
[  123.033463][ T9912] netlink: 'syz.0.986': attribute type 3 has an invalid length.
[  123.472292][ T5221] Bluetooth: hci3: command 0x040f tx timeout
[  123.940554][ T9956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  123.951574][ T9956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.956282][ T9956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  124.037062][ T9956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.040292][ T9956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.044233][ T9956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  124.098358][ T9956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.102208][ T9956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.105467][ T9956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  124.164505][ T9956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.168002][ T9956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.171261][ T9956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  124.259488][ T9956] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.263271][ T9956] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  124.265784][ T9956] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  124.274371][ T9956] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.276960][ T9956] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  124.279630][ T9956] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  124.288351][ T9956] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.291197][ T9956] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  124.293784][ T9956] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  124.306149][ T9956] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.308698][ T9956] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  124.311676][ T9956] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  124.467658][ T9980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1000'.
[  124.605014][ T9982] veth0_vlan: entered allmulticast mode
[  124.619481][ T9982] : renamed from vlan0
[  124.986667][ T9989] netlink: 'syz.0.1004': attribute type 1 has an invalid length.
[  125.077777][ T9996] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1006'.
[  125.185862][T10003] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.189258][T10003] netlink: 'syz.0.1009': attribute type 1 has an invalid length.
[  125.193913][T10003] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1009'.
[  125.196969][T10003] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  125.199352][T10003] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  125.275498][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'.
[  125.278687][T10011] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1012'.
[  125.561477][   T55] Bluetooth: hci3: command 0x040f tx timeout
[  125.645712][T10045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.715188][T10056] netlink: 'syz.3.1024': attribute type 16 has an invalid length.
[  125.717563][T10056] netlink: 'syz.3.1024': attribute type 3 has an invalid length.
[  126.177111][T10062] delete_channel: no stack
[  126.683813][T10080] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  126.758471][T10092] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  126.782279][T10080] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  126.785925][T10080] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.788803][T10080] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.791663][T10080] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.794351][T10080] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.807625][T10080] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.810409][T10080] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.815169][T10080] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.817849][T10080] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.829661][T10080] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  126.834288][T10080] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  126.836920][T10080] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  126.839532][T10080] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  126.846064][T10080] geneve3: left promiscuous mode
[  126.847582][T10080] geneve3: left allmulticast mode
[  126.852730][T10080] tipc: Resetting bearer <eth:syzkaller0>
[  126.860563][T10080] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  126.863120][T10080] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  126.870263][T10080] erspan0: left allmulticast mode
[  126.872566][T10080] macvtap1: left promiscuous mode
[  126.874140][T10080] macvtap1: left allmulticast mode
[  126.878587][T10080] bond6: left promiscuous mode
[  126.880138][T10080] gretap2: left promiscuous mode
[  126.883557][T10080] gretap2: left allmulticast mode
[  126.894307][  T791] syz1: Port: 1 Link DOWN
[  126.897207][T10084] IPv6: sit1: Disabled Multicast RS
[  126.967596][T10099] netlink: 'syz.0.1036': attribute type 5 has an invalid length.
[  127.032705][T10109] SET target dimension over the limit!
[  127.084530][T10101] netlink: 'syz.3.1037': attribute type 39 has an invalid length.
[  127.280173][T10124] __nla_validate_parse: 12 callbacks suppressed
[  127.280184][T10124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1042'.
[  127.285414][T10123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1042'.
[  127.299587][T10122] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1042'.
[  127.311353][T10122] gretap0: entered promiscuous mode
[  127.318302][T10122] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1042'.
[  127.321398][T10122] 0{X: renamed from gretap0
[  127.324288][T10122] 0{X: left promiscuous mode
[  127.325856][T10122] 0{X: entered allmulticast mode
[  127.329231][T10122] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  127.429378][T10131] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1045'.
[  127.527246][T10139] tipc: Started in network mode
[  127.529229][T10139] tipc: Node identity a2e73055abac, cluster identity 4711
[  127.532123][T10139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.535162][T10139] D: renamed from syzkaller0
[  127.537611][T10139] tipc: Disabling bearer <eth:syzkaller0>
[  127.630518][T10143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1050'.
[  127.635251][   T55] Bluetooth: hci3: command 0x040f tx timeout
[  127.684372][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'.
[  127.728276][T10147] netlink: 'syz.3.1052': attribute type 20 has an invalid length.
[  128.043220][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'.
[  128.046865][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'.
[  128.868211][T10184] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1063'.
[  128.980051][T10194] xt_hashlimit: size too large, truncated to 1048576
[  129.502836][T10222] netlink: 'syz.3.1073': attribute type 1 has an invalid length.
[  129.847987][T10250] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  129.850353][T10250] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  130.208164][T10284] pimreg: entered allmulticast mode
[  130.551188][T10296] 0: renamed from hsr_slave_1 (while UP)
[  130.572224][T10296] 0: entered allmulticast mode
[  130.574283][T10296] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  130.859049][T10320] vti0: entered promiscuous mode
[  131.078318][T10339] netlink: 'syz.2.1108': attribute type 1 has an invalid length.
[  131.623328][T10367] bond5: (slave bridge1): Releasing active interface
[  131.627832][T10367] bond7: (slave veth3): Releasing active interface
[  131.683708][T10369] syzkaller1: entered promiscuous mode
[  131.685515][T10369] syzkaller1: entered allmulticast mode
[  132.003782][T10389] netlink: 'syz.2.1121': attribute type 11 has an invalid length.
[  132.158959][T10406] bond0: (slave rose0): Error: Device can not be enslaved while up
[  132.255092][T10414] netlink: 'syz.2.1130': attribute type 30 has an invalid length.
[  132.257928][T10414] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  132.260639][T10414] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  132.280098][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.287249][T10414] __nla_validate_parse: 25 callbacks suppressed
[  132.287258][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1130'.
[  132.326695][T10418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.328897][T10418] IPv6: NLM_F_CREATE should be set when creating new route
[  132.331089][T10418] IPv6: NLM_F_CREATE should be set when creating new route
[  132.337721][T10418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.341181][T10418] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1132'.
[  132.356253][    T9] hid-generic 0005:0B57:0006.0003: collection stack underflow
[  132.368267][    T9] hid-generic 0005:0B57:0006.0003: item 0 2 0 12 parsing failed
[  132.376265][    T9] hid-generic 0005:0B57:0006.0003: probe with driver hid-generic failed with error -22
[  132.438736][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'.
[  132.511507][T10440] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  132.652256][T10452] netlink: 'syz.2.1141': attribute type 3 has an invalid length.
[  132.655166][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'.
[  132.852168][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'.
[  132.870004][T10465] raw_sendmsg: syz.2.1144 forgot to set AF_INET. Fix it!
[  133.775826][T10492] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1153'.
[  133.780028][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'.
[  133.784904][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'.
[  133.787678][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1153'.
[  133.796233][T10492] netlink: 'syz.0.1153': attribute type 1 has an invalid length.
[  133.798936][T10492] netlink: 'syz.0.1153': attribute type 19 has an invalid length.
[  133.977068][T10507] netlink: 'syz.0.1158': attribute type 30 has an invalid length.
[  134.010344][T10510] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  134.037976][T10512] netlink: 'syz.0.1160': attribute type 1 has an invalid length.
[  134.047104][T10512] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1160'.
[  134.563442][T10538] netlink: 'syz.0.1167': attribute type 3 has an invalid length.
[  135.019350][T10575] sctp: [Deprecated]: syz.2.1175 (pid 10575) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.019350][T10575] Use struct sctp_sack_info instead
[  135.129728][T10587] batadv1: entered promiscuous mode
[  135.131632][T10587] batadv1: entered allmulticast mode
[  135.293520][T10602] mac80211_hwsim hwsim4 ": renamed from wlan0
[  135.656518][T10618] netlink: 'syz.0.1189': attribute type 21 has an invalid length.
[  135.658966][T10618] netlink: 'syz.0.1189': attribute type 6 has an invalid length.
[  136.205861][T10639] bridge0: port 1(veth0_to_bridge) entered disabled state
[  136.294359][T10646] sock: sock_timestamping_bind_phc: sock not bind to device
[  136.355838][T10639] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  136.358580][T10639] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  136.363742][T10639] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  136.366691][T10639] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  136.399344][T10639] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.402285][T10639] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.404864][T10639] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.407488][T10639] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.424836][T10639] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  136.427574][T10639] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  136.430143][T10639] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  136.433440][T10639] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  136.561421][T10654] xt_CT: No such helper "snmp"
[  137.376608][T10706] netlink: del zone limit has 4 unknown bytes
[  137.379946][T10721] netlink: 'syz.3.1211': attribute type 12 has an invalid length.
[  137.382939][T10721] __nla_validate_parse: 13 callbacks suppressed
[  137.382947][T10721] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1211'.
[  137.568743][T10728] netlink: 'syz.3.1212': attribute type 1 has an invalid length.
[  137.577356][T10728] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1212'.
[  137.627829][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'.
[  137.630966][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'.
[  137.635577][T10735] netlink: 'syz.3.1215': attribute type 7 has an invalid length.
[  137.647521][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'.
[  137.663674][T10735] xt_limit: Overflow, try lower: 262144/524288
[  137.686829][T10739] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1216'.
[  138.265045][T10779] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  138.268130][T10779] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  138.514385][T10788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1231'.
[  138.517273][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'.
[  138.548068][T10790] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1232'.
[  138.588637][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1233'.
[  138.687580][T10798] x_tables: duplicate underflow at hook 2
[  138.689546][T10800] x_tables: duplicate underflow at hook 2
[  140.096457][T10819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.482303][T10836] batadv1: entered promiscuous mode
[  140.484482][T10836] batadv1: entered allmulticast mode
[  140.536014][T10842] validate_nla: 2 callbacks suppressed
[  140.536027][T10842] netlink: 'syz.0.1249': attribute type 13 has an invalid length.
[  140.540741][T10842] netlink: 'syz.0.1249': attribute type 17 has an invalid length.
[  140.550426][T10842] erspan0: left promiscuous mode
[  140.564124][T10842] 8021q: adding VLAN 0 to HW filter on device team0
[  140.567369][T10842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.697665][T10848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.757332][T10848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.817532][T10848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.008011][T10860] sctp: [Deprecated]: syz.3.1254 (pid 10860) Use of int in max_burst socket option.
[  141.008011][T10860] Use struct sctp_assoc_value instead
[  141.066231][T10862] bridge0: port 3(macsec0) entered blocking state
[  141.068475][T10862] bridge0: port 3(macsec0) entered disabled state
[  141.070578][T10862] macsec0: entered allmulticast mode
[  141.073549][T10862] veth1_macvtap: entered allmulticast mode
[  141.076409][T10862] macsec0: entered promiscuous mode
[  141.079707][T10862] bridge0: port 3(macsec0) entered blocking state
[  141.081935][T10862] bridge0: port 3(macsec0) entered forwarding state
[  141.365997][T10874] team0 (unregistering): Port device team_slave_0 removed
[  141.371832][T10874] team0 (unregistering): Port device team_slave_1 removed
[  141.465663][T10880] netlink: 'syz.2.1262': attribute type 1 has an invalid length.
[  141.548905][T10880] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  141.560702][T10880] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  141.708146][T10901] netlink: 'syz.0.1267': attribute type 1 has an invalid length.
[  141.991006][T10916] x_tables: duplicate underflow at hook 1
[  142.067223][T10924] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  142.070147][T10924] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  142.198063][T10929] --map-set only usable from mangle table
[  142.974243][T10940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  142.976999][T10940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  142.991182][T10940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  142.993904][T10940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  143.004952][T10948] __nla_validate_parse: 11 callbacks suppressed
[  143.004962][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1282'.
[  143.014382][T10940] geneve4: entered promiscuous mode
[  143.062517][T10957] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1282'.
[  143.277744][T10970] lo: entered allmulticast mode
[  143.324518][T10975] sctp: [Deprecated]: syz.2.1288 (pid 10975) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.324518][T10975] Use struct sctp_sack_info instead
[  143.570789][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'.
[  143.585385][T10985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1291'.
[  143.604174][T10985] bridge3: port 1(veth0_to_bond) entered blocking state
[  143.608624][T10985] bridge3: port 1(veth0_to_bond) entered disabled state
[  143.611719][T10985] veth0_to_bond: entered allmulticast mode
[  143.614509][T10985] veth0_to_bond: entered promiscuous mode
[  143.626476][T10985] bridge3: port 2(vlan3) entered blocking state
[  143.629623][T10985] bridge3: port 2(vlan3) entered disabled state
[  143.632393][T10985] vlan3: entered allmulticast mode
[  143.634240][T10985] veth1: entered allmulticast mode
[  143.636964][T10985] vlan3: entered promiscuous mode
[  143.638528][T10985] veth1: entered promiscuous mode
[  143.681349][T10991] netlink: 'syz.3.1293': attribute type 2 has an invalid length.
[  143.699499][T10994] IPVS: Error connecting to the multicast addr
[  143.707904][T10994] netlink: del zone limit has 4 unknown bytes
[  143.739690][T10998] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  143.767448][T10999] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  143.770466][T10999] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  143.850587][T11007] netlink: 'syz.0.1298': attribute type 10 has an invalid length.
[  143.883395][T11012] netlink: 'syz.2.1300': attribute type 1 has an invalid length.
[  143.934421][T11012] bond6: (slave bridge7): making interface the new active one
[  143.937095][T11012] bond6: (slave bridge7): Enslaving as an active interface with an up link
[  143.942353][T11012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.947241][T11012] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  144.027404][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'.
[  144.030085][T11022] netlink: 'syz.3.1302': attribute type 1 has an invalid length.
[  144.090118][T11025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1303'.
[  144.096052][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'.
[  144.103205][T11025] veth6: entered allmulticast mode
[  144.483865][T11049] veth3: entered promiscuous mode
[  144.509105][T11036] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1305'.
[  144.572655][T11033] Bluetooth: MGMT ver 1.23
[  144.771883][T11066] lo speed is unknown, defaulting to 1000
[  144.774270][T11066] lo speed is unknown, defaulting to 1000
[  144.791452][T11066] lo speed is unknown, defaulting to 1000
[  144.819391][T11066] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  144.919626][T11066] lo speed is unknown, defaulting to 1000
[  144.924800][T11066] lo speed is unknown, defaulting to 1000
[  144.941401][T11066] lo speed is unknown, defaulting to 1000
[  144.944930][T11066] lo speed is unknown, defaulting to 1000
[  145.074326][T11083] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.077047][T11083] ieee802154 phy0 wpan0: encryption failed: -22
[  145.079340][T11083] syzkaller0: entered promiscuous mode
[  145.081534][T11083] syzkaller0: entered allmulticast mode
[  145.087475][T11083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1314'.
[  145.110208][T11083] tipc: Resetting bearer <eth:syzkaller0>
[  145.114920][T11081] tipc: Resetting bearer <eth:syzkaller0>
[  145.126523][T11081] tipc: Disabling bearer <eth:syzkaller0>
[  145.139062][T11091] netlink: 'syz.2.1318': attribute type 1 has an invalid length.
[  145.141739][T11091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1318'.
[  145.245229][T11101] xt_bpf: check failed: parse error
[  145.612775][T11114] lo speed is unknown, defaulting to 1000
[  145.837351][T11148] x_tables: unsorted entry at hook 3
[  146.665306][T11234] netlink: 'syz.2.1358': attribute type 10 has an invalid length.
[  146.670194][T11234] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  146.688016][T11242] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  147.639819][T11269] bridge4: port 1(veth7) entered blocking state
[  147.642949][T11269] bridge4: port 1(veth7) entered disabled state
[  147.644888][T11269] veth7: entered allmulticast mode
[  147.647438][T11269] veth7: entered promiscuous mode
[  147.652337][T11269] veth0_to_bond: left allmulticast mode
[  147.654066][T11269] veth0_to_bond: left promiscuous mode
[  147.655869][T11269] bridge3: port 1(veth0_to_bond) entered disabled state
[  147.660517][T11269] bridge4: port 2(veth0_to_bond) entered blocking state
[  147.663021][T11269] bridge4: port 2(veth0_to_bond) entered disabled state
[  147.665177][T11269] veth0_to_bond: entered allmulticast mode
[  147.667956][T11269] veth0_to_bond: entered promiscuous mode
[  147.736160][T11278] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.763193][T11280] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  147.765924][T11280] team0: Device ipvlan2 is already an upper device of the team interface
[  147.914471][T11298] bond_slave_1: entered allmulticast mode
[  147.916428][T11298] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  147.925045][T11300] netlink: 'syz.3.1379': attribute type 4 has an invalid length.
[  147.980672][T11305] netlink: 'syz.3.1380': attribute type 2 has an invalid length.
[  147.992736][T11305] : entered promiscuous mode
[  148.185745][T11324] __nla_validate_parse: 19 callbacks suppressed
[  148.185758][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'.
[  148.235774][T11306] lo speed is unknown, defaulting to 1000
[  148.239491][T11326] netlink: 'syz.0.1387': attribute type 39 has an invalid length.
[  148.319430][T11329] tipc: Cannot configure node identity twice
[  148.324931][T11331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1389'.
[  148.327714][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'.
[  148.435902][T11344] xt_CT: No such helper "snmp"
[  148.523477][T11347] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1393'.
[  148.526330][T11347] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  148.623905][T11352] tc_dump_action: action bad kind
[  148.627333][T11353] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  148.639983][T11352] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  148.649567][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'.
[  148.652923][T11352] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  148.669318][T11358] netlink: 81 bytes leftover after parsing attributes in process `syz.0.1398'.
[  148.687577][T11362] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1399'.
[  148.690409][T11362] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1399'.
[  148.775994][T11372] xt_CT: No such helper "snmp"
[  148.865407][T11383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1406'.
[  148.952729][T11394] syzkaller1: entered promiscuous mode
[  148.954509][T11394] syzkaller1: entered allmulticast mode
[  149.051795][T11401] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1412'.
[  149.912855][T11417] 8021q: VLANs not supported on nlmon0
[  149.916318][T11417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.226258][T11439] netlink: 'syz.3.1424': attribute type 4 has an invalid length.
[  150.315767][T11445] netlink: 'syz.3.1427': attribute type 21 has an invalid length.
[  150.318266][T11445] netlink: 'syz.3.1427': attribute type 4 has an invalid length.
[  150.320636][T11445] netlink: 'syz.3.1427': attribute type 5 has an invalid length.
[  150.621861][T11469] openvswitch: netlink: Flow actions attr not present in new flow.
[  150.685441][T11473] x_tables: duplicate underflow at hook 1
[  150.917380][T11480] bridge_slave_0: left allmulticast mode
[  150.919796][T11480] bridge_slave_0: left promiscuous mode
[  150.922573][T11480] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.928569][T11480] bridge_slave_1: left allmulticast mode
[  150.930602][T11480] bridge_slave_1: left promiscuous mode
[  150.934477][T11480] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.940584][T11480] bond0: (slave bond_slave_0): Releasing backup interface
[  150.952995][T11480] bond0: (slave bond_slave_1): Releasing backup interface
[  150.966945][T11480] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.970488][T11480] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.973921][T11480] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.976316][T11480] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.982829][T11480] macsec0: left allmulticast mode
[  150.984415][T11480] veth1_macvtap: left allmulticast mode
[  150.986090][T11480] macsec0: left promiscuous mode
[  150.988302][T11480] bridge0: port 3(macsec0) entered disabled state
[  150.999224][   T52] lo speed is unknown, defaulting to 1000
[  151.617735][T11511] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  151.703971][T11513] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  151.879884][T11525] xt_CT: No such helper "snmp"
[  151.885254][T11539] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  151.926138][T11542] trusted_key: syz.3.1455 sent an empty control message without MSG_MORE.
[  151.972888][T11545] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  151.985680][T11530] veth0_to_bridge: left allmulticast mode
[  151.987633][T11530] veth0_to_bridge: left promiscuous mode
[  151.989702][T11530] bridge0: port 1(veth0_to_bridge) entered disabled state
[  151.997285][T11530] bond4: (slave wlan0): Releasing active interface
[  152.003388][T11530] bond0: (slave gretap1): Releasing backup interface
[  152.009486][T11530] bond6: (slave bridge7): Releasing active interface
[  152.026592][T11547] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  152.177902][T11555] netlink: 'syz.3.1459': attribute type 1 has an invalid length.
[  152.181810][T11555] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  152.189093][T11555] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  152.228292][T11557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.230904][T11557] syzkaller0: entered promiscuous mode
[  152.232581][T11557] syzkaller0: entered allmulticast mode
[  152.258175][T11557] tipc: Resetting bearer <eth:syzkaller0>
[  152.261565][T11556] tipc: Resetting bearer <eth:syzkaller0>
[  152.273137][T11556] tipc: Disabling bearer <eth:syzkaller0>
[  152.436364][T11564] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  152.622895][T11575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.676076][T11575] syzkaller0: entered promiscuous mode
[  152.677803][T11575] syzkaller0: entered allmulticast mode
[  152.689798][T11575] tipc: Resetting bearer <eth:syzkaller0>
[  152.702197][T11574] tipc: Resetting bearer <eth:syzkaller0>
[  152.713282][T11574] tipc: Disabling bearer <eth:syzkaller0>
[  153.465870][T11626] lo speed is unknown, defaulting to 1000
[  154.284869][T11648] 8021q: adding VLAN 0 to HW filter on device bond2
[  154.287426][T11648] bridge0: port 1(bond2) entered blocking state
[  154.289534][T11648] bridge0: port 1(bond2) entered disabled state
[  154.291754][T11648] bond2: entered allmulticast mode
[  154.300771][T11648] bond2: entered promiscuous mode
[  154.305079][T11648] bridge0: port 1(bond2) entered blocking state
[  154.308195][T11648] bridge0: port 1(bond2) entered forwarding state
[  154.316063][   T26] bridge0: port 1(bond2) entered disabled state
[  154.325802][T11648] __nla_validate_parse: 26 callbacks suppressed
[  154.325811][T11648] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1487'.
[  154.497555][T11657] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1490'.
[  154.542980][T11659] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1491'.
[  154.647165][T11668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1495'.
[  154.649929][T11668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1495'.
[  154.826664][T11675] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1497'.
[  154.874938][T11677] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1498'.
[  155.017064][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1503'.
[  155.100713][T11694] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1503'.
[  155.315315][T11710] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1505'.
[  156.313802][T11763] netlink: 'syz.3.1524': attribute type 1 has an invalid length.
[  156.330074][T11763] 8021q: adding VLAN 0 to HW filter on device bond3
[  156.357856][T11763] 8021q: adding VLAN 0 to HW filter on device bond3
[  156.360017][T11763] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  156.364038][T11763] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  156.487975][T11772] syzkaller0: entered promiscuous mode
[  156.489670][T11772] syzkaller0: entered allmulticast mode
[  156.514933][T11782] netlink: 'syz.0.1530': attribute type 23 has an invalid length.
[  157.467764][T11786] bond0 (unregistering): Released all slaves
[  157.615102][T11809] netlink: 'syz.2.1536': attribute type 1 has an invalid length.
[  157.755979][T11819] xt_CT: You must specify a L4 protocol and not use inversions on it
[  157.814317][T11826] bridge0: port 2(erspan0) entered blocking state
[  157.816415][T11826] bridge0: port 2(erspan0) entered disabled state
[  157.818597][T11826] erspan0: entered allmulticast mode
[  157.823012][T11826] erspan0: entered promiscuous mode
[  157.825168][T11826] bridge0: port 2(erspan0) entered blocking state
[  157.828027][T11826] bridge0: port 2(erspan0) entered forwarding state
[  157.838242][T11826] erspan0: left allmulticast mode
[  157.839836][T11826] erspan0: left promiscuous mode
[  157.843878][T11826] bridge0: port 2(erspan0) entered disabled state
[  158.143600][T11867] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.161785][T11867] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.164417][T11867] bond0: (slave vti1): The slave device specified does not support setting the MAC address
[  158.168148][T11867] bond0: (slave vti1): Error -95 calling set_mac_address
[  158.177077][T11872] veth0_vlan: entered allmulticast mode
[  158.185127][T11873] : renamed from vlan0
[  158.258642][T11881] netlink: 'syz.2.1556': attribute type 1 has an invalid length.
[  158.299402][T11884] wireguard0: entered promiscuous mode
[  158.710015][T11912] macsec1: entered promiscuous mode
[  159.014077][T11928] ip6t_rpfilter: unknown options
[  159.048666][T11932] netlink: 'syz.2.1574': attribute type 15 has an invalid length.
[  159.052253][T11932] netlink: 'syz.2.1574': attribute type 5 has an invalid length.
[  159.189051][T11940] x_tables: duplicate underflow at hook 3
[  159.218693][T11945] netlink: 'syz.0.1579': attribute type 28 has an invalid length.
[  159.349861][T11962] __nla_validate_parse: 15 callbacks suppressed
[  159.349874][T11962] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1584'.
[  159.360375][T11964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.437352][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'.
[  159.473282][T11979] xt_HMARK: spi-set and port-set can't be combined
[  159.475319][T11973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'.
[  159.735126][T11991] lo speed is unknown, defaulting to 1000
[  159.878631][T12007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.883763][T12007] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  159.886276][T12007] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  159.889297][T12007] tipc: Resetting bearer <eth:syzkaller0>
[  159.982145][T12007] tipc: Resetting bearer <eth:syzkaller0>
[  160.301622][T12032] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.1601'.
[  160.357201][T12036] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1602'.
[  160.360058][T12036] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1602'.
[  160.363668][T12036] lo: left allmulticast mode
[  160.365199][T12036] pimreg: left allmulticast mode
[  160.424127][T12036] lo speed is unknown, defaulting to 1000
[  160.428161][T12036] lo speed is unknown, defaulting to 1000
[  160.434634][T12036] lo speed is unknown, defaulting to 1000
[  160.477440][T12048] netlink: 'syz.2.1606': attribute type 1 has an invalid length.
[  160.493176][T12049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.521384][T12048] bond7: (slave bridge9): making interface the new active one
[  160.524255][T12048] bond7: (slave bridge9): Enslaving as an active interface with an up link
[  160.585505][T12036] infiniband syz0: set active
[  160.587059][ T5878] lo speed is unknown, defaulting to 1000
[  160.589247][T12036] infiniband syz0: added lo
[  160.645133][T12036] RDS/IB: syz0: added
[  160.646497][T12036] smc: adding ib device syz0 with port count 1
[  160.648557][T12036] smc:    ib device syz0 port 1 has pnetid 
[  160.653443][ T5878] lo speed is unknown, defaulting to 1000
[  160.665561][T12036] lo speed is unknown, defaulting to 1000
[  160.684808][T12058] netlink: 'syz.2.1608': attribute type 13 has an invalid length.
[  160.687436][T12058] netlink: 'syz.2.1608': attribute type 17 has an invalid length.
[  160.748592][T12061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.758531][T12061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.786190][T12058] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.868546][T12058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.877289][T12036] lo speed is unknown, defaulting to 1000
[  161.007588][T12036] lo speed is unknown, defaulting to 1000
[  161.122445][T12036] lo speed is unknown, defaulting to 1000
[  161.129290][T12067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1609'.
[  161.254468][T12036] lo speed is unknown, defaulting to 1000
[  161.315240][T12066] lo speed is unknown, defaulting to 1000
[  162.038911][T12088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.075453][T12090] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1616'.
[  162.078236][T12090] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1616'.
[  162.085408][T12090] netlink: 'syz.2.1616': attribute type 6 has an invalid length.
[  162.087744][T12090] netlink: 'syz.2.1616': attribute type 5 has an invalid length.
[  162.090075][T12090] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1616'.
[  162.135452][T12097] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  162.190730][T12101] sctp: [Deprecated]: syz.2.1620 (pid 12101) Use of int in maxseg socket option.
[  162.190730][T12101] Use struct sctp_assoc_value instead
[  163.143980][T12138] vlan0: entered promiscuous mode
[  163.146622][T12138] bridge0: entered promiscuous mode
[  163.148788][T12138] vlan0: entered allmulticast mode
[  163.150476][T12138] bridge0: entered allmulticast mode
[  163.238088][T12147] xt_hashlimit: max too large, truncated to 1048576
[  163.242073][T12149] xt_bpf: check failed: parse error
[  163.245143][T12147] Cannot find add_set index 3 as target
[  163.523708][T12163] tap0: tun_chr_ioctl cmd 1074025676
[  163.525529][T12163] tap0: owner set to 0
[  163.728508][T12178] validate_nla: 1 callbacks suppressed
[  163.728521][T12178] netlink: 'syz.0.1644': attribute type 1 has an invalid length.
[  164.190950][   T55] Bluetooth: hci0: command tx timeout
[  164.691781][T12233] __nla_validate_parse: 13 callbacks suppressed
[  164.691793][T12233] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1663'.
[  164.783463][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'.
[  164.787118][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'.
[  164.874217][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'.
[  164.880515][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'.
[  164.888976][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'.
[  164.900543][T12249] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  164.906139][   T10] lo speed is unknown, defaulting to 1000
[  164.907950][   T10] syz2: Port: 1 Link DOWN
[  164.968954][T12257] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  165.032989][T12257] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  165.076263][T12257] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  165.133822][T12257] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  165.190473][T12257] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  165.210114][T12257] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  165.225170][T12257] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  165.238027][T12257] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  165.364964][T12297] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1685'.
[  165.452036][T12304] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  165.515737][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1688'.
[  165.593826][T12317] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  165.639929][T12326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1694'.
[  165.797941][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'.
[  165.807227][T12343] blkio.reset_stats is deprecated
[  166.089602][T12370] openvswitch: netlink: Missing valid actions attribute.
[  166.096180][T12370] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.130107][T12375] netlink: 'syz.3.1708': attribute type 1 has an invalid length.
[  166.150793][T12375] 8021q: adding VLAN 0 to HW filter on device bond4
[  166.167050][T12375] bond4: (slave gretap1): making interface the new active one
[  166.172866][T12375] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  166.820695][T12438] lo speed is unknown, defaulting to 1000
[  166.827581][T12438] lo speed is unknown, defaulting to 1000
[  167.581049][T12502] netlink: 'syz.2.1732': attribute type 1 has an invalid length.
[  167.636538][T12502] bond8: (slave bridge10): making interface the new active one
[  167.647159][T12502] bond8: (slave bridge10): Enslaving as an active interface with an up link
[  167.781579][T12520] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.789825][T12520] syzkaller0: entered promiscuous mode
[  167.791987][T12520] syzkaller0: entered allmulticast mode
[  167.807655][T12520] tipc: Resetting bearer <eth:syzkaller0>
[  167.815116][T12519] tipc: Resetting bearer <eth:syzkaller0>
[  167.839128][T12519] tipc: Disabling bearer <eth:syzkaller0>
[  168.084143][T12542] xt_CONNSECMARK: invalid mode: 254
[  168.289166][T12554] netlink: 'syz.3.1748': attribute type 1 has an invalid length.
[  168.313494][T12554] bond5: (slave bridge4): making interface the new active one
[  168.316222][T12554] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  168.691400][T12592] netlink: 'syz.0.1757': attribute type 1 has an invalid length.
[  168.712322][T12596] netlink: 'syz.2.1758': attribute type 1 has an invalid length.
[  168.748527][T12596] 8021q: adding VLAN 0 to HW filter on device bond9
[  168.758066][T12592] bond10: (slave bridge6): making interface the new active one
[  168.762286][T12592] bond10: (slave bridge6): Enslaving as an active interface with an up link
[  169.349738][T12610] netlink: 'syz.3.1761': attribute type 1 has an invalid length.
[  169.365820][T12610] 8021q: adding VLAN 0 to HW filter on device bond6
[  169.535506][T12623] netlink: zone id is out of range
[  169.537315][T12623] netlink: zone id is out of range
[  169.539018][T12623] netlink: set zone limit has 4 unknown bytes
[  169.610672][T12628] netlink: 'syz.3.1767': attribute type 3 has an invalid length.
[  169.709105][T12632] __nla_validate_parse: 17 callbacks suppressed
[  169.709117][T12632] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1771'.
[  169.798582][T12644] netlink: 'syz.0.1773': attribute type 1 has an invalid length.
[  169.817214][ T2204] hid-generic 0005:0B57:0006.0004: collection stack underflow
[  169.826489][ T2204] hid-generic 0005:0B57:0006.0004: item 0 2 0 12 parsing failed
[  169.831401][ T2204] hid-generic 0005:0B57:0006.0004: probe with driver hid-generic failed with error -22
[  169.897120][T12656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.914893][T12656] syzkaller0: entered promiscuous mode
[  169.916629][T12656] syzkaller0: entered allmulticast mode
[  169.989066][T12656] tipc: Resetting bearer <eth:syzkaller0>
[  170.029037][T12654] tipc: Resetting bearer <eth:syzkaller0>
[  170.065757][T12654] tipc: Disabling bearer <eth:syzkaller0>
[  170.132670][T12667] veth1_to_team: entered allmulticast mode
[  170.146342][T12667] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  170.219586][T12679] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1781'.
[  170.266007][T12681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1782'.
[  170.307936][T12683] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1783'.
[  170.313111][T12683] openvswitch: netlink: Flow key attr not present in new flow.
[  170.468737][T12689] netlink: 'syz.3.1785': attribute type 13 has an invalid length.
[  170.471867][T12689] netlink: 'syz.3.1785': attribute type 17 has an invalid length.
[  170.496121][T12689] 0{X: left allmulticast mode
[  170.538655][T12689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.544119][  T791] lo speed is unknown, defaulting to 1000
[  170.545919][  T791] syz2: Port: 1 Link ACTIVE
[  170.621351][T12689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1785'.
[  170.632880][T12689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.681585][T12690] lo speed is unknown, defaulting to 1000
[  170.684484][T12690] lo speed is unknown, defaulting to 1000
[  170.691473][T12689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.769246][T12693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.447503][T12713] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1788'.
[  171.697074][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1792'.
[  171.699982][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1792'.
[  171.786039][T12729] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1795'.
[  171.860768][T12733] _Z`Ԁ@: entered promiscuous mode
[  172.001151][T12748] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1802'.
[  172.014139][T12749] netlink: 'syz.0.1801': attribute type 28 has an invalid length.
[  172.855270][T12767] 8021q: adding VLAN 0 to HW filter on device bond11
[  173.106630][T12794] erspan0: entered promiscuous mode
[  173.108428][T12794] macvtap1: entered promiscuous mode
[  173.110359][T12794] macvtap1: entered allmulticast mode
[  173.115777][T12794] erspan0: entered allmulticast mode
[  173.285402][T12811] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  173.382110][T12821] netlink: 'syz.2.1823': attribute type 7 has an invalid length.
[  173.387959][T12821] : entered promiscuous mode
[  173.527950][T12828] netlink: 'syz.2.1826': attribute type 1 has an invalid length.
[  173.530478][T12828] netlink: 'syz.2.1826': attribute type 1 has an invalid length.
[  173.533832][T12828] openvswitch: netlink: Flow actions attr not present in new flow.
[  173.542654][T12830] netlink: 'syz.2.1826': attribute type 1 has an invalid length.
[  174.085658][T12870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.349616][T12889] team1: entered promiscuous mode
[  174.353169][T12889] team1: entered allmulticast mode
[  174.767485][T12908] validate_nla: 1 callbacks suppressed
[  174.767498][T12908] netlink: 'syz.0.1851': attribute type 30 has an invalid length.
[  175.045703][T12916] __nla_validate_parse: 22 callbacks suppressed
[  175.045719][T12916] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1855'.
[  175.724791][T12922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.732119][T12922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1858'.
[  175.849936][T12929] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1860'.
[  175.854563][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1860'.
[  175.979581][T12945] xt_connbytes: Forcing CT accounting to be enabled
[  176.115450][T12954] netlink: 'syz.2.1869': attribute type 3 has an invalid length.
[  176.118114][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1869'.
[  176.845127][T12976] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1875'.
[  177.159249][T12981] netlink: 'syz.2.1877': attribute type 9 has an invalid length.
[  177.305049][T12995] netlink: 'syz.2.1882': attribute type 10 has an invalid length.
[  177.313238][T12998] netlink: 'syz.2.1882': attribute type 10 has an invalid length.
[  177.347157][T13004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1884'.
[  177.351585][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'.
[  177.366698][T13004] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1884'.
[  177.404170][T13005] netlink: 'syz.3.1885': attribute type 9 has an invalid length.
[  177.407007][T13005] netlink: 'syz.3.1885': attribute type 6 has an invalid length.
[  177.469734][T13007] xt_hashlimit: size too large, truncated to 1048576
[  178.090553][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1892'.
[  178.321706][T13029] lo speed is unknown, defaulting to 1000
[  178.327976][T13029] lo speed is unknown, defaulting to 1000
[  178.427577][T13044] netlink: 'syz.3.1895': attribute type 1 has an invalid length.
[  178.430342][T13044] netlink: 'syz.3.1895': attribute type 1 has an invalid length.
[  178.913697][T13074] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  179.006323][T13082] netlink: 'syz.2.1908': attribute type 9 has an invalid length.
[  179.703708][T13143] veth1_macvtap: mtu greater than device maximum
[  179.706157][T13143] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  180.123237][T13170] __nla_validate_parse: 16 callbacks suppressed
[  180.123248][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1938'.
[  180.162522][T13171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1938'.
[  180.210306][T13179] ieee802154 phy0 wpan0: encryption failed: -22
[  180.220607][T13179] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1939'.
[  180.393852][T13182] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1941'.
[  180.439769][T13184] _Z`Ԁ@: entered promiscuous mode
[  180.443422][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  180.565203][T13194] x_tables: duplicate underflow at hook 2
[  180.568182][T13194] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1945'.
[  180.887718][T13213] netlink: 'syz.2.1951': attribute type 1 has an invalid length.
[  180.908214][T13213] 8021q: adding VLAN 0 to HW filter on device bond10
[  180.932832][T13212] bond10: (slave veth7): Enslaving as an active interface with a down link
[  181.030453][T13223] syzkaller1: entered promiscuous mode
[  181.033966][T13223] syzkaller1: entered allmulticast mode
[  181.050532][T13223] xt_hashlimit: max too large, truncated to 1048576
[  181.174271][T13242] netlink: 'syz.0.1959': attribute type 1 has an invalid length.
[  181.195227][T13242] 8021q: adding VLAN 0 to HW filter on device bond12
[  181.217924][T13242] bond12: (slave veth11): Enslaving as an active interface with a down link
[  181.410684][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'.
[  181.577005][T13293] netlink: 'syz.0.1975': attribute type 10 has an invalid length.
[  181.579515][T13293] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  181.645033][ T5843] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  181.674414][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'.
[  182.495158][T13313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1980'.
[  182.527004][T13319] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1981'.
[  182.529952][T13319] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1981'.
[  182.564992][T13323] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  182.685292][T13340] netlink: 'syz.0.1988': attribute type 7 has an invalid length.
[  182.687693][T13340] netlink: 'syz.0.1988': attribute type 8 has an invalid length.
[  182.710145][T13343] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  182.713375][T13343] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.754389][T13347] pim6reg1: entered allmulticast mode
[  183.047942][T13372] vlan0: entered allmulticast mode
[  183.049560][T13372] v: entered allmulticast mode
[  183.070276][T13372] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  183.093358][T13378] bridge0: failed insert local address into bridge forwarding table
[  183.464940][T13412] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  183.559722][T13421] netlink: 'syz.3.2011': attribute type 2 has an invalid length.
[  183.569920][T13421] : entered promiscuous mode
[  183.593608][T13420] veth9: entered allmulticast mode
[  183.682002][T13424] syzkaller1: entered promiscuous mode
[  183.690170][T13424] syzkaller1: entered allmulticast mode
[  184.181912][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.185105][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.257499][T13446] netlink: 'syz.0.2021': attribute type 6 has an invalid length.
[  184.259950][T13446] netlink: 'syz.0.2021': attribute type 5 has an invalid length.
[  184.526949][T13483] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  184.529454][T13483] openvswitch: netlink: Message has 8454 unknown bytes.
[  184.529953][T13473] lo speed is unknown, defaulting to 1000
[  184.535422][T13473] lo speed is unknown, defaulting to 1000
[  185.325752][T13532] : renamed from batadv_slave_1
[  185.366813][T13532] __nla_validate_parse: 18 callbacks suppressed
[  185.366826][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2045'.
[  185.398246][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2048'.
[  185.576890][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2053'.
[  185.819286][T13569] nbd: must specify at least one socket
[  185.843848][T13577] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2057'.
[  185.871292][T13579] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2057'.
[  185.882286][T13572] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2056'.
[  186.065519][   T33] audit: type=1800 audit(1753091667.362:3): pid=13587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2056" name="memory.events" dev="tmpfs" ino=2002 res=0 errno=0
[  186.148769][T13606] sctp: [Deprecated]: syz.0.2063 (pid 13606) Use of int in max_burst socket option deprecated.
[  186.148769][T13606] Use struct sctp_assoc_value instead
[  186.154852][T13607] netlink: 'syz.2.2061': attribute type 1 has an invalid length.
[  186.157207][T13607] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2061'.
[  186.159936][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2061'.
[  186.237736][T13617] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  186.240797][T13614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2065'.
[  186.280643][T13619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.287541][   T52] hid-generic 0005:0B57:0006.0005: collection stack underflow
[  186.293509][   T52] hid-generic 0005:0B57:0006.0005: item 0 2 0 12 parsing failed
[  186.296344][   T52] hid-generic 0005:0B57:0006.0005: probe with driver hid-generic failed with error -22
[  186.321892][T13626] netlink: 'syz.0.2068': attribute type 1 has an invalid length.
[  186.324237][T13626] netlink: 'syz.0.2068': attribute type 2 has an invalid length.
[  186.355938][T13619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.434460][T13619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.500445][T13619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.569271][T13619] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.577320][T13619] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.586916][T13619] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.596515][T13619] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.611881][T13641] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2072'.
[  186.909697][T13666] syzkaller1: entered promiscuous mode
[  186.917978][T13666] syzkaller1: entered allmulticast mode
[  187.056753][T13682] macvlan0: entered promiscuous mode
[  187.058643][T13682] netlink: 'syz.2.2082': attribute type 1 has an invalid length.
[  187.061366][T13682] netlink: 'syz.2.2082': attribute type 2 has an invalid length.
[  187.219422][   T52] lo speed is unknown, defaulting to 1000
[  187.233436][T13694] IPv6: Can't replace route, no match found
[  187.416479][T13715] netlink: 'syz.2.2095': attribute type 3 has an invalid length.
[  187.428815][T13715] netlink: 'syz.2.2095': attribute type 1 has an invalid length.
[  188.283887][T13741] netlink: 'syz.0.2100': attribute type 13 has an invalid length.
[  188.384695][T13746] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  188.479862][T13756] netlink: 'syz.2.2105': attribute type 1 has an invalid length.
[  188.498248][T13756] 8021q: adding VLAN 0 to HW filter on device bond11
[  188.507111][T13760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.538613][T13756] 8021q: adding VLAN 0 to HW filter on device bond11
[  188.541756][T13756] bond11: (slave vcan0): The slave device specified does not support setting the MAC address
[  188.547175][T13756] bond11: (slave vcan0): Error -95 calling set_mac_address
[  188.578887][T13767] netlink: 'syz.0.2107': attribute type 11 has an invalid length.
[  188.663732][T13783] netlink: 'syz.2.2110': attribute type 15 has an invalid length.
[  188.713179][T13789] netlink: 'syz.0.2112': attribute type 11 has an invalid length.
[  189.977931][   T33] audit: type=1800 audit(1753091671.272:4): pid=13883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2142" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4054 res=0 errno=0
[  189.987432][   T33] audit: type=1800 audit(1753091671.272:5): pid=13883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2142" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4054 res=0 errno=0
[  190.000386][   T33] audit: type=1800 audit(1753091671.272:6): pid=13883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2142" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4054 res=0 errno=0
[  190.055209][T13886] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  190.377159][T13929] : renamed from pim6reg1
[  190.583497][T13950] syzkaller0: entered promiscuous mode
[  190.585371][T13950] syzkaller0: entered allmulticast mode
[  190.593887][T13952] __nla_validate_parse: 19 callbacks suppressed
[  190.593896][T13952] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2162'.
[  190.599920][T13953] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2162'.
[  191.708927][T13959] validate_nla: 3 callbacks suppressed
[  191.708938][T13959] netlink: 'syz.3.2164': attribute type 1 has an invalid length.
[  191.722757][T13959] netlink: 'syz.3.2164': attribute type 2 has an invalid length.
[  191.726012][T13959] netlink: 1164 bytes leftover after parsing attributes in process `syz.3.2164'.
[  191.867463][T13971] af_packet: tpacket_rcv: packet too big, clamped from 9920 to 3952. macoff=96
[  191.878136][T13971] netlink: del zone limit has 4 unknown bytes
[  192.008335][T13985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2172'.
[  192.017804][T13985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2172'.
[  192.042132][T13988] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2173'.
[  192.143161][T13991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.151395][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2174'.
[  192.615151][  T791] hid-generic 0005:0C45:1012.0006: item fetching failed at offset 0/1
[  192.618273][  T791] hid-generic 0005:0C45:1012.0006: probe with driver hid-generic failed with error -22
[  192.668771][T14051] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  192.671278][T14051] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  192.714361][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2195'.
[  192.749971][T14057] netlink: zone id is out of range
[  192.752360][T14057] netlink: zone id is out of range
[  192.754472][T14057] netlink: zone id is out of range
[  192.765412][T14057] netlink: zone id is out of range
[  192.767169][T14057] netlink: zone id is out of range
[  192.768877][T14057] netlink: zone id is out of range
[  192.933458][T14071] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2201'.
[  193.006227][T14077] netlink: 'syz.3.2203': attribute type 1 has an invalid length.
[  193.008764][T14077] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2203'.
[  193.018929][T14078] xt_CT: No such helper "snmp"
[  193.533279][T14124] vlan2: entered allmulticast mode
[  193.808602][T14143] netlink: 'syz.2.2224': attribute type 1 has an invalid length.
[  193.823350][T14143] 8021q: adding VLAN 0 to HW filter on device bond12
[  193.858807][T14143] bond12: (slave gretap2): making interface the new active one
[  193.863534][T14143] bond12: (slave gretap2): Enslaving as an active interface with an up link
[  193.910333][T14155] nbd: socks must be embedded in a SOCK_ITEM attr
[  193.976958][T14157] netlink: 'syz.0.2229': attribute type 3 has an invalid length.
[  195.188263][T14214] netlink: 'syz.0.2249': attribute type 1 has an invalid length.
[  195.233734][T14216] netlink: 'syz.0.2250': attribute type 1 has an invalid length.
[  195.236796][T14216] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  195.277802][T14222] netlink: 'syz.0.2251': attribute type 1 has an invalid length.
[  195.393408][T14228] netlink: 'syz.0.2253': attribute type 11 has an invalid length.
[  195.482695][T14238] Cannot find add_set index 3 as target
[  195.578615][T14234] lo speed is unknown, defaulting to 1000
[  195.581657][T14234] lo speed is unknown, defaulting to 1000
[  195.688917][T14242] lo speed is unknown, defaulting to 1000
[  195.701484][T14242] lo speed is unknown, defaulting to 1000
[  196.159135][T14270] netlink: 'syz.3.2267': attribute type 1 has an invalid length.
[  196.162556][T14272] Timeout policy `syz0' can only be used by L3 protocol number 37632
[  196.165333][T14270] __nla_validate_parse: 21 callbacks suppressed
[  196.165341][T14270] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2267'.
[  196.219400][T14276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2269'.
[  196.295831][T14286] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2273'.
[  197.167036][T14351] netlink: 'syz.0.2283': attribute type 13 has an invalid length.
[  197.171479][T14350] netlink: 'syz.0.2283': attribute type 1 has an invalid length.
[  197.228368][T14351] veth13: entered promiscuous mode
[  197.256359][T14355] veth13: entered promiscuous mode
[  197.266158][T14350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2283'.
[  197.277762][T14359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2286'.
[  197.396299][T14369] netlink: 136784 bytes leftover after parsing attributes in process `syz.0.2289'.
[  197.399685][T14369] net_ratelimit: 10 callbacks suppressed
[  197.399695][T14369] netlink: zone id is out of range
[  197.404000][T14369] netlink: zone id is out of range
[  197.405578][T14369] netlink: zone id is out of range
[  197.407824][T14369] netlink: zone id is out of range
[  197.409809][T14369] netlink: zone id is out of range
[  197.419700][T14369] netlink: zone id is out of range
[  197.421935][T14369] netlink: zone id is out of range
[  197.423609][T14369] netlink: zone id is out of range
[  197.425385][T14369] netlink: zone id is out of range
[  197.426982][T14369] netlink: zone id is out of range
[  197.674122][T14386] can: request_module (can-proto-0) failed.
[  197.738032][T14376] lo speed is unknown, defaulting to 1000
[  197.740598][T14376] lo speed is unknown, defaulting to 1000
[  197.883617][T14379] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2291'.
[  197.908786][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'.
[  197.991907][T14412] netlink: 'syz.0.2299': attribute type 15 has an invalid length.
[  198.766888][T14449] syzkaller1: entered promiscuous mode
[  198.771414][T14449] syzkaller1: entered allmulticast mode
[  198.779904][T14456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2307'.
[  199.073881][T14479] netlink: 'syz.0.2311': attribute type 1 has an invalid length.
[  199.080038][T14481] netlink: 'syz.3.2312': attribute type 2 has an invalid length.
[  199.103055][T14481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2312'.
[  199.108219][T14479] 8021q: adding VLAN 0 to HW filter on device bond13
[  199.155102][T14479] 8021q: adding VLAN 0 to HW filter on device bond13
[  199.157546][T14479] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address
[  199.163563][T14479] bond13: (slave vxcan1): Error -95 calling set_mac_address
[  199.179979][T14494] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003
[  199.369950][T14514] smc: net device bond0 applied user defined pnetid SYZ2
[  199.393058][T14514] smc: net device bond0 erased user defined pnetid SYZ2
[  199.437193][T14524] netlink: 'syz.3.2321': attribute type 2 has an invalid length.
[  199.439652][T14524] netlink: 'syz.3.2321': attribute type 1 has an invalid length.
[  199.449514][T14524] x_tables: duplicate underflow at hook 1
[  199.562936][T14535] netlink: 'syz.3.2325': attribute type 1 has an invalid length.
[  199.626288][T14543] veth0_to_bond: left allmulticast mode
[  199.628163][T14543] veth0_to_bond: left promiscuous mode
[  199.630001][T14543] bridge4: port 2(veth0_to_bond) entered disabled state
[  199.640423][T14543] vlan3: left allmulticast mode
[  199.642354][T14543] veth1: left allmulticast mode
[  199.644086][T14543] vlan3: left promiscuous mode
[  199.645545][T14543] veth1: left promiscuous mode
[  199.647203][T14543] bridge3: port 2(vlan3) entered disabled state
[  199.657537][T14543] veth7: left allmulticast mode
[  199.659140][T14543] veth7: left promiscuous mode
[  199.661137][T14543] bridge4: port 1(veth7) entered disabled state
[  199.666740][T14543] bond10: (slave bridge6): Releasing active interface
[  199.693663][T14543] bond12: (slave veth11): Releasing active interface
[  199.920294][T14576] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  200.831478][T14593] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  200.919769][T14604] atomic_op ffff88812744f998 conn xmit_atomic 0000000000000000
[  201.053399][T14614] netlink: 'syz.3.2351': attribute type 15 has an invalid length.
[  201.182791][T14631] __nla_validate_parse: 6 callbacks suppressed
[  201.182802][T14631] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2357'.
[  201.187356][T14631] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2357'.
[  201.189995][T14631] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2357'.
[  201.204304][T14631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2357'.
[  201.377329][T14644] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2359'.
[  201.382991][T14644] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2359'.
[  201.437953][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2359'.
[  202.266920][T14659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2361'.
[  202.278934][T14663] x_tables: duplicate underflow at hook 1
[  202.398567][T14676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2365'.
[  202.422340][T14661] Cannot find add_set index 3 as target
[  202.555461][T14692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2372'.
[  202.705298][T14716] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  202.745256][T14718] net_ratelimit: 4053 callbacks suppressed
[  202.745267][T14718] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  202.840388][T14721] 0X: renamed from gretap0 (while UP)
[  202.846004][T14721] 0X: entered allmulticast mode
[  202.847855][T14721] A link change request failed with some changes committed already. Interface 30X may have been left with an inconsistent configuration, please check.
[  202.950332][T14726] xt_CONNSECMARK: invalid mode: 254
[  203.046656][T14731] netlink: 'syz.2.2383': attribute type 1 has an invalid length.
[  203.267697][T14742] netlink: 'syz.2.2387': attribute type 2 has an invalid length.
[  203.520137][T14745] lo speed is unknown, defaulting to 1000
[  203.524150][T14745] lo speed is unknown, defaulting to 1000
[  203.814416][T14772] netlink: 'syz.3.2396': attribute type 10 has an invalid length.
[  203.822088][   T10] tipc: Node number set to 2983031300
[  203.892498][T14777] netlink: 'syz.3.2398': attribute type 10 has an invalid length.
[  204.049686][T14788] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  204.050196][T14789] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  204.539574][T14826] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  204.546563][T14826] ip6gre1: entered allmulticast mode
[  204.633864][T14830] sctp: [Deprecated]: syz.3.2413 (pid 14830) Use of int in max_burst socket option.
[  204.633864][T14830] Use struct sctp_assoc_value instead
[  204.868877][T14863] netlink: 'syz.0.2422': attribute type 1 has an invalid length.
[  204.871635][T14863] netlink: 'syz.0.2422': attribute type 2 has an invalid length.
[  204.883801][T14864] netlink: 'syz.0.2422': attribute type 1 has an invalid length.
[  204.925206][T14869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  204.958431][T14872] bond0: entered promiscuous mode
[  204.965878][T14872] bond0: left promiscuous mode
[  204.994864][T14869] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  205.180662][T14887] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  205.217486][T14889] netlink: 'syz.3.2431': attribute type 12 has an invalid length.
[  205.606847][T14940] netlink: 'syz.3.2444': attribute type 10 has an invalid length.
[  205.609495][T14940] dummy0: entered promiscuous mode
[  205.611668][T14940] dummy0: entered allmulticast mode
[  205.613678][T14940] bridge0: port 2(dummy0) entered blocking state
[  205.615668][T14940] bridge0: port 2(dummy0) entered disabled state
[  205.619387][T14940] bridge0: port 2(dummy0) entered blocking state
[  205.621586][T14940] bridge0: port 2(dummy0) entered forwarding state
[  205.638766][T14941] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  205.705135][T14951] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  205.705268][T14951] batadv_slave_1: entered promiscuous mode
[  205.725647][T14953] batadv_slave_1: left promiscuous mode
[  205.756474][T14958] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  205.862969][T14970] netlink: 'syz.0.2455': attribute type 1 has an invalid length.
[  205.880358][T14970] 8021q: adding VLAN 0 to HW filter on device bond14
[  206.413421][T15027] __nla_validate_parse: 21 callbacks suppressed
[  206.413431][T15027] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2473'.
[  206.511095][   T55] Bluetooth: hci3: command 0x040f tx timeout
[  206.592512][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2478'.
[  206.790558][T15064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.802553][T15064] syzkaller0: entered promiscuous mode
[  206.804289][T15064] syzkaller0: entered allmulticast mode
[  206.822612][T15064] tipc: Resetting bearer <eth:syzkaller0>
[  206.833277][T15063] tipc: Resetting bearer <eth:syzkaller0>
[  206.852910][T15063] tipc: Disabling bearer <eth:syzkaller0>
[  206.897825][T15071] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2485'.
[  206.908121][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2485'.
[  206.912999][T15073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2487'.
[  206.919382][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2485'.
[  206.923779][T15075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2488'.
[  206.996495][T15068] lo speed is unknown, defaulting to 1000
[  206.999066][T15068] lo speed is unknown, defaulting to 1000
[  207.278095][T15101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2496'.
[  207.281833][T15103] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2495'.
[  207.291525][T15103] unsupported nla_type 65024
[  207.319761][T15101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2496'.
[  207.905695][T15116] lo speed is unknown, defaulting to 1000
[  207.908290][T15116] lo speed is unknown, defaulting to 1000
[  209.322101][T15247] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  209.357804][T15249] validate_nla: 3 callbacks suppressed
[  209.357814][T15249] netlink: 'syz.3.2534': attribute type 10 has an invalid length.
[  209.983946][T15274] sctp: [Deprecated]: syz.0.2540 (pid 15274) Use of int in max_burst socket option.
[  209.983946][T15274] Use struct sctp_assoc_value instead
[  209.989187][T15274] netlink: 'syz.0.2540': attribute type 1 has an invalid length.
[  210.794330][T15282] netlink: 'syz.0.2543': attribute type 2 has an invalid length.
[  210.871365][T15294] bond9: (slave bridge7): Enslaving as an active interface with an up link
[  211.029782][T15289] lo speed is unknown, defaulting to 1000
[  211.032643][T15289] lo speed is unknown, defaulting to 1000
[  211.276204][T15319] netlink: 'syz.0.2553': attribute type 64 has an invalid length.
[  211.549719][T15334] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  211.554605][T15336] __nla_validate_parse: 13 callbacks suppressed
[  211.554615][T15336] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2559'.
[  211.630498][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2562'.
[  211.642629][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2563'.
[  211.675597][T15346] x_tables: duplicate underflow at hook 1
[  211.725679][T15355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.749898][T15355] syzkaller0: entered promiscuous mode
[  211.752177][T15355] syzkaller0: entered allmulticast mode
[  211.757184][T15355] tipc: Resetting bearer <eth:syzkaller0>
[  211.759069][T15355] syzkaller0: tun_net_xmit 134
[  211.772509][T15360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2568'.
[  211.780960][T15360] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2568'.
[  211.785685][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2566'.
[  211.792724][T15354] tipc: Resetting bearer <eth:syzkaller0>
[  211.804616][T15354] tipc: Disabling bearer <eth:syzkaller0>
[  212.058099][T15367] lo speed is unknown, defaulting to 1000
[  212.060630][T15367] lo speed is unknown, defaulting to 1000
[  212.174921][T15399] bridge0: port 3(batadv1) entered blocking state
[  212.177003][T15399] bridge0: port 3(batadv1) entered disabled state
[  212.178951][T15399] batadv1: entered allmulticast mode
[  212.182303][T15399] batadv1: entered promiscuous mode
[  212.216580][   T33] audit: type=1800 audit(1753091693.502:7): pid=15390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2577" name="cgroup.controllers" dev="tmpfs" ino=4754 res=0 errno=0
[  212.380567][T15418] netlink: 'syz.0.2581': attribute type 21 has an invalid length.
[  212.386372][T15418] netlink: 'syz.0.2581': attribute type 22 has an invalid length.
[  212.388777][T15418] netlink: 'syz.0.2581': attribute type 23 has an invalid length.
[  212.395533][T15418] netlink: 'syz.0.2581': attribute type 25 has an invalid length.
[  212.397979][T15418] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2581'.
[  212.460069][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2585'.
[  212.464170][T15425] chnl_net:caif_netlink_parms(): no params data found
[  212.682665][T14652] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  212.685717][T14652] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  212.788614][T15430] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2588'.
[  212.891132][T15438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2590'.
[  212.929663][T15428] lo speed is unknown, defaulting to 1000
[  212.932705][T15428] lo speed is unknown, defaulting to 1000
[  213.230257][T15443] netlink: 'syz.0.2591': attribute type 1 has an invalid length.
[  213.236718][T15443] netlink: 'syz.0.2591': attribute type 1 has an invalid length.
[  213.865902][T15511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  214.154786][T15525] lo speed is unknown, defaulting to 1000
[  214.159135][T15525] lo speed is unknown, defaulting to 1000
[  214.654909][T15560] 8021q: adding VLAN 0 to HW filter on device bond15
[  214.669327][T15560] macvlan2: entered promiscuous mode
[  214.677530][T15560] macvlan2: entered allmulticast mode
[  214.680024][T15560] bond0: entered allmulticast mode
[  214.683010][T15560] bond0: entered promiscuous mode
[  214.685115][T15560] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  214.689891][T15560] bond15: (slave macvlan2): Enslaving as an active interface with an up link
[  214.759256][T15567] tap0: tun_chr_ioctl cmd 1074025677
[  214.761510][T15567] tap0: linktype set to 780
[  215.917215][T15614] bond16: entered promiscuous mode
[  215.919749][T15614] 8021q: adding VLAN 0 to HW filter on device bond16
[  216.132356][T15642] validate_nla: 135 callbacks suppressed
[  216.132366][T15642] netlink: 'syz.2.2650': attribute type 3 has an invalid length.
[  216.274390][T15656] openvswitch: netlink: Tunnel attr 2 has unexpected len 2 expected 4
[  216.277586][T15664] netlink: 'syz.2.2655': attribute type 1 has an invalid length.
[  216.570348][T15698] netlink: 'syz.2.2667': attribute type 8 has an invalid length.
[  216.586634][T15701] netlink: 'syz.3.2666': attribute type 13 has an invalid length.
[  216.589471][T15701] netlink: 'syz.3.2666': attribute type 17 has an invalid length.
[  216.613220][T15701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.633468][T15698] syzkaller0: entered promiscuous mode
[  216.635648][T15698] syzkaller0: entered allmulticast mode
[  216.776213][T15701] lo speed is unknown, defaulting to 1000
[  216.779331][T15701] lo speed is unknown, defaulting to 1000
[  217.484979][T15719] siw: device registration error -23
[  217.517372][T15721] netlink: 'syz.3.2673': attribute type 29 has an invalid length.
[  217.524274][T15721] netlink: 'syz.3.2673': attribute type 29 has an invalid length.
[  217.651541][T15731] __nla_validate_parse: 162 callbacks suppressed
[  217.651552][T15731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2676'.
[  217.708256][T15731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2676'.
[  217.711438][T15731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2676'.
[  218.593699][T15747] netlink: ct family unspecified
[  218.601523][T15747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.648618][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2684'.
[  218.654475][T15759] siw: device registration error -23
[  218.734908][T15771] syz.3.2686: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  218.741738][T15771] CPU: 1 UID: 0 PID: 15771 Comm: syz.3.2686 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  218.741753][T15771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  218.741759][T15771] Call Trace:
[  218.741763][T15771]  <TASK>
[  218.741768][T15771]  dump_stack_lvl+0x189/0x250
[  218.741787][T15771]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.741797][T15771]  ? __pfx__printk+0x10/0x10
[  218.741810][T15771]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  218.741823][T15771]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  218.741834][T15771]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  218.741846][T15771]  warn_alloc+0x214/0x310
[  218.741858][T15771]  ? __pfx_warn_alloc+0x10/0x10
[  218.741870][T15771]  ? __get_vm_area_node+0x28f/0x300
[  218.741883][T15771]  ? translate_table+0x19b/0x2040
[  218.741898][T15771]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  218.741923][T15771]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  218.741938][T15771]  ? rcu_is_watching+0x15/0xb0
[  218.741949][T15771]  ? translate_table+0x19b/0x2040
[  218.741959][T15771]  ? translate_table+0x19b/0x2040
[  218.741969][T15771]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  218.741984][T15771]  ? translate_table+0x19b/0x2040
[  218.741994][T15771]  ? xt_alloc_table_info+0x3b/0xa0
[  218.742007][T15771]  translate_table+0x19b/0x2040
[  218.742024][T15771]  ? __lock_acquire+0xab9/0xd20
[  218.742035][T15771]  ? __pfx_translate_table+0x10/0x10
[  218.742048][T15771]  ? __might_fault+0xb0/0x130
[  218.742067][T15771]  ? _copy_from_user+0x94/0xb0
[  218.742083][T15771]  do_ip6t_set_ctl+0x970/0xce0
[  218.742098][T15771]  ? rcu_is_watching+0x15/0xb0
[  218.742107][T15771]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  218.742127][T15771]  ? __pfx___mutex_lock+0x10/0x10
[  218.742138][T15771]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  218.742146][T15771]  ? aa_sk_perm+0x81e/0x950
[  218.742164][T15771]  ? __pfx_aa_sk_perm+0x10/0x10
[  218.742180][T15771]  nf_setsockopt+0x26f/0x290
[  218.742194][T15771]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  218.742206][T15771]  do_sock_setsockopt+0x17c/0x1b0
[  218.742221][T15771]  __x64_sys_setsockopt+0x13f/0x1b0
[  218.742235][T15771]  do_syscall_64+0xfa/0x3b0
[  218.742245][T15771]  ? lockdep_hardirqs_on+0x9c/0x150
[  218.742254][T15771]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.742262][T15771]  ? exc_page_fault+0x9f/0xf0
[  218.742270][T15771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.742285][T15771] RIP: 0033:0x7f9dea98e9a9
[  218.742294][T15771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.742302][T15771] RSP: 002b:00007f9deb7d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  218.742312][T15771] RAX: ffffffffffffffda RBX: 00007f9deabb5fa0 RCX: 00007f9dea98e9a9
[  218.742318][T15771] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005
[  218.742323][T15771] RBP: 00007f9deaa10ca1 R08: 00000000000002c8 R09: 0000000000000000
[  218.742328][T15771] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000
[  218.742333][T15771] R13: 0000000000000000 R14: 00007f9deabb5fa0 R15: 00007ffe79057988
[  218.742346][T15771]  </TASK>
[  218.742349][T15771] Mem-Info:
[  218.842906][T15771] active_anon:14714 inactive_anon:0 isolated_anon:0
[  218.842906][T15771]  active_file:1279 inactive_file:38276 isolated_file:0
[  218.842906][T15771]  unevictable:1768 dirty:141 writeback:0
[  218.842906][T15771]  slab_reclaimable:11874 slab_unreclaimable:108043
[  218.842906][T15771]  mapped:23622 shmem:2508 pagetables:1145
[  218.842906][T15771]  sec_pagetables:0 bounce:0
[  218.842906][T15771]  kernel_misc_reclaimable:0
[  218.842906][T15771]  free:212480 free_pcp:23419 free_cma:0
[  218.856564][T15771] Node 0 active_anon:45548kB inactive_anon:0kB active_file:2980kB inactive_file:70188kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38216kB dirty:240kB writeback:0kB shmem:5040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5844kB pagetables:2124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  218.866794][T15771] Node 1 active_anon:13308kB inactive_anon:0kB active_file:2136kB inactive_file:82916kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:56272kB dirty:324kB writeback:0kB shmem:4992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7896kB pagetables:2456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  218.876722][T15771] Node 0 DMA free:15088kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:272kB local_pcp:272kB free_cma:0kB
[  218.886056][T15771] lowmem_reserve[]: 0 812 812 812 812
[  218.887743][T15771] Node 0 DMA32 free:256332kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45548kB inactive_anon:0kB active_file:2980kB inactive_file:70188kB unevictable:3536kB writepending:240kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:42580kB local_pcp:20604kB free_cma:0kB
[  218.897969][T15771] lowmem_reserve[]: 0 0 0 0 0
[  218.899722][T15771] Node 1 DMA32 free:443708kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:14876kB local_pcp:11444kB free_cma:0kB
[  218.911287][T15771] lowmem_reserve[]: 0 0 854 854 854
[  218.919760][T15771] Node 1 Normal free:134792kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13308kB inactive_anon:0kB active_file:2136kB inactive_file:82916kB unevictable:3536kB writepending:324kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:36148kB local_pcp:14760kB free_cma:0kB
[  218.946657][T15771] lowmem_reserve[]: 0 0 0 0 0
[  218.949297][T15771] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 15088kB
[  218.959578][T15771] Node 0 DMA32: 351*4kB (UME) 199*8kB (UME) 371*16kB (UM) 186*32kB (UM) 112*64kB (U) 36*128kB (U) 20*256kB (UME) 16*512kB (UM) 5*1024kB (UM) 5*2048kB (UM) 49*4096kB (U) = 256036kB
[  218.966851][T15771] Node 1 DMA32: 3*4kB (UM) 6*8kB (UM) 6*16kB (UM) 3*32kB (UM) 5*64kB (UM) 2*128kB (UM) 4*256kB (UM) 5*512kB (UM) 5*1024kB (UM) 4*2048kB (UM) 104*4096kB (UM) = 443708kB
[  218.972956][T15771] Node 1 Normal: 2*4kB (E) 344*8kB (UE) 425*16kB (UME) 281*32kB (UME) 278*64kB (UME) 119*128kB (UME) 47*256kB (UM) 21*512kB (UM) 17*1024kB (UME) 5*2048kB (UM) 8*4096kB (UM) = 134776kB
[  218.990068][T15771] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  219.001071][T15771] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  219.003869][T15771] 42063 total pagecache pages
[  219.012045][T15771] 0 pages in swap cache
[  219.013384][T15771] Free swap  = 124996kB
[  219.014635][T15771] Total swap = 124996kB
[  219.016027][T15771] 786301 pages RAM
[  219.017173][T15771] 0 pages HighMem/MovableOnly
[  219.018574][T15771] 241056 pages reserved
[  219.019846][T15771] 0 pages cma reserved
[  219.034196][T15793] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2691'.
[  219.037068][T15793] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  219.039606][T15793] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  219.050794][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2691'.
[  219.058714][T15793] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2691'.
[  219.076834][T15793] netlink: 'syz.0.2691': attribute type 30 has an invalid length.
[  219.103792][T15793] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2691'.
[  219.453524][T15839] netlink: 'syz.2.2702': attribute type 1 has an invalid length.
[  219.455867][T15839] netlink: 600 bytes leftover after parsing attributes in process `syz.2.2702'.
[  219.467645][T15837] netlink: 'syz.3.2703': attribute type 5 has an invalid length.
[  219.566481][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2705'.
[  219.761793][T15881] x_tables: duplicate underflow at hook 3
[  219.799218][T15883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.845789][T15885] 8021q: adding VLAN 0 to HW filter on device bond10
[  219.866097][T15888] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.877467][T15888] bond10: (slave batadv0): making interface the new active one
[  219.882039][T15888] bond10: (slave batadv0): Enslaving as an active interface with an up link
[  220.155345][T15907] lo speed is unknown, defaulting to 1000
[  220.157928][T15907] lo speed is unknown, defaulting to 1000
[  220.491231][T15922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.699125][  T791] lo speed is unknown, defaulting to 1000
[  220.706452][  T791] lo speed is unknown, defaulting to 1000
[  220.762590][T15941] openvswitch: netlink: Flow actions attr not present in new flow.
[  220.800360][T15941] syzkaller0: entered promiscuous mode
[  220.804400][T15941] syzkaller0: entered allmulticast mode
[  221.828311][T15962] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  222.050680][T15989] validate_nla: 4 callbacks suppressed
[  222.050690][T15989] netlink: 'syz.0.2740': attribute type 2 has an invalid length.
[  222.089272][T15996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  222.303277][T16012] batadv1: left allmulticast mode
[  222.306061][T16012] batadv1: left promiscuous mode
[  222.308034][T16012] bridge0: port 3(batadv1) entered disabled state
[  222.315392][T16012] dummy0: left allmulticast mode
[  222.318232][T16012] dummy0: left promiscuous mode
[  222.324451][T16012] bridge0: port 2(dummy0) entered disabled state
[  222.336199][T16012] bond2: left allmulticast mode
[  222.338646][T16012] bond2: left promiscuous mode
[  222.342204][T16012] bridge0: port 1(bond2) entered disabled state
[  222.353313][T16026] sock: sock_timestamping_bind_phc: sock not bind to device
[  222.388869][T16015] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR
[  222.559998][T16035] 8021q: adding VLAN 0 to HW filter on device bond17
[  222.570380][T16035] macvlan3: entered promiscuous mode
[  222.574366][T16035] macvlan3: entered allmulticast mode
[  222.577827][T16035] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  222.582073][T16035] bond17: (slave macvlan3): Enslaving as an active interface with an up link
[  222.663065][T16053] __nla_validate_parse: 11 callbacks suppressed
[  222.663076][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2753'.
[  222.670163][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2753'.
[  222.678854][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2753'.
[  222.733425][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2755'.
[  223.717770][T16101] netlink: 'syz.2.2768': attribute type 10 has an invalid length.
[  223.723756][T16101] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2768'.
[  223.754568][T16107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2770'.
[  224.058913][T16151] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2783'.
[  224.068753][T16152] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2783'.
[  224.214479][T16166] netlink: 'syz.2.2788': attribute type 2 has an invalid length.
[  224.468557][T16191] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2795'.
[  224.750358][T16208] netlink: 'syz.2.2802': attribute type 1 has an invalid length.
[  224.800093][T16212] x_tables: duplicate underflow at hook 2
[  224.811881][T16212] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  224.815067][T16212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.945309][T16232] netlink: 'syz.0.2808': attribute type 39 has an invalid length.
[  224.967510][T16235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2809'.
[  225.209703][T16261] syzkaller1: entered promiscuous mode
[  225.213063][T16261] syzkaller1: entered allmulticast mode
[  226.200681][T16294] netlink: 'syz.0.2826': attribute type 1 has an invalid length.
[  226.269129][T16303] xt_ipcomp: unknown flags F7
[  226.324237][T16306] netlink: 'syz.2.2830': attribute type 1 has an invalid length.
[  226.466504][T16317] bridge: RTM_NEWNEIGH with invalid state 0x1
[  226.469136][   T55] Bluetooth: hci3: link tx timeout
[  226.471640][   T55] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  226.475174][   T55] Bluetooth: hci3: link tx timeout
[  226.476770][   T55] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  226.479277][   T55] Bluetooth: hci3: link tx timeout
[  226.481162][   T55] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  226.483436][   T55] Bluetooth: hci3: link tx timeout
[  226.489278][   T55] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  226.509698][T16329] syzkaller1: entered promiscuous mode
[  226.511909][T16329] syzkaller1: entered allmulticast mode
[  226.653109][T16342] 8021q: VLANs not supported on lo
[  226.878049][T16347] lo speed is unknown, defaulting to 1000
[  226.880728][T16347] lo speed is unknown, defaulting to 1000
[  228.013236][T16387] __nla_validate_parse: 10 callbacks suppressed
[  228.013246][T16387] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2854'.
[  228.019426][T16387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2854'.
[  228.155112][T16398] openvswitch: netlink: Message has 24 unknown bytes.
[  228.327152][T16412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2861'.
[  228.511256][   T55] Bluetooth: hci3: command 0x040f tx timeout
[  228.610280][T16430] syzkaller0: entered promiscuous mode
[  228.612125][T16430] syzkaller0: entered allmulticast mode
[  228.932642][T16451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2870'.
[  229.066463][T16462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2872'.
[  229.066711][T16461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2874'.
[  229.074748][T16461] netlink: 'syz.2.2874': attribute type 4 has an invalid length.
[  229.080767][T16461] netlink: 'syz.2.2874': attribute type 4 has an invalid length.
[  229.145739][T16464] netlink: 'syz.2.2875': attribute type 2 has an invalid length.
[  229.153503][T16464] : entered promiscuous mode
[  229.207805][T16470] SET target dimension over the limit!
[  229.208550][T16471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2877'.
[  229.214403][T16471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2877'.
[  229.366745][T16486] netlink: 'syz.3.2880': attribute type 1 has an invalid length.
[  229.369222][T16486] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2880'.
[  229.518235][T16495] syzkaller1: entered promiscuous mode
[  229.520046][T16495] syzkaller1: entered allmulticast mode
[  229.637329][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2884'.
[  230.220638][T16528] netlink: 'syz.0.2894': attribute type 3 has an invalid length.
[  230.568828][T16531] tipc: Invalid UDP bearer configuration
[  230.568857][T16531] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  230.602122][ T5221] Bluetooth: hci3: command 0x040f tx timeout
[  230.742398][T16563] netlink: 'syz.2.2905': attribute type 1 has an invalid length.
[  230.744793][T16563] netlink: 'syz.2.2905': attribute type 2 has an invalid length.
[  230.747845][T16548] delete_channel: no stack
[  230.849369][T16573] xt_CT: You must specify a L4 protocol and not use inversions on it
[  230.889336][T16581] netlink: 'syz.3.2911': attribute type 21 has an invalid length.
[  230.934971][T16584] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  231.299996][T16620] netlink: 'syz.3.2923': attribute type 11 has an invalid length.
[  232.698708][T16652] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  232.987826][T16707] netlink: 'syz.3.2944': attribute type 3 has an invalid length.
[  233.068806][T16715] __nla_validate_parse: 45 callbacks suppressed
[  233.068818][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2948'.
[  233.232441][T16734] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2952'.
[  233.243903][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2953'.
[  233.275261][T16738] sock: sock_timestamping_bind_phc: sock not bind to device
[  233.358868][T16738] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2954'.
[  233.364405][T16738] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2954'.
[  233.487020][T16750] syzkaller1: entered promiscuous mode
[  233.488753][T16750] syzkaller1: entered allmulticast mode
[  233.501336][T16750] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  233.633848][T16756] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2960'.
[  233.650574][T16756] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2960'.
[  233.715254][T16759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2960'.
[  233.785562][T16761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2961'.
[  233.830711][T16753] lo speed is unknown, defaulting to 1000
[  233.835683][T16753] lo speed is unknown, defaulting to 1000
[  233.946986][T16768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.954674][T16767] tipc: Disabling bearer <eth:syzkaller0>
[  234.303223][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'.
[  234.779582][T16839] validate_nla: 2 callbacks suppressed
[  234.779594][T16839] netlink: 'syz.2.2982': attribute type 9 has an invalid length.
[  234.784194][T16839] netlink: 'syz.2.2982': attribute type 6 has an invalid length.
[  234.798088][T16813] lo speed is unknown, defaulting to 1000
[  234.800800][T16813] lo speed is unknown, defaulting to 1000
[  234.959745][   T33] audit: type=1107 audit(1753091716.252:8): pid=16848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6FB'
[  235.510726][T16886] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.085106][T16901] set match dimension is over the limit!
[  236.435092][T16934] Cannot find add_set index 3 as target
[  236.750960][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  236.850000][T16977] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  237.374438][T16981] IPv6: syztnl1: Disabled Multicast RS
[  237.728737][T17003] bridge9: entered allmulticast mode
[  237.761673][T17006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.789899][T17007] syzkaller0: entered promiscuous mode
[  237.792525][T17007] syzkaller0: entered allmulticast mode
[  237.801613][T17005] tipc: Resetting bearer <eth:syzkaller0>
[  237.922670][T17004] tipc: Resetting bearer <eth:syzkaller0>
[  237.935556][T17004] tipc: Disabling bearer <eth:syzkaller0>
[  238.018650][T17029] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.187479][T17049] netlink: 'syz.3.3035': attribute type 9 has an invalid length.
[  238.239725][T17045] bond15: (slave macvlan2): Releasing backup interface
[  238.249234][T17045] bond17: (slave macvlan3): Releasing backup interface
[  238.252888][T17045] bond0: left allmulticast mode
[  238.254505][T17045] bond0: left promiscuous mode
[  238.888073][T17095] bridge0: entered promiscuous mode
[  239.132055][T17125] netlink: 'syz.3.3055': attribute type 1 has an invalid length.
[  239.156941][T17125] __nla_validate_parse: 16 callbacks suppressed
[  239.156987][T17125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3055'.
[  239.168489][T17130] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3053'.
[  239.173846][T17122] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3053'.
[  239.672997][T17174] tipc: Can't bind to reserved service type 1
[  239.719613][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3066'.
[  239.777952][T17181] ip6erspan0: entered allmulticast mode
[  239.939049][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3073'.
[  239.975601][T17207] Unknown options in mask 700
[  239.978876][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3074'.
[  239.982683][T17207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3074'.
[  239.985600][T17207] netlink: 'syz.3.3074': attribute type 7 has an invalid length.
[  239.988098][T17207] netlink: 'syz.3.3074': attribute type 8 has an invalid length.
[  239.990553][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3074'.
[  240.042618][T17211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3076'.
[  240.105442][T17217] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3077'.
[  240.114746][T17215] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  240.120121][T17218] syzkaller0: refused to change device tx_queue_len
[  240.125240][T17215] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  240.127677][T17215] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  240.266816][T17237] x_tables: duplicate underflow at hook 2
[  240.338604][T17248] syz0: rxe_newlink: already configured on lo
[  240.345427][T17248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  240.473533][T17255] netlink: 'syz.3.3088': attribute type 5 has an invalid length.
[  240.617814][T17274] gretap3: entered promiscuous mode
[  240.804509][T17284] netlink: 'syz.3.3095': attribute type 21 has an invalid length.
[  240.807176][T17284] netlink: 'syz.3.3095': attribute type 5 has an invalid length.
[  241.295313][T17321] delete_channel: no stack
[  241.417748][T17334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  241.517880][T17348] syzkaller1: entered promiscuous mode
[  241.519699][T17348] syzkaller1: entered allmulticast mode
[  242.246182][T17382] netlink: 'syz.3.3125': attribute type 1 has an invalid length.
[  242.262137][T17382] 8021q: adding VLAN 0 to HW filter on device bond12
[  242.271151][ T8580] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
[  242.279818][T17382] 8021q: adding VLAN 0 to HW filter on device bond12
[  242.282458][T17382] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[  242.286520][T17382] bond12: (slave vxcan1): Error -95 calling set_mac_address
[  242.325467][T17384] bond12: (slave bridge0): Enslaving as an active interface with a down link

VM DIAGNOSIS:
09:55:23  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000041c RBX=000000000000041b RCX=0000000000000000 RDX=000000008c95d003
RSI=ffffffff8c95d0c0 RDI=ffffffff8c95d0c0 RBP=0000000000000000 RSP=ffffc90009b76698
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1f43abf
R12=ffff88803195c298 R13=ffffffff9628cf80 R14=ffffffff8c95d0c0 R15=ffffffff93546410
RIP=ffffffff819e8152 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9deb7d06c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=00000000358c4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000316e616c77
XMM02=0005000800000004 000100068002000c XMM03=000000006e616c76 000100098012001c
XMM04=0000000000000000 00000000000000ff XMM05=00007f368ad86458 00007f368ad864a0
XMM06=00007f368ad86498 00007f368ad86490 XMM07=00007f368ad86488 00007f368ad86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f368ac11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=335cf284cc64f600 RBX=ffffffff81976c78 RCX=335cf284cc64f600 RDX=0000000000000001
RSI=ffffffff8d99603b RDI=ffffffff8be28c40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d5f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3d75f6 CR3=0000000022f96000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=7706630089ff000e 000060dd86f0409e
XMM02=00007fdfb3786478 00007fdfb3786450 XMM03=00007fdfb3786488 00007fdfb3786480
XMM04=00007fdfb42ed100 00007fdfb3786440 XMM05=00007fdfb3786458 00007fdfb37864a0
XMM06=00007fdfb3786498 00007fdfb3786490 XMM07=00007fdfb3786488 00007fdfb3786480
XMM08=f583d429e44b37c6 4135c41680016d06 XMM09=0000000000000000 00007fdfb3611df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
