last executing test programs:

3.672272193s ago: executing program 3 (id=1521):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet(0x2, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'ip_vti0\x00', <r2=>0x0, 0x10, 0x8, 0x10, 0x702d, {{0x28, 0x4, 0x1, 0x8, 0xa0, 0x66, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, {[@timestamp_addr={0x44, 0x14, 0x81, 0x1, 0x8, [{@private=0xa010100, 0xfffff801}, {@remote, 0x8}]}, @timestamp_prespec={0x44, 0x44, 0x2f, 0x3, 0xe, [{@rand_addr=0x64010102, 0x5}, {@multicast2, 0xfffffbff}, {@broadcast, 0x80000001}, {@loopback, 0x400}, {@rand_addr=0x64010102, 0x1}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e2}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xb}]}, @timestamp_addr={0x44, 0x34, 0x79, 0x1, 0x5, [{@local, 0xfffffffb}, {@broadcast, 0xf64}, {@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x18}, 0xa}, {@private=0xa010100, 0x9}, {@remote, 0xffffffc2}]}]}}}}})
setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2f}, r2}, 0xc)
sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

3.430833086s ago: executing program 0 (id=1526):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xb8dd}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711012000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)

3.167521548s ago: executing program 3 (id=1530):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x88, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x128, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x114, 0x1, [@m_vlan={0x110, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x3778, 0x1, 0x3, 0x80000001}, 0x2}}]}, {0xbf, 0x6, "b1e365cb42e64934e2b45362faf07ba10b301c631e5c5ef2f6ba129bc3dd38d16351e5ff8c9c6a2247fad813a001aa42928cf476f6a713bc28edb32b5711d08e0000000077218b48a829bdb74ad6a821ffd4d02f2bc727ee97ae2bf9d72c24fa5c7ef4a870fd4ce85e9bb1d666daa1d3321dde4343270620bfc485b44cc5e7e00234b814584c3d08a8177cee81e559c795a347d58adba0e90000000000000000abe0c4a028da20546723660a0cb73e1209623c263332b53a830d56"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.962151327s ago: executing program 1 (id=1531):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x110, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60}, 0x50)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x2, 0x6, 0x660, 0x378, 0x378, 0xe0, 0x378, 0x468, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xff, 0xff, 0xff000000, 0xffffff00], 'batadv0\x00', 'rose0\x00', {}, {0xff}, 0xff, 0x3, 0x0, 0x26}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xfffd, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x138, 0x170, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@rateest={{0x68}, {'pim6reg\x00', 'ip6_vti0\x00', 0x24, 0x0, 0x2, 0x2400000, 0x3, 0x8, {0x10000}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff, 0x0, 0x5}, {}, {0x87, 0x1, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x0, 0x7ff}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0)

2.887459328s ago: executing program 0 (id=1534):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}, "17c1b7df60c70000"}}}}}, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000ec0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f00000008c0)=@deltclass={0x5a4, 0x29, 0x200, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xf, 0xf}, {0x3, 0xfff1}, {0xffff}}, [@TCA_RATE={0x6, 0x5, {0xeb, 0x3}}, @tclass_kind_options=@c_htb={{0x8}, {0x4a4, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x7fffffff}, @TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x1, 0x24e2456b, 0xb, 0x4, 0x7, 0xe80, 0x8, 0x1ff, 0x5, 0x6, 0x41a5, 0x5d62, 0x6, 0xffffffff, 0x3, 0x9, 0x6, 0xffff, 0x9, 0x4, 0x2, 0xffff8001, 0x2, 0x0, 0xffffffff, 0xff, 0x101, 0x2, 0xffff, 0xfffffffb, 0x9, 0x77c, 0xfffffff0, 0xfffffffb, 0x8, 0x75, 0x6, 0x3, 0x6, 0x6, 0x0, 0x6, 0x80, 0xe1c3, 0x3, 0x6, 0x1, 0x8, 0xd, 0x4, 0x6, 0x6, 0x5, 0x0, 0xff, 0x8, 0x10000, 0x6, 0x7, 0x0, 0x0, 0x9, 0xbba, 0x7, 0x6, 0x0, 0xdb, 0x1, 0x2, 0x8, 0x8, 0x1, 0xfffff000, 0x9, 0x2, 0x7ae, 0x6, 0xfffffffd, 0x176cfe6d, 0xf2, 0x6, 0x678a, 0x40, 0x7c, 0x4, 0x8, 0x655, 0xff, 0xbea, 0x3, 0x4, 0xf3f, 0x5, 0xa380, 0x101, 0x5, 0x8, 0xfffffff9, 0x7, 0x5, 0xcab3, 0x1, 0x7, 0x6, 0x32a5, 0x80000001, 0xc, 0x2, 0x1, 0xfffffff7, 0x7f, 0xffffffff, 0x10, 0x4, 0x80000000, 0x28000000, 0x9, 0x7, 0x0, 0xfffffff7, 0x4, 0x6, 0x8, 0x81, 0x7f, 0x3ff, 0x0, 0x6, 0x10001, 0x7, 0x9, 0x6, 0xe6e, 0x7, 0x6, 0x4, 0x2be, 0x89, 0x10000, 0xc3, 0x5, 0x32dba05b, 0x8001, 0x3, 0x2, 0x3, 0x5, 0x6, 0x9, 0xfffffc01, 0x4, 0x9, 0x7, 0x53c, 0x3, 0x41b6ee89, 0xfffff2a7, 0x2, 0x7ff, 0x1, 0x4, 0x22f161db, 0xb, 0x3, 0x4, 0x4, 0x2, 0x7, 0x8000, 0x7fff, 0x6aa, 0x101, 0x80, 0xfffffff9, 0x9, 0x0, 0x3, 0xa, 0x6, 0x6, 0x2, 0x3, 0x5, 0x3ff, 0x4, 0x3, 0x7, 0x6, 0xffffff36, 0x6, 0x2, 0x1, 0x0, 0x5, 0x0, 0x1, 0x6, 0x5, 0x7, 0x1, 0x2, 0x1b2, 0x3, 0x2, 0x8, 0x5, 0x5, 0x6, 0x10, 0x8000, 0x9aae, 0x9, 0x401, 0x6, 0x1, 0x7, 0x4, 0x0, 0x4, 0x200, 0x3, 0x2, 0x6, 0xffffff1e, 0x0, 0x7, 0x7, 0xfffffff7, 0x4, 0x3, 0x5, 0x1ff, 0x3, 0x400, 0x1000, 0xfffeffff, 0x3, 0x8, 0x911edfc, 0x10001, 0x7, 0x5d, 0x1, 0xb, 0x0, 0x80000001, 0x8c9, 0xd3ed, 0xa, 0x6, 0xb, 0x85, 0x10, 0x10]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0xfd, 0x1, 0x1, 0x8000, 0x4, 0x3}, {0x21, 0x0, 0x7, 0xa4d1, 0x3, 0x3}, 0x3, 0x7, 0x98, 0x5, 0x9}}, @TCA_HTB_PARMS={0x30, 0x1, {{0xc, 0x1, 0x1, 0x0, 0x5, 0x8}, {0x6, 0x1, 0x7, 0x8, 0x81, 0x4}, 0x1, 0x4acc, 0x9, 0x6, 0x10}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0x5}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc}, @TCA_HTB_CEIL64={0xc, 0x7, 0xde3}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xc}}, @TCA_RATE={0x6, 0x5, {0x4, 0xf5}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x84, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x800, 0xfffffffa, 0x7f}}, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0xfff, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x3d, 0x9}}, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0x8, 0xfff}}, @TCA_HFSC_RSC={0x10, 0x1, {0x80000001, 0x1, 0x200}}, @TCA_HFSC_USC={0x10, 0x3, {0x10, 0x5, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x3, 0x3}}, @TCA_HFSC_RSC={0x10, 0x1, {0x80000, 0xcd, 0x8}}]}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x9, 0x7f}}]}, 0x5a4}, 0x1, 0x0, 0x0, 0x14}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xffffffffffffffa2, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x24004000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
r5 = socket$netlink(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x10d00, 0x9)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={0xffffffffffffffff, r4, 0x1b, 0x0, @val=@kprobe_multi=@addrs={0x0, 0xa, 0x0, &(0x7f00000007c0)=[0x1, 0x9, 0xfffffffffffffeff, 0x5, 0x222094db, 0x1, 0x10001, 0x7, 0xd, 0x4], 0xff}}, 0x30)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000740)={{<r6=>r0, &(0x7f00000000c0)='${$-\x00', 0x4000, &(0x7f0000000140)={@_ha_fsid={[0x4, 0x5faedab3]}, {0x5, 0x96f, 0x401, 0x4}}, 0x10000, &(0x7f0000000180), &(0x7f0000000200)=0x5}, 0x5, &(0x7f0000000680)=[{0x1, 0x8, &(0x7f0000000240)='L-)/,\x00', &(0x7f0000000280)="d88e4d6800d30caadea0ed1e8072ed33ad32c2091f79085f", 0x18, 0x8}, {0x1, 0x2, &(0x7f0000000340)=',\x93\x00', &(0x7f0000000380)="6635d3ae3c80f85d952686bbdc361759e8c886ce64211d1d76ef878afb58675ce3ffcd40032ca7d83f2abe9505eafce01955a7568f5397264880c16c5480b598085f15d444b45702f3b0c24a78c9cf86f08d56071f1494c9f4d3352ed25d45b13b873610f2c527e716bc91aa06f57c41c82dba5dc3b74a417075", 0x7a, 0x30}, {0x3, 0x4, &(0x7f0000000400)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000440)="383da2edce93fdaea01cedc79066f0dd76073a78d7cf277a88c2057c8e2e1016872d11b4aa57f88adbcff70b61ce68989effe9c6b145bb099d0b7bcec31b41f5fd22f90838a1e68475c3cb012b907b29fd183ecab83d330f25aaffdeb444c7ba5e3b8698ee5c", 0x66, 0x2}, {0x2, 0x7, &(0x7f00000004c0)=')/^\x00', &(0x7f0000000500)="ee76aa20a74024e1f21104abfe65251dd567e86b67767742a4e8c990b80839df4272ad557ad641a424d4e1189a41b990cf7dc7abbdde8e85b17a7be9", 0x3c, 0x2}, {0x3, 0x4, &(0x7f0000000540)='\'(+K\x00', &(0x7f0000000580)="e22e59b713baa018e2923eeefc786704a7b412c602e0eaff349190b6a50bfaf365a2379f520dad327248624b6b4b4cee086da1f595f2e66a7d75e2581ca07e9de8aaaea993a8f9bb9285cd88fb0b65d280d0b4d8a008ac988853650d7159ea5304b21b7d85ba969c0aa5880a70e84d4e87ca5a155e19ef507c4a174e3880491ea6cd0eb10cacf50e985327e065dfaf9970b9c75e284d2d5b83a051c9e83e082ef19ac4104e6461812ed12906d910b5f0f1c8dfaabfac2b8b29dd394bcd26f0e112c60c5595f8b4911c77c37a1258584bd2bcd2d280589ec31dbfe62c7839d2cf", 0xe0}]})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0)
sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e0", 0x1}], 0x1}}], 0x1, 0x2000c090)

2.751838284s ago: executing program 3 (id=1535):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20)

2.693684653s ago: executing program 4 (id=1537):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x1a043000) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x10, 0xffe0}, {}, {0x9, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x4, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf7}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x148, 0xb, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x40}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6b7}}]}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, '-)]\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x148}, 0x1, 0x0, 0x0, 0x801}, 0x880) (async)
getsockopt(r5, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000))
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2.669947889s ago: executing program 1 (id=1538):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 32)
unshare(0x20020400) (async, rerun: 32)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0xf, 0xe9, [@multicast2, @remote, @multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x847b0dac5bec178f, &(0x7f00000000c0)}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1)

2.556374718s ago: executing program 3 (id=1539):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x3a, 0x200, 0x20000, 0x0, {0xfc}}, 0x14}}, 0x48c0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x8031, r0, 0x215eb000)
r2 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0)
ioctl$sock_TIOCINQ(r2, 0x61d8, 0x0)

2.375835206s ago: executing program 1 (id=1541):
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x2, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80802, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r4, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020301080000000000000000000000000800010001000000090002000029260c6a000000080003"], 0x30}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800a000100726564697200000014000280080001400000000e08000240040000000900010073797a30000000000900020073797a117dc6630b4e8c0e001100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
socket$rds(0x15, 0x5, 0x0) (async)
r6 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r6, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) (async)
sendmsg$rds(r6, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0)
socket$tipc(0x1e, 0x5, 0x0) (async)
r7 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x89, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newnexthop={0x2c, 0x68, 0x8, 0x0, 0xfffffffd, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newnexthop={0x2c, 0x68, 0x8, 0x0, 0xfffffffd, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8}]}, 0x2c}}, 0x0)

2.350116555s ago: executing program 4 (id=1542):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={<r1=>0x0, 0x1000, "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"}, &(0x7f0000001040)=0x1008)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001080)={r1, 0x7fff}, &(0x7f00000010c0)=0x8)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000001140), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={<r4=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)={<r5=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={<r8=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001280)={<r9=>0xffffffffffffffff})
r10 = accept(r0, &(0x7f00000012c0)=@alg, &(0x7f0000001340)=0x80)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={<r11=>0xffffffffffffffff})
r12 = accept(r0, &(0x7f00000013c0)=@tipc=@id, &(0x7f0000001440)=0x80)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)={<r13=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000014c0)={<r14=>0xffffffffffffffff})
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001500)={<r15=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000016c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001580)={0xec, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0xec}, 0x1, 0x0, 0x0, 0x401}, 0x40000)
getpeername(r11, &(0x7f0000001700)=@qipcrtr, &(0x7f0000001780)=0x80)
ioctl$XFS_IOC_COMMIT_RANGE(r7, 0x40585883, &(0x7f00000017c0)={0xffffffffffffffff, 0x0, 0x2, 0xa6, 0x46, 0x8, [0x1, 0x10, 0x2, 0x1, 0xa, 0x7]})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r12, &(0x7f0000001ac0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a80)={&(0x7f0000001880)={0x200, 0x1, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CT={0x20, 0xb, 0x0, 0x1, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, @NFQA_CT={0xb8, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x91c1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x604}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x250}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x492}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc2}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x236fffbf30548963}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xee}, @CTA_LABELS_MASK={0x1c, 0x17, [0x74, 0x6, 0x400, 0x0, 0x7, 0x4]}]}, @NFQA_EXP={0x9c, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x70, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x99}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xdf}}, @NFQA_CT={0x6c, 0xb, 0x0, 0x1, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_PROTOINFO={0x58, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x54, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xa6}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x36}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xd}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x81}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7}]}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x8010}, 0x40001)
r16 = accept4$unix(0xffffffffffffffff, &(0x7f0000001b00), &(0x7f0000001b80)=0x6e, 0x80000)
bind$unix(r16, &(0x7f0000001bc0)=@file={0x1, './file0\x00'}, 0x6e)
r17 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r17, 0x5411, &(0x7f0000001c40))
r18 = socket$pptp(0x18, 0x1, 0x2)
getsockopt$sock_buf(r18, 0x1, 0x1a, &(0x7f0000001c80)=""/199, &(0x7f0000001d80)=0xc7)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x58, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800000000000}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4040410)
sendmsg$TIPC_NL_MON_PEER_GET(r15, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}]}]}, 0x34}}, 0x40021)
recvmmsg(r5, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002000)=""/212, 0xd4}, {&(0x7f0000002100)=""/183, 0xb7}, {&(0x7f00000021c0)=""/76, 0x4c}], 0x3}, 0x1c53}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002280)=""/220, 0xdc}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x2, &(0x7f00000033c0)}, 0x7}, {{&(0x7f0000003400)=@ieee802154, 0x80, &(0x7f0000003500)=[{&(0x7f0000003480)=""/70, 0x46}], 0x1, &(0x7f0000003540)=""/64, 0x40}, 0x3b7c0df}], 0x3, 0x40000000, &(0x7f0000003640)={0x77359400})

2.227781868s ago: executing program 2 (id=1543):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x2c, 0x40, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x2}]}, @nested={0x4, 0x2}]}, 0x2c}}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="b106d8e6da1a56dbbc6559cba83ab4188b858542ce191eb1300fe05f2a4a515ea418214eed0c9edec2b8bee7f4", 0x2d}], 0x1}}], 0x1, 0xc044)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.054543612s ago: executing program 2 (id=1544):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%-5lx  \x00'}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000100)}, 0x10)

1.90182313s ago: executing program 2 (id=1545):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000200)={0xb74, 0x0, 0x6, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x3, 0x5, 0x6, 0x2, 0x3, 0x1, 0x9, 0xb, 0x9, 0x18, 0x60, 0x16, 0x5, 0x6c, 0x60, 0x24, 0x1, 0x5, 0xc, 0xb, 0xc, 0x12, 0x18, 0x3, 0x1, 0x12, 0x9, 0x3, 0x25, 0x1, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xa, 0x98, 0x4cb, 0x7fff, 0x1, 0x6b, 0x9]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0xfffb, 0x2, 0xa0, 0x0, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x51, 0x100, 0xa426, 0xc, 0x6ae6, 0xa, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x3, 0x7}, {0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x7, 0x9}, {0x7, 0x9}, {0x2, 0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x6}, {0x1, 0x7}, {0x3, 0x9}, {0x6, 0x3}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x9}, {0x0, 0x2}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x6}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x7, 0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x1}, {0x4, 0x7}, {0x7}, {0x7}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x2}, {0x6, 0x9}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x4}, {0x4, 0x9}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0x8}, {0x6}, {0x0, 0x6}, {0x0, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x0, 0x4}, {0x5, 0x2}, {0x6, 0x9}, {0x7, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {0x6}, {0x1, 0x5}, {0x1}, {0x6, 0x5}, {0x0, 0x5}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x9}, {0x0, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {0x5, 0x5}, {0x4, 0x9}, {0x1, 0x4}, {0x5, 0x2}, {0x2, 0x5}, {0x6, 0x1}, {0x7, 0xa}, {0x5, 0x1}, {0x1, 0x5}, {0x6, 0x7}, {0x0, 0x5}, {0x0, 0x8}, {0x7}, {0x0, 0x8}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x48, 0x5, 0x2, 0x12, 0x36, 0x1, 0x60, 0x6c, 0x24, 0x12, 0x30, 0xb, 0x60, 0xb, 0x4, 0x36, 0x6, 0x2, 0x18, 0x15, 0x2, 0x4, 0x6c, 0x16, 0x48, 0x0, 0x0, 0x5, 0x16, 0x9]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x7}, {0x7, 0x2}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x2}, {0x4}, {0x1, 0xa}, {0x3, 0xa}, {0x6, 0x9}, {0x1, 0x9}, {}, {0x3, 0x7}, {0x2, 0xa}, {0x3, 0x6}, {0x1, 0x3}, {0x6, 0x5}, {0x0, 0x2}, {0x7, 0x2}, {0x4, 0x4}, {0x6, 0xa}, {0x5, 0x7}, {0x3, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x6, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x1, 0x5}, {0x6, 0x9}, {0x2, 0x5}, {0x2, 0x8}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x8}, {0x6, 0x1}, {0x0, 0xa}, {0x7, 0x7}, {0x1, 0x7}, {0x2, 0x8}, {0x5, 0x2}, {0x4, 0x9}, {0x3, 0x5}, {0x7, 0x4}, {0x3, 0x2}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0x2}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x7fff, 0xbd3, 0x3ff, 0xa, 0x9, 0x5, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x4, 0x6, 0x2, 0x49c, 0x8, 0x7]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3}, {0x2, 0x4}, {0x6, 0x7}, {0x0, 0x1}, {0x3, 0x3}, {0x0, 0x8}, {0x7, 0x7}, {0x3}, {0x4, 0xa}, {0x6, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x8}, {0x2, 0x3}, {0x1}, {0x7, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x3, 0xa}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x8}, {0x5}, {0x3, 0x4}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0x3}, {}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xff00, 0x7, 0xef, 0x6ed8, 0x39, 0x5, 0x2]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xf0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x9, 0x6, 0x0, 0x3, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x5, 0x6, 0x3, 0x7, 0x7, 0x4, 0x2]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x8}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x6, 0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x5, 0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x3, 0xa}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0x6}, {0x5, 0x9}, {0x7, 0x4}, {0x6, 0x9}, {0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x3}, {0x1, 0x2}, {0x6, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x7}, {0x2, 0x1}, {0x1, 0x5}, {0x6, 0x7}, {0x3, 0x5}, {0x7, 0x6}, {0x7, 0x7}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0x1}, {0x5, 0x4}, {0x5, 0x2}, {0x0, 0x7}, {0x7, 0x9}, {0x7, 0x7}, {0x3, 0x9}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0x1}, {0x1}, {0x6, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0x12, 0x2, 0x24, 0x3, 0x16, 0x24b25e3693f20151, 0x48, 0x30, 0x9, 0x16, 0x36, 0xc, 0x1b, 0x3, 0x4d, 0x9, 0x9, 0x48, 0x48, 0x48, 0x16, 0x60, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x6, 0x9}, {0x3, 0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x1, 0x5}, {0x7, 0x3}, {0x6, 0x1}, {0x6, 0x3}, {0x2, 0x2}, {}, {0x5, 0x8}, {0x7, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x8}, {0x1, 0x6}, {0x4, 0x5}, {0x2, 0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x2, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x3, 0x8}, {0x2, 0x1}, {0x7, 0x8}, {0x7}, {0x0, 0x7}, {0x4, 0x4}, {0x0, 0x3}, {0x6}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x5}, {0x6, 0x3}, {0x4, 0xa}, {0x7}, {0x2, 0xa}, {0x6}, {0x3, 0x9}, {0x3, 0x9}, {0x6, 0x8}, {0x0, 0x7}, {0x1, 0x9}, {0x0, 0x1d}, {0x1, 0xa}, {0x0, 0x2}, {}, {0x1, 0x5}, {0x7, 0x8}, {0x5, 0x4}, {0x0, 0x2}, {0x7, 0x4}, {0x1, 0x9}, {0x0, 0x4}, {0x6, 0x2}, {0x6, 0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x16, 0x0, 0x12, 0x0, 0x24, 0x12, 0x24, 0x48, 0x1, 0x48, 0x30, 0x0, 0x2, 0x1b, 0x6, 0x18, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x1b, 0x60, 0x3, 0x3, 0xb, 0x1, 0x5, 0x48, 0x12, 0x6c, 0x24, 0x48, 0x3, 0xc, 0x10, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7335, 0x90, 0x34d, 0x408, 0x0, 0x3, 0x8, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x7, 0x9, 0x3, 0x9, 0x0, 0xfffe, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x208, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x100, 0x8, 0x80, 0x8000, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x45, 0x3, 0x8, 0xc, 0x9, 0x8, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x7, 0x5, 0x6, 0x1f3, 0x2000, 0xfffc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x1b11, 0xe, 0x40, 0x784, 0xfb92, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7f, 0x4, 0x7, 0x3, 0x3, 0x0, 0x2]}}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x4}, {0x4, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x1, 0x2}, {0x0, 0x5}, {0x2, 0x7}, {0x2, 0x3}, {0x1, 0x3}, {0x3, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x3, 0x4}, {0x7, 0x6}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0xa}, {0x4, 0x9}, {0x5, 0xa}, {0x1, 0x3}, {0x5, 0x6}, {0x7}, {0x5, 0x8}, {0x6, 0x4}, {0x6, 0x1}, {0x0, 0x2}, {0x1, 0x9}, {0x7, 0x4}, {0x2, 0x4}, {0x4, 0x2}, {0x6, 0x9}, {0x1, 0x2}, {0x3}, {0x2, 0xa}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x7}, {0x6, 0x8}, {0x7, 0x9}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0x9}, {0x5, 0x2}, {0x7, 0x4}, {0x1}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x3, 0x896, 0xb, 0x4, 0xad, 0x1be, 0x6]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x5, 0x5}, {0x0, 0x9}, {0x3, 0xa}, {0x1, 0x1}, {0x5, 0x5}, {0x0, 0x5}, {0x7, 0x2}, {0x6, 0x8}, {0x7, 0x1}, {0x2, 0x3}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfffd, 0x4e9a, 0x8, 0x9, 0x8, 0x4, 0x3]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9fb, 0xdf, 0xff81, 0x0, 0x8, 0xfff8, 0x9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x9d1ef912767a19c6, 0x4, 0x4, 0x1, 0x3f, 0x30, 0x16, 0x4, 0x1b, 0x0, 0x3, 0x9, 0x5, 0x18, 0x6c, 0x36, 0x16, 0x18, 0x12, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x5, 0x2, 0x1, 0x5, 0x8, 0x5, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x8f2, 0x80, 0x4, 0x401, 0x3, 0x5]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffa, 0x5, 0x326f, 0x4, 0x0, 0xe948, 0x136]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x1, 0xfffa, 0xe4, 0x8676, 0x8, 0x4135, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x18, 0x1b, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x40, 0xf, 0xfffe, 0x1, 0x8000, 0x0, 0x10]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x288, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x18, 0x36, 0x24, 0x4, 0x18, 0xc, 0xb, 0x36, 0x16, 0x1, 0x24, 0x3, 0x0, 0x8, 0xc, 0x6, 0x6c, 0xd, 0x3c]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x3, 0x18, 0x2, 0x4, 0x6c, 0x6, 0x30, 0x18, 0x30, 0x6, 0x12, 0x6, 0x18, 0x6c, 0x2, 0x60, 0x2, 0x12, 0x6, 0xc, 0x9, 0x18, 0x24]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x0, 0x7, 0x7ff, 0x3ff, 0x1, 0x4c9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0x5, 0x12, 0x1, 0x3, 0x48, 0x2, 0x9, 0x8d4268ab0c19673e, 0x12, 0xb, 0xc, 0x5, 0x4, 0xb, 0x36, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x5}, {0x0, 0x2}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0xa}, {0x4, 0xa}, {0x3, 0x1}, {0x7, 0x6}, {0x2, 0x6}]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x88f1, 0x3, 0x7, 0x240, 0x1, 0x8, 0x2, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x9, 0xfe7b, 0x1, 0x7, 0x6, 0xfff0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x13, 0x3000, 0x8, 0x9, 0x8001, 0x6, 0x7, 0x800]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x48, 0xc, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0x6}, {0x5, 0x3}, {0x7, 0xa}, {0x6, 0x5}, {0x4, 0x3}, {0x7, 0xa}, {0x0, 0x8}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x8}, {0x4, 0x4}, {0x0, 0x8}, {0x2, 0x7}, {0x4}, {0x6, 0x5}, {0x5}, {0x5, 0x3}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x2}, {0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x3, 0x1}, {0x4, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x3}, {0x5, 0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x6, 0x6}, {0x6, 0xa}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x7, 0x9}, {}, {0x0, 0xa}, {0x0, 0x7}, {0x7, 0xa}, {0x5, 0x1}, {0x1, 0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x4}, {0x7, 0x8}, {0x6, 0x5}, {0x6, 0x3}, {0x2, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x7, 0x8}, {0x3, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x4}, {0x2, 0xa}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x4}, {0x7, 0x5}, {0x1, 0x6}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x4, 0x8}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x9}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x4}, {0x1, 0x6}, {0x1, 0x1}, {0x0, 0x8}, {0x6, 0x6}, {}, {0x0, 0x5}, {0x4, 0x6}, {0x5, 0x3}, {0x4, 0x5}, {0x6, 0x9}, {0x2, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0x8}, {0x3, 0x8}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x4, 0x36, 0x1b, 0x3, 0x6c, 0x68, 0x18, 0x2, 0x9, 0x30, 0x6c, 0xb, 0x1b, 0x9, 0x36f07b29961f2a3f, 0x6c, 0x60, 0x78, 0xc, 0xc, 0x6c, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x9, 0x0, 0xfffe, 0x0, 0x93, 0x15, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x3, 0x0, 0x6, 0xff, 0x7f, 0x1ff]}}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x28, 0x5, 0xf1ff, 0x3, 0x5, 0x1ff, 0x8]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x6c, 0x6, 0x16, 0x12, 0x60, 0x12]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1b, 0x5, 0x6, 0xb, 0xb, 0x29, 0x6, 0x16, 0x4, 0x24, 0x16, 0x5, 0xa, 0x48, 0x6c, 0x1, 0x0, 0xb, 0x36, 0x16, 0x1, 0x18, 0x6c]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x2}, {0x1, 0x6}, {0x4, 0x4}, {0x7, 0xa}, {0x3, 0x8}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x4}, {0x2, 0x3}, {0x1}, {0x2, 0x4}, {0x6, 0xa}, {0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x2, 0x6}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x8}, {0x0, 0x4}, {0x1, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x651a, 0x8, 0xdc7c, 0x9, 0x937, 0xccc, 0x3bdd, 0x3ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x8, 0x10, 0x8001, 0x400, 0x1, 0xf95]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x401, 0x400, 0x8, 0x7, 0x4, 0xb9ca, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x8, 0x3, 0x8, 0x4, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x4, 0x7ff, 0x80, 0x7, 0xfb, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x32c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x9}, {0x1, 0x8}, {0x0, 0x8}, {0x6, 0x1}, {0x3, 0x3}, {0x2, 0xa}, {0x6, 0x1}, {0x1, 0x2}, {0x4, 0x4}, {0x7, 0x3}, {0x1, 0x5}, {0x7, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x4}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0xa}, {0x1}, {0x6, 0x8}, {0x5}, {0x5, 0x7}, {0x0, 0xa}, {0x3}, {0x7, 0x2}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0x5}, {0x5, 0x9}, {0x2, 0x6}, {0x3, 0x2}, {0x0, 0x1}, {0x5, 0x9}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0x3}, {0x5}, {0x3, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x4}, {0x0, 0x1}, {0x7, 0x2}, {0x3, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x2, 0x1}, {0x1, 0x8}, {0x1, 0x8}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x1}, {0x5, 0xa}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x6, 0x5}, {0x6, 0x4}, {0x3, 0x3}, {0x7, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x3eff, 0x1, 0x9, 0x6, 0xc7c, 0x5]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x12, 0x30, 0x5, 0x9c30ecfb610c0d13, 0x4, 0x8, 0xc, 0x24, 0x2, 0x16, 0x24, 0x48, 0x6c, 0x6c, 0x2, 0x30, 0x48, 0x1, 0x48, 0x0, 0x4, 0x1b, 0x6c, 0x5, 0x6, 0x4, 0x36, 0x4, 0x1a, 0x2, 0x12]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x1}, {0x0, 0x4}, {0x1, 0x8}, {0x4, 0x4}, {0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x3, 0x2}, {0x3, 0x1}, {0x7}, {0x6, 0x3}, {0x6, 0x9}, {0x3, 0x1}, {0x5}, {0x7, 0x8}, {0x1, 0x4}, {0x6, 0x9}, {0x1, 0x2}, {0x6, 0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xffff, 0x0, 0x5, 0xc, 0x2, 0x174, 0xfff7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x1}, {0x1, 0x9}, {0x5, 0x4}, {0x0, 0x4}, {0x6, 0x3}, {0x5, 0x1}, {0x5, 0x2}, {0x2, 0x6}, {0x5, 0x2}, {0x3, 0x2}, {0x5, 0x8}, {0x1, 0xa}, {0x2, 0xa}, {0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x7, 0x6}, {0x6}, {0x5, 0x3}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0x2}, {0x7}, {0x0, 0x5}, {0x3}, {0x3, 0x2}, {0x5, 0x7}, {0x2, 0x8}, {0x7}, {0x5, 0x6}, {0x6, 0x6}, {0x4, 0x4}, {}, {0x4, 0x4}, {0x3, 0x2}, {0x4, 0xa}, {0x2, 0x7}, {0x4, 0x7}, {0x3, 0xa}, {0x2}, {0x2, 0x7}, {0x7, 0x1}, {0x6, 0x1}, {0x3, 0x6}, {0x2, 0x2}, {0x4, 0x6}, {0x2, 0x9}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x3, 0x9}, {0x5, 0x4}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x4}, {0x2, 0x5}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0x2}, {0x6}, {0x0, 0x7}, {0x6, 0x5}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x5}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x9, 0x18, 0x12, 0x12, 0x2, 0x12, 0x1, 0x6c, 0x4, 0x2, 0x9, 0x2, 0x36, 0xb, 0x48, 0x1, 0x16, 0x9, 0x5, 0x16, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x2, 0x40, 0xac5e, 0x6, 0x8000, 0x1, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x1b, 0x12, 0x30, 0xb, 0x16, 0x1b, 0x6, 0x25, 0x1b, 0x4, 0x2, 0x7a, 0x18, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfb, 0x2b1, 0xe9af, 0x5, 0x7, 0x9, 0x3, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ed9, 0x8, 0xfffb, 0x4, 0x7f, 0x800, 0x400, 0x4]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x1}, {0x4, 0xa}, {0x2, 0x6}, {0x3, 0x5}, {0x0, 0x4}, {0x3, 0x2}, {0x6, 0x3}, {0x3, 0x5}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x2}, {}, {0x4, 0x8}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x7, 0x5}, {0x7, 0x9}, {0x6, 0x2}, {0x3, 0x5}, {0x4, 0x7}, {0x6, 0x5}, {0x6, 0xa}, {0x6, 0x9}, {0x6, 0x8}, {0x5, 0x7}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0x9}, {}, {0x0, 0x1}, {0x5}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x6, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x0, 0x8000, 0x4, 0x200, 0x800, 0xfffe, 0xfff7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x400, 0x9, 0x5, 0x80, 0xcf, 0x7fff]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x1}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2}, {0x4, 0x4}, {0x3, 0x8}, {0x5, 0x8}, {0x5, 0x4}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x6, 0xa}, {0x7, 0x5}, {0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x1, 0x2}, {0x4}, {0x2, 0x7}, {0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x7, 0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe5f9, 0x85b, 0x25f5, 0x0, 0x4, 0x89aa, 0x0, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xee, 0xbef, 0xfff7, 0x8, 0xff, 0x720, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x7, 0x2, 0xffff, 0x0, 0x0, 0x18]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0xc, 0x1b, 0x9, 0x60, 0x5b, 0x12, 0x12, 0x5, 0x30, 0x5, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2a21, 0x38c, 0x9, 0x5, 0x7f, 0xa60, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xcab, 0x5, 0xff, 0x4, 0x254, 0x2, 0xf]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x1b, 0x24, 0x48, 0x31, 0xc]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x6, 0x6c, 0x9, 0x30, 0x48, 0x18, 0x13, 0x48, 0xc, 0x5, 0x16, 0x5, 0x24, 0x18, 0x0, 0x18, 0x24, 0x6c, 0xb, 0x24, 0x49]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x2, 0xb, 0x9, 0x3, 0x12, 0x3, 0x2, 0x1b, 0x30, 0x30, 0x6, 0x3, 0x6, 0x18, 0x5, 0x0, 0x2, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xa4ca, 0x0, 0x4, 0x7, 0x6, 0x7, 0x9]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x4}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x9}, {0x6, 0x1}, {0x1, 0x1}, {0x0, 0x5}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x2, 0x16, 0x30, 0x30, 0x48, 0x4a, 0x24, 0x6c, 0x2, 0x3, 0x29, 0xc, 0xc, 0x4, 0x1, 0xb, 0x36]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x4}]}, 0xb74}, 0x1, 0x0, 0x0, 0x8010}, 0x4004004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d08000500000000000800050000000000080005000000000008000500"], 0x134}}, 0x4048014)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan3\x00'})
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@typed={0x4, 0x7, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000001780)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0x54, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "71cc1cb49646051a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="106d47cd718c98da1ed8a99a67d44d1fc687089e25c81ff9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "75b2d2c8c9ec54f9"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000)

1.852584651s ago: executing program 0 (id=1546):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x20, @mcast2}, 0x1c)
sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000500)=0x3, 0x4)
sendto$inet6(r1, 0x0, 0x60, 0x40012, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan1\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000900)={0xb0, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_SEC_KEY={0x88, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c70fd630fb25a4612477bd2c3a9377dcb8d4a8b0cf83d71230b50640980ef758"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1130e95f49311be6ef7969e724eb9439648143ed3889dad68117fbffb97d0f25"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x100}, 0x24000000)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x2c0, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1bc, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b8de051}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7557}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7edd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x133ec33a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff7a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2da773e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe710}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12febc26}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfce0}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x331a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29e3de7d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19e7ee61}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x644b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bc9}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72f02a86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35772da6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d2a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17626388}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40343c0c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4add870e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9fb}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f08}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f119d9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x766f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19b42310}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa978}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fd2d6b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x747}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5127}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76388d41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x671219f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f0b88d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18b1d415}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a8226d}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c5fe43e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd24c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd07}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2201}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25db62c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76ee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1718a7d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x697}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49107fcc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18cc6028}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1163}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5bff}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c4b374e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfcd155}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ea54740}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74bbdb38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61af45f6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f1b84d4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x291289b4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f32742d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3291dc59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf3788cd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x676b9f00}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e18fb6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597ec310}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fb9cfa4}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa3030d0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17c48403}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6beed562}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x98b40a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x168e1adf}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x803}, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7], 0x7c}}, 0x20000000)

1.324892962s ago: executing program 4 (id=1547):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f00000001c0)=0x4)

1.265923755s ago: executing program 3 (id=1548):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x15, 0x9}, {0xf, 0xf}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x2, 0x52bf, 0x80000001, 0x401}, 0x14)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.108123388s ago: executing program 2 (id=1549):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="020300090b00000000000000000000000100080000000000030006000000000002000000000000000000000000000000020001000000000000fd090400000000030005000000000002000000ffffffff000000000000053a327afa0bb0498af706e52a21d7452356d043997033c34f741b269be4bbe0a414da1ef6286305e4f035bfb2b0aa3f73ea6ee20f585df48dd0fb5801cd6a497745cc0000000000000000"], 0x58}, 0x1, 0x7}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x20050800)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x2]}})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r3, 0xfffff000)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000001c0))
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090001"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8041)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r4, &(0x7f0000000340)="b897f68ca39462692c1e699af7f5626d6dce70bfe75ca17149678724db13516de365a661a7ccc5c69ef09d7f6544e2ac37a43408498e32492ca8e218132c84bcac75f99374ba6bdd891c47cdf70c20d9fb07af2503ef654013aff9450df01ba8c05003dd121542f373035c41ba96bb65f96c54373b17ea9592ae2f62c25aa6e9325fe897613f0b6c101b9e02c6f3ee5ba9ba20a32b41aca37657ef9a2aa1d00e10c6501b9803ccdc426ce02b9d26e73d6f35f91dc52d8d1af9252524703505737168d5cc03b435bfa93485db6a54c44fc829", &(0x7f0000000600)=""/156}, 0x20)

1.105124171s ago: executing program 0 (id=1550):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={<r2=>0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
shutdown(r1, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) (async)

973.818414ms ago: executing program 4 (id=1551):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="011c0008", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYRESOCT=r1], 0x28}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x15)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x52, &(0x7f0000000380)=0x1000, 0x4)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', <r5=>0x0})
sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
r6 = socket(0x22, 0x2, 0x2)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x14}}, 0x0)
accept$nfc_llcp(r6, &(0x7f0000000080), &(0x7f0000000100)=0x60)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="011c0008", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYRESOCT=r1], 0x28}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x15) (async)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x52, &(0x7f0000000380)=0x1000, 0x4) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) (async)
sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
socket(0x22, 0x2, 0x2) (async)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x14}}, 0x0) (async)
accept$nfc_llcp(r6, &(0x7f0000000080), &(0x7f0000000100)=0x60) (async)

840.580684ms ago: executing program 1 (id=1552):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async, rerun: 64)
r1 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050230000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2007800000000"], 0x0) (async, rerun: 32)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x60, 0x10000, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 32)
ioctl$FITHAW(r0, 0xc0045878) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0x4}]}]}], {0x14, 0x10}}, 0xb8}}, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) (async)
socket$nl_route(0x10, 0x3, 0x0)

631.914245ms ago: executing program 4 (id=1553):
r0 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}})
socket$packet(0x11, 0x2, 0x300)
write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x2, 0x2, 0x0, 0x2, 0xc}, @ldst={0x0, 0x1, 0x4, 0xb, 0x6, 0xffffffffffffffff, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f00000000c0)=0xfffffffe, 0x4)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000000c0))
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r8=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000f000000050030000000000005002f0000000000", @ANYRES32=r8], 0x2c}}, 0x4000000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000030425bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="40450000000000002c0012800800010068737200200002800a000400aaaaaaaaaa2a000008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="d73c7c90428f539deb6c7634932c8d74eba4eb1cb713809bdbe432ab68c642179299903fe2197561e85d4966afea80a591fca6f02127dcc7a01b"], 0x54}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004)
sendto$rose(r5, &(0x7f0000000640)="e3c0cc59f1811f56b8e6bafd3942f32f9cbb8ab3dd9bd4f084b37f461fe324772a196093e1b6b01411b2e320782e9ce2d7b0d60565b5c36bdca6cc74f132620aead988a91637d2197a0c32180eecef0296a77569f0b3543619dc4f75da41debf496a3188aa6bc4d1aa05ccfd63d3099a8ff4b13137c13487e6dc14f4d82e37dfac3bf1c76e2b5f17a0c12a4aa33f80fb870febeb33a30feea2537fe2975664313c8e6240ef87fa4302806f198fbad9e79b4ea1ddc22601f5290bb968ab9df046534c498857b8a08b3c1e185e52922f9fe4", 0xd1, 0x4000845, &(0x7f0000000740)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000080)=0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0)

631.464529ms ago: executing program 2 (id=1554):
socket$inet6(0xa, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), 0x0}, 0x20)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0xc0189436, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}})
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00')
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000100))
sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
syz_emit_ethernet(0x66, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x67}, @hopopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "0ce3c4989ea1a39290312280e6388bb3012ab2f6fcb2ba"}]}]}}}}}, 0x0)
sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x4, 0x0, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050)

473.027145ms ago: executing program 1 (id=1555):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@owner={{0x38}, {0xee01, 0x0, 0x0, 0x0, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB='\v\x00'], 0x48) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) (async)
pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000040)=[{0x3, 0x2, {0x0, 0xf0, 0x4}, {0x1, 0xf0, 0x2}, 0x0, 0xfe}, {0x3, 0x2, {0x2, 0x0, 0x4}, {0x2, 0x0, 0x3}, 0xfd}], 0x40)

428.431946ms ago: executing program 0 (id=1556):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000c400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1b4}}, 0x0)

339.890689ms ago: executing program 2 (id=1557):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={<r2=>0x0, @broadcast, @dev}, &(0x7f0000000040)=0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007f00)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x2}]}, @func={0x3, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x41}, 0x28)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
r6 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$sock_buf(r6, 0x1, 0x3d, &(0x7f0000000280)=""/45, &(0x7f0000000340)=0x2d)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=<r8=>0x0, &(0x7f0000000380)=0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000", @ANYRES16=r7, @ANYBLOB="00042dbd7000fddbdf25070000003800018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="1400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r8, @ANYBLOB="1c000180080003000600000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="28000180140002007767300000000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0c0001800800010026a97f62c38f8453fa55a3131b33d9a6b00ea67b230271e98b5f300c5fa958e4d04130cc79e8ce405a92b2bd1ffb4d2ad69f82096d49c555ed797dbb79886687e1a153d2b65213d381ea8b186472b78819e0ae1b194f5b6027d12cc4ecbe224f034b2552d949226918b29623c294f5a4a75ce55bca1fb221b59053130c7b8ea525ac3e2f2a15a199bd945f30403b3408da80228887907fb1be52b19215c0674604ed54781827c21c9e668729142ab8e6a966680c5e12a09542700d7d844f1237a3208df9bc94c67539abe1a2be69c88afdec3f5a838ccadf351148", @ANYRES32=r10, @ANYBLOB="18000180140002007465616d5f736c6176655f3100000000040001800c00018008000300020000003c0001800800030004000000140002006970766c616e300000000000000000001400020070696d72656731000000000000000000080003000000000038000180140002000000000000000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="0800030001000000080003000100000008000100", @ANYRES32=r11, @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=r2, @ANYBLOB="000000e7ff05000014003500626f6e643000000000000000000004000a0001"], 0x40}}, 0x0)

156.049597ms ago: executing program 1 (id=1558):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff}) (rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000f00)=""/231, 0xe7}, {&(0x7f0000000600)=""/145, 0x91}, {&(0x7f0000001840)=""/4104, 0x1008}, {&(0x7f0000000240)=""/62, 0x3e}], 0x6}, 0x70001}, {{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x76}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}, 0x2}], 0x7, 0x102, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r3) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02251f00004a"})
sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x30, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async)
write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803004000000000050002000008000f40fe00000e", 0x24)

102.375192ms ago: executing program 0 (id=1559):
r0 = socket$inet(0x2, 0x80000, 0x401)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0xfffffffc)
socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x7d4165c9)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x249d)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xfffffffffffffd52)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c2ba8001000010400eeffffff0900ffff000000d4adbcd0d8534a9335829a3a87717c4df6e2b6ba4d1f0f6cfcb4f7a7991ef86fc56f19de9f0fe5aba404d8b7d76fed10839e1fc70aa6f89984354d3b5faea2215c2170a3a9f202b3251c4a95c633764dc0c12be23225cf", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765", @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000810)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x74, 0x24, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x7, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xea, 0x45eb0a72, 0xfffffff8}}]}]}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8266}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008840}, 0x0)
sendto$packet(r4, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x20044824, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r9, 0x7d4165c9)
listen(r8, 0x0)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r10, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
close(0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)

32.949879ms ago: executing program 3 (id=1560):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bd000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)

0s ago: executing program 4 (id=1561):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r4=>0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) (async)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts.
[   78.994830][ T5810] cgroup: Unknown subsys name 'net'
[   79.116212][ T5810] cgroup: Unknown subsys name 'cpuset'
[   79.125776][ T5810] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.781801][ T5810] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   84.858721][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.868480][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.880446][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.888794][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.889986][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.897634][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.911332][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   84.912286][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.919519][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.926945][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   84.934692][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.942658][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.948099][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.955001][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.968557][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.970664][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   84.978256][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.987627][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.000835][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.008320][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.015826][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.023924][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.025629][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.038861][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   85.051161][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.766076][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   85.835224][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   85.862961][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   86.019902][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   86.043292][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   86.158116][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.165397][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.172675][ T5824] bridge_slave_0: entered allmulticast mode
[   86.179874][ T5824] bridge_slave_0: entered promiscuous mode
[   86.225729][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.233058][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.240670][ T5824] bridge_slave_1: entered allmulticast mode
[   86.248206][ T5824] bridge_slave_1: entered promiscuous mode
[   86.263262][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.270411][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.279509][ T5827] bridge_slave_0: entered allmulticast mode
[   86.286912][ T5827] bridge_slave_0: entered promiscuous mode
[   86.300251][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.307677][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.315845][ T5825] bridge_slave_0: entered allmulticast mode
[   86.323260][ T5825] bridge_slave_0: entered promiscuous mode
[   86.332048][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.339261][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.346556][ T5825] bridge_slave_1: entered allmulticast mode
[   86.353955][ T5825] bridge_slave_1: entered promiscuous mode
[   86.375419][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.382648][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.389813][ T5827] bridge_slave_1: entered allmulticast mode
[   86.397739][ T5827] bridge_slave_1: entered promiscuous mode
[   86.480094][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.509369][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.516955][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.525016][ T5836] bridge_slave_0: entered allmulticast mode
[   86.532692][ T5836] bridge_slave_0: entered promiscuous mode
[   86.542961][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.554626][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.589326][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.599429][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.606824][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.614172][ T5836] bridge_slave_1: entered allmulticast mode
[   86.621347][ T5836] bridge_slave_1: entered promiscuous mode
[   86.631360][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.660527][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.667929][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.675249][ T5826] bridge_slave_0: entered allmulticast mode
[   86.682540][ T5826] bridge_slave_0: entered promiscuous mode
[   86.692177][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.721853][ T5824] team0: Port device team_slave_0 added
[   86.731117][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.738382][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.745693][ T5826] bridge_slave_1: entered allmulticast mode
[   86.753649][ T5826] bridge_slave_1: entered promiscuous mode
[   86.761724][  T980] cfg80211: failed to load regulatory.db
[   86.786840][ T5825] team0: Port device team_slave_0 added
[   86.794683][ T5824] team0: Port device team_slave_1 added
[   86.846563][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.857974][ T5825] team0: Port device team_slave_1 added
[   86.877425][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.888979][ T5827] team0: Port device team_slave_0 added
[   86.897381][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.917357][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.924438][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.951241][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.965257][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.976461][ T5827] team0: Port device team_slave_1 added
[   87.019378][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.026767][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.052824][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.072789][ T5844] Bluetooth: hci1: command tx timeout
[   87.072794][   T50] Bluetooth: hci0: command tx timeout
[   87.073031][ T5839] Bluetooth: hci4: command tx timeout
[   87.090166][ T5828] Bluetooth: hci3: command tx timeout
[   87.117217][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.124331][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.150337][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.162157][ T5839] Bluetooth: hci2: command tx timeout
[   87.173853][ T5826] team0: Port device team_slave_0 added
[   87.180191][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.187567][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.213542][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.226697][ T5836] team0: Port device team_slave_0 added
[   87.233058][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.240134][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.266630][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.287282][ T5826] team0: Port device team_slave_1 added
[   87.293633][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.300670][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.326882][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.339832][ T5836] team0: Port device team_slave_1 added
[   87.370474][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.377497][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.403737][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.450873][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.458109][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.484173][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.506496][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.513761][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.540113][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.570528][ T5824] hsr_slave_0: entered promiscuous mode
[   87.577098][ T5824] hsr_slave_1: entered promiscuous mode
[   87.595064][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.602210][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.628575][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.657488][ T5825] hsr_slave_0: entered promiscuous mode
[   87.664160][ T5825] hsr_slave_1: entered promiscuous mode
[   87.670428][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   87.676760][ T5825] Cannot create hsr debugfs directory
[   87.782538][ T5827] hsr_slave_0: entered promiscuous mode
[   87.788863][ T5827] hsr_slave_1: entered promiscuous mode
[   87.795228][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   87.801059][ T5827] Cannot create hsr debugfs directory
[   87.829472][ T5836] hsr_slave_0: entered promiscuous mode
[   87.835799][ T5836] hsr_slave_1: entered promiscuous mode
[   87.842843][ T5836] debugfs: 'hsr0' already exists in 'hsr'
[   87.848635][ T5836] Cannot create hsr debugfs directory
[   87.940144][ T5826] hsr_slave_0: entered promiscuous mode
[   87.946993][ T5826] hsr_slave_1: entered promiscuous mode
[   87.953753][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   87.959526][ T5826] Cannot create hsr debugfs directory
[   88.436634][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.447571][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.456039][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.467440][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.475476][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.485575][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.504329][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.516060][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.580873][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.592367][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.600299][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.611619][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.625371][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.635909][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.644221][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.656279][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.750534][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.765050][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.773466][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.784209][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.792604][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.803402][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.811398][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.823108][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.948897][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.959510][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.967923][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.977774][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.991350][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.002634][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.013347][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.029468][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.043922][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.126936][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   89.152211][ T5839] Bluetooth: hci1: command tx timeout
[   89.161723][ T5839] Bluetooth: hci4: command tx timeout
[   89.162306][ T5828] Bluetooth: hci3: command tx timeout
[   89.167180][ T5844] Bluetooth: hci0: command tx timeout
[   89.172143][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.211158][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.218646][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.232483][ T5828] Bluetooth: hci2: command tx timeout
[   89.244720][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   89.255848][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.274804][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   89.284883][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.293402][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   89.303555][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.312938][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   89.325965][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.333137][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.345762][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   89.356516][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.394768][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.401957][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.443561][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.459317][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.466463][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.559662][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   89.628623][  T126] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.635883][  T126] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.667383][  T126] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.674749][  T126] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.765047][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.845749][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   89.886946][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.894196][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.915584][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.944592][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.951893][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.978831][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.016461][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   90.082527][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.089760][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.137124][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.144353][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.179967][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.281031][ T5824] veth0_vlan: entered promiscuous mode
[   90.332327][ T5824] veth1_vlan: entered promiscuous mode
[   90.349144][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.440734][ T5825] veth0_vlan: entered promiscuous mode
[   90.503139][ T5825] veth1_vlan: entered promiscuous mode
[   90.543524][ T5824] veth0_macvtap: entered promiscuous mode
[   90.566352][ T5824] veth1_macvtap: entered promiscuous mode
[   90.615469][ T5836] veth0_vlan: entered promiscuous mode
[   90.630922][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.666312][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.683909][ T5825] veth0_macvtap: entered promiscuous mode
[   90.699925][ T5836] veth1_vlan: entered promiscuous mode
[   90.714923][ T5825] veth1_macvtap: entered promiscuous mode
[   90.727184][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.763542][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.773102][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.792721][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.802704][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.848460][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.875588][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.886838][ T5827] veth0_vlan: entered promiscuous mode
[   90.930304][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.945964][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.954871][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.990505][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.034151][ T5827] veth1_vlan: entered promiscuous mode
[   91.043386][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.057581][ T5836] veth0_macvtap: entered promiscuous mode
[   91.066866][  T126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.080559][ T5836] veth1_macvtap: entered promiscuous mode
[   91.094327][  T126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.209076][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.232006][ T5828] Bluetooth: hci4: command tx timeout
[   91.233194][ T5844] Bluetooth: hci1: command tx timeout
[   91.237476][   T50] Bluetooth: hci3: command tx timeout
[   91.243582][ T5839] Bluetooth: hci0: command tx timeout
[   91.258651][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.266559][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.308308][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.318115][ T5839] Bluetooth: hci2: command tx timeout
[   91.394881][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   91.413784][  T143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.423818][  T143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.435115][ T5827] veth0_macvtap: entered promiscuous mode
[   91.448290][  T143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.457556][  T143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.466697][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.483823][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.490252][ T5827] veth1_macvtap: entered promiscuous mode
[   91.576724][ T5944] Zero length message leads to an empty skb
[   91.592601][  T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.608577][  T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.618728][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.630158][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.638444][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.648571][ T5944] bridge0: entered allmulticast mode
[   91.710618][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.774565][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.790169][   T74] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.869171][   T74] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.887804][   T74] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.912903][ T5826] veth0_vlan: entered promiscuous mode
[   91.964256][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.007046][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.020106][ T5952] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6'.
[   92.035598][ T5826] veth1_vlan: entered promiscuous mode
[   92.160694][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.182183][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.266283][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.294935][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.328153][ T5957] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET)
[   92.398651][ T5826] veth0_macvtap: entered promiscuous mode
[   92.416417][ T5959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10'.
[   92.426047][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.430678][ T5826] veth1_macvtap: entered promiscuous mode
[   92.448181][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.601899][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.647815][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.701305][ T5964] netlink: 'syz.1.2': attribute type 39 has an invalid length.
[   92.705083][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.721021][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.797004][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.823703][ T5968] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12'.
[   92.834278][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.876100][ T5972] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12'.
[   92.905879][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.914475][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.168539][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'.
[   93.271258][ T5977] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   93.313100][ T5839] Bluetooth: hci4: command tx timeout
[   93.315114][   T50] Bluetooth: hci0: command tx timeout
[   93.322781][ T5844] Bluetooth: hci1: command tx timeout
[   93.327818][ T5828] Bluetooth: hci3: command tx timeout
[   93.392151][ T5844] Bluetooth: hci2: command tx timeout
[   93.701724][ T6001] netlink: 'syz.0.21': attribute type 10 has an invalid length.
[   93.730993][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.757595][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.813181][ T6013] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621
[   93.894345][ T6014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22'.
[   93.918242][ T6014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22'.
[   93.925854][ T6001] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   93.928152][ T6016] xt_hashlimit: overflow, try lower: 3/0
[   93.945719][ T6014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22'.
[   93.950083][ T6000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.989157][ T6014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22'.
[   94.008007][ T6014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22'.
[   94.035548][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.060047][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.446452][ T6020] bond0: entered promiscuous mode
[   94.467933][ T6020] bond_slave_0: entered promiscuous mode
[   94.489474][ T6020] bond_slave_1: entered promiscuous mode
[   94.505930][ T6020] gretap0: entered promiscuous mode
[   94.539556][ T6020] hsr1: entered promiscuous mode
[   94.660549][ T6031] syzkaller0: entered promiscuous mode
[   94.682698][ T6031] syzkaller0: entered allmulticast mode
[   94.820162][ T6041] netlink: 'syz.1.32': attribute type 58 has an invalid length.
[   95.020994][ T6047] netlink: 'syz.2.34': attribute type 21 has an invalid length.
[   95.337198][ T6061] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   95.478482][ T6069] netlink: 'syz.2.41': attribute type 32 has an invalid length.
[   96.412630][ T6111] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[   96.520150][ T6117] smc: net device team0 applied user defined pnetid SYZ2
[   97.055651][ T6102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.346339][ T6166] __nla_validate_parse: 44 callbacks suppressed
[   97.346356][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'.
[   97.363557][ T6162] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   97.697914][   T24] IPVS: starting estimator thread 0...
[   97.801747][ T6181] IPVS: using max 28 ests per chain, 67200 per kthread
[   97.869817][ T6184] x_tables: duplicate underflow at hook 1
[   98.477353][ T6212] netlink: 'syz.0.83': attribute type 1 has an invalid length.
[   98.573678][ T6216] netlink: 'syz.3.84': attribute type 1 has an invalid length.
[   98.631330][ T6220] ip6t_srh: unknown srh match flags  5F28
[   98.806527][ T6224] netlink: 'syz.1.88': attribute type 1 has an invalid length.
[   98.961786][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'.
[   98.990300][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'.
[   99.030883][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'.
[   99.236252][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'.
[   99.261265][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.97'.
[   99.291706][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.97'.
[   99.474102][ T6263] netlink: 'syz.0.99': attribute type 1 has an invalid length.
[   99.575794][ T6262] bond1 (unregistering): Released all slaves
[   99.639824][ T6270] tipc: Started in network mode
[   99.648430][ T6270] tipc: Node identity ac14140f, cluster identity 4711
[   99.662597][ T6270] tipc: New replicast peer: 255.255.255.255
[   99.669592][ T6270] tipc: Enabled bearer <udp:syz2>, priority 10
[   99.680189][ T6271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.101'.
[   99.885674][ T6282] veth0: entered promiscuous mode
[   99.916348][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'.
[   99.948552][ T6282] block nbd0: Unsupported socket: should be TCP or UNIX.
[  100.015218][ T6279] veth0: left promiscuous mode
[  100.079470][ T6288] openvswitch: netlink: Key 6 has unexpected len 143 expected 2
[  100.365860][ T6293] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component
[  100.685340][ T6314] xt_policy: output policy not valid in PREROUTING and INPUT
[  100.719482][ T6311] bond1: Unable to set up delay as MII monitoring is disabled
[  100.730604][ T6311] bond1 (unregistering): Released all slaves
[  100.750306][   T24] tipc: Node number set to 2886997007
[  101.130660][ T6332] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  101.394347][ T6340] netlink: 44 bytes leftover after parsing attributes in process `syz.3.125'.
[  101.411894][ T6340] netlink: 'syz.3.125': attribute type 3 has an invalid length.
[  101.447791][ T6338] syzkaller0: entered promiscuous mode
[  101.454614][ T6338] syzkaller0: entered allmulticast mode
[  102.946480][ T6346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.093914][ T6368] netlink: 'syz.0.131': attribute type 1 has an invalid length.
[  103.189289][ T6374] __nla_validate_parse: 1 callbacks suppressed
[  103.189308][ T6374] netlink: 136 bytes leftover after parsing attributes in process `syz.3.134'.
[  103.203494][ T6368] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.213647][ T6374] openvswitch: netlink: Flow key attr not present in new flow.
[  103.255576][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'.
[  103.313311][ T6371] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.334565][ T6371] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  103.364776][ T6371] bond1: (slave vcan1): Error -95 calling set_mac_address
[  103.388304][ T6385] netlink: 'syz.3.137': attribute type 1 has an invalid length.
[  103.401181][ T6385] netlink: 'syz.3.137': attribute type 1 has an invalid length.
[  103.416351][ T6385] netlink: 'syz.3.137': attribute type 1 has an invalid length.
[  103.437453][ T6368] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu™crµ±K:‘£ÿˆÌ¥ÝB�ßÝ£|“¼Ú
[  103.457103][ T6385] netlink: 'syz.3.137': attribute type 2 has an invalid length.
[  103.490190][ T6387] netlink: 'syz.2.138': attribute type 12 has an invalid length.
[  103.513532][ T6385] netlink: 76 bytes leftover after parsing attributes in process `syz.3.137'.
[  103.757255][ T6397] netlink: 32 bytes leftover after parsing attributes in process `syz.3.140'.
[  103.816550][ T6400] netlink: 32 bytes leftover after parsing attributes in process `syz.3.140'.
[  104.338424][ T6426] Unknown options in mask b7f2
[  104.393009][ T6426] netlink: 'syz.4.148': attribute type 1 has an invalid length.
[  104.436651][ T6426] Unknown options in mask b7f2
[  104.444370][ T6431] netlink: 'syz.4.148': attribute type 1 has an invalid length.
[  104.767746][ T6448] netlink: 84 bytes leftover after parsing attributes in process `syz.1.156'.
[  104.777463][ T6447] 
: renamed from bond0 (while UP)
[  104.783616][ T6445] netlink: 'syz.0.155': attribute type 1 has an invalid length.
[  105.049489][ T6445] 8021q: adding VLAN 0 to HW filter on device bond2
[  105.077806][ T6451] bond2: entered promiscuous mode
[  105.094837][ T6451] bond2: entered allmulticast mode
[  105.616631][ T6493] netlink: 'syz.3.163': attribute type 64 has an invalid length.
[  105.662036][ T6489] sctp: [Deprecated]: syz.4.164 (pid 6489) Use of int in max_burst socket option.
[  105.662036][ T6489] Use struct sctp_assoc_value instead
[  105.673095][ T6493] netlink: 104 bytes leftover after parsing attributes in process `syz.3.163'.
[  105.705657][ T6496] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  105.934425][ T6498] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  106.017249][ T6498] bond3: (slave lo): Enslaving as an active interface with an up link
[  106.051063][ T6498] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  106.215317][ T6519] netlink: 'syz.4.169': attribute type 1 has an invalid length.
[  106.703693][ T6542] warning: `syz.1.176' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  106.925212][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'.
[  107.004351][ T6554] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.179'.
[  107.019082][ T6548] netlink: 'syz.0.178': attribute type 7 has an invalid length.
[  107.187511][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.181'.
[  107.320024][ T6573] xt_ecn: cannot match TCP bits for non-tcp packets
[  107.343969][ T6570] lo: entered allmulticast mode
[  107.731719][ T6587] netlink: 'syz.2.191': attribute type 10 has an invalid length.
[  107.856954][ T6591] xt_CT: No such helper "pptp"
[  107.966456][ T6598] openvswitch: netlink: Actions may not be safe on all matching packets
[  108.466025][ T6621] netlink: 'syz.4.201': attribute type 11 has an invalid length.
[  108.505954][ T6621] __nla_validate_parse: 5 callbacks suppressed
[  108.505974][ T6621] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.201'.
[  108.561007][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'.
[  108.857531][ T6627] netlink: 'syz.1.203': attribute type 1 has an invalid length.
[  108.906442][ T6634] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.205'.
[  108.943186][ T6642] netlink: 'syz.3.206': attribute type 30 has an invalid length.
[  108.971319][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'.
[  109.001901][ T6629] tipc: Started in network mode
[  109.012372][ T6629] tipc: Node identity , cluster identity 4711
[  109.024535][ T5924] IPVS: starting estimator thread 0...
[  109.033707][ T6629] tipc: Failed to set node id, please configure manually
[  109.066463][ T6629] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  109.131614][ T6647] IPVS: using max 27 ests per chain, 64800 per kthread
[  109.304464][ T6652] syzkaller0: entered promiscuous mode
[  109.337323][ T6652] syzkaller0: entered allmulticast mode
[  109.434326][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'.
[  109.545912][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'.
[  109.560842][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.615300][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.650898][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.748946][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.945297][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'.
[  109.991318][ T6685] netlink: 'syz.1.217': attribute type 3 has an invalid length.
[  110.046864][ T6685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.217'.
[  110.529326][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'.
[  110.602941][ T6722] netlink: 40 bytes leftover after parsing attributes in process `syz.0.221'.
[  110.748479][ T6707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.807607][ T6719] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  111.615235][ T6755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.765162][ T6767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.023030][ T6843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.099251][ T6813] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.136137][ T6849] netlink: 'syz.0.248': attribute type 2 has an invalid length.
[  113.166990][ T6850] netlink: 'syz.0.248': attribute type 2 has an invalid length.
[  113.184304][ T6813] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.211655][ T6813] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.292824][ T6813] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.407733][ T6862] Bluetooth: MGMT ver 1.23
[  113.447740][ T6859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.520105][ T6862] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  113.617214][ T6859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.905185][ T6888] xt_hashlimit: size too large, truncated to 1048576
[  113.953129][ T6886] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.972408][ T6886] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.136908][ T6891] netlink: 'syz.1.259': attribute type 1 has an invalid length.
[  114.342983][ T6886] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.386397][ T6886] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.553963][ T6916] netlink: 'syz.2.265': attribute type 4 has an invalid length.
[  114.613526][ T6910] veth2: entered allmulticast mode
[  114.687330][ T6923] wg1 speed is unknown, defaulting to 1000
[  114.759277][ T6931] __nla_validate_parse: 9 callbacks suppressed
[  114.759298][ T6931] netlink: 48 bytes leftover after parsing attributes in process `syz.2.268'.
[  114.775672][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'.
[  114.792627][ T6886] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.809878][ T6886] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.855382][ T6923] wg1 speed is unknown, defaulting to 1000
[  114.907026][ T6937] IPVS: set_ctl: invalid protocol: 150 224.0.0.1:20002
[  114.949138][ T6886] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.968374][ T6886] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.010752][ T6923] wg1 speed is unknown, defaulting to 1000
[  115.026508][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'.
[  115.046889][ T6923] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  115.098322][ T6923] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  115.248483][ T6929] syzkaller0: entered promiscuous mode
[  115.255923][ T6929] syzkaller0: entered allmulticast mode
[  115.281383][ T6923] wg1 speed is unknown, defaulting to 1000
[  115.307549][ T6923] wg1 speed is unknown, defaulting to 1000
[  115.340585][   T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.349447][   T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.363844][ T6923] wg1 speed is unknown, defaulting to 1000
[  115.377094][   T74] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.385570][   T74] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.396280][ T6923] wg1 speed is unknown, defaulting to 1000
[  115.413973][ T6923] wg1 speed is unknown, defaulting to 1000
[  115.414102][ T6813] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.432752][ T6813] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.487915][ T6813] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.501231][ T6813] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.910519][ T6963] IPVS: Scheduler module ip_vs_sip not found
[  116.064938][ T6974] IPVS: set_ctl: invalid protocol: 83 127.0.0.1:20003
[  117.281020][ T6974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.279'.
[  117.494617][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'.
[  117.536875][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'.
[  117.575685][ T6987] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.283'.
[  117.599662][ T6988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.281'.
[  117.610278][ T6987] netlink: Unknown conntrack attr (0)
[  117.652158][ T6989] syzkaller0: entered promiscuous mode
[  117.675720][ T6989] syzkaller0: entered allmulticast mode
[  117.817703][ T6999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.870648][ T7002] syzkaller1: entered promiscuous mode
[  117.877217][ T7002] syzkaller1: entered allmulticast mode
[  117.919098][ T7003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.993525][ T7005] sctp: [Deprecated]: syz.0.288 (pid 7005) Use of struct sctp_assoc_value in delayed_ack socket option.
[  117.993525][ T7005] Use struct sctp_sack_info instead
[  118.171215][ T7013] netlink: 'syz.2.290': attribute type 2 has an invalid length.
[  118.180602][ T7013] netlink: 100 bytes leftover after parsing attributes in process `syz.2.290'.
[  118.256928][ T7013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.290'.
[  118.947131][ T7043] : entered promiscuous mode
[  119.793739][ T7075] __nla_validate_parse: 5 callbacks suppressed
[  119.793755][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.4.306'.
[  119.867473][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.310'.
[  120.263026][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'.
[  120.336064][ T7113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.370629][ T7113] syzkaller0: MTU too low for tipc bearer
[  120.393941][ T7113] tipc: Disabling bearer <eth:syzkaller0>
[  120.441752][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.317'.
[  120.467621][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.317'.
[  120.518201][ T7119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.317'.
[  120.668091][ T7123] netlink: 220 bytes leftover after parsing attributes in process `syz.0.319'.
[  120.708144][ T7123] netlink: 'syz.0.319': attribute type 2 has an invalid length.
[  120.724714][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'.
[  121.005735][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'.
[  121.134832][ T7136] hsr_slave_0 (unregistering): left promiscuous mode
[  121.266821][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'.
[  122.050916][ T6813] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xfb
[  122.455926][ T7212] wg1 speed is unknown, defaulting to 1000
[  122.629607][ T7227] ip6gretap0: entered promiscuous mode
[  122.638713][ T7232] xt_hashlimit: size too large, truncated to 1048576
[  122.683627][ T7236] netlink: 'syz.3.350': attribute type 1 has an invalid length.
[  122.726201][ T7227] ip6gretap0: left promiscuous mode
[  123.151410][ T7255] syzkaller0: entered promiscuous mode
[  123.188269][ T7255] syzkaller0: entered allmulticast mode
[  123.212676][ T7261] sit0: entered promiscuous mode
[  124.429898][ T7309] netlink: 'syz.2.373': attribute type 1 has an invalid length.
[  124.456009][ T7309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.487318][ T7312] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  124.683101][ T7328] lo: entered promiscuous mode
[  124.696145][ T7328] tunl0: entered promiscuous mode
[  124.737935][ T7328] gre0: entered promiscuous mode
[  124.810913][ T7328] gretap0: entered promiscuous mode
[  124.851436][ T7328] erspan0: entered promiscuous mode
[  124.888322][ T7328] ip_vti0: entered promiscuous mode
[  124.936085][ T7328] __nla_validate_parse: 13 callbacks suppressed
[  124.936108][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'.
[  125.124263][ T7328] team1: entered promiscuous mode
[  125.146384][ T7328] team1: entered allmulticast mode
[  125.244223][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'.
[  125.304268][ T7351] netlink: 'syz.1.385': attribute type 30 has an invalid length.
[  125.432497][ T7356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.386'.
[  125.752828][ T7368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.114325][ T7380] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  126.263366][ T7386] raw_sendmsg: syz.0.396 forgot to set AF_INET. Fix it!
[  126.463628][ T7399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.399'.
[  126.550604][ T7402] netlink: 'syz.4.402': attribute type 1 has an invalid length.
[  126.564806][ T7401] netlink: 'syz.4.402': attribute type 1 has an invalid length.
[  126.625017][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[  126.657287][ T7406] gtp0: entered promiscuous mode
[  126.669638][ T7406] gtp0: entered allmulticast mode
[  126.778341][ T7412] IPv6: NLM_F_REPLACE set, but no existing node found!
[  126.819518][ T7414] netlink: 64 bytes leftover after parsing attributes in process `syz.1.405'.
[  126.879473][ T7414] netlink: 64 bytes leftover after parsing attributes in process `syz.1.405'.
[  127.265290][ T7434] xt_hashlimit: size too large, truncated to 1048576
[  127.341070][ T7441] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  127.397573][ T7441] bond0: (slave lo): Error: Device can not be enslaved while up
[  127.423923][ T7445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.971430][ T7468] ipvlan0: entered allmulticast mode
[  127.979262][ T7468] batadv_slave_1: entered allmulticast mode
[  127.995396][ T7468] batman_adv: batadv0: Adding interface: ipvlan0
[  128.008103][ T7468] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  128.035551][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'.
[  128.068590][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.085717][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.098937][ T7468] batman_adv: batadv0: Interface activated: ipvlan0
[  128.137133][ T7472] netlink: 81 bytes leftover after parsing attributes in process `syz.4.420'.
[  128.182121][ T7480] netlink: 'syz.0.421': attribute type 9 has an invalid length.
[  128.202833][ T7480] netlink: 'syz.0.421': attribute type 6 has an invalid length.
[  128.669779][ T7500] vlan2: entered allmulticast mode
[  128.691648][ T7500] bond0: entered allmulticast mode
[  128.703700][ T7500] bond_slave_0: entered allmulticast mode
[  128.715860][ T7500] bond_slave_1: entered allmulticast mode
[  128.728962][ T7500] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  129.044826][ T7516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.429'.
[  129.148899][ T7519] syzkaller0: entered promiscuous mode
[  129.180739][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  129.186592][ T7519] syzkaller0: entered allmulticast mode
[  129.192119][ T7525] netlink: 'syz.4.431': attribute type 1 has an invalid length.
[  129.279992][ T7519] netlink: 'syz.3.430': attribute type 11 has an invalid length.
[  129.589721][ T7535] netlink: 'syz.4.434': attribute type 21 has an invalid length.
[  130.017956][ T7553] __nla_validate_parse: 4 callbacks suppressed
[  130.017977][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'.
[  130.105687][ T7561] syzkaller0: entered promiscuous mode
[  130.125053][ T7561] syzkaller0: entered allmulticast mode
[  130.210268][ T7561] tipc: Started in network mode
[  130.235613][ T7561] tipc: Node identity 8e12195bd6fe, cluster identity 4711
[  130.271358][ T7561] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.340967][ T7558] tipc: Resetting bearer <eth:syzkaller0>
[  130.478260][ T7558] tipc: Disabling bearer <eth:syzkaller0>
[  130.957331][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.447'.
[  131.436078][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'.
[  131.456127][ T7621] netlink: 'syz.1.456': attribute type 30 has an invalid length.
[  131.486712][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'.
[  131.504277][ T7622] netlink: 'syz.1.456': attribute type 30 has an invalid length.
[  131.726289][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'.
[  131.753347][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'.
[  132.299635][ T7662] netlink: 'syz.1.468': attribute type 11 has an invalid length.
[  132.502291][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'.
[  132.837927][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  132.848422][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  132.881162][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'.
[  132.907392][ T7687] ieee802154 phy0 wpan0: encryption failed: -22
[  132.934977][ T7687] netlink: 96 bytes leftover after parsing attributes in process `syz.4.473'.
[  132.988738][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'.
[  133.073100][ T7691] netlink: 'syz.0.475': attribute type 1 has an invalid length.
[  133.246936][ T7691] 8021q: adding VLAN 0 to HW filter on device bond4
[  133.376247][ T7694] bond4: (slave veth5): Enslaving as an active interface with a down link
[  133.619927][ T7721] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.629619][ T7699] syzkaller0: entered promiscuous mode
[  133.638968][ T7699] syzkaller0: entered allmulticast mode
[  133.736852][ T7726] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  134.183525][ T7743] xt_nfacct: accounting object `syz1' does not exist
[  135.652425][ T7762] geneve1: entered promiscuous mode
[  135.746896][ T7761] wg1 speed is unknown, defaulting to 1000
[  135.765192][ T7764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.050424][ T7776] xt_nfacct: accounting object `syz1' does not exist
[  136.268840][ T7785] __nla_validate_parse: 4 callbacks suppressed
[  136.268861][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.497'.
[  136.295205][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'.
[  136.309673][ T1322] nci: nci_rsp_packet: unknown rsp opcode 0x606
[  136.639870][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.503'.
[  136.653411][ T7804] bond0: Error: Cannot enslave bond to itself.
[  136.717216][ T7807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'.
[  136.927197][ T7816] xt_nfacct: accounting object `syz1' does not exist
[  137.026031][ T7781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  137.039846][ T7822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.080349][ T7818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.250643][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'.
[  137.337857][ T7833] netlink: 4476 bytes leftover after parsing attributes in process `syz.4.514'.
[  137.989434][ T7860] gtp0: entered promiscuous mode
[  137.997917][ T7860] gtp0: entered allmulticast mode
[  138.005823][ T7865] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.060802][ T7865] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.148277][ T7871] ip6_vti0: entered promiscuous mode
[  138.170790][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'.
[  138.989294][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'.
[  139.005175][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'.
[  139.078631][ T7923] netdevsim netdevsim4: Direct firmware load for r1 failed with error -2
[  139.088777][ T7923] netdevsim netdevsim4: Falling back to sysfs fallback for: r1
[  139.188400][ T7926] bond0: entered promiscuous mode
[  139.220204][ T7931] macvlan3: entered promiscuous mode
[  139.227321][ T7931] macvlan3: entered allmulticast mode
[  139.235685][ T7931] bond0: (slave macvlan3): Opening slave failed
[  139.818908][ T7959] syzkaller1: entered promiscuous mode
[  139.836751][ T7963] netlink: 84 bytes leftover after parsing attributes in process `syz.3.550'.
[  139.842415][ T7959] syzkaller1: entered allmulticast mode
[  139.854873][ T7964] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  139.870388][ T7969] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  140.163303][ T7978] netlink: 'syz.0.553': attribute type 4 has an invalid length.
[  140.229013][ T7982] netlink: 'syz.2.554': attribute type 11 has an invalid length.
[  140.297755][ T7982] xt_TCPMSS: Only works on TCP SYN packets
[  141.008527][ T8021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.326047][ T8042] smc: net device team0 applied user defined pnetid SYZ2
[  141.337343][ T8042] smc: net device team0 erased user defined pnetid SYZ2
[  141.485385][ T8050] netlink: 'syz.1.573': attribute type 1 has an invalid length.
[  141.498615][ T8050] __nla_validate_parse: 3 callbacks suppressed
[  141.498632][ T8050] netlink: 96 bytes leftover after parsing attributes in process `syz.1.573'.
[  141.525093][ T8050] netlink: 1 bytes leftover after parsing attributes in process `syz.1.573'.
[  141.535631][ T8050] netlink: 658 bytes leftover after parsing attributes in process `syz.1.573'.
[  141.654070][ T8054] netlink: 'syz.1.575': attribute type 1 has an invalid length.
[  141.727794][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'.
[  142.094964][ T8068] syz.4.579 uses old SIOCAX25GETINFO
[  142.217610][ T8071] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.580'.
[  142.267918][ T8071] netlink: 'syz.0.580': attribute type 4 has an invalid length.
[  142.344410][ T8076] netlink: 44 bytes leftover after parsing attributes in process `syz.4.583'.
[  142.367673][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.368595][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'.
[  142.376122][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.416559][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'.
[  142.595360][ T8087] netlink: 'syz.4.586': attribute type 5 has an invalid length.
[  142.636966][ T8087] netlink: 140 bytes leftover after parsing attributes in process `syz.4.586'.
[  142.664493][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'.
[  143.199264][ T8117] xt_TPROXY: Can be used only with -p tcp or -p udp
[  143.209776][ T8118] xt_hashlimit: overflow, try lower: 3/0
[  143.229190][ T8117] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3
[  143.669834][ T8129] netlink: 'syz.0.598': attribute type 9 has an invalid length.
[  143.742912][ T1322] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.753913][ T8136] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  144.738562][ T8181] ip6t_REJECT: ECHOREPLY is not supported
[  144.754397][ T8177] vlan2: entered allmulticast mode
[  144.759669][ T8177] bridge2: entered allmulticast mode
[  144.828441][ T8177] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  145.244976][ T8200] netlink: 'syz.4.622': attribute type 10 has an invalid length.
[  145.293776][ T8201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.406187][ T8205] netlink: 'syz.4.622': attribute type 10 has an invalid length.
[  145.552403][ T8214] netlink: 'syz.0.624': attribute type 1 has an invalid length.
[  145.791294][ T8221] netlink: 'syz.3.629': attribute type 10 has an invalid length.
[  145.817203][ T8223] netlink: 'syz.3.629': attribute type 10 has an invalid length.
[  146.506247][ T8272] netem: unknown loss type 0
[  146.514861][ T7891] IPVS: starting estimator thread 0...
[  146.515289][ T8272] netem: change failed
[  146.537298][ T8275] __nla_validate_parse: 13 callbacks suppressed
[  146.537318][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'.
[  146.643137][ T8273] IPVS: using max 25 ests per chain, 60000 per kthread
[  146.738647][ T8278] netlink: 'syz.0.641': attribute type 2 has an invalid length.
[  147.538703][ T8324] netlink: 60 bytes leftover after parsing attributes in process `syz.1.655'.
[  147.618820][ T8329] openvswitch: netlink: Flow key attr not present in new flow.
[  148.751031][ T8368] netlink: 'syz.2.670': attribute type 1 has an invalid length.
[  148.785031][ T8368] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  148.866981][ T8376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.671'.
[  148.910331][ T8372] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.672'.
[  148.940042][ T8372] netlink: Conntrack attr has 3 unknown bytes
[  148.948123][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'.
[  149.080299][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'.
[  149.120511][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'.
[  149.548928][ T8407] syzkaller0: entered promiscuous mode
[  149.570778][ T8407] syzkaller0: entered allmulticast mode
[  150.177951][ T8437] siw: device registration error -23
[  150.674341][ T8465] veth0: entered promiscuous mode
[  150.760205][ T8463] veth0: left promiscuous mode
[  150.815369][ T8473] netlink: 'syz.3.708': attribute type 1 has an invalid length.
[  150.928509][ T8473] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  151.313047][ T8502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.385400][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'.
[  151.432934][ T8506] bridge0: port 3(syz_tun) entered blocking state
[  151.440939][ T8506] bridge0: port 3(syz_tun) entered disabled state
[  151.453791][ T8506] syz_tun: entered allmulticast mode
[  151.465412][ T8506] syz_tun: entered promiscuous mode
[  151.672726][ T8516] netlink: 'syz.1.718': attribute type 16 has an invalid length.
[  151.761215][ T8516] netlink: 'syz.1.718': attribute type 17 has an invalid length.
[  151.859928][ T8516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  152.224038][ T8548] bridge0: mtu less than device minimum
[  152.360751][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'.
[  152.377904][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'.
[  152.383057][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'.
[  152.434135][ T8559] trusted_key: syz.0.731 sent an empty control message without MSG_MORE.
[  152.552317][ T8572] netlink: 'syz.1.734': attribute type 1 has an invalid length.
[  152.606883][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.733'.
[  152.646245][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'.
[  152.666156][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'.
[  152.722164][ T8572] bond3: entered promiscuous mode
[  152.727690][ T8572] 8021q: adding VLAN 0 to HW filter on device bond3
[  153.630855][ T8626] netlink: 'syz.4.749': attribute type 4 has an invalid length.
[  153.669184][ T8626] netlink: 152 bytes leftover after parsing attributes in process `syz.4.749'.
[  153.775602][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'.
[  153.787118][ T8626] .`: renamed from bond0 (while UP)
[  153.787169][ T8639] sctp: [Deprecated]: syz.0.753 (pid 8639) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.787169][ T8639] Use struct sctp_sack_info instead
[  153.809288][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'.
[  153.824640][ T8640] xt_ecn: cannot match TCP bits for non-tcp packets
[  153.913351][ T8630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.751'.
[  154.064738][ T8641] netlink: 'syz.1.751': attribute type 39 has an invalid length.
[  154.373097][ T8665] netlink: 'syz.3.758': attribute type 64 has an invalid length.
[  154.588181][ T8675] netlink: 'syz.4.760': attribute type 4 has an invalid length.
[  154.716076][ T8661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.407026][ T8759] netlink: 'syz.3.781': attribute type 1 has an invalid length.
[  156.429627][ T8759] netlink: 'syz.3.781': attribute type 1 has an invalid length.
[  156.522181][ T8765] gtp0: entered promiscuous mode
[  156.557016][ T8765] gtp0: entered allmulticast mode
[  156.613525][ T8771] syzkaller0: entered promiscuous mode
[  156.632800][ T8771] syzkaller0: entered allmulticast mode
[  156.641322][ T8761] syzkaller1: entered promiscuous mode
[  156.651972][ T8761] syzkaller1: entered allmulticast mode
[  156.820172][ T8780] x_tables: duplicate underflow at hook 3
[  156.837071][ T8781] x_tables: duplicate underflow at hook 3
[  156.844417][ T8780] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20002
[  157.196532][ T8791] wg1 speed is unknown, defaulting to 1000
[  157.236019][ T8802] vlan2: entered allmulticast mode
[  157.283512][ T8798] netlink: 'syz.3.789': attribute type 23 has an invalid length.
[  157.348387][ T8805] gretap1: entered promiscuous mode
[  157.364694][ T8783] __nla_validate_parse: 11 callbacks suppressed
[  157.364716][ T8783] netlink: 1 bytes leftover after parsing attributes in process `syz.2.787'.
[  157.364855][ T8805] gretap1: entered allmulticast mode
[  157.738178][ T8825] x_tables: duplicate underflow at hook 3
[  158.136365][ T6817] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xca
[  158.143620][ T8837] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  158.604279][ T8860] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048)
[  159.277925][ T8873] netlink: 'syz.2.810': attribute type 1 has an invalid length.
[  159.285723][ T8873] netlink: 244 bytes leftover after parsing attributes in process `syz.2.810'.
[  159.483004][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'.
[  159.492915][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'.
[  159.502338][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'.
[  159.511891][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'.
[  159.521008][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'.
[  159.530292][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'.
[  159.539647][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'.
[  159.549322][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'.
[  160.995002][ T8833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  161.011979][ T8877] netlink: 'syz.2.812': attribute type 1 has an invalid length.
[  161.562930][ T8903] veth3: entered promiscuous mode
[  162.009230][ T8927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.147303][ T8940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.578991][ T8963] geneve2: entered promiscuous mode
[  162.600445][   T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 52518 - 0
[  162.615439][   T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 52518 - 0
[  162.618087][ T8970] __nla_validate_parse: 84 callbacks suppressed
[  162.618105][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'.
[  162.630920][   T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 52518 - 0
[  162.844260][ T8979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.842'.
[  163.140413][ T8983] netlink: 'syz.1.843': attribute type 4 has an invalid length.
[  163.249617][ T8957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  163.266024][ T8983] netlink: 64 bytes leftover after parsing attributes in process `syz.1.843'.
[  163.378007][ T8986] netlink: 'syz.1.843': attribute type 4 has an invalid length.
[  163.453046][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.845'.
[  163.462352][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.845'.
[  163.472071][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  163.479496][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  163.674486][ T9004] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.847'.
[  164.115447][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'.
[  164.124523][ T9030] netlink: 'syz.4.854': attribute type 5 has an invalid length.
[  164.132870][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.854'.
[  164.148825][ T9030] geneve3: entered promiscuous mode
[  164.154368][ T9030] geneve3: entered allmulticast mode
[  164.161367][ T6817] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  164.170402][ T6817] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  164.179323][ T6817] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  164.188811][ T6817] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  164.437590][ T9034] xt_nfacct: accounting object `syz1' does not exist
[  164.739487][ T9040] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.857'.
[  164.749568][ T9040] netlink: Unknown conntrack attr (type=2304, max=9)
[  165.938448][ T8983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  166.289423][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'.
[  166.539352][ T9077] xt_nfacct: accounting object `syz1' does not exist
[  167.328082][ T9117] xt_nfacct: accounting object `syz1' does not exist
[  167.849098][ T9140] netlink: 'syz.3.883': attribute type 1 has an invalid length.
[  167.878796][ T9140] netlink: 'syz.3.883': attribute type 1 has an invalid length.
[  167.984401][ T9124] netlink: 'syz.4.879': attribute type 1 has an invalid length.
[  167.995740][ T9124] netlink: 'syz.4.879': attribute type 11 has an invalid length.
[  168.004078][ T9124] __nla_validate_parse: 9 callbacks suppressed
[  168.004094][ T9124] netlink: 224 bytes leftover after parsing attributes in process `syz.4.879'.
[  168.125149][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.885'.
[  168.148499][ T9149] openvswitch: netlink: Flow actions attr not present in new flow.
[  168.255663][ T9152] syzkaller1: entered promiscuous mode
[  168.297211][ T9152] syzkaller1: entered allmulticast mode
[  168.349256][ T9160] netlink: 84 bytes leftover after parsing attributes in process `syz.2.889'.
[  168.631870][ T9154] nbd0: detected capacity change from 0 to 63
[  168.667320][ T5839] block nbd0: Receive control failed (result -104)
[  168.671623][ T5844] block nbd0: Receive control failed (result -32)
[  168.688845][ T5848] block nbd0: Dead connection, failed to find a fallback
[  168.710846][ T5848] block nbd0: shutting down sockets
[  168.746374][ T5848] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  168.765369][ T9176] xt_nfacct: accounting object `syz1' does not exist
[  168.790513][ T5848] Buffer I/O error on dev nbd0, logical block 1, async page read
[  168.826134][ T5848] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  168.868134][ T5848] Buffer I/O error on dev nbd0, logical block 2, async page read
[  168.898510][ T5848] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  168.938327][ T5848] Buffer I/O error on dev nbd0, logical block 3, async page read
[  169.112882][ T9190] »»»»»»: renamed from bond_slave_0 (while UP)
[  169.520570][ T9216] netlink: 256 bytes leftover after parsing attributes in process `syz.1.904'.
[  169.697106][ T9224] netlink: 'syz.4.909': attribute type 8 has an invalid length.
[  169.811113][ T9229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.911'.
[  170.114981][ T9250] tap0: tun_chr_ioctl cmd 1074025678
[  170.131774][ T9250] tap0: group set to 0
[  170.168405][ T9255] xt_time: invalid argument - start or stop time greater than 23:59:59
[  170.651168][ T9267] syzkaller0: entered promiscuous mode
[  170.667144][ T9267] syzkaller0: entered allmulticast mode
[  170.679353][ T9264] netlink: 64 bytes leftover after parsing attributes in process `syz.0.919'.
[  170.701985][ T9264] netlink: 64 bytes leftover after parsing attributes in process `syz.0.919'.
[  171.146587][ T9292] netlink: 44 bytes leftover after parsing attributes in process `syz.0.927'.
[  172.700511][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.708913][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.920794][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'.
[  172.955843][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'.
[  173.010352][ T9309] netlink: 'syz.3.932': attribute type 1 has an invalid length.
[  173.045392][ T9309] netlink: 228 bytes leftover after parsing attributes in process `syz.3.932'.
[  173.051244][ T9310] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  173.088013][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'.
[  173.146033][ T9314] netlink: 104 bytes leftover after parsing attributes in process `syz.1.933'.
[  173.207326][ T9314] xt_TPROXY: Can be used only with -p tcp or -p udp
[  173.305540][ T9322] netlink: 'syz.3.936': attribute type 21 has an invalid length.
[  173.314621][ T9322] netlink: 128 bytes leftover after parsing attributes in process `syz.3.936'.
[  173.324289][ T9322] netlink: 3 bytes leftover after parsing attributes in process `syz.3.936'.
[  173.336972][ T9322] netlink: 'syz.3.936': attribute type 10 has an invalid length.
[  173.348896][ T9322] veth0_macvtap: left promiscuous mode
[  173.578219][ T9336] netlink: 64 bytes leftover after parsing attributes in process `syz.1.941'.
[  173.610140][ T9336] netlink: 64 bytes leftover after parsing attributes in process `syz.1.941'.
[  173.622385][ T9336] netlink: 'syz.1.941': attribute type 1 has an invalid length.
[  173.774370][ T9345] netlink: 'syz.1.943': attribute type 29 has an invalid length.
[  173.923010][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'.
[  173.951276][ T9350] netlink: 'syz.3.946': attribute type 30 has an invalid length.
[  173.960541][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'.
[  174.163149][ T9360] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  174.267391][ T9366] gre1: entered promiscuous mode
[  174.269996][ T9367] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.951'.
[  174.304156][ T9367] xt_HMARK: spi-set and port-set can't be combined
[  174.321153][ T9366] gre1: entered allmulticast mode
[  175.474519][ T9414] ÿÿÿÿÿÿ: renamed from virt_wifi0
[  175.634230][ T9418] netlink: 'syz.0.969': attribute type 1 has an invalid length.
[  175.760288][ T9418] bond5: entered promiscuous mode
[  175.771259][ T9418] 8021q: adding VLAN 0 to HW filter on device bond5
[  175.834661][ T9427] bond5: (slave bridge1): making interface the new active one
[  175.845248][ T9427] bridge1: entered promiscuous mode
[  175.853283][ T9427] bond5: (slave bridge1): Enslaving as an active interface with an up link
[  176.129995][ T9449] netlink: 'syz.3.975': attribute type 7 has an invalid length.
[  176.162118][ T9449] netlink: 'syz.3.975': attribute type 8 has an invalid length.
[  176.507911][ T9473] syzkaller1: entered promiscuous mode
[  176.514606][ T9473] syzkaller1: entered allmulticast mode
[  178.716987][ T9429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  179.026705][ T9504] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  179.079414][ T9504] __nla_validate_parse: 5 callbacks suppressed
[  179.079435][ T9504] netlink: 68 bytes leftover after parsing attributes in process `syz.3.986'.
[  179.202233][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'.
[  179.619430][ T9543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.997'.
[  179.745808][ T9545] syzkaller0: entered promiscuous mode
[  179.770718][ T9545] syzkaller0: entered allmulticast mode
[  179.898191][ T9549] ipt_ECN: cannot use operation on non-tcp rule
[  180.144153][ T9572] netlink: 'syz.0.1006': attribute type 10 has an invalid length.
[  180.168942][ T9572] bridge_slave_1: left allmulticast mode
[  180.182822][ T9572] bridge_slave_1: left promiscuous mode
[  180.208805][ T9572] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.216899][ T9549] nbd1: detected capacity change from 0 to 63
[  180.230825][ T5839] block nbd1: Receive control failed (result -104)
[  180.240123][ T5844] block nbd1: Receive control failed (result -32)
[  180.240281][ T5845] block nbd1: Send control failed (result -32)
[  180.282722][ T9572] bridge_slave_1: entered allmulticast mode
[  180.288960][ T5845] block nbd1: Request send failed, requeueing
[  180.328276][ T9572] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  180.343787][ T5206] block nbd1: Dead connection, failed to find a fallback
[  180.356022][ T5206] block nbd1: shutting down sockets
[  180.362308][ T5206] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  180.375443][ T5206] Buffer I/O error on dev nbd1, logical block 3, async page read
[  180.615851][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'.
[  181.040264][ T9591] bridge0: port 3(gretap0) entered blocking state
[  181.059546][ T9591] bridge0: port 3(gretap0) entered disabled state
[  181.072875][ T9591] gretap0: entered allmulticast mode
[  181.534593][ T9610] netlink: 'syz.3.1016': attribute type 1 has an invalid length.
[  181.585072][ T9610] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1016'.
[  182.334094][ T9645] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1024'.
[  182.374962][ T9648] netlink: 'syz.1.1026': attribute type 1 has an invalid length.
[  182.443266][ T9653] openvswitch: netlink: Actions may not be safe on all matching packets
[  182.651243][ T9660] vcan0: tx drop: invalid da for name 0x0010000000000001
[  182.929020][ T9678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1035'.
[  183.327288][ T9694] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  183.819494][ T9717] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1045'.
[  184.035336][ T9729] ip6t_srh: unknown srh match flags  4000
[  184.068702][ T9731] xt_nfacct: accounting object `syz1' does not exist
[  184.390619][ T9740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1052'.
[  184.417837][ T9740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1052'.
[  184.440543][ T9740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1052'.
[  184.607850][ T9750] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1055'.
[  184.827407][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1057'.
[  185.268283][ T9775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1065'.
[  185.307470][ T9779] netlink: 'syz.2.1064': attribute type 39 has an invalid length.
[  185.596276][ T9790] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.1069'.
[  186.088016][ T9809] netlink: 'syz.2.1076': attribute type 3 has an invalid length.
[  186.224361][ T9818] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1080'.
[  186.251775][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'.
[  186.263954][ T9817] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1080'.
[  186.397313][ T9826] ip6t_srh: unknown srh match flags  4000
[  186.514458][ T9836] xt_bpf: check failed: parse error
[  186.635470][ T9835] gre1: entered promiscuous mode
[  186.671797][ T9835] gre1: entered allmulticast mode
[  186.840562][ T9836] ip6gre0: Master is either lo or non-ether device
[  187.472732][ T9870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.652832][ T9872] syzkaller0: entered promiscuous mode
[  187.674807][ T9872] syzkaller0: entered allmulticast mode
[  187.960451][ T9885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.269821][ T9898] x_tables: unsorted entry at hook 1
[  188.519856][ T9898] bond5: entered promiscuous mode
[  188.576422][ T9898] 8021q: adding VLAN 0 to HW filter on device bond5
[  188.622492][ T9911] netlink: 'syz.2.1110': attribute type 24 has an invalid length.
[  188.710583][ T9898] 8021q: adding VLAN 0 to HW filter on device bond5
[  188.744156][ T9898] bond5: (slave sit1): The slave device specified does not support setting the MAC address
[  188.799907][ T9915] xt_CT: You must specify a L4 protocol and not use inversions on it
[  188.806445][ T9898] bond5: (slave sit1): Error -95 calling set_mac_address
[  189.190191][ T9929] netlink: 'syz.2.1114': attribute type 11 has an invalid length.
[  189.643870][ T9948] __nla_validate_parse: 9 callbacks suppressed
[  189.643891][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'.
[  189.758961][ T9953] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1121'.
[  189.759146][ T9948] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.795500][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1119'.
[  189.948393][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'.
[  190.019245][ T9960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1122'.
[  190.200324][ T9972] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20003
[  190.280405][ T9971] syzkaller0: entered promiscuous mode
[  190.313342][ T9971] syzkaller0: entered allmulticast mode
[  190.568006][ T9983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1128'.
[  190.580598][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'.
[  190.592960][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'.
[  190.602536][ T9979] netlink: 'syz.4.1127': attribute type 12 has an invalid length.
[  190.655136][ T9979] netlink: 'syz.4.1127': attribute type 11 has an invalid length.
[  190.832855][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1130'.
[  190.876993][ T9986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1130'.
[  191.068904][ T9986] veth9: entered promiscuous mode
[  191.275384][T10005] x_tables: duplicate entry at hook 1
[  191.411626][T10008] sctp: [Deprecated]: syz.1.1133 (pid 10008) Use of int in maxseg socket option.
[  191.411626][T10008] Use struct sctp_assoc_value instead
[  191.777282][T10022] IPv6: sit1: Disabled Multicast RS
[  191.787994][T10022] sit1: entered allmulticast mode
[  191.955927][T10028] syz_tun: left allmulticast mode
[  191.961336][T10028] syz_tun: left promiscuous mode
[  191.968176][T10028] bridge0: port 3(syz_tun) entered disabled state
[  192.074798][T10028] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.090337][T10028] bridge_slave_1: left allmulticast mode
[  192.096580][T10028] bridge_slave_1: left promiscuous mode
[  192.102593][T10028] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.117683][T10028] .`: (slave bond_slave_0): Releasing backup interface
[  192.137301][T10028] .`: (slave bond_slave_1): Releasing backup interface
[  192.150995][T10028] team0: Port device team_slave_0 removed
[  192.163701][T10028] team0: Port device team_slave_1 removed
[  192.173264][T10028] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.183835][T10028] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.195634][T10028] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.208659][T10028] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.222587][T10028] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  192.239175][T10028] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  192.559788][T10028] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  192.596409][ T7221] wg1 speed is unknown, defaulting to 1000
[  192.630270][ T7221] syz2: Port: 1 Link DOWN
[  192.673533][T10045] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  192.681386][T10027] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  192.794148][T10064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  193.538574][T10096] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  193.563185][T10096] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  194.257019][T10114] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  194.280282][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  194.289810][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  194.456606][T10122] netlink: 'syz.4.1166': attribute type 17 has an invalid length.
[  194.529282][T10122] netdevsim netdevsim4 netdevsim2: entered promiscuous mode
[  194.541690][T10122] gretap0: entered promiscuous mode
[  194.549399][T10122] : Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  194.587948][T10127] pim6reg: entered allmulticast mode
[  194.784813][T10135] netlink: 'syz.1.1169': attribute type 1 has an invalid length.
[  194.856517][T10142] __nla_validate_parse: 9 callbacks suppressed
[  194.856538][T10142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1169'.
[  195.062086][T10135] 8021q: adding VLAN 0 to HW filter on device bond6
[  195.096432][T10151] bond6: entered promiscuous mode
[  195.112853][T10151] bond6: entered allmulticast mode
[  195.338327][T10167] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  195.346192][T10167] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  195.371601][T10172] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1177'.
[  195.689060][T10182] netlink: 'syz.2.1181': attribute type 9 has an invalid length.
[  195.744700][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'.
[  195.826298][T10195] netlink: 'syz.4.1182': attribute type 5 has an invalid length.
[  196.074536][T10203] Cannot find add_set index 46338 as target
[  196.493298][T10239] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1194'.
[  196.634711][T10240] netlink: 'syz.1.1195': attribute type 1 has an invalid length.
[  196.765685][T10248] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1198'.
[  197.122550][T10264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1202'.
[  197.134328][T10234] bond5: Unable to set peer notification delay as MII monitoring is disabled
[  197.153849][T10234] bond5 (unregistering): Released all slaves
[  197.163017][T10264] netlink: 'syz.3.1202': attribute type 7 has an invalid length.
[  197.170881][T10264] netlink: 'syz.3.1202': attribute type 8 has an invalid length.
[  197.179073][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1202'.
[  197.215381][T10273] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  197.323193][T10280] 8021q: VLANs not supported on ipvlan0
[  197.638653][T10294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  198.069737][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1215'.
[  198.082845][T10312] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1215'.
[  198.153039][T10314] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1216'.
[  198.298251][T10317] wireguard0: entered promiscuous mode
[  198.304933][T10317] wireguard0: entered allmulticast mode
[  198.753706][ T5206] block nbd0: Connection timed out, retrying (0/2 alive)
[  198.764015][ T5206] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.773512][ T5206] Buffer I/O error on dev nbd0, logical block 0, async page read
[  198.783193][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.793447][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read
[  198.802064][ T5848] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.812234][ T5848] Buffer I/O error on dev nbd0, logical block 1, async page read
[  198.820126][ T5848] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.829483][ T5848] Buffer I/O error on dev nbd0, logical block 2, async page read
[  198.838083][ T5848] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.847597][ T5848] Buffer I/O error on dev nbd0, logical block 3, async page read
[  198.855596][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.865076][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read
[  198.873023][ T5848] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.882284][ T5848] Buffer I/O error on dev nbd0, logical block 1, async page read
[  198.890161][ T5848] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.899788][ T5848] Buffer I/O error on dev nbd0, logical block 2, async page read
[  198.907837][ T5848] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.916968][ T5848] Buffer I/O error on dev nbd0, logical block 3, async page read
[  198.925887][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.935036][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read
[  198.946579][ T5848] ldm_validate_partition_table(): Disk read failed.
[  198.954959][ T5848] Dev nbd0: unable to read RDB block 0
[  198.962437][ T5848]  nbd0: unable to read partition table
[  198.976294][ T5848] ldm_validate_partition_table(): Disk read failed.
[  198.984909][ T5848] Dev nbd0: unable to read RDB block 0
[  198.994633][ T5848]  nbd0: unable to read partition table
[  199.319566][T10224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  199.636725][T10332] netlink: 'syz.3.1220': attribute type 4 has an invalid length.
[  199.943235][T10343] tipc: Started in network mode
[  199.956172][T10343] tipc: Node identity 3e4880935da9, cluster identity 4711
[  199.973873][T10343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.206753][T10350] syzkaller0: entered promiscuous mode
[  200.223605][T10350] syzkaller0: entered allmulticast mode
[  200.232712][T10368] netlink: 'syz.4.1231': attribute type 4 has an invalid length.
[  200.240115][T10350] tipc: Resetting bearer <eth:syzkaller0>
[  200.265683][T10368] __nla_validate_parse: 1 callbacks suppressed
[  200.265700][T10368] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1231'.
[  200.383839][ T6813] tipc: Resetting bearer <eth:syzkaller0>
[  200.467901][T10342] tipc: Resetting bearer <eth:syzkaller0>
[  201.143782][T10413] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1236'.
[  202.560621][T10342] tipc: Disabling bearer <eth:syzkaller0>
[  202.616126][ T7889] tipc: Node number set to 1675722899
[  202.650695][T10414] pimreg: entered allmulticast mode
[  202.788474][T10424] IPv6: NLM_F_CREATE should be specified when creating new route
[  202.837858][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1240'.
[  202.889232][T10427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.178012][T10446] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.298675][T10451] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1249'.
[  203.396517][T10456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1249'.
[  203.427825][T10458] xt_hashlimit: size too large, truncated to 1048576
[  203.453445][T10451] ip6_vti0: left promiscuous mode
[  204.189646][T10451] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.470469][T10451] bond2: left promiscuous mode
[  204.476107][T10451] bond2: left allmulticast mode
[  204.482639][T10451] gtp0: left promiscuous mode
[  204.488082][T10451] gtp0: left allmulticast mode
[  204.497974][T10451] vlan2: left allmulticast mode
[  204.505380][T10451] bond0: left allmulticast mode
[  204.513563][T10451] bond_slave_0: left allmulticast mode
[  204.526320][T10451] bond_slave_1: left allmulticast mode
[  204.544421][T10451] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  204.561612][T10451] bridge_slave_1: left allmulticast mode
[  204.578897][T10451] bond5: left promiscuous mode
[  204.584582][T10451] bridge1: left promiscuous mode
[  204.606686][T10451] veth9: left promiscuous mode
[  204.627190][T10456] geneve2: entered promiscuous mode
[  204.843879][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'.
[  204.986989][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'.
[  205.083428][T10487] vlan1: entered allmulticast mode
[  205.116978][T10487] veth0_vlan: entered allmulticast mode
[  205.178786][T10503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1262'.
[  205.218092][T10487] 8021q: adding VLAN 0 to HW filter on device bond7
[  205.227347][T10487] bond6: (slave bond7): Enslaving as an active interface with an up link
[  205.244412][T10501] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  205.532269][T10513] syzkaller0: entered promiscuous mode
[  205.545871][T10513] syzkaller0: entered allmulticast mode
[  206.139037][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'.
[  206.220345][T10542] syzkaller0: entered promiscuous mode
[  206.226549][T10542] syzkaller0: entered allmulticast mode
[  206.235484][ T6815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.245653][ T6815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.270500][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.279863][T10542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.559342][T10555] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1279'.
[  206.990608][T10563] netdevsim netdevsim2: Direct firmware load for . failed with error -2
[  207.053684][T10563] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  207.446115][T10595] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0
[  207.469470][T10602] Bluetooth: MGMT ver 1.23
[  207.495767][T10602] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  207.535394][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1291'.
[  207.704611][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'.
[  207.848745][T10607] 8021q: adding VLAN 0 to HW filter on device bond8
[  207.919356][T10615] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  208.017314][T10621] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1295'.
[  208.359480][T10627] syz.1.1296 (10627) used greatest stack depth: 17216 bytes left
[  208.374988][T10632] ip6erspan0: entered allmulticast mode
[  208.484979][T10635] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  208.526935][T10635] syzkaller0: entered promiscuous mode
[  208.533271][T10635] syzkaller0: entered allmulticast mode
[  208.610260][T10645] netlink: 'syz.3.1303': attribute type 21 has an invalid length.
[  208.627249][T10645] IPv6: NLM_F_CREATE should be specified when creating new route
[  208.642627][T10645] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  208.653483][T10638] bond9: (slave gre0): Device is not bonding slave
[  208.678276][T10638] bond9: option active_slave: invalid value (gre0)
[  208.715830][T10638] bond9 (unregistering): Released all slaves
[  209.036291][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'.
[  209.090006][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'.
[  209.113216][T10665] netlink: 'syz.2.1309': attribute type 1 has an invalid length.
[  209.121197][T10664] netlink: 'syz.2.1309': attribute type 1 has an invalid length.
[  209.292140][T10658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  209.309611][T10665] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  209.310907][T10664] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  209.430130][T10672] syzkaller0: entered promiscuous mode
[  209.464420][T10672] syzkaller0: entered allmulticast mode
[  209.529105][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'.
[  209.586579][T10681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1311'.
[  209.685802][T10684] gre2: entered promiscuous mode
[  209.690840][T10684] gre2: entered allmulticast mode
[  209.837831][T10692] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  209.904265][T10696] netlink: 'syz.3.1317': attribute type 2 has an invalid length.
[  209.927607][T10696] netlink: 'syz.3.1317': attribute type 1 has an invalid length.
[  210.008759][T10696] 8021q: adding VLAN 0 to HW filter on device bond1
[  210.051870][T10701] 8021q: adding VLAN 0 to HW filter on device bond1
[  210.068040][T10701] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address
[  210.151161][T10701] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  210.215927][T10701] bond1: (slave xfrm1): making interface the new active one
[  210.254252][T10701] bond1: (slave xfrm1): Enslaving as an active interface with an up link
[  210.273653][ T1940] block nbd1: Connection timed out, retrying (0/2 alive)
[  210.280832][ T1940] block nbd1: Connection timed out, retrying (0/2 alive)
[  210.288628][ T1940] block nbd1: Connection timed out, retrying (0/2 alive)
[  210.296419][ T1940] blk_print_req_error: 135 callbacks suppressed
[  210.296437][ T1940] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.312374][ T1940] buffer_io_error: 135 callbacks suppressed
[  210.312394][ T1940] Buffer I/O error on dev nbd1, logical block 2, async page read
[  210.326287][ T1940] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.335785][ T1940] Buffer I/O error on dev nbd1, logical block 1, async page read
[  210.344209][ T1940] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.353500][ T1940] Buffer I/O error on dev nbd1, logical block 0, async page read
[  210.366171][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.420544][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read
[  210.476987][ T5845] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.539611][ T5845] Buffer I/O error on dev nbd1, logical block 1, async page read
[  210.578933][ T5845] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.617848][ T5845] Buffer I/O error on dev nbd1, logical block 2, async page read
[  210.648055][ T5845] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.680127][ T5845] Buffer I/O error on dev nbd1, logical block 3, async page read
[  210.690466][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.708018][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read
[  210.731319][ T5845] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.767357][ T5845] Buffer I/O error on dev nbd1, logical block 1, async page read
[  210.803026][ T5845] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.842763][ T5845] Buffer I/O error on dev nbd1, logical block 2, async page read
[  210.871358][ T5845] ldm_validate_partition_table(): Disk read failed.
[  210.893398][ T5845] Dev nbd1: unable to read RDB block 0
[  210.925281][ T5845]  nbd1: unable to read partition table
[  211.007817][ T5845] ldm_validate_partition_table(): Disk read failed.
[  211.058412][ T5845] Dev nbd1: unable to read RDB block 0
[  211.088834][ T5845]  nbd1: unable to read partition table
[  211.122916][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'.
[  211.686015][T10753] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1329'.
[  211.711833][ T5830] Bluetooth: hci3: command 0x0406 tx timeout
[  211.719558][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  211.719592][ T5142] Bluetooth: hci1: command 0x0406 tx timeout
[  211.732294][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout
[  211.740489][T10753] tc_dump_action: action bad kind
[  212.384379][T10755] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1330'.
[  212.713279][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1336'.
[  212.739354][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1336'.
[  212.783936][T10780] netlink: 'syz.3.1336': attribute type 29 has an invalid length.
[  212.812457][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'.
[  212.856400][T10787] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1336'.
[  213.148964][T10794] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1343'.
[  213.542642][T10809] syzkaller1: entered promiscuous mode
[  213.560487][T10809] syzkaller1: entered allmulticast mode
[  213.589024][T10806] netlink: 'syz.0.1346': attribute type 1 has an invalid length.
[  213.601661][T10806] netlink: 'syz.0.1346': attribute type 2 has an invalid length.
[  213.916602][T10816] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1349'.
[  213.953210][T10816] veth0: entered promiscuous mode
[  213.986102][T10813] veth0: left promiscuous mode
[  214.104242][T10815] IPVS: Scheduler module ip_vs_sip not found
[  214.218569][T10828] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  214.283626][T10828] bond8 (unregistering): Released all slaves
[  214.287273][T10832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1354'.
[  214.806441][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'.
[  214.869016][T10854] geneve2: entered promiscuous mode
[  214.882974][T10854] geneve2: entered allmulticast mode
[  215.171001][T10869] bridge2: entered promiscuous mode
[  215.191132][T10869] bridge2: entered allmulticast mode
[  215.664435][T10883] bond8: entered promiscuous mode
[  215.694682][T10883] 8021q: adding VLAN 0 to HW filter on device bond8
[  215.733169][T10900] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  215.816343][T10883] 8021q: adding VLAN 0 to HW filter on device bond8
[  215.844885][T10883] bond8: (slave sit1): The slave device specified does not support setting the MAC address
[  215.867351][T10883] bond8: (slave sit1): Error -95 calling set_mac_address
[  215.995531][T10911] Cannot find del_set index 49151 as target
[  216.269762][T10916] syzkaller1: entered promiscuous mode
[  216.279864][T10916] syzkaller1: entered allmulticast mode
[  216.541955][T10936] netlink: zone id is out of range
[  216.547335][T10936] netlink: zone id is out of range
[  216.557096][T10936] netlink: zone id is out of range
[  216.566900][T10936] netlink: zone id is out of range
[  216.601225][T10936] netlink: zone id is out of range
[  216.619490][T10936] netlink: zone id is out of range
[  216.649620][T10936] netlink: zone id is out of range
[  216.669610][T10936] netlink: zone id is out of range
[  216.689879][T10936] netlink: zone id is out of range
[  216.859953][T10952] __nla_validate_parse: 5 callbacks suppressed
[  216.859973][T10952] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1387'.
[  216.901678][T10952] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1387'.
[  217.059371][T10963] vlan2: entered promiscuous mode
[  217.068367][T10963] bridge0: entered promiscuous mode
[  217.175760][T10969] netlink: 'syz.0.1389': attribute type 58 has an invalid length.
[  217.215711][T10969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1389'.
[  217.620094][T10991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1398'.
[  217.633815][T10991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1398'.
[  218.017469][T11015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1403'.
[  218.188207][T11020] netlink: 'syz.1.1405': attribute type 1 has an invalid length.
[  218.208343][T11020] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.1405'.
[  218.405453][T11030] veth0: entered promiscuous mode
[  218.411306][T11030] veth0: left promiscuous mode
[  218.487767][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'.
[  218.568758][T11033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1410'.
[  218.617202][T11033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1410'.
[  219.184397][T11065] netlink: 'syz.3.1419': attribute type 1 has an invalid length.
[  219.419856][T11074] netlink: 'syz.2.1422': attribute type 11 has an invalid length.
[  219.533684][T11080] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  219.550322][T11080] bond2 (unregistering): Released all slaves
[  220.007820][T11110] mac80211_hwsim hwsim3 ÿ
: renamed from wlan1
[  220.173174][T11118] Bluetooth: MGMT ver 1.23
[  220.269810][T11123] netlink: 'syz.3.1436': attribute type 21 has an invalid length.
[  221.086372][T11153] bond9 (unregistering): Released all slaves
[  221.752667][T11187] veth0: entered promiscuous mode
[  221.776966][T11188] netlink: 'syz.2.1452': attribute type 1 has an invalid length.
[  221.810470][T11186] veth0: left promiscuous mode
[  222.286982][T11215] __nla_validate_parse: 10 callbacks suppressed
[  222.287005][T11215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1462'.
[  222.363088][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1461'.
[  222.558595][T11223] IPv6: NLM_F_CREATE should be specified when creating new route
[  222.580223][T11232] netlink: 'syz.2.1464': attribute type 2 has an invalid length.
[  222.610558][T11232] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1464'.
[  222.718381][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1465'.
[  223.430718][ T7877] IPVS: starting estimator thread 0...
[  223.521960][T11275] IPVS: using max 26 ests per chain, 62400 per kthread
[  223.630265][T11280] x_tables: duplicate underflow at hook 2
[  223.811151][T11288] tipc: Started in network mode
[  223.823802][T11288] tipc: Node identity fa36bb44da3, cluster identity 4711
[  223.839636][T11288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.002285][T11288] syzkaller0: entered promiscuous mode
[  224.012697][T11288] syzkaller0: entered allmulticast mode
[  224.021262][T11300] xt_NFQUEUE: number of total queues is 0
[  224.024883][T11288] tipc: Resetting bearer <eth:syzkaller0>
[  224.046580][T11301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1482'.
[  224.058401][T11300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1484'.
[  224.068460][T11286] tipc: Resetting bearer <eth:syzkaller0>
[  224.386514][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'.
[  224.401357][T11327] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1488'.
[  224.436202][T11331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1482'.
[  226.219286][T11286] tipc: Disabling bearer <eth:syzkaller0>
[  226.274844][ T7338] tipc: Node number set to 537312068
[  226.627258][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1489'.
[  226.686057][T11351] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  226.805994][T11335] syzkaller0: entered promiscuous mode
[  226.824464][T11335] syzkaller0: entered allmulticast mode
[  227.622129][T11397] netlink: 'syz.1.1502': attribute type 1 has an invalid length.
[  227.674856][T11398] __nla_validate_parse: 4 callbacks suppressed
[  227.674879][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'.
[  227.700132][T11398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1502'.
[  229.283952][T11369] netlink: 'syz.3.1498': attribute type 12 has an invalid length.
[  229.292131][T11369] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1498'.
[  229.498253][T11403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1504'.
[  229.588456][T11411] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1507'.
[  229.594029][T11410] syzkaller1: entered promiscuous mode
[  229.670299][T11410] syzkaller1: entered allmulticast mode
[  229.825099][T11423] vlan2: entered allmulticast mode
[  229.840908][T11423] bond0: entered allmulticast mode
[  230.189198][T11445] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1514'.
[  230.209818][T11441] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1516'.
[  230.230120][T11439] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1516'.
[  230.345641][T11449] Cannot find set identified by id 0 to match
[  230.549626][T11467] netlink: 'syz.3.1521': attribute type 10 has an invalid length.
[  230.580492][T11467] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  230.632746][T11467] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  230.682702][T11467] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  230.700273][T11472] xt_CT: You must specify a L4 protocol and not use inversions on it
[  230.807844][T11477] syzkaller0: entered promiscuous mode
[  230.829517][T11477] syzkaller0: entered allmulticast mode
[  231.236189][T11502] x_tables: unsorted entry at hook 2
[  231.266815][T11502] Cannot find map_set index 65533 as target
[  231.867517][T11533] net_ratelimit: 7 callbacks suppressed
[  231.867538][T11533] openvswitch: netlink: Duplicate key (type 2).
[  232.286914][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'.
[  232.312234][T11542] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1545'.
[  232.440378][T11520] mpoa:mpoad_close: (<unknown>) going down
[  232.688329][T11544] nbd2: detected capacity change from 0 to 63
[  232.721686][   T50] block nbd2: Receive control failed (result -32)
[  232.730231][ T5844] block nbd2: Receive control failed (result -32)
[  232.749330][ T5845] block nbd2: Dead connection, failed to find a fallback
[  232.807904][ T5845] block nbd2: shutting down sockets
[  232.856495][ T5845] blk_print_req_error: 137 callbacks suppressed
[  232.856515][ T5845] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  232.939465][ T5845] buffer_io_error: 137 callbacks suppressed
[  232.939487][ T5845] Buffer I/O error on dev nbd2, logical block 0, async page read
[  233.018798][ T5845] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  233.042477][T11562] __nla_validate_parse: 1 callbacks suppressed
[  233.042498][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'.
[  233.066277][ T5845] Buffer I/O error on dev nbd2, logical block 1, async page read
[  233.077099][T11570] netlink: 'syz.0.1550': attribute type 32 has an invalid length.
[  233.096058][ T5845] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  233.105915][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'.
[  233.115133][T11562] netlink: 'syz.3.1548': attribute type 18 has an invalid length.
[  233.131622][ T5845] Buffer I/O error on dev nbd2, logical block 2, async page read
[  233.141107][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'.
[  233.173809][ T5845] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  233.208478][ T5845] Buffer I/O error on dev nbd2, logical block 3, async page read
[  233.258247][ T5845] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  233.298185][T11570] bond9: option coupled_control: invalid value (45)
[  233.311366][ T5845] Buffer I/O error on dev nbd2, logical block 0, async page read
[  233.338852][ T5845] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  233.340439][T11570] bond9 (unregistering): Released all slaves
[  233.370248][ T5845] Buffer I/O error on dev nbd2, logical block 1, async page read
[  233.384920][ T5845] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  233.415984][ T5845] Buffer I/O error on dev nbd2, logical block 2, async page read
[  233.447691][ T5845] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  233.478887][ T5845] Buffer I/O error on dev nbd2, logical block 3, async page read
[  233.489005][ T5845] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  233.499896][ T5845] Buffer I/O error on dev nbd2, logical block 0, async page read
[  233.520423][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'.
[  233.535220][ T5845] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  233.558829][T11562] netlink: 'syz.3.1548': attribute type 18 has an invalid length.
[  233.585635][ T5845] Buffer I/O error on dev nbd2, logical block 1, async page read
[  233.600455][   T74] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  233.631935][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'.
[  233.642705][   T74] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  233.643244][ T5845] ldm_validate_partition_table(): Disk read failed.
[  233.688566][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'.
[  233.720451][   T74] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  233.737760][ T5845] Dev nbd2: unable to read RDB block 0
[  233.768905][ T5845]  nbd2: unable to read partition table
[  233.831240][ T5845] ldm_validate_partition_table(): Disk read failed.
[  233.852035][T11607] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.1557'.
[  233.896343][ T5845] Dev nbd2: unable to read RDB block 0
[  233.940283][ T5845]  nbd2: unable to read partition table
[  233.957434][T11610] bond0: left promiscuous mode
[  234.172855][ T7338] ==================================================================
[  234.181000][ T7338] BUG: KASAN: slab-use-after-free in sock_def_readable+0x1cb/0x550
[  234.188944][ T7338] Read of size 8 at addr ffff8880563712c0 by task kworker/1:6/7338
[  234.196873][ T7338] 
[  234.199231][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) 
[  234.199256][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  234.199269][ T7338] Workqueue: mld mld_ifc_work
[  234.199299][ T7338] Call Trace:
[  234.199308][ T7338]  <TASK>
[  234.199316][ T7338]  dump_stack_lvl+0xe8/0x150
[  234.199346][ T7338]  print_report+0xba/0x230
[  234.199368][ T7338]  ? sock_def_readable+0x1cb/0x550
[  234.199389][ T7338]  kasan_report+0x117/0x150
[  234.199410][ T7338]  ? sock_def_readable+0x1cb/0x550
[  234.199435][ T7338]  sock_def_readable+0x1cb/0x550
[  234.199456][ T7338]  ? sock_def_readable+0xae/0x550
[  234.199477][ T7338]  ? send_to_lecd+0x26d/0x830
[  234.199500][ T7338]  send_to_lecd+0x3e7/0x830
[  234.199524][ T7338]  lec_start_xmit+0xe52/0x2890
[  234.199552][ T7338]  dev_hard_start_xmit+0x2cd/0x830
[  234.199578][ T7338]  sch_direct_xmit+0x251/0x4c0
[  234.199606][ T7338]  ? __pfx_sch_direct_xmit+0x10/0x10
[  234.199635][ T7338]  __dev_queue_xmit+0x180f/0x3950
[  234.199658][ T7338]  ? __dev_queue_xmit+0x2b6/0x3950
[  234.199684][ T7338]  ? __pfx___dev_queue_xmit+0x10/0x10
[  234.199703][ T7338]  ? neigh_resolve_output+0x438/0x750
[  234.199738][ T7338]  ? eth_header+0x11b/0x200
[  234.199755][ T7338]  ? __asan_memcpy+0x40/0x70
[  234.199790][ T7338]  ? ip6_output+0x126/0x550
[  234.199813][ T7338]  ip6_output+0x340/0x550
[  234.199838][ T7338]  ? __pfx_ip6_output+0x10/0x10
[  234.199862][ T7338]  NF_HOOK+0x177/0x4f0
[  234.199887][ T7338]  ? __pfx_NF_HOOK+0x10/0x10
[  234.199912][ T7338]  ? __pfx_dst_output+0x10/0x10
[  234.199935][ T7338]  ? lockdep_hardirqs_on+0x7a/0x110
[  234.199958][ T7338]  ? __local_bh_enable_ip+0xd0/0x130
[  234.199983][ T7338]  ? icmp6_dst_alloc+0x3a6/0x440
[  234.200010][ T7338]  mld_sendpack+0x8b4/0xe40
[  234.200042][ T7338]  ? mld_sendpack+0x213/0xe40
[  234.200066][ T7338]  ? __pfx_mld_sendpack+0x10/0x10
[  234.200099][ T7338]  mld_ifc_work+0x835/0xe70
[  234.200125][ T7338]  ? process_scheduled_works+0xa70/0x1860
[  234.200151][ T7338]  process_scheduled_works+0xb5d/0x1860
[  234.200190][ T7338]  ? __pfx_process_scheduled_works+0x10/0x10
[  234.200218][ T7338]  ? assign_work+0x3d5/0x5e0
[  234.200244][ T7338]  worker_thread+0xa53/0xfc0
[  234.200281][ T7338]  kthread+0x388/0x470
[  234.200301][ T7338]  ? __pfx_worker_thread+0x10/0x10
[  234.200324][ T7338]  ? __pfx_kthread+0x10/0x10
[  234.200344][ T7338]  ret_from_fork+0x514/0xb70
[  234.200371][ T7338]  ? __pfx_ret_from_fork+0x10/0x10
[  234.200396][ T7338]  ? __switch_to+0xc79/0x1410
[  234.200419][ T7338]  ? __pfx_kthread+0x10/0x10
[  234.200439][ T7338]  ret_from_fork_asm+0x1a/0x30
[  234.200475][ T7338]  </TASK>
[  234.200481][ T7338] 
[  234.454187][ T7338] Allocated by task 11521:
[  234.458612][ T7338]  kasan_save_track+0x3e/0x80
[  234.463304][ T7338]  __kasan_slab_alloc+0x6c/0x80
[  234.468156][ T7338]  kmem_cache_alloc_lru_noprof+0x2b8/0x640
[  234.473995][ T7338]  sock_alloc_inode+0x2c/0x190
[  234.478771][ T7338]  alloc_inode+0x6a/0x1b0
[  234.483109][ T7338]  __sock_create+0x12d/0x9d0
[  234.487726][ T7338]  __sys_socket+0xd6/0x1b0
[  234.492153][ T7338]  __x64_sys_socket+0x7a/0x90
[  234.496838][ T7338]  do_syscall_64+0x15f/0xf80
[  234.501447][ T7338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.507353][ T7338] 
[  234.509680][ T7338] Freed by task 11550:
[  234.513743][ T7338]  kasan_save_track+0x3e/0x80
[  234.518467][ T7338]  kasan_save_free_info+0x46/0x50
[  234.523495][ T7338]  __kasan_slab_free+0x5c/0x80
[  234.528273][ T7338]  kmem_cache_free+0x180/0x630
[  234.533050][ T7338]  rcu_core+0x7cd/0x1070
[  234.537322][ T7338]  handle_softirqs+0x22a/0x840
[  234.542112][ T7338]  __irq_exit_rcu+0xca/0x220
[  234.546709][ T7338]  irq_exit_rcu+0x9/0x30
[  234.550958][ T7338]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  234.556604][ T7338]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  234.562596][ T7338] 
[  234.564938][ T7338] Last potentially related work creation:
[  234.570650][ T7338]  kasan_save_stack+0x3e/0x60
[  234.575339][ T7338]  kasan_record_aux_stack+0xbd/0xd0
[  234.580546][ T7338]  call_rcu+0xee/0x890
[  234.584625][ T7338]  evict+0x95b/0xb10
[  234.588523][ T7338]  __dentry_kill+0x1a2/0x5e0
[  234.593134][ T7338]  finish_dput+0xc9/0x480
[  234.597472][ T7338]  __fput+0x691/0xa60
[  234.601458][ T7338]  task_work_run+0x1d9/0x270
[  234.606062][ T7338]  exit_to_user_mode_loop+0xed/0x480
[  234.611386][ T7338]  do_syscall_64+0x33e/0xf80
[  234.615988][ T7338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.621887][ T7338] 
[  234.624230][ T7338] The buggy address belongs to the object at ffff888056371200
[  234.624230][ T7338]  which belongs to the cache sock_inode_cache of size 1408
[  234.638810][ T7338] The buggy address is located 192 bytes inside of
[  234.638810][ T7338]  freed 1408-byte region [ffff888056371200, ffff888056371780)
[  234.652783][ T7338] 
[  234.655119][ T7338] The buggy address belongs to the physical page:
[  234.661548][ T7338] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56370
[  234.670307][ T7338] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  234.678806][ T7338] memcg:ffff888056377e01
[  234.683050][ T7338] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  234.690592][ T7338] page_type: f5(slab)
[  234.694575][ T7338] raw: 00fff00000000040 ffff88814044ac80 dead000000000100 dead000000000122
[  234.703164][ T7338] raw: 0000000000000000 0000000800150015 00000000f5000000 ffff888056377e01
[  234.711755][ T7338] head: 00fff00000000040 ffff88814044ac80 dead000000000100 dead000000000122
[  234.720432][ T7338] head: 0000000000000000 0000000800150015 00000000f5000000 ffff888056377e01
[  234.729114][ T7338] head: 00fff00000000003 ffffea000158dc01 00000000ffffffff 00000000ffffffff
[  234.737797][ T7338] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  234.746646][ T7338] page dumped because: kasan: bad access detected
[  234.753065][ T7338] page_owner tracks the page as allocated
[  234.758780][ T7338] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11515, tgid 11514 (syz.1.1538), ts 231506180343, free_ts 230265532416
[  234.782061][ T7338]  post_alloc_hook+0x231/0x280
[  234.786842][ T7338]  get_page_from_freelist+0x24dc/0x2580
[  234.792392][ T7338]  __alloc_frozen_pages_noprof+0x18d/0x380
[  234.798202][ T7338]  allocate_slab+0x77/0x660
[  234.802712][ T7338]  refill_objects+0x331/0x3c0
[  234.807393][ T7338]  __pcs_replace_empty_main+0x2e6/0x730
[  234.812972][ T7338]  kmem_cache_alloc_lru_noprof+0x37c/0x640
[  234.818794][ T7338]  sock_alloc_inode+0x2c/0x190
[  234.823559][ T7338]  alloc_inode+0x6a/0x1b0
[  234.827894][ T7338]  do_accept+0x13e/0x760
[  234.832144][ T7338]  __sys_accept4+0x139/0x230
[  234.836743][ T7338]  __x64_sys_accept4+0x9a/0xb0
[  234.841513][ T7338]  do_syscall_64+0x15f/0xf80
[  234.846113][ T7338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.852006][ T7338] page last free pid 5845 tgid 5845 stack trace:
[  234.858334][ T7338]  __free_frozen_pages+0xc2b/0xdb0
[  234.863461][ T7338]  __slab_free+0x263/0x2b0
[  234.867887][ T7338]  qlist_free_all+0x97/0x100
[  234.872492][ T7338]  kasan_quarantine_reduce+0x148/0x160
[  234.877962][ T7338]  __kasan_slab_alloc+0x22/0x80
[  234.882820][ T7338]  __kmalloc_noprof+0x316/0x760
[  234.887676][ T7338]  tomoyo_realpath_from_path+0xe3/0x5d0
[  234.893230][ T7338]  tomoyo_path_number_perm+0x246/0x630
[  234.898728][ T7338]  security_file_ioctl+0xc3/0x2a0
[  234.903761][ T7338]  __se_sys_ioctl+0x47/0x170
[  234.908351][ T7338]  do_syscall_64+0x15f/0xf80
[  234.912943][ T7338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.918849][ T7338] 
[  234.921172][ T7338] Memory state around the buggy address:
[  234.926800][ T7338]  ffff888056371180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  234.934862][ T7338]  ffff888056371200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  234.942925][ T7338] >ffff888056371280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  234.950986][ T7338]                                            ^
[  234.957139][ T7338]  ffff888056371300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  234.965200][ T7338]  ffff888056371380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  234.973356][ T7338] ==================================================================
[  234.981441][ T7338] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  234.988666][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) 
[  234.998052][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  235.008116][ T7338] Workqueue: mld mld_ifc_work
[  235.012873][ T7338] Call Trace:
[  235.016160][ T7338]  <TASK>
[  235.019098][ T7338]  vpanic+0x56c/0xa60
[  235.023100][ T7338]  ? __pfx_vpanic+0x10/0x10
[  235.027635][ T7338]  panic+0xc5/0xd0
[  235.031364][ T7338]  ? __pfx_panic+0x10/0x10
[  235.035787][ T7338]  ? sock_def_readable+0x1cb/0x550
[  235.040906][ T7338]  ? rcu_is_watching+0x15/0xb0
[  235.045699][ T7338]  ? sock_def_readable+0x1cb/0x550
[  235.050818][ T7338]  ? sock_def_readable+0x1cb/0x550
[  235.055935][ T7338]  check_panic_on_warn+0x89/0xb0
[  235.060890][ T7338]  ? sock_def_readable+0x1cb/0x550
[  235.066008][ T7338]  end_report+0x73/0x170
[  235.070259][ T7338]  ? sock_def_readable+0x1cb/0x550
[  235.075375][ T7338]  kasan_report+0x128/0x150
[  235.079902][ T7338]  ? sock_def_readable+0x1cb/0x550
[  235.085052][ T7338]  sock_def_readable+0x1cb/0x550
[  235.090011][ T7338]  ? sock_def_readable+0xae/0x550
[  235.095067][ T7338]  ? send_to_lecd+0x26d/0x830
[  235.099754][ T7338]  send_to_lecd+0x3e7/0x830
[  235.104271][ T7338]  lec_start_xmit+0xe52/0x2890
[  235.109052][ T7338]  dev_hard_start_xmit+0x2cd/0x830
[  235.114170][ T7338]  sch_direct_xmit+0x251/0x4c0
[  235.118951][ T7338]  ? __pfx_sch_direct_xmit+0x10/0x10
[  235.124250][ T7338]  __dev_queue_xmit+0x180f/0x3950
[  235.129284][ T7338]  ? __dev_queue_xmit+0x2b6/0x3950
[  235.134407][ T7338]  ? __pfx___dev_queue_xmit+0x10/0x10
[  235.139794][ T7338]  ? neigh_resolve_output+0x438/0x750
[  235.145181][ T7338]  ? eth_header+0x11b/0x200
[  235.149719][ T7338]  ? __asan_memcpy+0x40/0x70
[  235.154335][ T7338]  ? ip6_output+0x126/0x550
[  235.158849][ T7338]  ip6_output+0x340/0x550
[  235.163189][ T7338]  ? __pfx_ip6_output+0x10/0x10
[  235.168051][ T7338]  NF_HOOK+0x177/0x4f0
[  235.172132][ T7338]  ? __pfx_NF_HOOK+0x10/0x10
[  235.176733][ T7338]  ? __pfx_dst_output+0x10/0x10
[  235.181613][ T7338]  ? lockdep_hardirqs_on+0x7a/0x110
[  235.186824][ T7338]  ? __local_bh_enable_ip+0xd0/0x130
[  235.192140][ T7338]  ? icmp6_dst_alloc+0x3a6/0x440
[  235.197091][ T7338]  mld_sendpack+0x8b4/0xe40
[  235.201613][ T7338]  ? mld_sendpack+0x213/0xe40
[  235.206299][ T7338]  ? __pfx_mld_sendpack+0x10/0x10
[  235.211342][ T7338]  mld_ifc_work+0x835/0xe70
[  235.215853][ T7338]  ? process_scheduled_works+0xa70/0x1860
[  235.221588][ T7338]  process_scheduled_works+0xb5d/0x1860
[  235.227687][ T7338]  ? __pfx_process_scheduled_works+0x10/0x10
[  235.233678][ T7338]  ? assign_work+0x3d5/0x5e0
[  235.238306][ T7338]  worker_thread+0xa53/0xfc0
[  235.242918][ T7338]  kthread+0x388/0x470
[  235.246989][ T7338]  ? __pfx_worker_thread+0x10/0x10
[  235.252117][ T7338]  ? __pfx_kthread+0x10/0x10
[  235.256806][ T7338]  ret_from_fork+0x514/0xb70
[  235.261443][ T7338]  ? __pfx_ret_from_fork+0x10/0x10
[  235.266582][ T7338]  ? __switch_to+0xc79/0x1410
[  235.271284][ T7338]  ? __pfx_kthread+0x10/0x10
[  235.275918][ T7338]  ret_from_fork_asm+0x1a/0x30
[  235.280764][ T7338]  </TASK>
[  235.283967][ T7338] Kernel Offset: disabled
[  235.288292][ T7338] Rebooting in 86400 seconds..