last executing test programs:

2.488227097s ago: executing program 3 (id=8193):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x844)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x630c5}, @IFLA_GRE_TTL={0x5, 0x8, 0x7}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0cc5035c44df"}]}, 0x58}}, 0x0)
unshare(0x20000400)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FICLONE(r5, 0x40049409, r4)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}}, 0x48090)

2.357971221s ago: executing program 3 (id=8196):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10)
shutdown(r1, 0x1)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x2}, 0x8)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r2, 0x303, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x60008800}, 0x0)

2.185483797s ago: executing program 3 (id=8198):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000800000000100000080"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x1e, 0x805, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(r2, &(0x7f0000000240)="f2435f01000880", 0x7, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

1.923561779s ago: executing program 0 (id=8204):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [<r6=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x2000)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r2)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x8948, &(0x7f0000000580)={'bond0\x00'})
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/82, 0x32c000, 0x1000}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r11=>0x0})
connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r11}, 0x10)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x194, r7, 0xc04, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xae4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x8}, 0x44)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010)
ioctl$TUNSETNOCSUM(r6, 0x80087601, 0xfffffffffffffffe)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000003800000400000003000000128f0000", @ANYRES32=0x1, @ANYBLOB="0500"/15, @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000000050000000200"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r13 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_COUNTERS(r13, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x0, 0x0}, 0x78)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0)

1.723214916s ago: executing program 2 (id=8207):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0)
mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)='H', 0x0}, 0x50)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0)
accept4$x25(r0, &(0x7f0000000040)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x800)
mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x1000000, 0x31, r2, 0x3000)
r3 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000bd1000/0x2000)=nil, 0x2000, 0x1000005, 0x4012, r3, 0xffffe000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000)

1.640709361s ago: executing program 2 (id=8209):
r0 = socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x2, 0x0) (async)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(r1, &(0x7f00000001c0)="b831d3b15525976fa4b8bfe1306888576f325406868415f5ff63dfc72c3c243b732374f1f6e4b59a6799edd64beee2eb9e25cdb0ed2125383f463004d8d82cd10b021e332e85a75a7440705cc3425140177deff4166bf30a43412a29ab99641b5fef281615324b982dc4e325ef619fc229af10beb89f", 0x76, 0x4048004, &(0x7f0000000240)={0xa, 0x4e23, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_l2cap_L2CAP_LM(r3, 0x12, 0x3, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x8000000000d)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRESOCT=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c95c716727eb53bcc1379f3d83cd0dfe2066008efa4b0aee65f7b2220304559576e089ff7aecf9140151cc621694891a078576718070e052144b6f9eb99f683f90597ecb8a915ea8ae015039c64e2490b28ab8dd41b9adc9f4abd", 0x84, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async)
sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c95c716727eb53bcc1379f3d83cd0dfe2066008efa4b0aee65f7b2220304559576e089ff7aecf9140151cc621694891a078576718070e052144b6f9eb99f683f90597ecb8a915ea8ae015039c64e2490b28ab8dd41b9adc9f4abd", 0x84, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)

1.552874166s ago: executing program 3 (id=8210):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x220c)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x3)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r11, 0x0)
writev(r4, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x20}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c084}, 0xd0)

1.51535537s ago: executing program 4 (id=8211):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200000000000000200100000000000000000000000000000000000000000000000000000700000000000000fc020000000000000000000000000001000000003c00000002000000ac141425000000000000000000000000043500000100000000000000000000000000000000000000000000000000000000000000000000003300000002"], 0x23c}}, 0x4004000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0)
close(r1)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x54, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40b}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x808}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x18}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2d}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000081)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0xff, @remote, @mcast2, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="1fc9477a65a856b5a700bd4899f0e54390aa7cd8a914fd42aeab75a4180278179ae80b8b2bfb0e80e3e6973faac3516b750602e514006cbccc50d154d5510c7176bd84442bfdf5cfa0d9f0993fd1f326ffe9bae8f1c0c9db990cec1ff21467d0069d662c8a91e87296e7db0592671e6768b43cce057596ad85bf261d0c93a5a3c55d2d8622e805f9cf8e318b904784063f068f7688fb11b1da275b223819161fefcd9c0c5c8d7ef9d6c6637281c0", 0xae)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94)
pipe(&(0x7f0000000000)) (async)
close(r1) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x40) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) (async)
close(r1) (async)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x54, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40b}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x808}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x18}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2d}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000081) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0xff, @remote, @mcast2, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="1fc9477a65a856b5a700bd4899f0e54390aa7cd8a914fd42aeab75a4180278179ae80b8b2bfb0e80e3e6973faac3516b750602e514006cbccc50d154d5510c7176bd84442bfdf5cfa0d9f0993fd1f326ffe9bae8f1c0c9db990cec1ff21467d0069d662c8a91e87296e7db0592671e6768b43cce057596ad85bf261d0c93a5a3c55d2d8622e805f9cf8e318b904784063f068f7688fb11b1da275b223819161fefcd9c0c5c8d7ef9d6c6637281c0", 0xae) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) (async)

1.46228754s ago: executing program 2 (id=8213):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x4, 0xc}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r1, 0x58, &(0x7f0000000580)}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000100000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x4, 0xc}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4}, 0x94) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r1, 0x58, &(0x7f0000000580)}, 0x10) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000100000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)

1.311641867s ago: executing program 2 (id=8215):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fe}, 0x1c, 0x0}}], 0x1, 0x20048000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xff, 0x0, 0x0, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x8}}]}, 0x154}}, 0x49080)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1)

1.250667011s ago: executing program 4 (id=8216):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80000)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2711, @local}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x70bd28, 0xfffffffc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x1}}]}, 0x4c}}, 0x20000011) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x70bd28, 0xfffffffc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x1}}]}, 0x4c}}, 0x20000011)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x99, 0x6, <r5=>0x0}, &(0x7f0000000280)=0x10)
getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r5, 0xdec7}, &(0x7f0000000300)=0x8) (async)
getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r5, 0xdec7}, &(0x7f0000000300)=0x8)

1.249099225s ago: executing program 3 (id=8217):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair(0xa, 0x2, 0x1, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000940)={0x1034, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}]}]}, @NL80211_ATTR_TID_CONFIG={0x274, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x32}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x88}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x13}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x1}, {0x6, 0x4}, {0x1, 0x7}, {0x5, 0x8}, {0x5, 0x5}, {0x3}, {0x0, 0x8}, {0x4, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x1, 0x2}, {0x6, 0x5}, {0x6, 0x3}, {0x3, 0x9}, {0x5, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x9}, {0x5, 0x3}, {0x5, 0x1}, {0x0, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x4, 0x8}, {0x2, 0x5}, {0x0, 0x8}, {0x3, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x1}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x8}, {}, {0x0, 0x4}, {0x3, 0x6}, {0x3, 0x9}, {0x1, 0x7}, {0x2, 0x5}, {0x3, 0x5}, {0x4, 0x4}, {0x2, 0x6}, {0x1, 0x4}, {0x4}, {0x1, 0x1}, {0x2}, {0x0, 0x9}, {0x1}, {0x6, 0xa}, {0x0, 0x2}, {0x6, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0xa}, {0x4, 0x8}, {0x0, 0x6}, {0x2, 0xa}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x8}, {0x1, 0x1}, {0x2, 0x4}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x46, 0x7, 0x6, 0x0, 0x3, 0x9, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xee73, 0x4, 0x74d8, 0x3ff, 0xc, 0x708, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xb8, 0x2, 0x3, 0x1, 0x4, 0x6, 0xb]}}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0xa}, {0x2, 0x6}, {0x7, 0x8}, {0x2, 0x6}, {0x5, 0x4}, {0x4, 0x6}, {0x5}, {0x4, 0x8}, {0x4, 0x4}, {0x5, 0x3}, {0x7, 0x4}, {0x4, 0x4}, {0x7, 0xa}, {0x2, 0x6}, {0x5, 0x1}, {0x3, 0x9}, {0x4, 0x1}, {0x3, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x6, 0x4}, {0x0, 0x3}, {0x0, 0x7}, {0x4, 0x5}, {0x6, 0x3}, {0x5, 0x3}, {0x0, 0x7}, {0x1}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x7}, {0x5}, {0x3, 0x3}, {0x1, 0x3}, {0x2, 0x3}, {0x4, 0x3}, {0x0, 0x6}, {0x3, 0x8}, {0x0, 0x6}, {0x0, 0x8}, {0x3, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x0, 0x9}, {0x6, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x4, 0x5}, {0x4}, {0x7, 0x7}, {0x3, 0xa}, {0x7}, {0x0, 0x9}, {0x4, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x9}, {0x7, 0x4}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x3}, {0x5, 0x2}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x6}, {0x5, 0x7}, {0x6, 0x6}, {0x4, 0x1}, {0x2, 0x3}, {0x4}, {0x1, 0x2}, {0x7, 0x6}, {0x4, 0x7}, {0x1}, {0x2, 0x7}, {0x4, 0x4}, {0x0, 0x1}, {0x4, 0xa}, {0x5, 0x5}, {0x3, 0x1}, {0x1}, {0x4}, {0x6, 0x4}, {0x3, 0x6}, {0x3, 0xa}, {0x3, 0x6}, {0x5, 0x8}, {0x6, 0x9}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x8, 0x9, 0x5, 0x5, 0x4656, 0x1000, 0xd]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x1, 0xfdc0, 0x2, 0x7ff, 0x2, 0x0, 0x9]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x5, 0x36, 0x2, 0x36, 0x2, 0x5, 0x30, 0x18, 0x2, 0x48, 0x12, 0x1b, 0x16]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x3}, {0x4, 0x3}, {0x7, 0x4}, {0x7, 0x3}, {0x1, 0x9}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x4, 0x2, 0xb, 0x12, 0x18, 0x4, 0x60, 0x9, 0x6, 0x60, 0x60, 0x24, 0x60, 0x6, 0x30, 0x16, 0x1, 0x9, 0x36, 0x54, 0x18, 0x94c91abc02948bff, 0x43]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x85}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6430cf08}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x61}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfc37}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x2a4, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x6, 0x2, 0x34a7, 0x5, 0x90, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x30, 0x24, 0x36, 0x30, 0x9, 0x6, 0x2, 0x4, 0x1b, 0x16, 0x1, 0x2, 0x30, 0x24, 0x6, 0x18, 0x22, 0x12, 0x1b, 0x18, 0x18, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x6, 0x17}, {0x1}, {0x1, 0x6}, {0x6, 0x7}, {0x7}, {0x0, 0x6}, {0x2, 0x7}, {0x2, 0x9}, {0x1, 0x7}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x6}, {0x5, 0x3}, {0x5, 0x6}, {0x6, 0x3}, {0x6, 0x2}, {0x2, 0x8}, {0x5, 0x9}, {0x4, 0x6}, {0x2, 0x8}, {0x1, 0x8}, {0x0, 0x8}, {0x5, 0x2}, {0x6, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x9, 0x3, 0x60, 0x2, 0x60, 0x39, 0x5, 0x3, 0x9, 0x12, 0x4, 0x16, 0x4, 0x3, 0x2, 0x48, 0x30, 0xc, 0xb]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x6, 0x9, 0xff, 0xdf, 0x5, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x9, 0x12, 0x36, 0x6c, 0xc, 0x0, 0x9, 0x1, 0x2, 0x4, 0x48, 0xc, 0x9, 0x9, 0x0, 0x36, 0x3, 0x30, 0x1, 0x16, 0x2, 0x12, 0x9]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x79, 0x9, 0x16, 0x18, 0x1, 0x4, 0x38, 0x4, 0xb, 0x16, 0x5, 0x6c, 0x48, 0x36, 0x6c, 0x9, 0x1b, 0x36, 0x16, 0x30, 0x16]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x4}, {0x6, 0x6}, {0x2, 0x8}, {0x2, 0x4}, {0x3, 0x3}, {0x3, 0xa}, {0x1, 0x1}, {0x4, 0x8}, {0x5, 0x7}, {0x2, 0x8}, {0x7, 0x4}, {0x6, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x1, 0x4}, {0x3}, {0x2, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x2, 0x5}, {0x7, 0x4}, {0x7, 0xa}, {0x1, 0x3}, {0x0, 0x6}, {0x2, 0x4}, {0x7, 0x5}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x6}, {0x5, 0x9}, {0x6, 0x5}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0x9}, {0x7, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0x9}, {0x3, 0x8}, {0x0, 0x8}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x27}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x4, 0xbb65, 0x8000, 0x3, 0x8, 0x3, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x8, 0x3, 0x4, 0x4, 0x7, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x800, 0x2, 0x1, 0x8001, 0x2, 0x81]}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xec}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x37c, 0x11d, 0x0, 0x1, [{0x378, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x354, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xffff, 0x7fff, 0x80, 0x2, 0xe, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x8}, {0x7, 0x1}, {0x3, 0x7}, {0x5, 0x8}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x8}, {0x0, 0x9}, {0x4, 0x6}, {0x2}, {0x0, 0x4}, {0x7, 0x2}, {0x4, 0xa}, {0x5, 0x7}, {0x0, 0x6}, {0x1, 0x7}, {0x4}, {0x1, 0x9}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0x1}, {0x6, 0x5}, {0x7, 0x2}, {0x4, 0x4}, {0x3, 0x3}, {0x4, 0x5}, {0x6, 0x3}, {0x6, 0x6}, {0x5, 0x4}, {0x3, 0x6}, {0x2, 0x9}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x4}, {0x7, 0x5}, {0x3, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x7, 0x4}, {0x2, 0xa}, {0x7, 0xa}, {0x7, 0x3}, {0x2, 0x8}, {0x2, 0x1}, {0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x3}, {0x0, 0x7}, {0x3, 0x1}, {0x5, 0x6}, {0x6, 0x6}, {0x0, 0x5}, {0x6, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x3}, {0x7, 0x3}, {0x0, 0x9}, {0x2, 0x6}, {0x2, 0x1}, {0x5, 0x3}, {0x3, 0x7}, {0x4, 0x8}, {0x2, 0x5}, {0x3, 0x5}, {0x5, 0x1}, {0x0, 0x7}, {0x3, 0x4}, {0x2, 0x5}, {0x6, 0x3}, {0x5, 0x8}, {0x0, 0x6}, {0x6, 0x6}, {}, {0x5, 0x6}, {0x6, 0x2}, {0x0, 0x3}, {0x2, 0x6}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {0x4, 0x5}, {0x3, 0x3}, {0x7}, {0x4}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0x5}, {0x1, 0x8}, {0x2, 0x1}, {0x5, 0x2}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x5, 0xa}, {0x6, 0x3}, {0x4, 0x6}, {0x3, 0x9}, {0x6, 0x7}, {0x7, 0x5}, {0x0, 0x5}, {0x3, 0x9}, {0x3, 0x3}, {0x0, 0x7}, {0x6}, {0x1, 0x4}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc134, 0x7, 0xf, 0xfffc, 0x2, 0x0, 0x2, 0x1]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x411d, 0x6, 0x1, 0x9, 0x5db, 0x0, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x9, 0x7, 0x0, 0x0, 0x6d, 0xa40, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xcf6d, 0x9, 0x401, 0x1, 0x1, 0x5, 0x3ff]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x9, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x5}, {0x6, 0x7}, {0x5, 0x2}, {0x7, 0x7}, {0x0, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x7}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x3, 0x7}, {0x1, 0xa}, {0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x4, 0x5}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0xa}, {0x1, 0x8}, {0x7, 0x9}, {0x1}, {0x3, 0x4}, {0x3, 0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x7, 0x7}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x6}, {}, {0x5, 0x3}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x7}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0xdaa8, 0x6, 0x8, 0x7, 0x3, 0x5, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x325, 0x1ff, 0x7, 0x4, 0x0, 0x7b, 0x55]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x9, 0x7, 0x101, 0x8000, 0x6, 0x8]}}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x60, 0x1b]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x6c, 0x36, 0x9, 0x30, 0x48, 0x42, 0x6, 0x16, 0x2, 0x30, 0x36, 0x9, 0x5, 0x18, 0x30, 0x3, 0x6, 0x0]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x9}, {0x2, 0x4}, {0x6, 0x3}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0x4}, {0x4, 0x2}, {0x3, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x4, 0x36, 0x30, 0x2, 0xb, 0x1b, 0x18, 0x6c, 0xb, 0x12, 0x16, 0xb, 0x18, 0x48, 0x1, 0x9, 0x2, 0x48, 0x60, 0x2, 0x1b, 0x6c, 0x1b, 0xc, 0x9, 0x60, 0x1, 0x1b, 0x18, 0x41]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf512, 0x1, 0x91a5, 0x0, 0x2, 0x8e, 0xb800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x6, 0x3, 0x6, 0x400, 0x5, 0x9]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x18, 0x9, 0x12, 0x3, 0x6, 0x9, 0x5, 0x16, 0x3, 0x30, 0x36]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7fff, 0x37, 0x4, 0x81, 0xa, 0x4, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeb, 0x72e, 0x4, 0x100, 0x4, 0x659, 0xc61, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x7, 0xa, 0x48a5, 0x15, 0xe618, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x7, 0x7, 0x5c, 0x6, 0x7, 0xf5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x7}, {0x1}, {0x2, 0x8}, {0x3}, {0x6, 0x7}, {0x1}, {0x7, 0x3}, {0x0, 0x9}, {0x3, 0x7}, {0x0, 0x6}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7d, 0x0, 0x7fff, 0x9, 0x1, 0xd9, 0x4, 0xf]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x72c, 0xfff, 0x1ff, 0xa, 0x5, 0x400, 0x8]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6, 0x1}, {0x2, 0x9}, {0x7, 0x4}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x9}, {0x7, 0x3}, {0x2, 0x5}, {0x5, 0xa}, {0x0, 0x2}, {0x6, 0x5}, {0x0, 0x2}, {0x3, 0x6}, {0x5}, {0x3}, {0x0, 0x1}, {}, {0x7, 0xa}, {0x5, 0x2}, {0x4}, {0x2, 0x6}, {0x4, 0x5}, {0x6, 0x1}, {}, {0x0, 0x5}, {0x7, 0x4}, {0x5}, {0x4, 0xa}, {0x3}, {0x2, 0xa}, {0x2, 0x5}, {0x2}, {0x5}, {0x4, 0x1}, {0x3, 0x9}, {0x4, 0x1}, {0x3}, {0x2, 0x9}, {0x5, 0x8}, {0x6, 0x6}, {0x4}, {0x2, 0x5}, {0x7, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x7, 0x6}, {0x2, 0x3}, {0x7, 0x1}, {0x0, 0x9}, {0x1, 0xa}, {0x1, 0x9}, {0x1}, {0x7, 0x2}, {0x7}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0x7}, {0x0, 0x8}, {0x0, 0x2}, {0x2}, {0x1, 0x1}, {0x2, 0xa}, {0x2, 0x6}, {0x2, 0x9}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x9}, {0x7, 0x6}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x25c, 0x11d, 0x0, 0x1, [{0x258, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x5, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0x3}, {0x1, 0x1}, {0x2, 0x3}, {0x1, 0x3}, {0x7, 0x4}, {0x5, 0x6}, {0x6, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x7, 0x4}, {0x2, 0x9}, {0x1, 0x9}, {0x2, 0x4}, {0x3, 0x9}, {0x3, 0x2}, {0x6, 0x4}, {0x7, 0x7}, {0x1, 0x3}, {0x5}, {0x4, 0x2}, {0x5, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x625, 0x3ff, 0x0, 0x47, 0x6, 0xfff4, 0x7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x5, 0x6c, 0x48, 0x1b, 0x30, 0x9, 0xc, 0x1, 0x6c, 0x1b, 0xc, 0x24, 0x1, 0x5, 0x18, 0x4, 0x30, 0x48, 0x1, 0x36, 0x3c]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0x1}, {0x7, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x7, 0x3}, {0x2}, {0x0, 0x7}, {0x5, 0x9}, {0x6, 0x9}, {0x7}, {0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x2, 0x5}, {0x7, 0x9}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x7, 0x2}, {0x7, 0x8}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x1}, {0x1, 0x8}, {0x3, 0x1}, {0x4, 0x8}, {0x4, 0x1}, {0x6, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x5, 0x1}, {0x0, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x7, 0x9}, {0x4, 0x8}, {0x7, 0x9}, {0x4, 0x7}, {0x5}, {0x7, 0xa}, {0x1, 0x7}, {0x4, 0x1}, {0x6}, {0x7, 0x2}, {0x1, 0x7}, {0x0, 0x5}, {0x5, 0x9}, {0x6, 0x2}, {0x6}, {0x7, 0x7}, {0x7, 0x9}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x2, 0x9, 0x6, 0x8, 0x1, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x3}, {0x0, 0x6}, {0x4, 0x9}, {0x7, 0x8}, {0x7, 0x4}, {0x5, 0x3}, {0x3, 0x4}, {0x7, 0xa}, {0x0, 0x1}, {0x3, 0x5}, {0x6, 0x8}, {0x0, 0x1}, {0x4, 0x3}, {0x3, 0x8}, {0x5, 0x5}, {0x7, 0x4}, {0x7, 0x9}, {0x6, 0x4}, {0x3}, {0x4, 0xa}, {0x2, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x8}, {0x3, 0x4}, {0x4, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x5, 0x4}, {0x3, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x7, 0x5}, {0x2, 0x8}, {0x0, 0xa}, {0x0, 0x1}, {0x7, 0x9}, {0x6, 0x2}, {0x5, 0x9}, {0x2, 0x9}, {0x6}, {0x5, 0x4}, {0x1, 0x6}, {0x1, 0x1}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x5}, {0x6, 0x1c}, {0x0, 0x5}, {0x3, 0xa}, {0x7, 0x3}, {0x5}, {0x7}, {0x2, 0x6}, {0x2, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0xa}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x1}, {0x1, 0x5}, {0x1, 0x4}, {0x7, 0x6}]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8ccf, 0x800, 0x6, 0x7, 0x9, 0x2, 0x8, 0x5]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x7, 0x7}, {0x5}, {0x7, 0x4}, {0x7, 0x6}, {0x0, 0x6}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x6}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x8}, {0x3, 0xa}, {0x1, 0x1}, {0x2, 0x3}, {0x7, 0x8}, {0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x4, 0x8}, {0x7, 0x9}, {0x3, 0x5}, {0x0, 0x4}, {0x3, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0x3}, {0x6, 0x7}, {0x5, 0x9}, {0x4, 0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x3}, {0x3}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0x7}, {0x3}, {0x6}, {0x1, 0xa}, {0x3, 0x3}, {0x3, 0x1}, {0x1, 0x2}, {0x4, 0x3}, {0x4, 0xa}, {0x0, 0x8}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0x6}, {0x1, 0x9}, {0x5, 0x5}, {0x2, 0xa}, {0x0, 0x2}, {0x4, 0x3}, {0x0, 0x4}, {0x7, 0x1}, {0x1, 0x4}, {0x1, 0xa}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x7}, {0x0, 0x5}, {0x1, 0xa}, {0x7, 0x1}, {0x2, 0x1}, {0x5, 0x4}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x5, 0x1}, {0x3, 0xa}, {0x2, 0x9}, {0x5, 0x8}, {0x3, 0x6}, {0x2, 0x5}, {0x7, 0x7}, {0x7, 0x7}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x5, 0x7}, {0x3, 0x2}, {0x1, 0x9}, {0x5}, {0x1, 0x8}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x6}, {0x6}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x8}, {0x3, 0x4}, {0x0, 0x9}, {0x2, 0x2}, {0x7, 0x3}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x6, 0x30, 0x60, 0x6, 0x12, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x14c, 0x9, 0x7, 0x600, 0x8, 0x5e, 0x7, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xb50, 0x7ff, 0x6, 0x9c, 0x2, 0x4, 0x1]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x450, 0x11d, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x49}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x7, 0x8fd, 0x7, 0x7, 0x4]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf023, 0x1000, 0x2, 0x9f, 0x6, 0x8, 0x6, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x16, 0x60, 0xc, 0x6, 0x1, 0xb, 0x60, 0x4, 0x24, 0x48, 0x24, 0x4, 0x5, 0x60, 0x30, 0x14, 0x6, 0xc, 0x1, 0x24, 0x12, 0x30, 0x4, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9a1d, 0x7, 0x40, 0xfffe, 0x1, 0x7, 0x2, 0x7131]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xe, 0x2be8, 0x8, 0x4, 0x3ff, 0x2, 0x4]}}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7ff, 0xe7, 0x1, 0x7ff, 0x7f, 0x2b4, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x4}, {0x7, 0x4}, {0x4}, {0x2, 0x8}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0xa}, {0x6, 0x5}, {0x6, 0x4}, {0x3, 0x9}, {0x5, 0x8}, {0x0, 0x7}, {0x2}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x5}, {0x3, 0xa}, {0x3, 0x2}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0x8}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x5}, {0x7, 0x3}, {0x1, 0x3}, {0x6}, {0x4, 0x8}, {0x0, 0x3}, {0x6, 0x6}, {0x6, 0x5}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x2, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x6, 0x2}, {0x0, 0x6}, {0x5, 0x1}, {0x7, 0x6}, {0x0, 0x9}, {0x0, 0x8}, {0x5, 0xa}, {0x2, 0x9}, {0x0, 0x3}, {0x5, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x84}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x47}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x34}]}, {0x2cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x260, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x4}, {0x5, 0x1}, {0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x0, 0x2}, {0x6, 0xa}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x4}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x2, 0x5}, {0x4, 0x7}, {0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x6}, {0x6, 0x9}, {0x5, 0x3}, {0x4, 0x9}, {0x2, 0x6}, {0x7, 0xa}, {0x6, 0x7}, {0x3, 0x7}, {0x3, 0x2}, {0x7, 0x2}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x9}, {0x6, 0x9}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x4, 0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x7, 0x4}, {0x7, 0x8}, {0x3, 0x9}, {0x3, 0x1}, {0x7, 0xa}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x7}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0x7}, {0x7, 0x3}, {0x7, 0xa}, {0x0, 0xa}, {0x1}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x1}, {0x2, 0x4}, {0x2, 0x8}, {0x4, 0x4}, {0x0, 0x8}, {0x2, 0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x2}, {0x3, 0x2}, {0x2, 0x5}, {0x7, 0x6}, {0x7}, {0x4, 0xa}, {0x7, 0xa}, {0x4, 0xa}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x1}, {0x4, 0x2}, {0x5, 0x5}, {}, {0x6, 0x7}, {0x6}, {0x2, 0xa}, {0x6, 0x4}, {0x2, 0x9}, {0x5, 0x8}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0x6}, {0x3, 0x7}, {0x0, 0x5}, {0x5}, {0x4, 0x7}, {0x5}, {0x6, 0x2}, {0x2, 0xa}, {0x1, 0x5}, {0x6, 0x9}, {0x2, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x3, 0x5}, {0x4, 0x4}, {0x4, 0x3}, {0x2, 0x4}, {0x1, 0x8}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x5}, {0x2, 0xa}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0x8}, {0x0, 0x4}, {0x0, 0x2}, {0x4}, {0x7, 0x9}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0x5}, {0x3, 0x7}, {0x7, 0x3}, {0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x48, 0x3, 0xb, 0x12, 0x1b, 0x3, 0x30, 0xc, 0x2, 0x12, 0x16, 0x36, 0x5, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x200, 0x9a, 0x8, 0x2, 0x0, 0x9, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x300, 0x5, 0x0, 0x9, 0x2, 0x101, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x12, 0x48, 0x8, 0x5, 0x1b, 0x36, 0x5, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0xd, 0x6, 0x5, 0x7, 0x2, 0xcfb]}}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0x12, 0x30, 0x16, 0xc, 0x36, 0x3, 0xb, 0x1, 0x18, 0xb, 0x0, 0x5, 0x48, 0x4, 0xb, 0x7d, 0x0, 0x30, 0x73, 0x9, 0x60, 0x3, 0xc, 0x60, 0x3, 0x3, 0x30, 0x5, 0x30, 0x18, 0x18]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x5, 0x1, 0x6c, 0x48, 0xb, 0x18, 0x24]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0x5}, {0x7, 0x1}, {0x3, 0x9}, {0x1, 0x3}, {0x5, 0x7}, {0x4, 0x5}, {0x7, 0x8}, {0x2, 0x6}, {0x4}, {0x1, 0x9}, {0x3, 0x8}, {0x3, 0x4}, {0x7, 0x3}, {0x7, 0x1}, {0x3, 0x9}, {0x3}, {0x7, 0x8}, {0x0, 0x1}, {0x3}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x2}, {0x3, 0x4}, {0x4, 0x1}, {0x5, 0xa}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x7}, {0x6, 0x6}, {0x6, 0xa}, {0x1, 0x7}, {0x5, 0x2}, {0x4, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x7}, {0x7, 0x1}, {0x5}, {0x1, 0x8}, {0x2, 0x4}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0xa}, {0x1, 0x2}, {0x3, 0x4}, {0x4, 0x5}, {0x4, 0xa}, {0x5, 0x6}, {0x4, 0x7}, {0x1, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x968, 0x9, 0x2, 0x7, 0x5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x1, 0x9, 0x7, 0xc, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x5, 0x4, 0x1, 0xfff, 0x8001, 0x1000]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xb136, 0x5, 0x4, 0xf, 0xfffa, 0x2, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa}]}]}]}, 0x1034}, 0x1, 0x0, 0x0, 0x20000}, 0x4001)
setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x5}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)={0x48, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x18, 0xb, 0x0, 0x1, [@typed={0x14, 0x6f, 0x0, 0x0, @ipv6=@private0}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0)
accept(r8, &(0x7f0000000200)=@ethernet={0x0, @multicast}, &(0x7f0000000280)=0x80)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000025c0)={0x1360, 0x0, 0x400, 0x70bd2c, 0x1, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x53}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_MESH_SETUP={0x30, 0x70, [@NL80211_MESH_SETUP_IE={0x22, 0x3, "dc901790cfcb0c884d44da5e2bc4ec054a305c8471e2e5c8b047d7aaf403"}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0xd, 0x3, 0x7b, 0x80a6, 0x3, 0x3, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x41c0, 0x7fff, 0x6, 0x8, 0x4e, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x8, 0x5, 0x7, 0x0, 0x2, 0x8, 0xc996]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x30, 0x24, 0xb, 0x24, 0x5, 0x48, 0x24, 0xc, 0x60, 0x30, 0x2, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x6, 0x7ff, 0x1fb, 0x8, 0x8, 0x2, 0xfffb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x5, 0x3, 0x1, 0x8, 0x6, 0x1, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x76f6, 0x1, 0x0, 0x7, 0x101, 0x8, 0x7ff, 0x3]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x6c, 0x6, 0x16, 0xb, 0x30, 0x24, 0x16, 0x40, 0x5c, 0x1, 0x6, 0x4, 0xb, 0x14, 0x4]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9, 0xfffe, 0x5, 0x1, 0xd5, 0xfffb]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3, 0x5}, {0x3, 0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x5}, {0x1, 0x8}, {0x5, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x5}, {0x4}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x5}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x7}, {0x5, 0x2}, {0x3, 0x1}, {0x1, 0x3}, {0x6, 0xa}, {0x1, 0x6}, {0x6, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x7, 0x7}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x7}, {0x7, 0x3}, {0x5}, {0x1, 0x5}, {0x6, 0x3}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {0x7, 0x8}, {0x0, 0x5}, {0x3, 0x3}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x1b, 0x18, 0x6, 0x48, 0xb, 0x18, 0x6c, 0x1, 0x5, 0x1b]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x99d, 0x5, 0x603a, 0x7, 0x1, 0x702, 0xac26, 0x5]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x4}, {0x4, 0x5}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x2}, {0x0, 0x4}, {0x7, 0x9}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x5}, {0x4, 0x4}, {0x7, 0x2}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x8}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x4}, {0x1, 0x3}, {0x6}, {0x4, 0x9}, {0x5, 0x1}, {0x7, 0x2}, {0x6}, {0x0, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x2, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {}, {0x2}, {0x0, 0x8}, {0x3, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x6}, {0x7, 0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x6}, {0x2, 0x5}, {0x2, 0x4}, {}, {0x1, 0x3}, {0x3, 0x6}, {0x6, 0x7}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x2}, {0x6, 0x4}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x6}, {}, {0x6, 0x4}, {0x0, 0xa}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x48, 0x4, 0x24, 0x1b, 0x30, 0x4c, 0x12, 0x1, 0x1b, 0x60, 0x36, 0x2, 0x4, 0x36, 0x9]}]}]}, @NL80211_ATTR_MESH_SETUP={0x1020, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x1004, 0x3, "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"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xe}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_SETUP={0x124, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0xf5, 0x3, "41c0b15c306398c94b372c0e02bdf3cdbcf107885d33a210ac6b03b082ffdbb0ecabe385921e7f1d10c3147d9c8f2399b10df0f97d6ca17d5bab4ced3d470268306ee83d88c0f2ab7ae10e43b331ffbdd515a69f25b38a950c74bebf2873466f22a1dab2561f65979d47c8bdd635ef7d212145711873009a93fb2a92233f9681eb3d61f9d3f4b23d08ba8a4df29c83728f648ef393d4168a59a4a7b775109cf47831fb2b124e47876b60c13846819a81fe08c8d63fd47f8564ccece5a6d96544e348034b0ed06bda086a771ef82df386856db69496fd9ff296f53deca9ea5028a0ebe2b541f2de301aa9833309b1cf26b5"}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1360}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
write$bt_hci(r8, &(0x7f0000000080)=ANY=[], 0x6)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
ioctl$sock_bt_hci(r8, 0x400448e1, &(0x7f00000000c0)="20ad60532bb20ebbbb954495b2d2dcf52f0b122e5d29e3fac4e40b9cd9f955144b4b9a26f320eba66cd2b872962b0178a22d0943b5474eebd2fb67bfe640aefe42a9c0341d")
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000000900000018110000bc73bc9a6468bcce380339cf758e36032aca8507d23f285e0db85fef772c225d686cc3ef71f949555bb42942cec94e2d25f97ef3ead973d43c083663b6afcd938aff1cc79774", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

1.094868383s ago: executing program 1 (id=8218):
syz_emit_ethernet(0x36, &(0x7f00000026c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "43bf5b", 0x0, 0x67, 0x1, @mcast1, @loopback}}}}, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f00000026c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "43bf5b", 0x0, 0x67, 0x1, @mcast1, @loopback}}}}, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r3, @ANYBLOB="0220ee050a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) (async)
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r3, @ANYBLOB="0220ee050a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040)
r4 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x10000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1bf7b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xb0c}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

1.007020287s ago: executing program 0 (id=8219):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=<r3=>0xffffffffffffffff], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES16=r4, @ANYRESOCT=r3, @ANYRESHEX, @ANYRES8=r1, @ANYRESOCT, @ANYBLOB="21519685e94cb44ea931ed0618bf003aa5ba9921d307a9659c827f7dd963e3c83045864e3986bceb3ea496790940fb89740cae04b3750bb491037547be8d710dd0b9ba02ddd7ef7dea729300214245b2bff666ed92afbf3daf6c87bb366ee6a62b9f5ab9f138b742538f0a3aed94240dabf7159a56d72cdb8ae095d4d2f79fb2011225853761fffc9d26eebc8b6640b4650837696171da1a7a61db9aaa428630193541dd9de9c59bd58f419f3b12db1d1e6eb6d15d6937561d6acb53bf8f042968e23ed6f4f3d34822f1480d7d1a10c1fddd5e939b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, r4}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000001a40)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x1, @private0, 0x3}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000700)="05bc62b5bcf86033480efe717fd76ebd47c7d4391e4066c3f0d9695a7ba8273686667296cd14e5d37251eadbf69dcfe180b4b3a6ac652693cc3ba4a08575316fab3be61e8f44824e6789edc248832969045e9f810b458bf8e7643b9abc9c6be08fd6c0fcc11ae6b2a53bd433c1d38089aa911f90d7fffd39c57c4757d79ef41984c53905f1c27d473da0f20a7c618421973357ff39af2c323eb779faa7f0000de2733a930c53ccb145feacdffcc1f4cbad4be857b83058eaac1745b3c1c525a340be6c80eec5944e224e372d88a3af2aa94b5aa8c3d2c716b73385469e322d3e72ed16b8a54779a4deb4d3378e5178b294cb06f3", 0xf4}, {&(0x7f0000000500)="fcf3f20530e71d2c67a7d041934baff3395dce1b949f999fc0015af17af6db0b19defe9d81795ba500f81fae195a01a55cf11eb45cbeabc228777e222e3a9ebedd2f7efcf0d6c642f5b733", 0x4b}, {&(0x7f00000008c0)="ec0ab3cfea9a208529cf177b0a383bc093f16d68328a4a9b598f0d2d5909f11d11aa3d8928211fb2eaeaae331d9a36b5ff0f7e4f7b5c25ca47bdcd3ef83b517ddd18bc3aff2202f0f871fbc3e962bb856e9be12b06d03791ca9a0add8371fc96b3b96c2ec82c86a9aca3761997053d085411592352ce6599fe9ecbbb2b355aeab8519b2f5fd73c1aaf57d5627d6dd908a9fb0334c879d6874294e7e1ec9feab3fec05c3ac5de7c5b3988046a4e77f74e7919714390b6e55d1488d9b190692de2d225b23ca8", 0xc5}, {&(0x7f0000000800)="517f9d42c14aa36ee65a36bf8ee851d67d3688859d3081bc96161df4fb1c0b374bb90e374f3d19e5aec034611a87969a959fb5fcc0a01476471bd9edf07cda4e6961e7fb6c83fa18c33d95e0b19878a35f1ed4d4ddbff53420c73a7c66a40a220916d7d5019328", 0x67}, {&(0x7f00000009c0)="9a17f3839cc8d9217114a5b4684b9bd281d03a5753c39a283e81f19fe8b7a371e4f8dea0a77722681c37aa08f20007bd026a18c818bbba349f687d047c4222aca0d06962e822148c324cd993c758ef07b795f78690391988485cdbbb0d5ae8f2171776b6aeda0ec9dc9b9b835f9c85f139a326d3f5370b632c1a39ecd899df30fe14b4bf866d5c466b78a4e1844a1b2b5f6fef6fb2a752e036259ae8215d3abcd1ca825c1ad28df4c05cae42396803347c84f6bb71f485a7e0d4e046f35483accd517941bb3d64892bfb4e07e2605e529ee93452", 0xd4}, {&(0x7f0000000ac0)="47348102b4b6aec2440fcbf22063f87ad109b7", 0x13}, {&(0x7f0000000c00)="aa0bfd9a64fc463712431f1f2ec657b6d03f39a53819e71d65c70a0ef6841aed29d7e0c5b8cb4f41488a0299ef37d4ee060a7802ffcd2a2d1a0690e071e08665d5c25740cf92ff26d14639e32770e6c886f1752535f56363724ac862f9726f228eec5f35c8f18915d30cc2bf50e71049c6676e5633f21d51d8f7e6c641972c39ea73a42d163a78a7a64b0a8cc5fd5708ce37671d3f745e64c0d21641af8c36828b524b5ec7403a683211d35f027de2ead95c754eb13e5508b1451d9b615bf4d3daaed5ec30a1be76c92a62573dca", 0xce}, {&(0x7f0000001a80)="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", 0x1000}], 0x8}}], 0x1, 0x931766f6119aedd5)
r7 = socket(0x2b, 0x1, 0x0)
listen(r7, 0x0)
setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
accept4$nfc_llcp(r7, 0x0, 0x0, 0x0)
shutdown(r6, 0x1)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x4040001)
recvmsg$unix(r10, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1)
recvmsg$unix(r11, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x40010120)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
sendmsg$inet(r8, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNGETSNDBUF(r12, 0x800454d3, &(0x7f00000003c0))
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000140)={0x1000, 0xb88, 0x2, 0x8, 0x5, 0xbad, 0x9, 0x7f}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)

922.042645ms ago: executing program 1 (id=8220):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="080005"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x43c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x16}}}}, [@NL80211_ATTR_FRAME={0x38e, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x6dd2}, @device_a, @initial, @initial, {0x3, 0x7}, "", @void, @value=@ver_80211n={0x0, 0x3c, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x20, 0x33, @ctrl_frame=@ba={{}, {0x3}, @device_a, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x9}, {0x1, 0xa}, "93c5d90e3c9d454a"}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x7}, @device_b}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xff}, @device_b, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4008090}, 0x4040810)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000844)

921.715622ms ago: executing program 4 (id=8221):
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) (async)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600)
r2 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb9", 0x3a)
recvfrom$phonet(r2, &(0x7f0000000380)=""/165, 0xa5, 0x2000, &(0x7f0000000040)={0x23, 0xdd, 0x6, 0x98}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c31628470000d3408a9b1218000280140000", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$sock(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1000}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1000})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020751ff", @ANYRES32=r11, @ANYBLOB="0801"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000002"], 0x78) (async)
write$tun(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000002"], 0x78)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000002900030400"/20, @ANYRES32=0x0, @ANYBLOB="f7e8010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=0x0, @ANYBLOB="da8094bc342b6642489756d92f58393f582a0938812a5e62e7637464ab7a43139d5b910d7475fd0c87c38cf2c5f9662c56184e0b1b632318fbbe506dcdf50d7188d3910937ff7e948938f92d51edb78f5ef569796ff679dc965236ca3e93884a3ce121a7434a5cfde56224257ff06f3d21623f8e1b"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000002900030400"/20, @ANYRES32=0x0, @ANYBLOB="f7e8010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=0x0, @ANYBLOB="da8094bc342b6642489756d92f58393f582a0938812a5e62e7637464ab7a43139d5b910d7475fd0c87c38cf2c5f9662c56184e0b1b632318fbbe506dcdf50d7188d3910937ff7e948938f92d51edb78f5ef569796ff679dc965236ca3e93884a3ce121a7434a5cfde56224257ff06f3d21623f8e1b"], 0x3c}}, 0x0)
getsockopt$inet_mptcp_buf(r3, 0x11c, 0x1, 0x0, &(0x7f0000000140)) (async)
getsockopt$inet_mptcp_buf(r3, 0x11c, 0x1, 0x0, &(0x7f0000000140))

920.481238ms ago: executing program 3 (id=8222):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000000540)=0x2000000, 0x4)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000500)=0x2, 0x4)
listen(r0, 0x0)

836.160261ms ago: executing program 1 (id=8223):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}}, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000b00)="79dfe426", 0x4}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000000801080000000000000000020000060c000480080001400000000200161088faa60cb1cf8f02f2f49ba1e2921dca182c79607f00000000000000b369cef713c09dd7b6c7b1659fb98bb06b881b0024eb9285e3ad3ddd46aceb2c009a1c5882ea16407755a019908b95eca05c09f0153c0a16674ed7e3"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r7, {0x1, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x44010)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYRESDEC=r0], 0x48}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0xfffffffffffffe31, r9, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x30}, 0x1, 0x0, 0x0, 0x8d0}, 0x8002)

756.808142ms ago: executing program 0 (id=8224):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x4, [@struct={0x2, 0x0, 0x0, 0x4, 0x1, 0x80}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x6}}, @typedef={0xb, 0x0, 0x0, 0x8, 0x4}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x5}, @enum={0x8, 0x6, 0x0, 0x6, 0x4, [{0xd}, {0xd, 0x1000}, {0x0, 0x80000001}, {0x1, 0xa2}, {0x4, 0x5}, {0x2, 0x80}]}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x3}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x30, 0x0, 0x6e, 0x7}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000300)=""/78, 0xb0, 0x4e, 0x0, 0x6}, 0x28)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c, '\x00', 0x0, 0x25, r0}, 0x94)
r2 = socket$inet6(0xa, 0x3, 0x3)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r1, r3, 0x25, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000108000085392045000000000000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r3, r0, 0x0, 0x3, 0x2}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r7=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x7fffffff, '\x00', r7, r0, 0x0, 0x2, 0x2}, 0x50)

534.778983ms ago: executing program 1 (id=8225):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000080)=""/12}, 0x20)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @multicast, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x3, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x44, 0x2}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x10, 0x0, 0x65, 0xd0a, 0x2c, 0x1, 0x0, @multicast1, @loopback}, "d9f913cd180e6a58"}}}}}, 0x0)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
getsockopt$inet_tcp_buf(r4, 0x6, 0x15, 0x0, &(0x7f0000000100))
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x6, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r10, 0x1, 0x70bd2b, 0x1, {{}, {}, {0x8, 0x2, 0xffff3a70}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4044000)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0000000}]}, 0xa0}, 0x1, 0xfffff000}, 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r11, 0x84, 0x15, &(0x7f0000000200)={0x5}, 0x1)

526.510696ms ago: executing program 4 (id=8226):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000ff0200000000000000000000000000010004000000000000071800000000040000d704"], 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x1a, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000fc0)='syzkaller\x00', 0x8}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0)
recvmmsg(r3, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@ipv6_newroute={0x3c, 0x18, 0x309, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0xfd, 0x0, 0xc8, 0x3}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10004044)
accept4(r1, 0x0, &(0x7f0000000080), 0x80000)

492.010279ms ago: executing program 1 (id=8227):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00e\x00\a'], 0x20}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newsa={0x13c, 0x10, 0x400, 0x20, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x3c, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x9, 0x2000000000000000, 0x4, 0x20000000008, 0x7}, {0x100000001, 0x8, 0xcc}, {0xf6}, 0x0, 0x4, 0x2, 0x0, 0x1, 0x8}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xfffffffffffffd83, 0xc0}}]}, 0x13c}}, 0x40884)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x4c80, 0x4)
sendmmsg$unix(r3, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x20000010}}], 0x1, 0x3400c0c4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_FLOW_PLIMIT={0x8}]}}]}, 0x48}}, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000020100800c0001"], 0x114}], 0x1}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r8, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_PMKID={0x14, 0x55, "5766f03c650dd0dd14774340fd2a7afb"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x37}]}, 0x38}}, 0x4000800)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
socket$isdn(0x22, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a0000005c9fdaeb7bae0c1ed924d6446f4d35e4a5d7387afbfe797e47aa71841290b7", @ANYRES32=0x0, @ANYBLOB="14000600"/20], 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="7989"], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f00000004c0), &(0x7f0000000500)=0x14)

362.128815ms ago: executing program 4 (id=8228):
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002", @ANYRES8=r0, @ANYRESHEX=0x0, @ANYRES8=r0, @ANYRES32=r0], 0xc8}, 0x1, 0x0, 0x0, 0x4c0c8}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002", @ANYRES8=r0, @ANYRESHEX=0x0, @ANYRES8=r0, @ANYRES32=r0], 0xc8}, 0x1, 0x0, 0x0, 0x4c0c8}, 0x0)

361.843793ms ago: executing program 0 (id=8229):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
r1 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r1, 0x0, 0x43, 0x0, &(0x7f0000000100)={0x2, 0x0, @broadcast, 0x4}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000006c0)=0x40, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000800)={'vxcan1\x00', <r4=>0x0})
bind$can_raw(r3, &(0x7f0000000840)={0x1d, r4}, 0x10)
close(0x4)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0x9, 0x0, 0x0, @u64}]}, 0x24}}, 0x0)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}], 0x1, 0x10002, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000880)=0xbc, 0x4)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100b000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

338.478397ms ago: executing program 2 (id=8230):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, &(0x7f0000000100))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000043000000", 0xfe60)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000002480)=ANY=[@ANYBLOB="000086dd0000040000000000000060fc03000ff82c00fe8000000000000000000000000000aaff0200000000000000000000000000012b0b0000000000000401"], 0x102e)

336.748672ms ago: executing program 1 (id=8231):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x2, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x59)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x303, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r4}, 0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

213.471102ms ago: executing program 4 (id=8232):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f880000004d000f"], 0x90}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300)

82.202729ms ago: executing program 2 (id=8233):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
recvmmsg(r5, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2001, 0x0) (async)
recvmmsg(r5, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2001, 0x0)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) (async)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
syz_init_net_socket$ax25(0x3, 0x8ea61f84dd3a7d88, 0x7) (async)
r6 = syz_init_net_socket$ax25(0x3, 0x8ea61f84dd3a7d88, 0x7)
bind$ax25(r6, &(0x7f0000000380)={{0x3, @bcast, 0x2}, [@null, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7f}}, @filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_POLICE={0x50, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x1000, 0x9, 0x9, {0xcd, 0x2, 0x2270, 0x9, 0x800, 0xfffffff7}, {0x4, 0x1, 0x7, 0x6, 0x0, 0x6}, 0x0, 0x6, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x68}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xffff, @default, @netrom={'nr', 0x0}, 0x2, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00000000000000000700000000000000007f000001000000000000000000000000000000d8"], 0x38}}, 0x0)

81.931377ms ago: executing program 0 (id=8234):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x10000)

0s ago: executing program 0 (id=8235):
r0 = socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000140), &(0x7f00000001c0)='%+9llu \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x7, &(0x7f00000002c0)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r2, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

kernel console output (not intermixed with test programs):

ad for wq "bond8": -EINTR
[  643.526008][ T3742] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  643.559857][ T3742] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  643.571374][ T3742] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.700118][ T3742] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  643.717084][ T3742] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  643.732877][ T3742] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.846160][T28536] netlink: 'syz.2.6145': attribute type 16 has an invalid length.
[  643.871357][T28536] netlink: 'syz.2.6145': attribute type 3 has an invalid length.
[  644.270504][T28457] chnl_net:caif_netlink_parms(): no params data found
[  644.281512][T28567] xt_nfacct: accounting object `\�$�9Z�M#���mU�|�^c�\F9YⳈ���' does not exist
[  644.378807][ T5850] Bluetooth: hci0: command tx timeout
[  644.478690][T28580] netlink: 'syz.2.6154': attribute type 16 has an invalid length.
[  644.638054][T28589] netlink: 'syz.1.6156': attribute type 1 has an invalid length.
[  644.874297][ T3742] bond8 (unregistering): (slave gretap1): Releasing active interface
[  645.402382][ T3742] ` (unregistering): (slave bond_slave_0): Releasing backup interface
[  645.413410][ T3742] ` (unregistering): (slave bond_slave_1): Releasing backup interface
[  645.424552][ T3742] ` (unregistering): Released all slaves
[  645.585634][ T3742] bond1 (unregistering): Released all slaves
[  645.739562][ T3742] bond2 (unregistering): Released all slaves
[  645.891382][ T3742] bond3 (unregistering): Released all slaves
[  646.039635][ T3742] bond4 (unregistering): Released all slaves
[  646.077084][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  646.085453][    C1] lec:lec_tx_timeout: lec0
[  646.090708][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  646.214361][ T3742] bond5 (unregistering): Released all slaves
[  646.368528][ T3742] bond6 (unregistering): Released all slaves
[  646.463454][ T5850] Bluetooth: hci0: command tx timeout
[  646.531357][ T3742] bond7 (unregistering): Released all slaves
[  646.544574][ T3742] bond8 (unregistering): Released all slaves
[  646.557853][ T3742] bond9 (unregistering): Released all slaves
[  646.570405][ T3742] bond10 (unregistering): Released all slaves
[  646.584209][ T3742] bond11 (unregistering): Released all slaves
[  646.705009][T28596] __nla_validate_parse: 4 callbacks suppressed
[  646.705028][T28596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6158'.
[  646.767849][T28599] netlink: 'syz.0.6158': attribute type 7 has an invalid length.
[  646.775804][T28599] netlink: 'syz.0.6158': attribute type 8 has an invalid length.
[  646.807436][T28589] 8021q: adding VLAN 0 to HW filter on device bond2
[  646.853951][T28599] ip6gre1: entered allmulticast mode
[  646.923484][T28596] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  646.934288][T28596] batman_adv: batadv0: Removing interface: batadv_slave_0
[  646.958026][T28596] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  646.967081][T28596] batman_adv: batadv0: Removing interface: batadv_slave_1
[  647.033227][ T3742] : left promiscuous mode
[  647.160891][ T3742] tipc: Disabling bearer <udp:s>
[  647.185212][T28612] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6161'.
[  647.197075][ T3742] tipc: Left network mode
[  647.267814][T28457] bridge0: port 1(bridge_slave_0) entered blocking state
[  647.302757][T28457] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.314790][T28457] bridge_slave_0: entered allmulticast mode
[  647.325829][T28457] bridge_slave_0: entered promiscuous mode
[  647.378953][T28628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6165'.
[  647.392677][T28608] syzkaller1: entered promiscuous mode
[  647.407075][T28608] syzkaller1: entered allmulticast mode
[  647.420829][T28457] bridge0: port 2(bridge_slave_1) entered blocking state
[  647.450528][T28457] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.461099][T28457] bridge_slave_1: entered allmulticast mode
[  647.469985][T28457] bridge_slave_1: entered promiscuous mode
[  647.623852][T28642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6167'.
[  647.645845][T28634] C: renamed from team_slave_0 (while UP)
[  647.655567][T28634] netlink: 'syz.1.6166': attribute type 1 has an invalid length.
[  647.667873][T28634] net_ratelimit: 46 callbacks suppressed
[  647.667892][T28634] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  647.812583][T28457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  647.884124][T28656] netlink: 'syz.2.6170': attribute type 8 has an invalid length.
[  647.904706][T28649] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6167'.
[  647.944646][T28457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  648.055559][T28664] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6172'.
[  648.094905][T28664] netlink: 'syz.1.6172': attribute type 9 has an invalid length.
[  648.103568][T28664] netlink: 'syz.1.6172': attribute type 11 has an invalid length.
[  648.128007][T28664] netlink: 'syz.1.6172': attribute type 12 has an invalid length.
[  648.163823][T28675] x_tables: duplicate underflow at hook 1
[  648.177094][T28664] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.6172'.
[  648.308937][T28676] macvlan0: entered promiscuous mode
[  648.322648][T28457] team0: Port device team_slave_0 added
[  648.346060][T28683] netlink: 'syz.3.6177': attribute type 2 has an invalid length.
[  648.368133][T28683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6177'.
[  648.422005][T28457] team0: Port device team_slave_1 added
[  648.537753][ T5850] Bluetooth: hci0: command tx timeout
[  648.542832][T28694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6179'.
[  648.613929][T28457] batman_adv: batadv0: Adding interface: batadv_slave_0
[  648.637056][T28457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.739012][T28457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  648.789229][T28457] batman_adv: batadv0: Adding interface: batadv_slave_1
[  648.823738][T28457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.852558][T28457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  648.958089][ T3742] hsr_slave_0: left promiscuous mode
[  649.052105][ T3742] veth0_macvtap: left promiscuous mode
[  649.071385][ T3742] veth1_vlan: left promiscuous mode
[  649.076794][ T3742] veth0_vlan: left promiscuous mode
[  649.262632][ T3742] team0 (unregistering): Port device batadv0 removed
[  649.277271][T28734] sctp: [Deprecated]: syz.1.6190 (pid 28734) Use of struct sctp_assoc_value in delayed_ack socket option.
[  649.277271][T28734] Use struct sctp_sack_info instead
[  649.833726][ T3742] team0 (unregistering): Port device team_slave_1 removed
[  649.900470][ T3742] team0 (unregistering): Port device team_slave_0 removed
[  650.214394][T28745] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6194'.
[  650.435729][T28752] netlink: zone id is out of range
[  650.441739][T28752] netlink: zone id is out of range
[  650.448110][T28752] netlink: zone id is out of range
[  650.453283][T28752] netlink: get zone limit has 4 unknown bytes
[  650.479189][T28721] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  650.479673][T28727] 8021q: VLANs not supported on ip_vti0
[  650.495385][T28729] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  650.620436][ T5850] Bluetooth: hci0: command tx timeout
[  650.668283][T28457] hsr_slave_0: entered promiscuous mode
[  650.675036][T28457] hsr_slave_1: entered promiscuous mode
[  650.726204][T28457] debugfs: 'hsr0' already exists in 'hsr'
[  650.733224][T28457] Cannot create hsr debugfs directory
[  651.561527][T28803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  651.638623][ T3742] IPVS: stop unused estimator thread 0...
[  651.825805][T28819] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  651.897103][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms
[  651.905198][    C1] lec:lec_tx_timeout: lec0
[  651.910697][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  652.013931][T28822] syzkaller1: entered promiscuous mode
[  652.036259][T28822] syzkaller1: entered allmulticast mode
[  652.348516][T28844] __nla_validate_parse: 3 callbacks suppressed
[  652.348534][T28844] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6215'.
[  652.529718][T28457] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  652.580617][T28457] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  652.651581][T28457] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  652.664852][T28867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6222'.
[  652.694536][T28457] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  652.765119][T28873] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  652.878755][T28869] netlink: 'syz.1.6221': attribute type 10 has an invalid length.
[  652.908871][T28879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6222'.
[  652.947897][T28879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6222'.
[  653.010446][T28869] team0: Device veth0_macvtap failed to register rx_handler
[  653.038463][T28881] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  653.056842][T28892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6224'.
[  653.329581][T28457] 8021q: adding VLAN 0 to HW filter on device bond0
[  653.376093][T28457] 8021q: adding VLAN 0 to HW filter on device team0
[  653.406711][ T3083] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.413976][ T3083] bridge0: port 1(bridge_slave_0) entered forwarding state
[  653.472477][T23853] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.479691][T23853] bridge0: port 2(bridge_slave_1) entered forwarding state
[  653.561575][T28908] netlink: 'syz.0.6226': attribute type 1 has an invalid length.
[  653.630430][T28908] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6226'.
[  653.690268][T28915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6227'.
[  653.731708][T28917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6227'.
[  653.780192][T28915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6227'.
[  654.357483][T28457] 8021q: adding VLAN 0 to HW filter on device batadv0
[  654.634903][T28959] netlink: 'syz.1.6236': attribute type 10 has an invalid length.
[  654.708347][   T30] audit: type=1800 audit(1769577791.379:12): pid=28959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6236" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC043086C678153D44D8C4ABB0A4587D76313E9EE79D539C34C616E6D656D6F72792E6576656E7473 dev="tmpfs" ino=504 res=0 errno=0
[  654.816552][T28967] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6238'.
[  654.899667][T28969] x_tables: duplicate underflow at hook 4
[  655.141053][T28457] veth0_vlan: entered promiscuous mode
[  655.183792][T28457] veth1_vlan: entered promiscuous mode
[  655.239948][T28989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  655.274629][T28989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  655.306703][T28989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  655.321473][T28989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  655.343799][T28989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  655.363865][T28457] veth0_macvtap: entered promiscuous mode
[  655.376261][T28457] veth1_macvtap: entered promiscuous mode
[  655.496145][T28457] batman_adv: batadv0: Interface activated: batadv_slave_0
[  655.555284][T28457] batman_adv: batadv0: Interface activated: batadv_slave_1
[  655.573166][T29001] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  655.601514][T23847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  655.647622][T29011] bridge_slave_0: default FDB implementation only supports local addresses
[  655.677461][T23847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  655.686326][T23847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  655.714503][T23846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  655.958865][ T6803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  655.979922][ T6803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  656.063281][ T6803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  656.091304][ T6803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  656.593544][T29065] netlink: 'syz.4.6256': attribute type 2 has an invalid length.
[  656.916919][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  656.925120][    C1] lec:lec_tx_timeout: lec0
[  656.931201][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  657.119567][T29045] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  657.136575][T29045] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  657.231890][T29086] xt_socket: unknown flags 0x50
[  657.511779][T29045] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  657.529076][T29096] syzkaller0: entered promiscuous mode
[  657.534977][T29045] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  657.543311][T29096] syzkaller0: entered allmulticast mode
[  657.736774][T29045] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  657.777106][T29045] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  657.864351][T29114] __nla_validate_parse: 7 callbacks suppressed
[  657.864368][T29114] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6268'.
[  657.902309][T29112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6268'.
[  657.938734][T29045] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  657.946507][T29112] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.954262][T29112] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.974250][T29045] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  658.016195][T29112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6268'.
[  658.093721][T29112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6268'.
[  658.112663][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  658.124286][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  658.132702][T29112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6268'.
[  658.164121][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  658.184258][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  658.205463][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  658.241092][T17704] bond0: (slave syz_tun): Releasing backup interface
[  658.289157][T29136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6273'.
[  658.309883][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  658.319160][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  658.326617][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  658.336853][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  658.345683][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  658.371648][T29140] tipc: Failed to remove unknown binding: 66,0,0/0:473803751/473803752
[  658.404125][T29112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6268'.
[  658.503300][T29112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6268'.
[  658.583602][T29112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6268'.
[  658.665790][T29112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6268'.
[  658.876688][T29161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  659.446816][T29192] netlink: 'syz.1.6284': attribute type 1 has an invalid length.
[  659.499124][T29199] netlink: 'syz.0.6285': attribute type 1 has an invalid length.
[  659.510117][T29192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  659.517582][T29192] IPv6: NLM_F_CREATE should be set when creating new route
[  659.651554][T29199] bond1 (unregistering): Released all slaves
[  660.117519][T29072] chnl_net:caif_netlink_parms(): no params data found
[  660.321600][T29243] xt_TCPMSS: Only works on TCP SYN packets
[  660.336784][T29072] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.345888][T29072] bridge0: port 1(bridge_slave_0) entered disabled state
[  660.353744][T29072] bridge_slave_0: entered allmulticast mode
[  660.361863][T29072] bridge_slave_0: entered promiscuous mode
[  660.374339][T29072] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.381699][ T5850] Bluetooth: hci1: command tx timeout
[  660.404069][T29072] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.421813][T29072] bridge_slave_1: entered allmulticast mode
[  660.448698][T29072] bridge_slave_1: entered promiscuous mode
[  660.579535][T29072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  660.616630][T29072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  660.714201][T29072] team0: Port device team_slave_0 added
[  660.734589][T29072] team0: Port device team_slave_1 added
[  660.814001][T29072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  660.830438][T29072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  660.887302][T29072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  660.903286][T29072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  660.914732][T29072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  660.942998][T29072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  661.115453][T29072] hsr_slave_0: entered promiscuous mode
[  661.145206][T29072] hsr_slave_1: entered promiscuous mode
[  661.162512][T29072] debugfs: 'hsr0' already exists in 'hsr'
[  661.176856][T29072] Cannot create hsr debugfs directory
[  661.258271][T29289] netlink: 'syz.0.6305': attribute type 1 has an invalid length.
[  661.346057][T29289] 8021q: adding VLAN 0 to HW filter on device bond1
[  661.443826][T29285] bond1: (slave ip6gretap1): making interface the new active one
[  661.480348][T29285] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  661.573455][T29289] veth3: entered promiscuous mode
[  661.602858][T29289] bond1: (slave veth3): Enslaving as an active interface with a down link
[  661.664826][T29302] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  661.947689][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  661.955798][    C1] lec:lec_tx_timeout: lec0
[  661.961272][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  662.181873][T29072] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  662.198333][T29072] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.442809][T29072] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  662.453926][T29072] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.458048][ T5850] Bluetooth: hci1: command tx timeout
[  662.521509][T29359] netlink: 'syz.4.6321': attribute type 1 has an invalid length.
[  662.550645][T29359] netlink: 'syz.4.6321': attribute type 2 has an invalid length.
[  662.568453][T29357] netlink: 'syz.4.6321': attribute type 1 has an invalid length.
[  662.587724][T29357] netlink: 'syz.4.6321': attribute type 2 has an invalid length.
[  662.675110][T29072] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  662.700513][T29072] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.751873][T29352] tipc: Invalid UDP bearer configuration
[  662.751918][T29352] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  662.896647][T29072] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  662.929648][T29072] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.096741][T29370] __nla_validate_parse: 15 callbacks suppressed
[  663.096761][T29370] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6323'.
[  663.308939][T29395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6328'.
[  663.367506][T29399] netlink: 'syz.1.6326': attribute type 4 has an invalid length.
[  663.455750][T29399] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6326'.
[  663.503208][T29072] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  663.542335][T29072] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  663.571592][T29072] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  663.626225][T29072] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  663.765616][T29072] 8021q: adding VLAN 0 to HW filter on device bond0
[  663.814219][T29432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6334'.
[  663.850944][T29072] 8021q: adding VLAN 0 to HW filter on device team0
[  663.881530][ T4488] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.888785][ T4488] bridge0: port 1(bridge_slave_0) entered forwarding state
[  663.923924][ T4488] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.931162][ T4488] bridge0: port 2(bridge_slave_1) entered forwarding state
[  663.986550][T29434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6334'.
[  664.032998][T29432] Bluetooth: MGMT ver 1.23
[  664.063156][T29438] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.6335'.
[  664.305025][T29455] netlink: 'syz.3.6340': attribute type 1 has an invalid length.
[  664.313596][T29457] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6339'.
[  664.345576][T29455] netlink: 'syz.3.6340': attribute type 2 has an invalid length.
[  664.355043][T29457] gretap0: entered promiscuous mode
[  664.368595][T29455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6340'.
[  664.409201][T29457] gretap0: left promiscuous mode
[  664.471366][T29457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  664.537265][ T5850] Bluetooth: hci1: command tx timeout
[  664.747325][T29072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  664.910062][T29484] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  664.924428][T29484] bond10 (unregistering): Released all slaves
[  664.970313][T29486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6345'.
[  665.010727][T29072] veth0_vlan: entered promiscuous mode
[  665.129177][T29072] veth1_vlan: entered promiscuous mode
[  665.293647][T29072] veth0_macvtap: entered promiscuous mode
[  665.344722][T29072] veth1_macvtap: entered promiscuous mode
[  665.416285][T29520] xt_cgroup: path and classid specified
[  665.432994][T29072] batman_adv: batadv0: Interface activated: batadv_slave_0
[  665.480994][T29072] batman_adv: batadv0: Interface activated: batadv_slave_1
[  665.508732][ T3742] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  665.525116][ T3742] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  665.542401][ T3742] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  665.555246][ T3742] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  665.772564][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  665.824303][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  665.939251][ T3742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  665.958770][T29537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  665.962297][ T3742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.002971][T29543] validate_nla: 2 callbacks suppressed
[  666.002988][T29543] netlink: 'syz.4.6358': attribute type 13 has an invalid length.
[  666.017426][T29543] netlink: 'syz.4.6358': attribute type 58 has an invalid length.
[  666.039400][T29543] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6358'.
[  666.611198][T29578] netlink: 'syz.0.6362': attribute type 3 has an invalid length.
[  666.622054][ T5846] Bluetooth: hci1: command tx timeout
[  666.635223][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  666.643165][T29578] netlink: 'syz.0.6362': attribute type 3 has an invalid length.
[  666.669491][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  666.669949][T29578] netlink: 'syz.0.6362': attribute type 3 has an invalid length.
[  666.691387][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  666.702859][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  666.710733][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  666.717933][T29578] netlink: 'syz.0.6362': attribute type 3 has an invalid length.
[  666.718012][T29578] netlink: 'syz.0.6362': attribute type 3 has an invalid length.
[  666.718070][T29578] netlink: 'syz.0.6362': attribute type 3 has an invalid length.
[  666.718126][T29578] netlink: 'syz.0.6362': attribute type 3 has an invalid length.
[  666.797338][T29578] netlink: 'syz.0.6362': attribute type 3 has an invalid length.
[  666.976936][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  666.985070][    C1] lec:lec_tx_timeout: lec0
[  666.990752][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  667.344427][T29598] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  667.381013][T29598] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  667.730524][   T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  667.756772][   T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.471489][   T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  668.507880][   T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.680374][   T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  668.701079][   T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.767309][T29677] __nla_validate_parse: 4 callbacks suppressed
[  668.767327][T29677] netlink: 57 bytes leftover after parsing attributes in process `syz.4.6385'.
[  668.876993][ T5850] Bluetooth: hci4: command tx timeout
[  668.901619][   T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  668.926285][   T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.104945][T29704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6391'.
[  669.204224][T29579] chnl_net:caif_netlink_parms(): no params data found
[  669.743104][T29723] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6392'.
[  669.773363][T29723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6392'.
[  669.923877][T29731] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6395'.
[  669.934629][T29731] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  670.201380][T29751] nbd: must specify a size in bytes for the device
[  670.891625][   T60] bond6 (unregistering): (slave bridge6): Releasing backup interface
[  670.899869][   T60] bridge6 (unregistering): left promiscuous mode
[  670.947303][ T5850] Bluetooth: hci4: command tx timeout
[  671.142684][   T60] bond0 (unregistering): (slave bond3): Releasing backup interface
[  671.152622][   T60] bond0 (unregistering): Released all slaves
[  671.165379][   T60] bond1 (unregistering): Released all slaves
[  671.314845][   T60] bond2 (unregistering): Released all slaves
[  671.469840][   T60] bond3 (unregistering): Released all slaves
[  671.483279][   T60] bond4 (unregistering): Released all slaves
[  671.496126][   T60] bond5 (unregistering): Released all slaves
[  671.654977][   T60] bond6 (unregistering): Released all slaves
[  671.669838][   T60] bond7 (unregistering): Released all slaves
[  671.682267][   T60] bond8 (unregistering): Released all slaves
[  671.694810][   T60] bond9 (unregistering): Released all slaves
[  671.879428][T29579] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.888173][T29579] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.895900][T29579] bridge_slave_0: entered allmulticast mode
[  671.913351][T29579] bridge_slave_0: entered promiscuous mode
[  671.924362][T29579] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.932581][T29579] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.940395][T29579] bridge_slave_1: entered allmulticast mode
[  671.954278][T29579] bridge_slave_1: entered promiscuous mode
[  671.962165][   T60] �9: left promiscuous mode
[  671.997118][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  672.005253][    C1] lec:lec_tx_timeout: lec0
[  672.010805][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  672.056450][   T60] tipc: Left network mode
[  672.105974][T29773] IPVS: Unknown mcast interface: pimreg0
[  672.208491][T29579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  672.253201][T29788] vxcan1: tx drop: invalid da for name 0xfffffffffffffffe
[  672.261108][T29789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6406'.
[  672.309769][T29579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  672.428480][T29579] team0: Port device team_slave_0 added
[  672.591097][T29579] team0: Port device team_slave_1 added
[  672.845199][T29819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6414'.
[  672.866059][T29579] batman_adv: batadv0: Adding interface: batadv_slave_0
[  672.890499][T29579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  672.922771][T29579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  672.955580][T29579] batman_adv: batadv0: Adding interface: batadv_slave_1
[  672.975452][T29579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  673.017615][ T5850] Bluetooth: hci4: command tx timeout
[  673.034082][T29579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  673.433214][T29579] hsr_slave_0: entered promiscuous mode
[  673.459127][T29579] hsr_slave_1: entered promiscuous mode
[  673.472292][T29579] debugfs: 'hsr0' already exists in 'hsr'
[  673.488704][T29579] Cannot create hsr debugfs directory
[  673.521350][   T60] hsr_slave_0: left promiscuous mode
[  673.590907][   T60] hsr_slave_1: left promiscuous mode
[  673.670210][   T60] veth1_vlan: left allmulticast mode
[  673.675941][   T60] veth1_vlan: left promiscuous mode
[  673.689788][   T60] veth0_vlan: left promiscuous mode
[  673.951216][   T60] pim6reg (unregistering): left allmulticast mode
[  674.945698][T29856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6419'.
[  675.002500][T29866] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  675.050626][T29866] gretap1: entered promiscuous mode
[  675.074494][T29866] gretap1: entered allmulticast mode
[  675.097925][ T5850] Bluetooth: hci4: command tx timeout
[  675.232520][T29893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6428'.
[  675.306043][T29893] validate_nla: 46 callbacks suppressed
[  675.306063][T29893] netlink: 'syz.1.6428': attribute type 1 has an invalid length.
[  675.360933][T29893] netlink: 'syz.1.6428': attribute type 2 has an invalid length.
[  675.608749][T29913] netlink: 'syz.1.6431': attribute type 1 has an invalid length.
[  675.636679][T29913] netlink: 'syz.1.6431': attribute type 2 has an invalid length.
[  675.668247][T29915] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6430'.
[  675.820518][T29923] netlink: 'syz.2.6432': attribute type 29 has an invalid length.
[  675.842828][   T60] IPVS: stop unused estimator thread 0...
[  675.909090][T29930] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6432'.
[  675.925469][T29929] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6434'.
[  675.987837][T29923] netlink: 'syz.2.6432': attribute type 29 has an invalid length.
[  676.124809][T29944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6436'.
[  676.179893][T29949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6437'.
[  676.348188][T29962] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  676.428578][T29962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6441'.
[  676.791558][T29989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6445'.
[  676.819641][T29579] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  676.875731][T29579] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  676.905987][T29579] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  676.949565][T29579] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  677.017727][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  677.026024][    C1] lec:lec_tx_timeout: lec0
[  677.030874][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  677.177351][ T5850] Bluetooth: hci4: command tx timeout
[  677.232675][T29579] 8021q: adding VLAN 0 to HW filter on device bond0
[  677.304635][T29579] 8021q: adding VLAN 0 to HW filter on device team0
[  677.341318][ T3083] bridge0: port 1(bridge_slave_0) entered blocking state
[  677.348533][ T3083] bridge0: port 1(bridge_slave_0) entered forwarding state
[  677.381552][  T180] bridge0: port 2(bridge_slave_1) entered blocking state
[  677.388873][  T180] bridge0: port 2(bridge_slave_1) entered forwarding state
[  677.427932][T30027] Cannot find set identified by id 3 to match
[  677.686122][T30040] x_tables: duplicate underflow at hook 1
[  677.773019][T30044] netlink: 'syz.0.6458': attribute type 11 has an invalid length.
[  677.796457][T30044] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.6458'.
[  677.928713][T30044] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  677.960032][T29579] 8021q: adding VLAN 0 to HW filter on device batadv0
[  678.116029][T29579] veth0_vlan: entered promiscuous mode
[  678.185976][T30068] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  678.248662][T29579] veth1_vlan: entered promiscuous mode
[  678.357445][T29579] veth0_macvtap: entered promiscuous mode
[  678.382469][T29579] veth1_macvtap: entered promiscuous mode
[  678.435934][T29579] batman_adv: batadv0: Interface activated: batadv_slave_0
[  678.466309][T29579] batman_adv: batadv0: Interface activated: batadv_slave_1
[  678.532503][T23853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  678.565088][T23853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  678.609975][T23853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  678.621034][T30094] netlink: 'syz.1.6469': attribute type 1 has an invalid length.
[  678.626955][T23853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  678.741456][T30095] bond1: entered promiscuous mode
[  678.746599][T30095] bond1: entered allmulticast mode
[  678.771899][T30095] 8021q: adding VLAN 0 to HW filter on device bond1
[  678.932666][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.941051][T30111] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  678.958177][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  679.044673][T23846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.096995][T23846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  679.530585][T30146] x_tables: duplicate underflow at hook 1
[  679.635768][T30152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  679.760879][T30145] syzkaller0: entered promiscuous mode
[  679.767755][T30145] syzkaller0: entered allmulticast mode
[  682.056960][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  682.065081][    C1] lec:lec_tx_timeout: lec0
[  682.070559][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  682.369585][T30162] __nla_validate_parse: 4 callbacks suppressed
[  682.369603][T30162] netlink: 81 bytes leftover after parsing attributes in process `syz.4.6484'.
[  682.514334][T30192] netlink: 19 bytes leftover after parsing attributes in process `syz.3.6490'.
[  682.652438][T30198] netlink: 'syz.3.6494': attribute type 1 has an invalid length.
[  682.670366][T30198] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6494'.
[  682.767293][T30200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6492'.
[  682.940838][T30218] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6498'.
[  683.089192][T30225] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  683.190358][T30235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6502'.
[  683.280434][T30241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6503'.
[  683.501610][T30255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6507'.
[  683.593981][T30254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  683.649323][T30259] tipc: Started in network mode
[  683.658129][T30259] tipc: Node identity 1, cluster identity 4711
[  683.673348][T30259] tipc: Node number set to 1
[  683.804035][T30268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6509'.
[  683.813328][T30268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6509'.
[  683.840268][T30276] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  684.087216][T30291] netlink: 'syz.0.6518': attribute type 1 has an invalid length.
[  684.224036][T30291] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  684.327578][T30306] veth5: entered promiscuous mode
[  684.361283][T30306] bond2: (slave veth5): Enslaving as a backup interface with a down link
[  684.503542][T30306] netlink: 'syz.0.6518': attribute type 4 has an invalid length.
[  684.637196][T30324] netlink: 'syz.1.6526': attribute type 2 has an invalid length.
[  684.752257][T30324] Bluetooth: MGMT ver 1.23
[  685.010443][T30345] netlink: 'syz.0.6530': attribute type 1 has an invalid length.
[  685.040295][T30349] tipc: Enabled bearer <eth:macvlan1>, priority 2
[  685.118792][T30357] netlink: 'syz.2.6536': attribute type 3 has an invalid length.
[  685.216716][T30354] bond3: (slave bridge2): making interface the new active one
[  685.232073][T30345] netlink: 'syz.0.6530': attribute type 10 has an invalid length.
[  685.242082][T30354] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  685.298114][T30345] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  685.558142][T30387] netlink: 'syz.4.6542': attribute type 83 has an invalid length.
[  685.704473][T30391] netlink: 'syz.2.6544': attribute type 1 has an invalid length.
[  685.738454][T30391] netlink: 'syz.2.6544': attribute type 2 has an invalid length.
[  685.761505][T30394] syzkaller0: entered promiscuous mode
[  685.773273][T30394] syzkaller0: entered allmulticast mode
[  685.904666][T30405] openvswitch: netlink: Key type 8207 is out of range max 32
[  686.744348][ T3742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.773655][ T3742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.792433][T30460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.794440][T30455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.023431][T30477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.076921][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  687.084995][    C1] lec:lec_tx_timeout: lec0
[  687.090610][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  687.126580][T30482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.594941][T30513] __nla_validate_parse: 8 callbacks suppressed
[  687.594961][T30513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6574'.
[  687.637160][T30518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6577'.
[  687.655823][T30506] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.663550][T30506] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.860734][T30506] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  687.906435][T30506] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  688.115988][T30506] gretap1: left promiscuous mode
[  688.129672][T30506] gretap1: left allmulticast mode
[  688.145331][T30513] geneve2: entered promiscuous mode
[  688.161582][T30513] geneve2: entered allmulticast mode
[  688.196782][T30518] vxcan2: entered allmulticast mode
[  688.354165][T30551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6582'.
[  688.512900][T30558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6585'.
[  688.662600][T30573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6582'.
[  688.915793][T30580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  689.068030][T30596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6593'.
[  689.094159][T30596] validate_nla: 4 callbacks suppressed
[  689.094178][T30596] netlink: 'syz.2.6593': attribute type 6 has an invalid length.
[  689.126838][T30602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6594'.
[  689.351710][T30616] netlink: 'syz.3.6598': attribute type 10 has an invalid length.
[  689.360507][T30616] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6598'.
[  689.642896][T30631] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6602'.
[  689.739170][T30638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6603'.
[  690.908192][T30633] block nbd4: server does not support multiple connections per device.
[  690.928826][T30633] block nbd4: shutting down sockets
[  691.320231][T30717] netlink: 'syz.1.6620': attribute type 1 has an invalid length.
[  691.350599][T30717] netlink: 'syz.1.6620': attribute type 2 has an invalid length.
[  691.688243][T30738] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  691.812130][T30738] netlink: 'syz.4.6624': attribute type 1 has an invalid length.
[  692.207799][T30756] netlink: 'syz.4.6628': attribute type 5 has an invalid length.
[  692.407526][T30765] netlink: 'syz.4.6631': attribute type 29 has an invalid length.
[  692.432723][T30770] netlink: 'syz.4.6631': attribute type 64 has an invalid length.
[  692.450185][T30770] netlink: 'syz.4.6631': attribute type 4 has an invalid length.
[  692.505712][T30767] netlink: 'syz.4.6631': attribute type 29 has an invalid length.
[  692.856993][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms
[  692.865123][    C1] lec:lec_tx_timeout: lec0
[  692.871860][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  693.222719][T30790] 8021q: adding VLAN 0 to HW filter on device bond5
[  693.322637][T30795] bond5: (slave veth5): Enslaving as an active interface with a down link
[  693.396043][T30790] 8021q: adding VLAN 0 to HW filter on device batadv1
[  693.404009][T30790] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  693.424813][T30803] __nla_validate_parse: 8 callbacks suppressed
[  693.424833][T30803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6638'.
[  694.068434][T30833] vlan2: entered promiscuous mode
[  694.078017][T30833] vlan2: entered allmulticast mode
[  694.083522][T30833] hsr_slave_1: entered allmulticast mode
[  694.414322][T30861] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6648'.
[  694.428443][T30859] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6648'.
[  694.575177][T30869] macvtap0: Device is already in use.
[  694.782481][T30881] veth1_to_bond: mtu less than device minimum
[  694.805900][T30882] netlink: 'syz.4.6655': attribute type 11 has an invalid length.
[  694.840310][T30882] netlink: 'syz.4.6655': attribute type 11 has an invalid length.
[  694.861532][T30882] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6655'.
[  694.912864][T30887] bond2: entered allmulticast mode
[  694.919284][T30887] 8021q: adding VLAN 0 to HW filter on device bond2
[  695.060383][T30904] xt_nat: multiple ranges no longer supported
[  695.131810][T30906] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  695.141959][T30906] validate_nla: 2 callbacks suppressed
[  695.141976][T30906] netlink: 'syz.0.6664': attribute type 12 has an invalid length.
[  695.191452][T30906] bond4: option primary_reselect: invalid value (255)
[  695.202812][T30906] bond4 (unregistering): Released all slaves
[  695.475171][T30930] sctp: [Deprecated]: syz.0.6672 (pid 30930) Use of struct sctp_assoc_value in delayed_ack socket option.
[  695.475171][T30930] Use struct sctp_sack_info instead
[  695.721675][T30955] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6680'.
[  695.779989][T30949] can: request_module (can-proto-3) failed.
[  695.808521][T30949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  695.864143][T30962] syzkaller0: entered promiscuous mode
[  695.894332][T30962] syzkaller0: entered allmulticast mode
[  696.405843][T30996] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6690'.
[  696.425772][T30998] netlink: 'syz.0.6691': attribute type 1 has an invalid length.
[  696.467182][T30998] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6691'.
[  696.597653][T31005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6692'.
[  696.636109][T31011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6695'.
[  696.655319][T31011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  696.662637][T31011] IPv6: NLM_F_CREATE should be set when creating new route
[  696.728334][T31013] Cannot find set identified by id 0 to match
[  696.753178][T31005] bridge2: port 1(veth5) entered blocking state
[  696.770909][T31005] bridge2: port 1(veth5) entered disabled state
[  696.781854][T31005] veth5: entered allmulticast mode
[  696.791022][T31005] veth5: entered promiscuous mode
[  696.803237][T31013] bridge2: port 2(veth0_to_bond) entered blocking state
[  696.811027][T31013] bridge2: port 2(veth0_to_bond) entered disabled state
[  696.818609][T31013] veth0_to_bond: entered allmulticast mode
[  696.825722][T31013] veth0_to_bond: entered promiscuous mode
[  696.913746][T31024] tipc: Failed to remove unknown binding: 66,0,0/0:2453518667/2453518668
[  696.994529][T31024] tipc: Failed to remove unknown binding: 66,0,0/0:2453518667/2453518668
[  697.052169][T31036] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6701'.
[  697.146419][T31043] netlink: 'syz.4.6704': attribute type 1 has an invalid length.
[  697.181273][T31043] veth0: entered promiscuous mode
[  697.420340][T31057] gretap1: entered promiscuous mode
[  697.436387][T31057] gretap1: entered allmulticast mode
[  697.496703][T31065] openvswitch: netlink: Missing valid actions attribute.
[  697.514296][T31064] bond0: option ad_select: unable to set because the bond device is up
[  697.521218][T31065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  697.636505][T31070] netlink: 'syz.4.6712': attribute type 1 has an invalid length.
[  697.720421][T31077] netlink: 'syz.2.6716': attribute type 1 has an invalid length.
[  697.735072][T31073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  697.763771][T31073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  697.805616][T31073] bond0 (unregistering): Released all slaves
[  697.839938][T31085] netlink: 'syz.3.6718': attribute type 4 has an invalid length.
[  697.897914][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  697.905986][    C1] lec:lec_tx_timeout: lec0
[  697.911479][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  697.945475][T31085] netlink: 'syz.3.6718': attribute type 4 has an invalid length.
[  698.205643][T31091] syzkaller0: entered promiscuous mode
[  698.212785][T31091] syzkaller0: entered allmulticast mode
[  698.394660][T31117] syzkaller0: entered promiscuous mode
[  698.406222][T31117] syzkaller0: entered allmulticast mode
[  698.502337][T31123] syzkaller0: entered promiscuous mode
[  698.510811][T31123] syzkaller0: entered allmulticast mode
[  698.803542][T31136] openvswitch: netlink: Multiple metadata blocks provided
[  698.905367][T31136] __nla_validate_parse: 5 callbacks suppressed
[  698.905388][T31136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6731'.
[  700.013220][T31183] IPv6: NLM_F_CREATE should be specified when creating new route
[  700.058031][T31183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  700.065346][T31183] IPv6: NLM_F_CREATE should be set when creating new route
[  700.312325][T31193] syzkaller0: entered promiscuous mode
[  700.336250][T31197] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  700.347466][T31193] syzkaller0: entered allmulticast mode
[  700.354134][T31193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6743'.
[  700.549035][T31206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6746'.
[  700.724895][T31215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6749'.
[  700.734539][T31215] tc_dump_action: action bad kind
[  700.866064][T31222] netlink: 'syz.3.6751': attribute type 1 has an invalid length.
[  700.894706][T31220] dvmrp6: entered allmulticast mode
[  700.911367][T31222] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  700.923501][T31225] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6753'.
[  701.222924][T31237] veth0: entered promiscuous mode
[  701.350097][T31247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6755'.
[  701.570623][T31264] netlink: 'syz.0.6758': attribute type 4 has an invalid length.
[  701.750623][T31260] ip6gre1: entered promiscuous mode
[  701.770412][T31260] ip6gre1: entered allmulticast mode
[  701.978578][T31260] syzkaller0: entered promiscuous mode
[  702.008770][T31276] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6762'.
[  702.213020][ T5916] IPVS: starting estimator thread 0...
[  702.240617][T31287] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6765'.
[  702.262848][T31282] netlink: 'syz.4.6764': attribute type 4 has an invalid length.
[  702.332593][T31284] IPVS: using max 28 ests per chain, 67200 per kthread
[  702.923803][T31292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6766'.
[  702.942921][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  702.951106][    C1] lec:lec_tx_timeout: lec0
[  702.955692][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  704.411007][T31285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  704.593180][T31299] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6769'.
[  704.603928][T31304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6767'.
[  704.613956][T31304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6767'.
[  704.617630][T31299] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6769'.
[  704.623965][T31304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6767'.
[  704.644095][T31302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6771'.
[  704.653452][T31304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6767'.
[  704.663151][T31304] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6767'.
[  704.679416][T31305] netlink: 'syz.3.6770': attribute type 1 has an invalid length.
[  704.684394][T31299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6769'.
[  704.754392][T31305] bond4: entered promiscuous mode
[  704.760923][T31305] 8021q: adding VLAN 0 to HW filter on device bond4
[  704.849325][T31299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  704.863706][T31299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  704.881556][T31299] bond0 (unregistering): Released all slaves
[  704.926170][T31301] bond4: (slave bridge1): making interface the new active one
[  704.929634][T31311] "syz.1.6774" (31311) uses obsolete ecb(arc4) skcipher
[  704.935077][T31301] bridge1: entered promiscuous mode
[  704.948632][T31301] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  704.969890][T31316] netlink: 'syz.1.6774': attribute type 1 has an invalid length.
[  705.001593][T31315] syzkaller0: entered promiscuous mode
[  705.029888][T31315] syzkaller0: entered allmulticast mode
[  705.133128][T31331] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6776'.
[  705.251555][T31339] netlink: 'syz.2.6782': attribute type 1 has an invalid length.
[  705.835556][T31369] sctp: [Deprecated]: syz.2.6789 (pid 31369) Use of struct sctp_assoc_value in delayed_ack socket option.
[  705.835556][T31369] Use struct sctp_sack_info instead
[  706.628674][T31405] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  706.970348][T31424] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  706.982064][T31424] 8021q: VLANs not supported on ipvlan1
[  707.224169][T31446] netlink: 'syz.0.6812': attribute type 3 has an invalid length.
[  707.358261][T31455] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  707.554990][T31462] sctp: [Deprecated]: syz.1.6817 (pid 31462) Use of int in max_burst socket option deprecated.
[  707.554990][T31462] Use struct sctp_assoc_value instead
[  707.831882][T31490] netlink: 'syz.0.6825': attribute type 11 has an invalid length.
[  707.841363][T31490] netlink: 'syz.0.6825': attribute type 11 has an invalid length.
[  707.966920][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  707.975392][    C1] lec:lec_tx_timeout: lec0
[  707.981357][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  708.065744][T31506] netlink: 'syz.3.6830': attribute type 1 has an invalid length.
[  708.087606][T31506] netlink: 'syz.3.6830': attribute type 1 has an invalid length.
[  708.188471][T31508] syzkaller0: entered promiscuous mode
[  708.195219][T31508] syzkaller0: entered allmulticast mode
[  708.266973][T31513] 8021q: adding VLAN 0 to HW filter on device bond6
[  708.276299][T31513] bond5: (slave bond6): making interface the new active one
[  708.284816][T31513] bond5: (slave bond6): Enslaving as an active interface with an up link
[  710.466443][T31524] __nla_validate_parse: 14 callbacks suppressed
[  710.466467][T31524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6831'.
[  710.740441][T31547] syzkaller0: entered promiscuous mode
[  710.758168][T31547] syzkaller0: entered allmulticast mode
[  710.849980][T31558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6839'.
[  712.053733][T31649] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  712.126830][T31659] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  712.284868][T30109] IPVS: starting estimator thread 0...
[  712.285856][T31674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6862'.
[  712.302907][T31674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6862'.
[  712.384061][T31673] IPVS: using max 27 ests per chain, 64800 per kthread
[  712.445812][T31676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6864'.
[  712.483150][T31684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  712.744224][T31696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6870'.
[  712.820580][T31704] !
: renamed from dummy0 (while UP)
[  712.837934][T31702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6871'.
[  712.862199][T31703] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component
[  712.996892][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  713.004943][    C1] lec:lec_tx_timeout: lec0
[  713.010135][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  713.090449][T31717] netlink: 'syz.1.6872': attribute type 1 has an invalid length.
[  713.121881][T31717] netlink: 'syz.1.6872': attribute type 2 has an invalid length.
[  713.132483][T31719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6873'.
[  713.147991][T31717] netlink: 'syz.1.6872': attribute type 1 has an invalid length.
[  713.168024][T31717] netlink: 'syz.1.6872': attribute type 3 has an invalid length.
[  713.187451][T31717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6872'.
[  713.210270][T31722] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6874'.
[  713.276827][T31719] hsr_slave_0 (unregistering): left promiscuous mode
[  713.359537][T31732] netlink: 'syz.1.6876': attribute type 1 has an invalid length.
[  713.704972][T31746] syzkaller0: entered promiscuous mode
[  713.711135][T31746] syzkaller0: entered allmulticast mode
[  716.014187][T31771] __nla_validate_parse: 6 callbacks suppressed
[  716.014207][T31771] netlink: 34727 bytes leftover after parsing attributes in process `syz.3.6884'.
[  716.631905][T31822] netlink: 'syz.4.6901': attribute type 83 has an invalid length.
[  716.810149][T31832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6902'.
[  716.982773][T31836] netlink: 'syz.4.6902': attribute type 1 has an invalid length.
[  717.240964][T31852] syzkaller0: entered promiscuous mode
[  717.246579][T31852] syzkaller0: entered allmulticast mode
[  717.287522][T31847] tipc: Started in network mode
[  717.309828][T31847] tipc: Node identity 56863683e56f, cluster identity 4711
[  717.358170][T31847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  717.469987][T31852] tipc: Resetting bearer <eth:syzkaller0>
[  717.552378][T31852] tipc: Disabling bearer <eth:syzkaller0>
[  717.585488][T31865] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  717.600741][T31865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6910'.
[  717.689655][T31874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6913'.
[  717.719610][T31881] xt_HMARK: spi-set and port-set can't be combined
[  717.886127][T31890] netlink: 'syz.0.6916': attribute type 4 has an invalid length.
[  717.911151][T31890] netlink: 'syz.0.6916': attribute type 4 has an invalid length.
[  717.925101][T31893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6918'.
[  717.960254][T31893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6918'.
[  718.016923][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  718.025099][    C1] lec:lec_tx_timeout: lec0
[  718.029714][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  718.082425][T31898] netlink: 'syz.0.6920': attribute type 39 has an invalid length.
[  718.129712][T31898] bond0: (slave syz_tun): Releasing backup interface
[  718.538112][T31928] netlink: 'syz.3.6929': attribute type 83 has an invalid length.
[  718.552782][T31928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6929'.
[  718.568396][T31928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6929'.
[  718.607194][T31929] syzkaller1: entered allmulticast mode
[  719.835240][T31976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6939'.
[  719.862374][T31972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6940'.
[  719.955164][   T60] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  719.999944][   T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  720.037112][   T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  720.064335][   T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  720.185555][T31997] syzkaller1: entered promiscuous mode
[  720.193886][T31997] syzkaller1: entered allmulticast mode
[  720.293342][T32003] netlink: 'syz.3.6948': attribute type 1 has an invalid length.
[  720.302949][T32003] netlink: 'syz.3.6948': attribute type 2 has an invalid length.
[  720.340251][T32003] tipc: Failed to remove unknown binding: 66,0,0/1:3358845082/3358845083
[  720.359055][T32008] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  720.376607][T32003] tipc: Failed to remove unknown binding: 66,0,0/1:3358845082/3358845083
[  720.439325][T32015] netlink: 'syz.3.6948': attribute type 1 has an invalid length.
[  720.457797][T32015] netlink: 'syz.3.6948': attribute type 2 has an invalid length.
[  720.896301][T32058] netlink: 'syz.0.6961': attribute type 1 has an invalid length.
[  720.941484][T32059] netlink: 'syz.0.6961': attribute type 1 has an invalid length.
[  720.949441][T32051] 8021q: adding VLAN 0 to HW filter on device bond0
[  720.995669][T32059] 8021q: adding VLAN 0 to HW filter on device bond6
[  721.010899][T32052] macvlan0: entered promiscuous mode
[  721.025072][T32052] macvlan0: entered allmulticast mode
[  721.032012][T32052] bond0: entered allmulticast mode
[  721.039436][T32052] bond0: entered promiscuous mode
[  721.045917][T32052] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  721.055119][T32052] team0: Port device macvlan0 added
[  721.069723][T32064] vlan4: entered allmulticast mode
[  721.086988][T32064] bond6: entered allmulticast mode
[  721.124900][T32058] bond6: (slave gretap1): making interface the new active one
[  721.157505][T32058] gretap1: entered allmulticast mode
[  721.185295][T32058] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  721.499717][T32093] __nla_validate_parse: 45 callbacks suppressed
[  721.499730][T32093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6972'.
[  721.588586][T32097] syzkaller0: entered promiscuous mode
[  721.594108][T32097] syzkaller0: entered allmulticast mode
[  721.641438][T32099] Cannot find add_set index 0 as target
[  721.672640][T32100] Cannot find add_set index 0 as target
[  721.739230][T32107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6976'.
[  721.751164][T32107] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6976'.
[  721.823468][T32105] syzkaller0: entered promiscuous mode
[  721.837080][T32105] syzkaller0: entered allmulticast mode
[  723.045906][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  723.054176][    C1] lec:lec_tx_timeout: lec0
[  723.058857][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  724.665012][T32120] bond4: left promiscuous mode
[  724.670695][T32120] bridge1: left promiscuous mode
[  724.749571][T32141] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6982'.
[  724.901053][T32146] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6984'.
[  724.948085][T32146] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6984'.
[  724.994895][T32153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6985'.
[  725.022299][T32153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6985'.
[  725.301190][T32174] syzkaller0: entered promiscuous mode
[  725.307018][T32174] syzkaller0: entered allmulticast mode
[  725.392799][T32178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6990'.
[  725.651678][T32188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6995'.
[  725.762083][T32188] 8021q: adding VLAN 0 to HW filter on device bond7
[  726.723680][T32248] __nla_validate_parse: 1 callbacks suppressed
[  726.723702][T32248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7009'.
[  726.790164][T32242] netlink: 'syz.2.7006': attribute type 1 has an invalid length.
[  726.819964][T32255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7009'.
[  727.361564][T32287] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  727.381315][T32287] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  727.441373][T32287] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  727.455023][T32287] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  727.493846][T32287] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  727.513839][T32287] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  727.548655][T32287] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  727.564602][T32287] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  727.596481][T32287] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  727.605626][T32287] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  727.625738][T32296] netlink: 'syz.2.7021': attribute type 1 has an invalid length.
[  727.740996][T32301] syz.0.7022 uses old SIOCAX25GETINFO
[  727.890174][T32312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7025'.
[  727.963422][T32315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7027'.
[  728.067725][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  728.076015][    C1] lec:lec_tx_timeout: lec0
[  728.080842][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  728.216599][T32335] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7033'.
[  728.393107][T32347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7035'.
[  728.452272][T32350] nbd: must specify a size in bytes for the device
[  728.842413][T32373] netlink: 'syz.2.7044': attribute type 1 has an invalid length.
[  729.164092][T32395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7049'.
[  729.181234][T32395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7049'.
[  729.202698][T32395] gretap1: entered promiscuous mode
[  729.214465][T32395] gretap1: entered allmulticast mode
[  729.266341][T32401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7050'.
[  729.329866][T32402] netlink: 'syz.1.7051': attribute type 2 has an invalid length.
[  729.340733][T32402] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7051'.
[  729.662484][T32418] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:0
[  729.715324][T32421] 8021q: adding VLAN 0 to HW filter on device bond7
[  729.730383][T32415] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  729.934013][T32441] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  733.897009][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms
[  733.905247][    C1] lec:lec_tx_timeout: lec0
[  733.910489][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  738.917004][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  738.925049][    C1] lec:lec_tx_timeout: lec0
[  738.930453][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  743.937799][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  743.945837][    C1] lec:lec_tx_timeout: lec0
[  743.950560][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  748.957822][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  748.965921][    C1] lec:lec_tx_timeout: lec0
[  748.970642][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  753.977087][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  753.985128][    C1] lec:lec_tx_timeout: lec0
[  753.990325][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  756.321451][T32487] __nla_validate_parse: 3 callbacks suppressed
[  756.321471][T32487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7071'.
[  756.539614][T32507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7073'.
[  756.828120][T32525] netlink: 277 bytes leftover after parsing attributes in process `syz.1.7079'.
[  756.949872][T32509] udevd[32509]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  757.005038][T32509] udevd[32509]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  757.183113][T32544] xt_policy: output policy not valid in PREROUTING and INPUT
[  757.229318][T32544] net_ratelimit: 55 callbacks suppressed
[  757.229336][T32544] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  757.284582][T32552] xt_policy: output policy not valid in PREROUTING and INPUT
[  757.310416][T32551] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  757.442941][T32564] netlink: 'syz.1.7090': attribute type 1 has an invalid length.
[  757.552197][T32564] 8021q: adding VLAN 0 to HW filter on device bond7
[  757.839887][T32582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7094'.
[  757.888999][T32584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7094'.
[  757.986334][T32591] netlink: 'syz.2.7098': attribute type 1 has an invalid length.
[  758.029896][T32587] bridge_slave_0: left allmulticast mode
[  758.037821][T32587] bridge_slave_0: left promiscuous mode
[  758.043660][T32587] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.059121][T32587] bridge_slave_1: left allmulticast mode
[  758.064887][T32587] bridge_slave_1: left promiscuous mode
[  758.073023][T32587] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.084856][T32587] bond0: (slave bond_slave_0): Releasing backup interface
[  758.105464][T32587] bond0: (slave bond_slave_1): Releasing backup interface
[  758.128780][T32587] team0: Port device team_slave_0 removed
[  758.149020][T32587] team0: Port device team_slave_1 removed
[  758.155743][T32587] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  758.170711][T32587] batman_adv: batadv0: Removing interface: batadv_slave_0
[  758.181288][T32587] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  758.189076][T32587] batman_adv: batadv0: Removing interface: batadv_slave_1
[  758.199083][T32587] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  758.294539][T32595] erspan0: entered promiscuous mode
[  758.301915][T32595] erspan0: entered allmulticast mode
[  758.706064][T32615] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7104'.
[  758.899033][T32623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7107'.
[  758.910855][T32624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7107'.
[  758.966665][T32623] bond8: option xmit_hash_policy: invalid value (64)
[  758.976350][T32623] bond8 (unregistering): Released all slaves
[  758.997684][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  759.005713][    C1] lec:lec_tx_timeout: lec0
[  759.010479][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  759.046317][T32624] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  759.322443][T32643] bond0: (slave rose0): Error: Device can not be enslaved while up
[  759.350335][T32650] netlink: 'syz.2.7115': attribute type 7 has an invalid length.
[  759.389560][T32648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7114'.
[  759.416579][T32650] netlink: 'syz.2.7115': attribute type 7 has an invalid length.
[  759.416604][ T3083] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  759.486465][ T3083] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  759.521948][ T3083] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  759.534474][ T3083] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  759.598878][T32658] xt_limit: Overflow, try lower: 271964/0
[  759.891526][T32678] nbd: socks must be embedded in a SOCK_ITEM attr
[  759.992145][T32687] lo speed is unknown, defaulting to 1000
[  760.008366][T32687] lo speed is unknown, defaulting to 1000
[  760.014870][T32687] lo speed is unknown, defaulting to 1000
[  760.036375][T32687] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  760.115373][T32695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7131'.
[  760.123156][T32687] lo speed is unknown, defaulting to 1000
[  760.175039][T32687] lo speed is unknown, defaulting to 1000
[  760.215377][T32687] lo speed is unknown, defaulting to 1000
[  760.234647][T32687] lo speed is unknown, defaulting to 1000
[  760.272518][T32687] lo speed is unknown, defaulting to 1000
[  760.294695][T32687] lo speed is unknown, defaulting to 1000
[  760.336725][T32687] lo speed is unknown, defaulting to 1000
[  760.359564][T32687] lo speed is unknown, defaulting to 1000
[  760.400560][T32687] lo speed is unknown, defaulting to 1000
[  760.421328][T32719] netlink: 'syz.2.7138': attribute type 1 has an invalid length.
[  760.931351][ T3742] .: left allmulticast mode
[  760.951739][ T3742] .: left promiscuous mode
[  760.962364][ T3742] bridge0: port 2(.) entered disabled state
[  761.048850][T32750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  761.092290][ T3742] bridge_slave_0: left allmulticast mode
[  761.111504][ T3742] bridge_slave_0: left promiscuous mode
[  761.133759][ T3742] bridge0: port 1(bridge_slave_0) entered disabled state
[  761.528508][ T3742] bond4 (unregistering): (slave gretap2): Releasing active interface
[  761.555707][ T3742] bond9 (unregistering): (slave gretap4): Releasing active interface
[  761.638812][ T3742] bond3 (unregistering): (slave geneve2): Releasing active interface
[  762.063017][ T3742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  762.074403][ T3742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  762.086525][ T3742] bond0 (unregistering): Released all slaves
[  762.222881][ T3742] bond1 (unregistering): Released all slaves
[  762.372037][ T3742] bond2 (unregistering): Released all slaves
[  762.384480][ T3742] bond3 (unregistering): Released all slaves
[  762.398176][ T3742] bond4 (unregistering): Released all slaves
[  762.410841][ T3742] bond5 (unregistering): Released all slaves
[  762.425481][ T3742] bond6 (unregistering): Released all slaves
[  762.442655][ T3742] bond7 (unregistering): Released all slaves
[  762.457763][ T3742] bond8 (unregistering): Released all slaves
[  762.612061][ T3742] bond9 (unregistering): Released all slaves
[  762.633805][ T3742] bond10 (unregistering): Released all slaves
[  762.671237][  T304] syzkaller0: entered promiscuous mode
[  762.678783][  T304] syzkaller0: entered allmulticast mode
[  762.725671][  T314] __nla_validate_parse: 4 callbacks suppressed
[  762.725690][  T314] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7153'.
[  762.854987][  T319] netlink: 'syz.0.7155': attribute type 1 has an invalid length.
[  762.865341][ T3742] �9: left promiscuous mode
[  763.004281][  T319] 8021q: adding VLAN 0 to HW filter on device bond8
[  763.034236][ T3742] tipc: Disabling bearer <udp:s>
[  763.067786][ T3742] tipc: Left network mode
[  763.119655][  T320] syzkaller1: entered promiscuous mode
[  763.152694][  T320] syzkaller1: entered allmulticast mode
[  763.153215][  T339] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7160'.
[  763.256923][   T30] audit: type=1804 audit(1769577899.919:13): pid=340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7159" name="/newroot/221/cgroup.controllers" dev="tmpfs" ino=1147 res=1 errno=0
[  763.338529][   T30] audit: type=1800 audit(1769577899.919:14): pid=340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7159" name="cgroup.controllers" dev="tmpfs" ino=1147 res=0 errno=0
[  763.511383][  T356] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7165'.
[  763.571359][  T356] netlink: 15 bytes leftover after parsing attributes in process `syz.4.7165'.
[  763.634324][  T359] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  763.643413][  T363] netlink: 'syz.1.7168': attribute type 9 has an invalid length.
[  763.701991][  T356] bridge3: entered allmulticast mode
[  764.027598][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  764.035738][    C1] lec:lec_tx_timeout: lec0
[  764.041283][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  764.366329][ T3742] hsr_slave_0: left promiscuous mode
[  764.387745][ T3742] hsr_slave_1: left promiscuous mode
[  764.431164][ T3742] veth1_macvtap: left promiscuous mode
[  764.444778][ T3742] veth0_macvtap: left promiscuous mode
[  764.485362][  T405] netlink: 'syz.1.7175': attribute type 1 has an invalid length.
[  764.597071][  T409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7176'.
[  764.641120][  T416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7177'.
[  765.584912][  T416] �
: renamed from veth1_vlan (while UP)
[  765.753333][  T427] netlink: 'syz.2.7182': attribute type 12 has an invalid length.
[  765.853763][  T436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  766.206417][  T454] netlink: 'syz.1.7187': attribute type 1 has an invalid length.
[  766.215064][  T454] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7187'.
[  768.511468][  T446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  768.528027][  T448] syzkaller0: entered promiscuous mode
[  768.533557][  T448] syzkaller0: entered allmulticast mode
[  768.732711][  T465] netlink: 'syz.3.7188': attribute type 1 has an invalid length.
[  768.764455][  T465] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7188'.
[  768.765903][  T466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7190'.
[  768.938371][ T3742] IPVS: stop unused estimator thread 0...
[  768.964816][  T469] netlink: 300 bytes leftover after parsing attributes in process `syz.2.7192'.
[  768.974770][  T475] netlink: 'syz.0.7194': attribute type 1 has an invalid length.
[  769.057058][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  769.065138][    C1] lec:lec_tx_timeout: lec0
[  769.070258][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  769.265213][  T486] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.7198'.
[  769.277010][  T486] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7198'.
[  769.435702][  T493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7201'.
[  769.450744][  T497] xt_hashlimit: overflow, rate too high: 0
[  769.457454][  T493] openvswitch: netlink: Flow actions attr not present in new flow.
[  769.474978][  T498] xt_hashlimit: overflow, rate too high: 0
[  769.620199][  T507] syzkaller1: entered promiscuous mode
[  769.625723][  T507] syzkaller1: entered allmulticast mode
[  770.136455][  T536] netlink: 'syz.3.7211': attribute type 17 has an invalid length.
[  770.146428][  T535] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:64
[  770.165249][  T537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7213'.
[  770.168965][  T536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7211'.
[  770.229076][  T536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7211'.
[  770.291384][  T536] erspan0: entered promiscuous mode
[  770.320676][  T536] gretap0: entered promiscuous mode
[  770.334260][  T547] netlink: 'syz.0.7218': attribute type 32 has an invalid length.
[  770.351708][  T543] bond0: (slave rose0): Error: Device can not be enslaved while up
[  770.351827][  T547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7218'.
[  770.599040][  T547] bond9: Setting coupled_control to off (0)
[  770.838876][  T565] netlink: 'syz.4.7223': attribute type 1 has an invalid length.
[  771.044393][  T577] erspan0: entered allmulticast mode
[  771.240996][  T591] netlink: 'syz.4.7232': attribute type 1 has an invalid length.
[  771.330117][  T596] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  771.367984][  T596] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  771.378410][  T596] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  771.513678][  T605] netlink: 'syz.4.7236': attribute type 24 has an invalid length.
[  771.710484][  T581] lo speed is unknown, defaulting to 1000
[  771.930515][  T628] netlink: 'syz.3.7242': attribute type 1 has an invalid length.
[  771.939567][  T628] netlink: 'syz.3.7242': attribute type 1 has an invalid length.
[  772.750962][  T642] netlink: 'syz.3.7247': attribute type 5 has an invalid length.
[  773.034947][  T654] can: request_module (can-proto-0) failed.
[  773.625433][  T675] 8021q: VLANs not supported on ip6tnl0
[  773.651351][  T673] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  773.779773][  T680] sctp: [Deprecated]: syz.4.7257 (pid 680) Use of int in max_burst socket option deprecated.
[  773.779773][  T680] Use struct sctp_assoc_value instead
[  773.842736][  T671] lo speed is unknown, defaulting to 1000
[  774.041624][   T30] audit: type=1107 audit(1769577910.729:15): pid=692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�
WC�Y��M�Zx6C�4㔉�W��7�s&��'J~����΁���T���<3�W8-�.҂�H���Ԣ�s-��t�b�X!#��fz�x�4T]}A�⠥2Bh�}�~�ZCv�h�T>U�!0f4VLV�t8�i�
[  774.041624][   T30] X	K�}ğr:Vvx���S�d�oS��ʉlF�G�~iH}��st�M�bp���4z.�3'
[  774.077246][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  774.085328][    C1] lec:lec_tx_timeout: lec0
[  774.090137][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  774.193293][  T698] 
s5���: renamed from vlan1 (while UP)
[  774.279604][  T700] __nla_validate_parse: 22 callbacks suppressed
[  774.279624][  T700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7265'.
[  774.636344][  T710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7268'.
[  774.802204][  T724] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7272'.
[  774.822234][  T724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7272'.
[  774.846679][  T724] syzkaller0: entered promiscuous mode
[  774.853445][  T724] syzkaller0: entered allmulticast mode
[  774.947430][  T738] validate_nla: 2 callbacks suppressed
[  774.947450][  T738] netlink: 'syz.0.7276': attribute type 1 has an invalid length.
[  774.958833][  T741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7277'.
[  774.981079][  T741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7277'.
[  775.019237][  T741] vlan2: entered allmulticast mode
[  775.027940][  T741] mac80211_hwsim hwsim59 wlan0: entered allmulticast mode
[  775.088445][  T746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7278'.
[  775.209475][  T756] netlink: 'syz.2.7280': attribute type 7 has an invalid length.
[  775.352816][  T764] bond8 (unregistering): Released all slaves
[  779.907022][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  779.915075][    C1] lec:lec_tx_timeout: lec0
[  779.920406][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  784.926919][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  784.935045][    C1] lec:lec_tx_timeout: lec0
[  784.939810][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  785.177316][ T5846] Bluetooth: hci1: command 0x0406 tx timeout
[  789.946928][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  789.954981][    C1] lec:lec_tx_timeout: lec0
[  801.009359][  T775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7284'.
[  801.058198][  T783] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7288'.
[  801.209648][  T793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7291'.
[  801.412093][  T808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  801.434590][  T808] xt_TPROXY: Can be used only with -p tcp or -p udp
[  801.683842][  T826] pim6reg: entered allmulticast mode
[  801.696332][  T828] bridge5: entered promiscuous mode
[  801.702599][  T828] bridge5: entered allmulticast mode
[  801.709700][  T826] pim6reg: left allmulticast mode
[  801.931940][  T842] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  801.950033][  T842] netlink: 'syz.4.7308': attribute type 1 has an invalid length.
[  801.959684][  T842] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7308'.
[  801.994871][  T846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7311'.
[  802.100684][  T853] sctp: [Deprecated]: syz.4.7312 (pid 853) Use of struct sctp_assoc_value in delayed_ack socket option.
[  802.100684][  T853] Use struct sctp_sack_info instead
[  802.181774][  T860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7314'.
[  802.205665][  T860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7314'.
[  802.324497][  T869] netlink: 'syz.4.7317': attribute type 1 has an invalid length.
[  802.332812][  T869] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7317'.
[  802.392869][  T866] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  802.711705][  T893] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7321'.
[  802.819529][T23849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  802.836646][T23849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  802.866296][  T898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  802.884796][  T898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  803.090293][  T920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7331'.
[  803.483066][  T955] xt_CT: You must specify a L4 protocol and not use inversions on it
[  803.512543][  T951] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  804.145442][  T982] delete_channel: no stack
[  804.754295][ T1029] xt_ipcomp: unknown flags 1D
[  804.765001][ T1029] netlink: 'syz.1.7357': attribute type 21 has an invalid length.
[  804.794879][ T1029] netlink: 'syz.1.7357': attribute type 6 has an invalid length.
[  805.365613][ T1073] pim6reg1: entered promiscuous mode
[  805.383065][ T1073] pim6reg1: entered allmulticast mode
[  805.900697][ T1108] netlink: 'syz.1.7379': attribute type 1 has an invalid length.
[  805.984029][ T1108] 8021q: adding VLAN 0 to HW filter on device bond8
[  806.032744][T25710] lec:lec_start_xmit: lec0:No lecd attached
[  806.062242][ T1114] sctp: [Deprecated]: syz.4.7381 (pid 1114) Use of struct sctp_assoc_value in delayed_ack socket option.
[  806.062242][ T1114] Use struct sctp_sack_info instead
[  806.099796][ T1108] veth7: entered promiscuous mode
[  806.110501][ T1108] __nla_validate_parse: 8 callbacks suppressed
[  806.110522][ T1108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7379'.
[  806.200070][ T1124] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7385'.
[  806.210367][ T1124] nbd: couldn't find a device at index 0
[  806.220128][ T1124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7385'.
[  806.233952][ T1124] netlink: 'syz.3.7385': attribute type 1 has an invalid length.
[  806.243846][ T1124] netlink: 'syz.3.7385': attribute type 2 has an invalid length.
[  806.399944][ T1140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7392'.
[  806.469602][ T1145] wg1: entered promiscuous mode
[  806.474695][ T1145] wg1: entered allmulticast mode
[  806.745139][ T1164] netlink: 'syz.0.7397': attribute type 1 has an invalid length.
[  806.754859][ T1164] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7397'.
[  806.764678][ T1165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7400'.
[  806.764705][ T1165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7400'.
[  806.764737][ T1165] netlink: 'syz.3.7400': attribute type 3 has an invalid length.
[  806.843720][ T1172] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
[  806.959524][ T1188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7399'.
[  806.990421][ T1188] bond0: entered promiscuous mode
[  807.005867][ T1188] bond_slave_0: entered promiscuous mode
[  807.021024][ T1188] bond_slave_1: entered promiscuous mode
[  807.068959][ T1188] gretap0: entered promiscuous mode
[  807.102530][ T1188] debugfs: 'hsr1' already exists in 'hsr'
[  807.136785][ T1188] Cannot create hsr debugfs directory
[  807.156534][ T1188] hsr1: entered promiscuous mode
[  807.325882][ T1209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7409'.
[  807.411281][ T1214] xt_CT: No such helper "pptp"
[  807.688899][ T1231] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7413'.
[  808.084148][ T1269] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  808.448080][ T1293] netlink: 'syz.4.7437': attribute type 11 has an invalid length.
[  808.486500][ T1295] xt_bpf: check failed: parse error
[  808.681179][ T1314] IPVS: Error connecting to the multicast addr
[  808.821762][ T1326] netlink: 'syz.2.7447': attribute type 10 has an invalid length.
[  808.887757][ T1326] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  809.211626][ T1351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  809.214105][ T1349] macsec3: entered allmulticast mode
[  809.238877][ T1353] "syz.1.7456" (1353) uses obsolete ecb(arc4) skcipher
[  809.745927][ T1396] netlink: 'syz.0.7465': attribute type 16 has an invalid length.
[  809.763889][ T1396] netlink: 'syz.0.7465': attribute type 3 has an invalid length.
[  809.835349][ T1400] bridge3: port 1(veth1) entered blocking state
[  809.863371][ T1400] bridge3: port 1(veth1) entered disabled state
[  809.886144][ T1400] veth1: entered allmulticast mode
[  809.895083][ T1400] veth1: entered promiscuous mode
[  810.133311][ T1428] netlink: 'syz.2.7474': attribute type 12 has an invalid length.
[  810.411550][ T1448] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  810.892702][ T1478] syzkaller0: entered promiscuous mode
[  810.899238][ T1478] syzkaller0: entered allmulticast mode
[  811.053903][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  811.062003][    C1] lec:lec_tx_timeout: lec0
[  811.067813][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  811.904024][   T60] wlan1: Trigger new scan to find an IBSS to join
[  814.073181][ T1493] ip6gre0: Master is either lo or non-ether device
[  814.210650][ T1533] !
: renamed from dummy0 (while UP)
[  814.381510][ T1539] __nla_validate_parse: 15 callbacks suppressed
[  814.381531][ T1539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7504'.
[  814.450573][ T1541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7505'.
[  814.576092][ T1509] lo speed is unknown, defaulting to 1000
[  814.586506][ T1547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7508'.
[  814.599815][ T1547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7508'.
[  814.622245][ T1547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7508'.
[  814.691035][ T1547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7508'.
[  814.730793][ T1553] netlink: 'syz.1.7511': attribute type 1 has an invalid length.
[  814.795452][ T1558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7511'.
[  814.829641][ T1553] 8021q: adding VLAN 0 to HW filter on device bond9
[  814.843926][ T1553] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7511'.
[  814.862587][ T1553] vlan1: entered allmulticast mode
[  814.869797][   T12] wlan1: Trigger new scan to find an IBSS to join
[  814.876586][ T1553] veth0_to_bond: entered allmulticast mode
[  814.891530][ T1553] bond9: (slave vlan1): making interface the new active one
[  814.915519][ T1553] bond9: (slave vlan1): Enslaving as an active interface with an up link
[  814.932873][ T1569] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7514'.
[  814.958607][ T1570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7515'.
[  815.189967][ T1574] syzkaller0: entered promiscuous mode
[  815.195650][ T1574] syzkaller0: entered allmulticast mode
[  815.542702][ T1602] netlink: 'syz.1.7525': attribute type 1 has an invalid length.
[  816.087459][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  816.095577][    C1] lec:lec_tx_timeout: lec0
[  817.843815][ T1602] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  817.897568][T23849] wlan1: Trigger new scan to find an IBSS to join
[  818.070392][ T1630] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  818.818770][T23849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  819.102716][ T6277] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  819.123586][ T1680] netlink: 'syz.0.7543': attribute type 11 has an invalid length.
[  819.137044][ T6277] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  819.165685][ T6277] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  819.194975][ T1680] netlink: 'syz.0.7543': attribute type 11 has an invalid length.
[  819.211498][ T6277] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  819.540833][ T1704] __nla_validate_parse: 12 callbacks suppressed
[  819.540932][ T1704] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7552'.
[  820.359468][ T1754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7559'.
[  820.463438][ T1705] lo speed is unknown, defaulting to 1000
[  820.477970][ T1758] xt_nat: multiple ranges no longer supported
[  820.535501][ T1762] netlink: 'syz.4.7562': attribute type 1 has an invalid length.
[  820.561570][ T1762] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.7562'.
[  820.675624][ T1765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7563'.
[  820.690041][ T1766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7563'.
[  820.858634][ T1780] netlink: 'syz.4.7568': attribute type 1 has an invalid length.
[  820.929140][ T1785] xt_cgroup: xt_cgroup: no path or classid specified
[  820.959273][ T1781] veth7: entered promiscuous mode
[  821.005485][ T1780] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  821.055189][ T1793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7571'.
[  821.347930][ T1802] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7573'.
[  821.375080][ T1802] openvswitch: netlink: Flow key attr not present in new flow.
[  821.407468][ T1802] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 256
[  821.451740][ T1809] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7575'.
[  821.830156][ T1829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7578'.
[  821.960589][ T1847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7583'.
[  822.640266][ T1899] netlink: 'syz.3.7598': attribute type 10 has an invalid length.
[  822.729561][ T1900] netlink: 'syz.3.7598': attribute type 10 has an invalid length.
[  823.041493][ T1925] xt_bpf: check failed: parse error
[  823.062616][ T1925] bond0: Error: Cannot enslave bond to itself.
[  823.090696][ T1926] bond0: Error: Cannot enslave bond to itself.
[  823.228896][ T1934] netlink: 'syz.3.7608': attribute type 1 has an invalid length.
[  823.318848][ T1945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  823.360456][ T1934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  823.703628][ T1958] mac80211_hwsim hwsim57 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  824.418567][ T1985] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  824.434527][ T1985] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  824.443410][ T1985] gretap2: entered promiscuous mode
[  824.449551][ T1985] gretap2: entered allmulticast mode
[  824.751700][ T2005] netlink: 'syz.1.7624': attribute type 9 has an invalid length.
[  824.798279][ T2008] __nla_validate_parse: 6 callbacks suppressed
[  824.798297][ T2008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7627'.
[  824.825556][ T2008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7627'.
[  824.840032][ T2008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7627'.
[  824.953398][ T2019] syzkaller0: entered promiscuous mode
[  824.960529][ T2019] syzkaller0: entered allmulticast mode
[  825.096667][ T2027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7635'.
[  825.195128][ T2032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  825.543127][ T2059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7646'.
[  825.562200][ T2060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7646'.
[  825.871914][ T2088] IPVS: set_ctl: invalid protocol: 44 172.20.20.38:20004
[  825.897542][ T7872] wlan1: Trigger new scan to find an IBSS to join
[  825.995207][ T2090] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20002
[  826.003718][ T2090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  826.011126][ T2090] IPv6: NLM_F_CREATE should be set when creating new route
[  826.018404][ T2090] IPv6: NLM_F_CREATE should be set when creating new route
[  826.030546][ T2090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  826.116243][ T2101] netlink: 'syz.4.7660': attribute type 1 has an invalid length.
[  826.220537][ T2105] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  826.252580][ T2107] bond3: Unable to set peer notification delay as MII monitoring is disabled
[  826.264810][ T2107] bond3 (unregistering): Released all slaves
[  826.284032][ T6564] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  826.294458][ T2101] 8021q: adding VLAN 0 to HW filter on device bond2
[  826.343545][ T2105] veth7: entered promiscuous mode
[  826.366229][ T2105] bond2: (slave veth7): Enslaving as a backup interface with a down link
[  826.411036][ T7872] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  826.440733][ T2114] bond10: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  826.479776][ T2114] bond10 (unregistering): Released all slaves
[  827.204780][ T2158] geneve2: entered promiscuous mode
[  827.222208][ T6564] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 45559 - 0
[  827.236459][ T6564] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 45559 - 0
[  827.304181][ T6564] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 45559 - 0
[  827.319564][ T6564] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 45559 - 0
[  827.409973][ T2167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  827.791545][ T2190] bond10 (unregistering): Released all slaves
[  827.815894][ T2196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7692'.
[  827.832089][ T2197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  827.862731][ T2197] tipc: Disabling bearer <eth:syzkaller0>
[  827.895305][ T2200] netlink: 'syz.0.7693': attribute type 32 has an invalid length.
[  827.911141][ T2200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7693'.
[  827.998241][ T2204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7695'.
[  828.004035][ T2200] bond10: option coupled_control: invalid value (52)
[  828.071177][ T2200] bond10 (unregistering): Released all slaves
[  828.316130][ T2222] xt_TPROXY: Can be used only with -p tcp or -p udp
[  828.438924][ T2226] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7701'.
[  828.473193][ T2226] netlink: 'syz.3.7701': attribute type 1 has an invalid length.
[  828.937275][   T12] wlan1: Trigger new scan to find an IBSS to join
[  829.125012][ T2277] nftables ruleset with unbound set
[  829.342064][ T2290] netlink: 'syz.0.7721': attribute type 1 has an invalid length.
[  829.485890][ T2295] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  829.762608][ T2307] 8021q: adding VLAN 0 to HW filter on device bond10
[  829.772734][ T2307] bond10: entered promiscuous mode
[  829.779483][ T2307] bond0: (slave bond10): Enslaving as an active interface with an up link
[  829.869339][ T2320] __nla_validate_parse: 10 callbacks suppressed
[  829.869357][ T2320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7731'.
[  829.919635][ T2320] bond0: left allmulticast mode
[  829.928812][ T2320] bond0: left promiscuous mode
[  829.952862][ T2320] macvlan0: left promiscuous mode
[  829.999117][ T2331] netlink: 'syz.3.7733': attribute type 33 has an invalid length.
[  830.006942][ T2320] macvlan0: left allmulticast mode
[  830.025200][ T2320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7731'.
[  830.194799][ T2338] bridge0: port 2(bridge_slave_1) entered disabled state
[  830.221419][ T2349] netlink: 'syz.0.7739': attribute type 4 has an invalid length.
[  830.394594][ T2366] netlink: 'syz.4.7743': attribute type 1 has an invalid length.
[  830.471522][ T2368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7742'.
[  830.493796][ T2366] 8021q: adding VLAN 0 to HW filter on device bond3
[  830.549731][ T2357] netlink: 'syz.2.7740': attribute type 29 has an invalid length.
[  830.673842][ T2369] bond3: (slave ip6gretap2): making interface the new active one
[  830.695341][ T2369] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link
[  830.766775][ T2379] vlan2: entered allmulticast mode
[  830.793633][ T2379] geneve1: entered allmulticast mode
[  830.909736][ T2375] bond8: option min_links: invalid value (18446744073709551614)
[  830.918979][ T2375] bond8: option min_links: allowed values 0 - 2147483647
[  830.948503][ T2375] bond8 (unregistering): Released all slaves
[  830.990737][ T2384] netlink: 'syz.2.7740': attribute type 29 has an invalid length.
[  831.105758][ T2389] bridge0: port 1(bridge_slave_0) entered blocking state
[  831.113066][ T2389] bridge0: port 1(bridge_slave_0) entered forwarding state
[  831.172636][ T2389] bridge0: port 3(batadv1) entered blocking state
[  831.180772][ T2389] bridge0: port 3(batadv1) entered disabled state
[  831.203038][ T2389] batadv1: entered allmulticast mode
[  831.218199][ T2389] batadv1: entered promiscuous mode
[  831.238798][T26383] IPVS: starting estimator thread 0...
[  831.246784][ T2394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7749'.
[  831.327429][ T2395] IPVS: using max 33 ests per chain, 79200 per kthread
[  831.445579][ T2405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7754'.
[  831.535122][ T2405] bond10: option xmit_hash_policy: invalid value (64)
[  831.569549][ T2419] netlink: 'syz.2.7757': attribute type 1 has an invalid length.
[  831.593668][ T2405] bond10 (unregistering): Released all slaves
[  831.603979][ T2419] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7757'.
[  831.614874][ T2419] NCSI netlink: No device for ifindex 0
[  831.662782][ T2425] netlink: 'syz.4.7758': attribute type 1 has an invalid length.
[  831.671947][ T4488] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  831.672002][ T4488] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  831.748246][ T2424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7758'.
[  831.836166][ T2425] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  831.861419][ T2450] team0: Device ip6gre2 is of different type
[  831.904364][  T180] wlan1: Creating new IBSS network, BSSID a6:0b:c9:ba:8c:58
[  832.002051][ T2456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7766'.
[  832.106298][ T2465] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7769'.
[  832.140834][ T2467] netlink: 'syz.3.7768': attribute type 2 has an invalid length.
[  832.312811][ T2481] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7772'.
[  832.343899][T23853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  832.365357][T23853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  833.430825][ T2562] netlink: 'syz.4.7787': attribute type 5 has an invalid length.
[  833.579625][ T2562] veth9: entered promiscuous mode
[  833.584964][ T2562] veth9: entered allmulticast mode
[  833.622939][ T2571] syzkaller1: entered promiscuous mode
[  833.629047][ T2571] syzkaller1: entered allmulticast mode
[  833.767991][ T2587] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  833.788388][ T2587] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  834.290138][ T2641] netem: change failed
[  834.611285][ T2665] netlink: 'syz.0.7811': attribute type 1 has an invalid length.
[  834.755905][ T2675] 8021q: adding VLAN 0 to HW filter on device bond10
[  834.928381][ T2689] netlink: 'syz.4.7816': attribute type 1 has an invalid length.
[  834.936128][ T2689] __nla_validate_parse: 10 callbacks suppressed
[  834.936142][ T2689] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7816'.
[  835.189622][ T2697] syzkaller0: entered promiscuous mode
[  835.195217][ T2697] syzkaller0: entered allmulticast mode
[  835.238468][ T2678] lo speed is unknown, defaulting to 1000
[  835.267059][ T2705] netlink: 'syz.2.7819': attribute type 1 has an invalid length.
[  835.280234][ T2705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7819'.
[  837.543071][ T2716] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7822'.
[  837.690414][ T2722] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  837.735868][ T2726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7823'.
[  837.844670][ T2741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7827'.
[  837.888228][ T2722] syzkaller0: entered promiscuous mode
[  837.893728][ T2722] syzkaller0: entered allmulticast mode
[  837.903121][ T2743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7827'.
[  837.913672][ T2743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7827'.
[  837.917660][ T2722] tipc: Resetting bearer <eth:syzkaller0>
[  838.068959][ T2743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7827'.
[  838.134310][ T2721] tipc: Resetting bearer <eth:syzkaller0>
[  838.214711][ T2755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7829'.
[  838.229595][ T2755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7829'.
[  838.480375][ T2761] nbd: socks must be embedded in a SOCK_ITEM attr
[  840.535602][ T2721] tipc: Disabling bearer <eth:syzkaller0>
[  840.956448][ T2789] __nla_validate_parse: 1 callbacks suppressed
[  840.956467][ T2789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7838'.
[  840.992651][ T2789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7838'.
[  841.135024][ T2799] netlink: 'syz.1.7841': attribute type 3 has an invalid length.
[  841.144924][ T2799] netlink: 766 bytes leftover after parsing attributes in process `syz.1.7841'.
[  841.395968][ T2828] netlink: 'syz.0.7845': attribute type 10 has an invalid length.
[  841.436734][ T2828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7845'.
[  841.520034][ T2828] team0: Port device geneve0 added
[  841.707299][ T2856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7851'.
[  841.938119][ T2878] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7856'.
[  842.130092][ T2887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7859'.
[  844.525522][ T2893] syz_tun: entered promiscuous mode
[  844.535555][ T2895] tipc: Started in network mode
[  844.554401][ T2895] tipc: Node identity ac14140f, cluster identity 4711
[  844.585624][ T2895] tipc: New replicast peer: 255.255.255.255
[  844.599326][ T2895] tipc: Enabled bearer <udp:syz2>, priority 10
[  844.799593][ T2909] netlink: 'syz.3.7868': attribute type 2 has an invalid length.
[  844.812265][ T2909] netlink: 119 bytes leftover after parsing attributes in process `syz.3.7868'.
[  844.862826][ T2914] syzkaller0: entered promiscuous mode
[  844.887534][ T2914] syzkaller0: entered allmulticast mode
[  845.008718][ T2914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  845.045248][ T2910] tipc: Resetting bearer <eth:syzkaller0>
[  845.085297][ T2910] tipc: Disabling bearer <eth:syzkaller0>
[  845.247960][ T2946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  845.375600][ T2952] netlink: 'syz.3.7878': attribute type 9 has an invalid length.
[  845.384983][ T2954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7879'.
[  845.544277][ T2966] syzkaller1: entered promiscuous mode
[  845.556979][ T2966] syzkaller1: entered allmulticast mode
[  845.706410][ T2976] bond11: option arp_all_targets: invalid value (18446744073709551613)
[  845.731598][ T2976] bond11 (unregistering): Released all slaves
[  845.761134][T14338] tipc: Node number set to 2886997007
[  845.802398][ T2984] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  846.016183][ T2992] syzkaller0: entered promiscuous mode
[  846.029824][ T2992] syzkaller0: entered allmulticast mode
[  846.081777][ T3000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7892'.
[  846.165906][ T2997] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7892'.
[  846.179252][ T2997] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7892'.
[  846.205222][ T3000] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7892'.
[  846.219026][ T3000] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7892'.
[  846.230406][ T3006] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7892'.
[  846.299499][ T3006] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7892'.
[  846.338805][ T3000] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7892'.
[  846.338805][ T2997] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7892'.
[  846.483620][ T3026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7899'.
[  846.574141][ T3030] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  847.096759][ T3071] netlink: 'syz.4.7906': attribute type 1 has an invalid length.
[  847.138174][ T3071] netlink: 'syz.4.7906': attribute type 7 has an invalid length.
[  847.165752][ T3071] netlink: 'syz.4.7906': attribute type 8 has an invalid length.
[  847.402363][ T3071] veth0: entered promiscuous mode
[  847.447278][ T3095] netlink: 'syz.0.7911': attribute type 1 has an invalid length.
[  847.473934][ T3098] netlink: 'syz.1.7912': attribute type 1 has an invalid length.
[  847.481856][ T3098] netlink: 'syz.1.7912': attribute type 1 has an invalid length.
[  847.491150][ T3098] netlink: 'syz.1.7912': attribute type 2 has an invalid length.
[  847.547576][ T3102] nbd5: detected capacity change from 0 to 127
[  847.553955][ T3082] veth0: left promiscuous mode
[  847.562499][ T5850] block nbd5: Receive control failed (result -104)
[  847.562524][ T2917] block nbd5: Send control failed (result -32)
[  847.562542][ T2917] block nbd5: Request send failed, requeueing
[  847.563226][   T11] block nbd5: Dead connection, failed to find a fallback
[  847.600122][   T11] block nbd5: shutting down sockets
[  847.605476][   T11] blk_print_req_error: 138 callbacks suppressed
[  847.605494][   T11] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  847.627998][   T11] buffer_io_error: 138 callbacks suppressed
[  847.628018][   T11] Buffer I/O error on dev nbd5, logical block 3, async page read
[  848.138795][ T3132] bridge0: port 1(bridge_slave_0) entered disabled state
[  849.127337][ T3208] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  849.289629][ T3223] siw: device registration error -23
[  849.394056][T14338] IPVS: starting estimator thread 0...
[  849.404572][ T3231] IPVS: lc: FWM 3 0x00000003 - no destination available
[  849.557911][ T3232] IPVS: using max 38 ests per chain, 91200 per kthread
[  849.683903][ T3236] syzkaller0: entered promiscuous mode
[  849.768729][ T3236] syzkaller0: entered allmulticast mode
[  852.488225][ T3277] __nla_validate_parse: 47 callbacks suppressed
[  852.488248][ T3277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7956'.
[  852.510657][ T3279] netlink: 'syz.1.7958': attribute type 2 has an invalid length.
[  852.558160][ T3277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7956'.
[  852.592136][ T3281] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7957'.
[  852.613661][ T3281] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  852.712861][ T3291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7963'.
[  852.813174][ T3296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7962'.
[  852.887982][ T3299] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7965'.
[  852.996160][ T3301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7965'.
[  853.058491][ T3310] netlink: 'syz.4.7965': attribute type 4 has an invalid length.
[  853.179977][ T3316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7969'.
[  853.491347][ T3337] netlink: 'syz.2.7979': attribute type 3 has an invalid length.
[  853.518162][ T3337] netlink: 'syz.2.7979': attribute type 1 has an invalid length.
[  853.647819][ T3350] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  853.686026][ T3348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7982'.
[  853.734587][ T3356] xt_cgroup: xt_cgroup: no path or classid specified
[  853.874043][ T3365] netlink: 'syz.2.7987': attribute type 1 has an invalid length.
[  853.919174][ T3365] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7987'.
[  854.010014][ T3375] netlink: 'syz.0.7990': attribute type 1 has an invalid length.
[  854.033489][ T3370] IPv6: sit1: Disabled Multicast RS
[  854.182075][ T3386] ip6erspan0: entered promiscuous mode
[  854.212073][ T3393] netlink: 'syz.4.7991': attribute type 2 has an invalid length.
[  854.218277][ T3386] ip6erspan0: entered allmulticast mode
[  854.227613][ T3389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  854.822564][ T3432] smc: net device team0 applied user defined pnetid SYZ2
[  854.833723][ T3432] smc: net device caif0 applied user defined pnetid SYZ2
[  854.930200][ T3434] netlink: 'syz.2.8003': attribute type 12 has an invalid length.
[  854.970688][ T3434] bond3: option primary_reselect: invalid value (255)
[  855.012961][ T3434] bond3 (unregistering): Released all slaves
[  855.065354][ T3405] lo speed is unknown, defaulting to 1000
[  855.101062][ T3441] ipt_rpfilter: unknown options
[  855.114391][ T3439] pim6reg527: entered allmulticast mode
[  855.230798][ T3446] syzkaller0: entered promiscuous mode
[  855.239505][ T3446] syzkaller0: entered allmulticast mode
[  855.402401][ T3459] openvswitch: netlink: Missing key (keys=40, expected=100)
[  856.083037][ T3503] netlink: 'syz.4.8022': attribute type 10 has an invalid length.
[  856.130500][ T3505] hsr_slave_1 (unregistering): left promiscuous mode
[  856.141447][ T3503] veth0_macvtap: left promiscuous mode
[  856.943536][ T3550] netlink: 'syz.4.8035': attribute type 1 has an invalid length.
[  857.104530][ T3561] ip6tnl0: entered promiscuous mode
[  857.111244][ T3561] ip6tnl0: entered allmulticast mode
[  857.555802][ T3579] bond3: ARP target 1.0.0.0 is already present
[  857.563910][ T3579] bond3: option arp_ip_target: invalid value (1)
[  857.573168][ T3579] bond3 (unregistering): Released all slaves
[  857.702207][ T3583] __nla_validate_parse: 75 callbacks suppressed
[  857.702234][ T3583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8046'.
[  857.718530][ T3583] netlink: 13 bytes leftover after parsing attributes in process `syz.2.8046'.
[  857.745111][ T3583] veth3: entered promiscuous mode
[  857.864067][ T3591] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8048'.
[  858.018555][ T3603] validate_nla: 2 callbacks suppressed
[  858.018574][ T3603] netlink: 'syz.3.8052': attribute type 29 has an invalid length.
[  858.218357][ T3619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8057'.
[  858.392178][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8060'.
[  858.402891][ T3630] netlink: 'syz.4.8060': attribute type 1 has an invalid length.
[  858.511740][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8060'.
[  858.524661][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8060'.
[  858.536436][ T3630] netlink: 'syz.4.8060': attribute type 1 has an invalid length.
[  858.567342][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8060'.
[  858.631889][ T3646] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8065'.
[  858.656895][ T3646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8065'.
[  858.705469][ T3646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  858.962302][ T3665] netem: incorrect gi model size
[  858.977766][ T3665] netem: change failed
[  859.105483][ T3655] lo speed is unknown, defaulting to 1000
[  859.295798][ T3681] syzkaller0: entered promiscuous mode
[  859.303939][ T3681] syzkaller0: entered allmulticast mode
[  859.435648][ T3692] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  859.908728][ T3714] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  859.946200][ T3714] syzkaller0: entered allmulticast mode
[  860.223299][ T3728] bond11: entered allmulticast mode
[  860.249493][ T3728] 8021q: adding VLAN 0 to HW filter on device bond11
[  860.363556][ T3744] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  860.824487][ T3772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  860.830038][ T3776] netlink: 'syz.2.8101': attribute type 1 has an invalid length.
[  860.959079][ T3776] bond3: entered promiscuous mode
[  860.978850][ T3776] 8021q: adding VLAN 0 to HW filter on device bond3
[  861.028170][ T3791] netlink: 'syz.3.8104': attribute type 10 has an invalid length.
[  861.117810][ T3791] team0: Device veth0_macvtap failed to register rx_handler
[  861.187056][ T3776] bond3: (slave bridge7): making interface the new active one
[  861.194716][ T3776] bridge7: entered promiscuous mode
[  861.202368][ T3776] bond3: (slave bridge7): Enslaving as an active interface with an up link
[  861.221291][ T3802] sctp: [Deprecated]: syz.0.8106 (pid 3802) Use of int in max_burst socket option deprecated.
[  861.221291][ T3802] Use struct sctp_assoc_value instead
[  861.642342][ T3827] netlink: 'syz.0.8116': attribute type 2 has an invalid length.
[  861.878571][ T3838] netlink: 'syz.2.8121': attribute type 8 has an invalid length.
[  862.008708][ T3847] netlink: 'syz.2.8125': attribute type 1 has an invalid length.
[  862.374479][ T3878] netlink: 'syz.1.8131': attribute type 11 has an invalid length.
[  862.412016][ T3880] netlink: 'syz.1.8131': attribute type 11 has an invalid length.
[  862.582924][ T3890] x_tables: duplicate entry at hook 2
[  862.828628][ T3901] __nla_validate_parse: 11 callbacks suppressed
[  862.828651][ T3901] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8139'.
[  862.862763][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.202335][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8147'.
[  863.211128][ T3925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8149'.
[  863.232187][ T3925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8149'.
[  863.254947][ T3920] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  863.268319][ T3925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8149'.
[  863.289604][ T3920] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8147'.
[  863.299763][ T3925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8149'.
[  863.318312][ T3925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8149'.
[  863.340857][ T3925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8149'.
[  863.351821][ T3925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8149'.
[  863.472723][ T3930] validate_nla: 1 callbacks suppressed
[  863.472741][ T3930] netlink: 'syz.3.8151': attribute type 1 has an invalid length.
[  863.540653][ T3939] erspan0: entered promiscuous mode
[  863.547882][ T3939] erspan0: entered allmulticast mode
[  864.256707][ T3942] lo speed is unknown, defaulting to 1000
[  864.359985][ T3989] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  864.368658][ T3987] netlink: 'syz.2.8170': attribute type 33 has an invalid length.
[  864.370699][ T3991] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  864.392354][T23260] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  864.451510][ T3987] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  864.464337][ T3987] bond5 (unregistering): Released all slaves
[  864.574678][ T4002] syzkaller0: entered promiscuous mode
[  864.591048][ T4002] syzkaller0: entered allmulticast mode
[  864.855021][ T4014] batadv2: entered allmulticast mode
[  865.105664][ T4029] netlink: 'syz.2.8185': attribute type 2 has an invalid length.
[  865.138339][ T4029] netlink: 'syz.2.8185': attribute type 8 has an invalid length.
[  865.252238][ T4041] xt_HMARK: spi-set and port-set can't be combined
[  865.296745][ T4040] xt_HMARK: spi-set and port-set can't be combined
[  865.506718][ T4025] lo speed is unknown, defaulting to 1000
[  866.269093][ T4084] bond0: (slave bond_slave_1): Releasing backup interface
[  866.776657][ T4130] netlink: 'syz.4.8216': attribute type 17 has an invalid length.
[  866.792606][ T4131] netlink: 'syz.4.8216': attribute type 17 has an invalid length.
[  866.819101][ T4130] gretap0: entered promiscuous mode
[  866.826030][ T4130] gretap0: left promiscuous mode
[  866.845808][ T4131] gretap0: entered promiscuous mode
[  866.878263][ T4131] gretap0: left promiscuous mode
[  867.335572][ T4171] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  867.509261][ T4178] IPv6: NLM_F_CREATE should be specified when creating new route
[  867.552360][ T4180] netlink: 'syz.1.8227': attribute type 1 has an invalid length.
[  867.713550][ T4190] netlink: 'syz.1.8231': attribute type 1 has an invalid length.
[  867.791438][ T4190] bond12: entered promiscuous mode
[  867.798032][ T4190] 8021q: adding VLAN 0 to HW filter on device bond12
[  867.835482][ T4196] xt_cgroup: invalid path, errno=-2
[  867.852252][ T4192] bond12: (slave bridge7): making interface the new active one
[  867.880816][ T4192] bridge7: entered promiscuous mode
[  867.895716][ T4192] bond12: (slave bridge7): Enslaving as an active interface with an up link
[  867.976749][ T4203] 
[  867.979119][ T4203] ======================================================
[  867.986117][ T4203] WARNING: possible circular locking dependency detected
[  867.993121][ T4203] syzkaller #0 Not tainted
[  867.997515][ T4203] ------------------------------------------------------
[  868.004516][ T4203] syz.2.8233/4203 is trying to acquire lock:
[  868.010556][ T4203] ffffffff8fb26e98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[  868.019929][ T4203] 
[  868.019929][ T4203] but task is already holding lock:
[  868.027271][ T4203] ffff888033196470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630
[  868.036663][ T4203] 
[  868.036663][ T4203] which lock already depends on the new lock.
[  868.036663][ T4203] 
[  868.047045][ T4203] 
[  868.047045][ T4203] the existing dependency chain (in reverse order) is:
[  868.056040][ T4203] 
[  868.056040][ T4203] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  868.064012][ T4203]        _raw_spin_lock_bh+0x36/0x50
[  868.069282][ T4203]        nr_rt_device_down+0x153/0x860
[  868.074724][ T4203]        nr_device_event+0x137/0x150
[  868.079990][ T4203]        notifier_call_chain+0x19d/0x3a0
[  868.085599][ T4203]        netif_close_many+0x2ae/0x420
[  868.090950][ T4203]        netif_close+0x160/0x220
[  868.095866][ T4203]        dev_close+0x10a/0x220
[  868.100618][ T4203]        bpq_device_event+0x377/0x6a0
[  868.106057][ T4203]        notifier_call_chain+0x19d/0x3a0
[  868.111669][ T4203]        netif_close_many+0x2ae/0x420
[  868.117021][ T4203]        netif_close+0x160/0x220
[  868.122030][ T4203]        dev_close+0x10a/0x220
[  868.126774][ T4203]        bond_setup_by_slave+0x5f/0x3d0
[  868.132333][ T4203]        bond_enslave+0x847/0x3c40
[  868.137424][ T4203]        bond_do_ioctl+0x6ec/0x8d0
[  868.142545][ T4203]        bond_siocdevprivate+0x19c/0x1f0
[  868.148175][ T4203]        dev_ifsioc+0xba6/0x1280
[  868.153110][ T4203]        dev_ioctl+0x84c/0x1150
[  868.157952][ T4203]        sock_ioctl+0x75f/0x7f0
[  868.162787][ T4203]        __se_sys_ioctl+0xfc/0x170
[  868.167879][ T4203]        do_syscall_64+0xe2/0xf80
[  868.172898][ T4203]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.179490][ T4203] 
[  868.179490][ T4203] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  868.187387][ T4203]        _raw_spin_lock_bh+0x36/0x50
[  868.192679][ T4203]        nr_rt_device_down+0xbe/0x860
[  868.198032][ T4203]        nr_device_event+0x137/0x150
[  868.203302][ T4203]        notifier_call_chain+0x19d/0x3a0
[  868.208916][ T4203]        netif_close_many+0x2ae/0x420
[  868.214271][ T4203]        netif_close+0x160/0x220
[  868.219188][ T4203]        dev_close+0x10a/0x220
[  868.223945][ T4203]        bpq_device_event+0x377/0x6a0
[  868.229315][ T4203]        notifier_call_chain+0x19d/0x3a0
[  868.234932][ T4203]        netif_close_many+0x2ae/0x420
[  868.240896][ T4203]        netif_close+0x160/0x220
[  868.245830][ T4203]        dev_close+0x10a/0x220
[  868.250660][ T4203]        bond_setup_by_slave+0x5f/0x3d0
[  868.256230][ T4203]        bond_enslave+0x847/0x3c40
[  868.261331][ T4203]        bond_do_ioctl+0x6ec/0x8d0
[  868.266476][ T4203]        bond_siocdevprivate+0x19c/0x1f0
[  868.272097][ T4203]        dev_ifsioc+0xba6/0x1280
[  868.277018][ T4203]        dev_ioctl+0x84c/0x1150
[  868.281857][ T4203]        sock_ioctl+0x75f/0x7f0
[  868.286782][ T4203]        __se_sys_ioctl+0xfc/0x170
[  868.291890][ T4203]        do_syscall_64+0xe2/0xf80
[  868.296897][ T4203]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.303297][ T4203] 
[  868.303297][ T4203] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  868.311182][ T4203]        __lock_acquire+0x15a5/0x2cf0
[  868.316586][ T4203]        lock_acquire+0x106/0x330
[  868.321589][ T4203]        _raw_spin_lock_bh+0x36/0x50
[  868.326859][ T4203]        nr_remove_neigh+0x25/0xe0
[  868.331973][ T4203]        nr_add_node+0x1e41/0x2630
[  868.337125][ T4203]        nr_rt_ioctl+0xe59/0xf90
[  868.342068][ T4203]        sock_do_ioctl+0x101/0x320
[  868.347169][ T4203]        sock_ioctl+0x5c6/0x7f0
[  868.352106][ T4203]        __se_sys_ioctl+0xfc/0x170
[  868.357201][ T4203]        do_syscall_64+0xe2/0xf80
[  868.362240][ T4203]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.368742][ T4203] 
[  868.368742][ T4203] other info that might help us debug this:
[  868.368742][ T4203] 
[  868.378965][ T4203] Chain exists of:
[  868.378965][ T4203]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  868.378965][ T4203] 
[  868.392855][ T4203]  Possible unsafe locking scenario:
[  868.392855][ T4203] 
[  868.400292][ T4203]        CPU0                    CPU1
[  868.405685][ T4203]        ----                    ----
[  868.411029][ T4203]   lock(&nr_node->node_lock);
[  868.415786][ T4203]                                lock(nr_node_list_lock);
[  868.422878][ T4203]                                lock(&nr_node->node_lock);
[  868.430257][ T4203]   lock(nr_neigh_list_lock);
[  868.435178][ T4203] 
[  868.435178][ T4203]  *** DEADLOCK ***
[  868.435178][ T4203] 
[  868.443299][ T4203] 1 lock held by syz.2.8233/4203:
[  868.448296][ T4203]  #0: ffff888033196470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630
[  868.458105][ T4203] 
[  868.458105][ T4203] stack backtrace:
[  868.463974][ T4203] CPU: 0 UID: 0 PID: 4203 Comm: syz.2.8233 Not tainted syzkaller #0 PREEMPT(full) 
[  868.463987][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  868.463995][ T4203] Call Trace:
[  868.464002][ T4203]  <TASK>
[  868.464009][ T4203]  dump_stack_lvl+0xe8/0x150
[  868.464026][ T4203]  print_circular_bug+0x2e1/0x300
[  868.464039][ T4203]  check_noncircular+0x12e/0x150
[  868.464051][ T4203]  __lock_acquire+0x15a5/0x2cf0
[  868.464066][ T4203]  ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0
[  868.464081][ T4203]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[  868.464093][ T4203]  ? nr_remove_neigh+0x25/0xe0
[  868.464106][ T4203]  lock_acquire+0x106/0x330
[  868.464119][ T4203]  ? nr_remove_neigh+0x25/0xe0
[  868.464133][ T4203]  ? do_raw_spin_lock+0x26c/0x2f0
[  868.464145][ T4203]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  868.464156][ T4203]  ? nr_remove_neigh+0x25/0xe0
[  868.464170][ T4203]  _raw_spin_lock_bh+0x36/0x50
[  868.464184][ T4203]  ? nr_remove_neigh+0x25/0xe0
[  868.464198][ T4203]  nr_remove_neigh+0x25/0xe0
[  868.464212][ T4203]  nr_add_node+0x1e41/0x2630
[  868.464228][ T4203]  ? dev_get_by_name+0x21/0x200
[  868.464242][ T4203]  ? dev_get_by_name+0x21/0x200
[  868.464255][ T4203]  ? nr_call_to_digi+0x136/0x1b0
[  868.464269][ T4203]  nr_rt_ioctl+0xe59/0xf90
[  868.464285][ T4203]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  868.464301][ T4203]  ? apparmor_capable+0x137/0x1a0
[  868.464318][ T4203]  ? capable+0x88/0xe0
[  868.464327][ T4203]  ? nr_ioctl+0x1b1/0x3b0
[  868.464338][ T4203]  sock_do_ioctl+0x101/0x320
[  868.464354][ T4203]  ? __pfx_sock_do_ioctl+0x10/0x10
[  868.464368][ T4203]  ? do_futex+0x333/0x420
[  868.464386][ T4203]  sock_ioctl+0x5c6/0x7f0
[  868.464401][ T4203]  ? __pfx_sock_ioctl+0x10/0x10
[  868.464415][ T4203]  ? __fget_files+0x2a/0x420
[  868.464426][ T4203]  ? __fget_files+0x3a0/0x420
[  868.464436][ T4203]  ? __fget_files+0x2a/0x420
[  868.464446][ T4203]  ? bpf_lsm_file_ioctl+0x9/0x20
[  868.464459][ T4203]  ? __pfx_sock_ioctl+0x10/0x10
[  868.464472][ T4203]  __se_sys_ioctl+0xfc/0x170
[  868.464487][ T4203]  do_syscall_64+0xe2/0xf80
[  868.464497][ T4203]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.464507][ T4203]  ? trace_irq_disable+0x37/0x100
[  868.464517][ T4203]  ? clear_bhb_loop+0x60/0xb0
[  868.464528][ T4203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.464538][ T4203] RIP: 0033:0x7ff40399aeb9
[  868.464550][ T4203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  868.464559][ T4203] RSP: 002b:00007ff4048f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  868.464570][ T4203] RAX: ffffffffffffffda RBX: 00007ff403c16180 RCX: 00007ff40399aeb9
[  868.464578][ T4203] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000005
[  868.464585][ T4203] RBP: 00007ff403a08c1f R08: 0000000000000000 R09: 0000000000000000
[  868.464591][ T4203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  868.464597][ T4203] R13: 00007ff403c16218 R14: 00007ff403c16180 R15: 00007fff88501b28
[  868.464610][ T4203]  </TASK>
[  869.495268][T25710] lec:lec_start_xmit: lec0:No lecd attached
[  874.856859][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms
[  874.864982][    C1] lec:lec_tx_timeout: lec0
[  874.869609][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  877.838008][   T11] block nbd5: Possible stuck request ffff8880258c8000: control (read@0,1024B). Runtime 30 seconds
[  877.849262][   T11] block nbd5: Possible stuck request ffff8880258c8200: control (read@1024,1024B). Runtime 30 seconds
[  877.861097][   T11] block nbd5: Possible stuck request ffff8880258c8400: control (read@2048,1024B). Runtime 30 seconds