last executing test programs:

12.04275968s ago: executing program 4 (id=9738):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000022c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002280)={&(0x7f0000003640)={0x1348, r1, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x3}}}}, [@NL80211_ATTR_TID_CONFIG={0x328, 0x11d, 0x0, 0x1, [{0x308, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffff8000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x6, 0xb6, 0x8, 0x1, 0xd29, 0xdae, 0x8001]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7}, {0x4, 0x7}, {0x1, 0x6}, {}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x7}, {0x1, 0x6}, {0x5, 0x7}, {0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x2, 0x7}, {0x4, 0x8}, {0x6, 0x5}, {0x5, 0x3}, {0x7, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {}, {0x3, 0xa}, {0x5, 0x9}, {0x4, 0x6}, {0x5, 0x1}, {0x1, 0x4}, {0x6, 0x7}, {0x1, 0x3}, {0x1, 0x9}, {}, {0x6, 0x8}, {0x1, 0x6}, {0x1}, {0x0, 0x9}, {0x4, 0xa}, {0x1}, {0x1, 0x6}, {0x3, 0x4}, {0x0, 0x9}, {0x6, 0x7}, {0x5}, {0x5, 0x7}, {0x3}, {0x5, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x2, 0x4}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x2}, {0x2, 0x6}, {0x2, 0x5}, {0x4, 0x9}, {0x2, 0x3}, {0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x5, 0x4}, {0x6, 0xf}]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x4, 0x3}, {0x2, 0x1}, {0x4, 0x7}, {0x3, 0x9}, {0x5, 0x5}, {0x1, 0x3}, {0x5, 0x5}, {0x5, 0xa}, {0x0, 0x2}, {0x4, 0x2}, {0x4, 0x3}, {0x0, 0x4}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x9}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x3}, {0x3, 0x4}, {0x3, 0x3}, {0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x5, 0x6}, {0x5, 0x4}, {0x2, 0x2}, {0x4, 0x3}, {0x6, 0xa}, {0x5, 0x5}, {0x5, 0x4}, {0x6}, {0x6, 0x2}, {0x1, 0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x2, 0x7}, {0x1, 0x5}, {0x7}, {0x4, 0x7}, {0x3, 0x5}, {0x2, 0x1}, {0x1, 0x5}, {0x3, 0x5}, {0x0, 0x5}, {0x5, 0x1e}, {0x1}, {0x2, 0x6}, {0x2, 0x9}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x7}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x48, 0x36, 0x12, 0x18, 0x2, 0x2, 0x24, 0xc, 0x3, 0x18, 0x5, 0x4, 0xb, 0x5, 0x7b]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x1}, {0x3}, {0x5, 0xa}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x8}, {0x7, 0x6}, {0x2}, {0x1, 0x9}, {0x2, 0x7}, {0x2, 0x3}, {0x2}, {0x3, 0xa}, {0x1, 0x8}, {0x7, 0x6}, {0x7, 0x3}, {0x2, 0x6}, {0x3, 0x3}, {0x3}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x2}, {0x7, 0x5}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x2, 0x4}, {0x5, 0x6}, {0x5, 0x8}, {0x2, 0x2}, {0x1, 0x7}, {0x2, 0x4}, {0x4, 0x9}, {0x3, 0x3}, {0x6, 0x2}, {0x2, 0x9}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x1}, {0x5, 0x8}, {0x2, 0x6}, {0x5, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x7, 0x3}, {0x0, 0x5}, {0x1, 0x6}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0xa}, {0x5, 0x2}, {0x4, 0x6}, {0x0, 0x7}, {0x4, 0x1}, {0x4}, {0x2, 0x2}, {0x0, 0x5}, {0x4, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x6, 0x4}, {0x4, 0x7}, {0x5}, {0x2, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x3, 0x4}, {0x3, 0x6}, {0x0, 0x7}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x6, 0x9}, {0x4, 0x6}, {0x4, 0x7}, {0x1, 0x5}, {0x5, 0x3}, {0x2, 0x7}, {0x6}, {0x3, 0x3}, {0x4, 0x6}, {0x3, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x2}, {0x4, 0x9}, {0x4, 0x7}, {0x3, 0x3}, {0x7, 0x5}, {0x7, 0xa}, {0x6, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x3, 0x5}, {0x1}, {0x2, 0xa}, {0x0, 0x1}, {0x6, 0x8}, {0x5, 0x6}, {0x0, 0x5}, {0x5, 0x5}, {0x0, 0x7}, {0x3, 0x9}, {0x2, 0x6}, {0x3, 0x2}, {0x2, 0x5}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x5}, {0x3, 0x2}, {0x4, 0x8}, {0x0, 0x1}, {0x7, 0x6}, {0x2, 0x8}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x7}, {0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x5, 0xa}, {0x1, 0x9}, {0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0x1}, {0x3}, {0x2, 0x6}, {0x4}, {0x5, 0x1}, {0x6, 0x5}, {0x2, 0x8}, {0x2, 0x5}, {0x7, 0x3}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x2}, {0x7}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x5, 0x7}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x8}, {0x5, 0x2}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x4}, {0x2, 0x2}, {0x2, 0x8}, {0x4, 0x2}, {0x7, 0x6}, {0x7, 0x1}, {0x4, 0x2}, {0x7, 0x8}, {0x6, 0x8}, {0x1, 0x8}, {0x1}, {0x6, 0x7}, {0x6, 0x6}, {0x5, 0x4}, {0x0, 0x4}, {0x3, 0x5}, {0x2, 0x4}, {0x0, 0x2}, {0x3, 0x2}, {0x2, 0x8}, {0x7, 0x4}, {0x1, 0x3}, {0x2, 0x8}, {0x1}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0x1}, {0x3, 0x8}, {0x2, 0x1}, {0x7, 0x7}, {0x0, 0x2}, {0x3, 0x6}, {0x2, 0x1}, {0x7, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x7, 0x9}, {0x5, 0x3}, {0x3, 0x9}, {0x6, 0x5}, {0x3, 0x3}, {0x1, 0x6}, {0x6, 0x4}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x9, 0x5, 0x271f, 0x9, 0xe, 0x5]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x60, 0x30, 0x30, 0x5, 0x36, 0x3, 0x30, 0x3, 0x0, 0x2, 0x5, 0x9, 0x60, 0x4]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x7f, 0x1, 0x3, 0xff, 0x8b, 0x2]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x3, 0x7}, {0x6, 0xa}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0x8}, {0x0, 0x2}, {0x2, 0x5}, {0x3, 0x6}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x6}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x4, 0x5, 0x4, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8, 0x2faa, 0x2, 0xd1a, 0x9eb0, 0x3, 0x7141]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0xb4eb, 0x8, 0xeb, 0x0, 0x5, 0x5]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0xb, 0x5, 0x2, 0xb, 0x60, 0x18, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xfffd, 0x1, 0x0, 0x7fff, 0xf5d7, 0x8, 0x2]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf, 0x7, 0xc3ad, 0x4, 0x800, 0x0, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7fff, 0x2, 0x4, 0x9, 0xc, 0x7fff, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000000}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2d}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}]}]}, @NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x49}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb8}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe7d}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x100, 0x9, 0x2, 0x5, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x80, 0x11d, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6b30, 0x7, 0x0, 0x9, 0x8, 0xa63, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x800, 0x9, 0x821, 0x6, 0x6, 0x4, 0x1]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x7f0, 0x11d, 0x0, 0x1, [{0x250, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x24c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x0, 0xa, 0x3b, 0xf, 0x7, 0x5, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xb, 0x1ff, 0x7, 0x6f2, 0x1, 0x3ff, 0x4]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5}, {0x7, 0x8}, {0x3, 0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x7, 0x9, 0x6, 0x6, 0x5f, 0x81]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x1, 0x7, 0x2, 0x40, 0x3, 0x2, 0x8]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x36, 0x6c, 0x3, 0x48, 0x4, 0x6c, 0x24, 0x78, 0x3, 0x9, 0x30, 0x36, 0xc, 0x24]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x4}, {0x7}, {}, {0x1, 0x9}, {0x3, 0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x0, 0xa}, {0x7, 0x3}, {0x3, 0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x1}, {0x5, 0x4}, {0x0, 0x9}, {0x6, 0x9}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0xa}, {0x2, 0x4}, {0x3, 0x7}, {0x3, 0x2}, {0x0, 0x5}, {0x5, 0x9}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x8}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x8}, {0x3, 0x8}, {0x7, 0x5}, {0x3, 0x7}, {0x6, 0x1}, {0x0, 0xa}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6, 0x1}, {0x2, 0x9}, {0x5, 0x4}, {0x7, 0x2}, {0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x6, 0x6}, {0x3, 0x6}, {0x6, 0x8}, {0x1, 0x7}, {0x1}, {0x5, 0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x6, 0x3}, {0x1}, {0x5, 0x8}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x1}, {0x0, 0x2}, {0x3, 0x1}, {0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x5}, {0x6, 0x1}, {0x1, 0x3}, {0x1, 0x4}, {0x6}, {0x5}, {0x7, 0x3}, {0x6, 0x4}, {0x4}, {0x3, 0x1}, {0x2, 0x9}, {0x2, 0x2}, {0x7}, {0x4, 0x9}, {0x3, 0x6}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x2}, {0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x7}, {0x0, 0x6}, {0x2, 0x4}, {0x6, 0x8}, {0x3, 0x5}, {0x7, 0x4}, {0x4, 0x5}, {0x6, 0x6}, {0x6, 0x7}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x2}, {0x3, 0x8}]}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0xc, 0x1, 0x48, 0x6c, 0x3, 0x6, 0x36, 0x18, 0x24, 0x9, 0x36, 0x9, 0x4, 0x36, 0x5, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x40, 0x1, 0x0, 0x5, 0x1, 0x3, 0xc0]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x0, 0xee75, 0x1ff, 0x8, 0x5247, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc00, 0x2, 0x6, 0xf4f, 0x584, 0x200, 0x9, 0x9]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x48, 0x6c, 0x9, 0x1d, 0x1b, 0x6, 0x6, 0x12, 0x6c, 0xb, 0x24, 0x1, 0x2, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xd0, 0x3, 0xec7e, 0x9, 0x2, 0x1, 0x1]}}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x60, 0x2, 0x8000, 0x10, 0x4, 0x314, 0x7]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x21, 0xb, 0xb, 0x60, 0x71]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x9, 0x3, 0x0, 0x6, 0x5e]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x4}, {0x4, 0x8}, {0x7, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x5, 0xa}, {0x5, 0x8}, {0x5, 0x6}, {0x3, 0x5}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x9}, {0x4, 0x7}, {0x7}, {0x4, 0xa}, {0x4, 0x2}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x8}, {0x1, 0x7}, {0x2, 0x2}, {0x1, 0x5}, {0x7, 0x9}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x4}, {0x1, 0x3}, {0x2, 0x6}, {0x4, 0x2}, {0x7, 0x1b}, {0x0, 0xa}, {0x6, 0x7}, {0x7, 0x6}, {0x0, 0x8}, {0x4, 0x4}, {0x1, 0xa}, {0x5, 0x2}, {0x4, 0x2}, {0x3, 0x1}, {0x4, 0x9}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x7}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0x7}, {0x7, 0x6}, {0x6, 0x3}, {0x0, 0x3}, {0x4}, {0x6, 0x7}, {0x6, 0x8}, {}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0xa}, {0x2}, {0x4, 0x8}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0x8}, {0x3, 0x1}, {0x7, 0x7}, {0x1, 0x4}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x6, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0x2}, {0x4}, {0x5, 0x6}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x4}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x1b, 0x36, 0x18, 0x5, 0x6, 0x36, 0x0, 0x9, 0x48, 0x3, 0x6, 0x2, 0x7, 0x30, 0x48, 0x5, 0x5, 0x0, 0x5, 0x3, 0x2, 0x18, 0x2, 0x9, 0x1b, 0x1, 0x36, 0x48]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8777, 0x100, 0x9, 0xdda, 0x4, 0x1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0xcd35, 0x3, 0x4, 0xd0, 0xf52b, 0xffe9]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf176}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x4c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x264, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xcb, 0x6, 0x9, 0x2, 0x8, 0xcc4, 0x8, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x60, 0x84838ccc970bbaba, 0x3, 0x9, 0x24, 0x24, 0x1, 0x24, 0x5, 0x24, 0x36, 0x24, 0x3d, 0x4, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0x1}, {0x0, 0x9}, {0x4, 0x3}, {0x0, 0x3}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x5}, {0x6}, {0x7, 0xa}, {0x4, 0x4}, {0x1, 0x8}, {0x4, 0x6}, {0x1, 0x2}, {0x7, 0x4}, {0x4, 0x1}, {0x4, 0x8}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x8}, {0x4, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x5}, {0x5, 0x5}, {0x5, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x5}, {0x6, 0x3}, {0x2, 0x4}, {0x2}, {0x2, 0x9}, {0x5, 0x8}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x7, 0x2}, {}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x8}, {0x5, 0x2}, {0x7, 0x6}, {0x2, 0x2}, {0x4, 0x6}]}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x9}, {0x6, 0xa}, {0x3, 0x7}, {0x5, 0x7}, {0x3, 0x8}, {0x4, 0x7}, {0x2, 0x8}, {0x7, 0x8}, {0x1, 0x8}, {0x6}, {0x2, 0x1}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0xa}, {0x7, 0x1}, {0x2, 0x2}, {0x3}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x7}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0x8}, {0x0, 0x1}, {0x4}, {0x2, 0x5}, {0x1, 0x8}, {0x5, 0x7}, {0x3, 0x6}, {0x0, 0x4}, {0x7, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x3}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x6}, {0x1, 0x8}, {}, {0x6, 0xa}, {0x5, 0x6}, {0x4, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x8}, {0x3, 0x7}, {0x6, 0x8}, {0x4, 0x5}, {0x6, 0xa}, {0x1, 0x6}, {0x5, 0x7}, {0x7, 0x9}, {0x0, 0x9}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x5}, {0x3, 0x5}, {0x5}, {0x1, 0x4}, {0x2, 0x2}, {0x5, 0x7}, {0x1, 0x7}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x4}, {0x1}, {0x6}, {0x4, 0x5}, {0x1, 0x9}, {0x5, 0x9}, {0x1, 0x9}, {0x6, 0x2}, {0x1, 0x3}, {0x0, 0x9}, {0x7, 0x7}, {0x5}, {0x5, 0xa}, {0x0, 0x4}, {0x4}, {0x3, 0xa}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0xfffd, 0xcd9, 0x5, 0x7, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x2, 0x3, 0x6c, 0x6c, 0x6, 0xc, 0x18, 0x16]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0x6c, 0x24, 0x3, 0x24, 0x36, 0x1, 0x6, 0xc, 0x2, 0x6, 0xc, 0x60, 0x2, 0x10, 0x16, 0x60, 0x6, 0x16, 0x3, 0x36, 0x1, 0x6c, 0x18]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x2, 0x1b, 0x30, 0x4, 0x5, 0x60, 0x48, 0x6, 0xb, 0xc, 0x1b, 0x13feaea6ed5f9654, 0x6, 0x5, 0x60, 0x24, 0xc, 0x11, 0x36, 0x24, 0x30, 0x12]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0x4, 0x0, 0x1, 0x3c, 0x2, 0x16, 0x0, 0x2, 0x2, 0x18, 0x12, 0x71, 0x6, 0x30, 0xc9a23413a71161c0, 0x4, 0x2f, 0x12, 0x12, 0x12, 0x2, 0xa, 0x9, 0x35, 0x18]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x7, 0x6, 0xc, 0x6, 0x101, 0xd0]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xc154, 0x35, 0x60, 0x400, 0xf5c, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x200, 0x6, 0xe4ab, 0x4, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x2}, {0x4, 0x1}, {0x0, 0xa}, {0x6}, {0x4, 0xa}, {0x2, 0x3}, {0x3, 0x9}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x1}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x5}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0xa}, {0x1, 0x3}, {0x2, 0x8}, {0x1, 0x2}, {0x1}, {0x0, 0x8}, {0x3, 0x9}, {0x4, 0x4}, {0x4, 0x2}, {0x0, 0x6}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0x8}, {0x4, 0x5}, {0x2, 0x9}, {0x1, 0x8}, {0x6, 0xa}, {0x5, 0x1}, {0x3, 0x8}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x7}, {0x3}, {0x2}, {0x1, 0x4}, {0x7}, {0x2, 0x2}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x8}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x0, 0x6}, {0x4, 0x2}, {0x2, 0x6}, {0x2, 0x5}, {0x3}, {0x7, 0x7}, {0x4, 0x6}, {0x6, 0x8}, {0x7, 0x4}, {0x2, 0x6}, {0x4, 0x9}, {0x5, 0x6}, {0x2, 0x15}, {0x3}, {0x2, 0x9}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x9}, {0x6, 0x9}, {0x4, 0x4}, {0x6, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x7}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x6}, {0x2, 0x6}, {0x4, 0x1}, {0x1, 0x8}, {0x1, 0x4}, {0x6, 0x2}, {0x2, 0x6}, {0x0, 0xa}, {0x0, 0x1}, {0x6, 0x3}, {0x3, 0x8}, {0x3, 0x2}, {0x1, 0x6}, {0x4, 0x8}, {0x1, 0x1}, {0x7, 0x4}, {0x2, 0xa}, {0x3, 0x8}, {0x3, 0x9}, {0x5, 0x7}, {0x0, 0x6}, {0x7, 0x9}, {0x0, 0x5}, {0x4, 0x9}, {0x0, 0x7}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x234, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x18, 0x24, 0x16, 0x15, 0x16, 0x1, 0x12, 0x6, 0x3, 0x16, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x3, 0x2, 0x2, 0x62ec, 0x2, 0xbc44]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6}, {0x3, 0x6}, {0x3, 0x3}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x6}, {0x4, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x6, 0x6}, {0x5, 0x8}, {0x2, 0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0x9}, {0x6, 0x9}, {0x6, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x1, 0x1}, {0x5, 0x3}, {0x6, 0x8}, {0x4, 0x9}, {0x6, 0x1}, {0x7, 0x7}, {0x6, 0x8}, {0x5, 0xa}, {0x0, 0x3}, {0x7, 0x6}, {0x6}, {0x1}, {0x1, 0x1}, {0x5, 0x3}, {0x3, 0x4}, {0x4, 0x3}, {0x0, 0x4}, {0x7, 0x3}, {0x6, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0x1}, {0x5, 0x7}, {0x7, 0x9}, {0x4, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x1, 0x2}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x48, 0x48, 0x1, 0x2, 0x16, 0x1b, 0x4, 0xc, 0x3, 0x48, 0x5, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xb51b, 0x9, 0x5, 0xfff, 0x40, 0xe26, 0x56]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0xfff7, 0x4e, 0x5, 0x4, 0x8, 0x5]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x3, 0x4, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x6}, {0x5, 0x8}, {0x4, 0x4}, {0x7, 0x7}, {0x3, 0x7}, {0x5, 0xa}, {0x1, 0x7}, {0x4, 0x2}, {0x2}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x6}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x7}, {0x1, 0x1}, {0x4, 0x3}, {0x2, 0x1}, {0x6, 0x9}, {0x2, 0x4}, {0x3, 0x9}, {0x4, 0x9}, {}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x1}, {0x5, 0x4}, {0x4, 0x6}, {0x6, 0x8}, {0x5, 0x8}, {0x6, 0x6}, {0x6}, {0x5, 0x2}, {0x3, 0x2}, {0x4, 0x4}, {0x0, 0x8}, {0x2, 0x12}, {0x2, 0x7}, {0x4, 0x5}, {0x0, 0x7}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x4}, {0x6, 0x1}, {0x7, 0x9}, {0x1, 0x9}, {0x1, 0x9}, {0x2, 0x4}, {0x7, 0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x1, 0x8}, {0x6, 0x6}, {0x1, 0x1}, {0x2, 0x9}, {0x6, 0xa}, {0x5, 0x7}, {0x5, 0xa}, {0x0, 0x9}, {0x4, 0x8}, {0x5, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x7, 0x1, 0x4, 0x3, 0x5b33, 0xd816]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x48, 0x18, 0x5, 0x1, 0x2, 0x0, 0xb, 0x24, 0x60, 0xc, 0x24, 0x18, 0x60, 0x18, 0x2, 0x6c, 0x4, 0x4]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x7, 0x8, 0x98, 0x0, 0x8, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x6, 0x2, 0x30, 0x9, 0x12, 0x48, 0x6, 0x4, 0x0, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x48, 0x18, 0x1, 0x18, 0x18, 0x6]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x16, 0x18, 0xc, 0x9, 0x9, 0x4, 0xc, 0xb, 0x1, 0xc, 0x60, 0x48, 0xc, 0x16, 0x6, 0x30, 0x6c, 0x6049553763736909, 0x5, 0x1b, 0x1, 0x6c, 0x0, 0x48]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x36, 0x1, 0x5, 0x1, 0x18]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x48, 0x1b, 0x9, 0x0, 0x30, 0x60, 0x60, 0xc, 0x30, 0x9, 0x0, 0x60, 0x1, 0x9, 0x6c, 0x4, 0x9, 0x58, 0x2, 0x60, 0x30, 0x60, 0x36, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd03, 0x1, 0x100, 0xd14, 0x6, 0x0, 0x3, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x65}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4d}]}]}, @NL80211_ATTR_TID_CONFIG={0x608, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9f3f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x95}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x7, 0x101, 0xfff, 0x7, 0x3918, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0xd343, 0xa02, 0xe, 0x6, 0xd, 0x7]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x1}, {0x0, 0xa}, {0x6, 0x5}, {0x4, 0x2}, {0x0, 0x5}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x4}, {0x4, 0x3}, {0x7, 0x3}, {0x5}, {0x2, 0x5}, {0x0, 0x2}, {0x2, 0x5}, {0x1, 0x5}, {0x1, 0xa}, {0x4, 0x3}]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0xa, 0x200, 0xc, 0x6, 0x2, 0xfffd, 0xd7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9c53, 0x3, 0x86, 0xa7, 0xab7, 0xf63c, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0xc, 0x5, 0x9, 0x18, 0x1, 0x5, 0xb, 0x1, 0x3, 0x12, 0x1, 0x24, 0x25, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x9, 0x8, 0x4, 0xfff, 0x40, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7, 0x1, 0x5, 0x68a, 0x1, 0x6131, 0xa]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x9, 0xffff, 0x7, 0x7, 0xba]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x4, 0x1b, 0x5, 0x3, 0x30, 0x16, 0x16, 0x1b, 0x0, 0x2, 0x9, 0xc, 0x12, 0x5, 0x1b, 0x48, 0x6f49523f81df1e97, 0x0, 0x7e]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x60, 0x36, 0x6c, 0x4, 0x18, 0xc, 0x34, 0x1b, 0x16, 0x4, 0x24, 0x5, 0x1, 0x2, 0x5, 0x16, 0x2, 0x36, 0x6d]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x200, 0x1, 0x3, 0x9b58, 0x8]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xead4, 0x8, 0x0, 0x3, 0x4, 0x8, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x0, 0x1306, 0x80, 0x2, 0x7, 0xf0, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2cc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x6c, 0xb, 0x6, 0x5, 0x18, 0x5, 0x5, 0x6c, 0x6b, 0xb, 0xc, 0x12, 0x9, 0x4, 0x30, 0x1, 0x48, 0xc, 0x4b, 0x12, 0x4, 0x9, 0x48, 0x2, 0x36, 0x9, 0x48, 0x0, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1, 0x12, 0x1, 0x24, 0xb, 0x60, 0x16, 0x8, 0x24, 0x6c, 0xc, 0x24, 0xff9b6bdd9482fb21]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc51f, 0xa5d, 0x3ff, 0x1, 0x3, 0x31, 0x8, 0xfffd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x7}, {0x3, 0x3}, {0x6, 0xa}, {0x5, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x5}, {0x2, 0x3}, {0x2, 0x3}, {0x5}, {0x1, 0x4}, {0x0, 0xa}, {0x3, 0x9}, {0x2, 0x7}, {0x0, 0x4}, {0x7, 0x4}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x4}, {0x3, 0x3}, {0x2, 0x8}, {0x6, 0x8}, {0x4, 0x1}, {0x6, 0x1}, {0x2, 0x5}, {0x7, 0x9}, {0x0, 0x5}, {0x4}, {0x5, 0x4}, {0x4, 0x5}, {0x5, 0x7}, {0x3, 0x1}, {0x4, 0xa}, {0x7, 0x4}, {0x5, 0x3}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0xa}, {0x4, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x7, 0x1}, {0x6, 0x5}, {0x5, 0x5}, {0x1, 0x8}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0x8}, {0x6, 0x9}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x9, 0x17f, 0xd29, 0x941, 0x1000, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0xb, 0x1, 0x36, 0x33, 0x2, 0xb, 0x2, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1b, 0x3, 0x45, 0x48, 0x1b, 0x3, 0x1, 0x3, 0x5, 0xb1, 0x12, 0x4, 0x6, 0x1b, 0x6, 0x29, 0x4, 0x36, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x3, 0x3ff, 0x4, 0x10, 0x1, 0x6, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x81, 0x2, 0x3ff, 0xff, 0x2, 0x3, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0xeb, 0x8, 0x1030, 0x5, 0x4, 0x3542]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0xdc87, 0x2, 0xf5, 0x3, 0x8, 0xf000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x18, 0x6c, 0x9, 0x22, 0x18, 0x12, 0x5, 0x5, 0xb, 0x12, 0x3, 0x0, 0x4]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x7}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x6}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x2}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0xa}, {0x3}, {0x5, 0x2}, {0x6, 0x4}, {0x3, 0x8}, {0x5, 0x6}, {0x3, 0xe}, {0x3, 0x5}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x8}, {0x4, 0x4}, {0x6, 0x2}, {0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x2, 0x3, 0x1, 0xff, 0x68, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6c5f, 0x1000, 0x2, 0x101, 0x6a, 0x9, 0x3, 0x6]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x0, 0x60, 0x48, 0x16, 0x18, 0x24, 0x2]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x1, 0x57ef5ad7b62c2773, 0x18, 0x6c, 0x0, 0x48, 0x24, 0x36, 0x18, 0x1b, 0x36, 0x12, 0x6, 0x5, 0xb, 0x6c, 0x1, 0x4, 0x36, 0x1b, 0x2, 0x4, 0x90776dcbf5fe7dcb]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x3}, {0x4, 0x8}, {0x7, 0x7}, {0x5, 0x9}, {0x6, 0x7}, {0x2, 0x8}, {0x0, 0x1}, {0x3, 0x5}, {0x6, 0x1}, {0x1}, {0x1, 0x3}, {0x5, 0x9}, {0x3, 0x3}, {0x2, 0x5}, {0x6}, {0x2, 0xa}, {0x7, 0x2}, {0x1, 0xa}, {0x7, 0xa}, {0x7}, {0x1, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x4, 0x2}, {0x7, 0x7}, {0x1, 0x9}, {0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x6, 0x1}, {0x3}, {0x2, 0x4}, {}, {0x7, 0x8}, {0x7, 0x4}, {0x3, 0xa}, {0x1, 0xa}, {0x3, 0x2}, {0x5, 0x9}, {0x6, 0x7}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0xa}, {0x2, 0x5}, {0x4, 0xa}, {0x7, 0xa}, {0x0, 0xa}, {0x5, 0x4}, {0x0, 0x8}, {0x1, 0x8}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3, 0x2, 0x65e7, 0x7fff, 0x5, 0x8, 0x0, 0x6]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0x6, 0x5, 0x18, 0x4, 0x6, 0x12, 0xb, 0x9, 0x1b, 0x24, 0x19, 0x12, 0x14, 0xc, 0x60, 0x6c, 0x4, 0x6c, 0x24, 0x5, 0x48, 0x16, 0x36, 0x48, 0x6c, 0x2, 0x6c, 0xc, 0x5, 0x0]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x8, 0x40, 0x7ff, 0xb, 0x5, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x938, 0x3, 0xc2, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x36, 0x12, 0x3, 0x5, 0x16, 0x1, 0x4, 0x6, 0x6c, 0x2, 0x12, 0x13, 0x9, 0x2e, 0x9, 0x36, 0x18, 0x12, 0xb, 0x3, 0x10, 0x36, 0x16, 0xe700d8b463ad9106, 0x6, 0x18]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0xfeff, 0x2, 0x7ff, 0x8, 0x8ed, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x9}, {0x2, 0x7}, {0x7, 0x9}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0xa}, {0x6, 0x9}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x2}, {0x7, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x7}, {0x7, 0x8}, {}, {0x5, 0x4}, {0x4, 0xa}, {0x2, 0x7}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x7, 0x9}, {0x5, 0xa}, {0x0, 0x6}, {0x6, 0x5}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0x2}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x44}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc0, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x61}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x58}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbe}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}]}]}]}, 0x1348}, 0x1, 0x0, 0x0, 0x24000841}, 0x81)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0)

11.774547486s ago: executing program 4 (id=9741):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="340000002d000300"], 0x34}], 0x1, 0x0, 0x0, 0x8011}, 0x0) (async)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="340000002d000300"], 0x34}], 0x1, 0x0, 0x0, 0x8011}, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000180)=0xf, 0x4) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000180)=0xf, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a004e2300000000fe80000000000000000000000000003400000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3100000000"], 0x6c}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000)
connect$netlink(r3, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r2, 0x3, 0x9, 0x1}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r4=>r2, 0x3, 0x9, 0x1})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4)

11.561867801s ago: executing program 4 (id=9746):
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0xfffffffffffffc24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0xfffffffffffffeb8}, 0x1, 0x0, 0x0, 0xc000}, 0x300000d0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0)
sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x44080)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$bt_hci(r8, &(0x7f0000000040), 0x6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @remote}], 0x40)
listen(r5, 0x3)
sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x6}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000480)="e9", 0x1}], 0x1}, 0x40085)
socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1)
sendfile(r0, r3, 0x0, 0x20000000002)

10.548099162s ago: executing program 4 (id=9753):
r0 = socket$packet(0x11, 0x2, 0x300)
socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x8040480)
r2 = epoll_create1(0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r3, 0x0, 0xc, 0xd5, &(0x7f0000000680)="057574bacf2309698ec39221", &(0x7f00000007c0)=""/213, 0x8000, 0x0, 0xc7, 0xfc, &(0x7f00000008c0)="2ca2c2dc4202a644a384b09648f29699a908b71382c2f6b7f0960fea002532ba32bbcf43f260e5e1fa008ca098114f3fdeabc1b97fe8aa554e5cda3ab63d5725d6b96d85285dd01c0100aa07a84451309ae65227f15231c49eea69c8db8cccac544d6f4e99cc3788a2e2350a540e545e5d97d629efb7bf6e71b49d56d4a34371ba3540f88e38dafd612689f2c25f20e35a4f408621a67ae5a9a45dd052dd5b864b5027cca2a0f1af8edb7bf4a80eec6bedc1ec2a7077b1da840e6c2939fd64cec71876b63e5027", &(0x7f00000009c0)="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", 0x7, 0x0, 0x34d}, 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x2c, 0x40, 0x107, 0x70bd27, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x2c, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10)
socket$netlink(0x10, 0x3, 0x15)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r6=>0x0})
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r6, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94)
unshare(0x62000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x8}, {0x2, 0x3ffd, @remote}, {0x2, 0x0, @empty}, 0xab852ebbeefbd729, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010, 0x0, 0xfffd})
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

2.949740978s ago: executing program 4 (id=9795):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pwrite64(r1, &(0x7f0000000000)="801ad0205a4686504ef5ba38150e0c5d18032e53f4f457d791aad49f361a68178861da6ea9d4eb45e35e76055a2fe6f6c9904f9fba84d21f53e99d3c6340b546c55bedfb99cd70aea245b2df7c9f9c4d65469f95d482614fb4b4c27710c1b3a6b3b5f03cc93cd013c4b25fad0c129bde314c9633d368c58c5eefcb3f03b6a173c1bec4c2b3607b676e5fd4", 0x8b, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2100000000000000070000000080000000100000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000010500000008000000000000200000000000000000"], 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x40a18}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8000002)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffe0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4014}, 0x0)

2.642636501s ago: executing program 1 (id=9799):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4)
sendto$unix(r1, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (fail_nth: 26)
bind$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}})

2.501158013s ago: executing program 1 (id=9800):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xc}], 0x2, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xc}], 0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000001c0)={'vlan0\x00'})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8012}, 0x48000)

2.25613487s ago: executing program 1 (id=9802):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}]}, 0x24}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0})
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f0000000300)="e9c99bdf29d33d429be977e001dee4c8ffd92611aa9303634a51ce28ad7b3f7fc162d9fc6e697099646b531e34b876b1b2be9f7bd63a82be6c75eec11dd49837bc4ee4cd2e28be09339b3cf36235a36e3456cfb51304b949e923b10088b1694a2945b70848644c3730b1a1902124b2d62af6cc6ba49c63ada53315874e0fa2c982c27c8a562d908511f7ebf6f4e7a6b8aad03594237731464d1ccac277f0b86d5366113bcfabd3d4b38653d8e6e1645796e087f3716715dcbf21203c497958330ab7263a29e321900901986e9e4b6e90dd6f7238314a4f20", &(0x7f0000000400)=""/46, &(0x7f0000000440)="b94c1d74ca0389c96d9836dfb1a07b1ddfaf3881395574208482ca73257dcb59d92bf78da1e99c8ecc9c4d66b015875ac14c2a0e443714a1cfa3d879bd88d41b3b862aa6497303cf48e6aab65f58c70fd17acbd069a07f13804c82a1ad7f80fe658f9c6674c018c8beec9fc4a87eb2d05a678f1c192fac323aeab07503f0b871110d6c05687eb8a75fc2d402067f61c73f87f0813556768600a8d96d66ff19522df6f1887b944cfdcc25ba56f3ba1819cb0369c253867e4f373da4", &(0x7f0000000540)="45e57223afba44e3507cee", 0xffffffff, r1}, 0x38)

1.931708016s ago: executing program 3 (id=9806):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x440)

1.930980946s ago: executing program 2 (id=9807):
r0 = socket$l2tp(0x2, 0x2, 0x73)
connect$l2tp(r0, &(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10)
r1 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x164, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x200000c1}}}, @qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x1, 0xa, 0x16, 0x15, 0x15, 0x6}}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1004}, [@alu={0x4, 0x0, 0x8, 0x3, 0x0, 0xa2ff}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

1.85756173s ago: executing program 3 (id=9809):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @local, 0xffffff00, 0xffffffff, 'veth0_macvtap\x00', 'gretap0\x00', {0xff}, {0xff}, 0x32, 0x1, 0x40}, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x2, 0x101, 0x0, 0x0, 0xffffffff, 0x8}, {0x2000}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x39, 0x0, [{0x6, 0x2, 0x7, 0xf7}, {0x7, 0x2, 0xe0, 0x2c12}, {0xfbff, 0x88, 0xff, 0x101}, {0x7, 0x5, 0x9, 0x6}, {0x3, 0x9, 0xd6, 0x7fffffff}, {0x7fff, 0xff, 0x8, 0x800}, {0x4, 0x9, 0x53, 0x10}, {0xa, 0x2, 0x4, 0x5}, {0x65, 0x1, 0x5}, {0x9, 0x1, 0x3, 0x8}, {0x2, 0x2, 0xfa, 0x101}, {0x6, 0x5}, {0x0, 0x6, 0x1, 0x471}, {0xffff, 0x28, 0x5}, {0x5, 0x80, 0x9, 0x7f}, {0x1, 0x10, 0x9, 0x7fff}, {0xf, 0x9, 0x70, 0x1}, {0xfe, 0x6, 0x3, 0x2}, {0x5, 0x2, 0x0, 0x8}, {0xbe, 0x50, 0x40, 0x4}, {0x1, 0xa3, 0x8, 0x5}, {0x7, 0x2, 0xfd, 0x9}, {0x6, 0x8, 0x3, 0x1}, {0x3, 0xf8, 0x8, 0x4}, {0x6, 0x1, 0x8, 0x7f}, {0xe055, 0x4, 0x8, 0x800}, {0x2, 0x8, 0x3}, {0x4, 0xd, 0x20, 0x422}, {0x7, 0x8, 0xa9, 0x5}, {0x5, 0x95, 0xdd, 0x7ff}, {0x399, 0x9, 0x1, 0xee9d}, {0x401, 0xa, 0x1, 0xf5d8}, {0xffff, 0x5, 0x4, 0xbd2a}, {0xe, 0xf}, {0x0, 0x5, 0x5, 0x3}, {0x0, 0x4, 0x2, 0xbd6c}, {0x1, 0x6, 0x2, 0x10001}, {0xff, 0x5, 0x3, 0x1}, {0xf5aa, 0x0, 0x2, 0x4}, {0x6, 0x2, 0x2, 0x8001}, {0x6, 0x8, 0x6, 0x4}, {0xff, 0x1, 0x4, 0x434}, {0x8, 0x1, 0x6, 0x1}, {0x7fff, 0x2, 0x8, 0x3ff}, {0xff00, 0x1, 0x9, 0x5}, {0x3, 0xf, 0x8, 0x6}, {0x6, 0x4, 0x66, 0x4}, {0x6, 0x81, 0x6, 0x3}, {0x0, 0x2, 0x3, 0x4}, {0x0, 0x7f, 0x5, 0x4}, {0x800, 0x5, 0x1, 0x91b7}, {0x0, 0x0, 0x6, 0x8}, {0xfffc, 0x7, 0xf0, 0x9}, {0xeab, 0x80, 0x0, 0xfffffff0}, {0x7, 0xb6, 0x5, 0x4}, {0x1, 0x6, 0xff, 0x4}, {0xd075, 0x0, 0xe, 0x6}, {0x800, 0x2, 0x7f, 0x10001}, {0x8aba, 0x4, 0x3, 0x4}, {0x0, 0x40, 0xaa, 0x2}, {0x9, 0x20, 0x8, 0x2}, {0x5, 0x4, 0xb, 0x10001}, {0x14d, 0x2, 0xa, 0xffff}, {0x7, 0x4, 0xf4, 0x8}], {0x6}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}, {0xfffffffffffffffd}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d000900000008000300e0"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

1.743603464s ago: executing program 2 (id=9810):
r0 = socket(0x1, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r3=>0x0, 0x80, 0x7800, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x25, 0x0, 0x8, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3e}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r3, 0x80, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x1000, 0x1, 0x0, 0x0, @private=0xa010102, @empty}}}})
recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000940)=""/199, 0xc7}], 0x1}}], 0x2, 0x60, 0x0)
socket$unix(0x1, 0x2, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000007540), 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r7, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa3000038024000380060001000200000006000300a1aa0000060001000000e9ff0700020001000000080001"], 0x64}}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x349600, 0x0)
close(r10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r13, {0x10}, {0x3}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0xd688, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x7, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0x6, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x62, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x3fe, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa89, 0x80000040, 0x2, 0x7, 0x7, 0x106, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x8, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8004, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x6, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x8000009, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x5, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x4, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x20003, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x8, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7d9, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x7, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8, 0x1, 0x1, 0x2, 0x2, 0x5, 0x6, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0xbff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x4409c}, 0x0)

1.679212478s ago: executing program 3 (id=9811):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0xf810, 0x8, 0xdbc, 0x101, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x23}}}}})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
close(0x3)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) (async, rerun: 64)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x800}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xfffe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x40) (async, rerun: 64)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x27, 0xe40, 0x0, &(0x7f0000000640)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)

1.665023729s ago: executing program 4 (id=9813):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
close(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
socket$inet(0x2, 0x4000000000000001, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
r9 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r9, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x48000, &(0x7f00000014c0)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c)
sendmmsg(r8, &(0x7f0000006ec0)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)="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", 0x2b1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x73, 0x3f, &(0x7f0000000840)="b66c34ce4af3b90654b6e183482e991b679af17e8ec544f6d6ea747f907772c3a167502ef80776aa209734923005a81a7eabace809624563660b5071cd40d32b66226ed2c22113efda28b12bb852fc66197918171f537d9557df2cacc5bc9fac51a7df66f6a9d53621c853a4fd54f8be847416bff20e6d8cfc4ce0c4c41048908640f1a888703c9e735e3d0819cecc2aee76da7f845cdd1f2f934cda0dcb9f1b2ef5cc76", &(0x7f0000000340)=""/63, 0xa, 0x0, 0xffffff81, 0x3, &(0x7f0000000480)="70bc57f90b4d5b5007a335c65c29e55a8a7a5998cefaea321a02bcc90f4756dfc18eabd7e2ed6248ee2fbdfc9b83cf35a0c3ff07e99ec8618e3e9377d04805a43912a1dbcf255fccc47775fc8a1e18dc991827e5825de1c39236d6d25084a595c32d2945aef86436e9514919acfa5b9af0d884e5f0a8b8aa69535fe947a7e3abc22d417d3dca2a45941cd71bfec672511527b72b3e2a9c5346", &(0x7f00000006c0)="e5ad28", 0x2, 0x0, 0xa03}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000dc24344a7bf491f91d341565d09a08c5214f2385988484dd7be3ec734182a60679edbe57276cf2c68f42b2ebd894b5a4ff2349600c853c8c03a1524771b0e32e9c0ba89cd78dcf4247096fba", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000160000f7ff00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x1f, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000030000000000000006000000184a0000830000000000000000000000180000000600000000000000020000001847000006000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008e10000b704000002000000850000008204000000d552f5275ab5565d850000006a0000001801000020786c2500000000002020207b1af8f900000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000654c96ed92d7203c00000000000000000010000183800000100000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6402}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

1.535369174s ago: executing program 0 (id=9814):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000009500000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r2 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x3, r3, 0x1, 0x1, 0x6, @broadcast}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES8=r2], 0xdd12}], 0x1, 0x0, 0x0, 0x4008010}, 0x20040851)
r4 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@deltclass={0x50, 0x29, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0x10}, {0x2, 0xffea}, {0x8, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x81}}, @TCA_RATE={0x6, 0x5, {0xbd, 0x7}}, @TCA_RATE={0x6, 0x5, {0x10, 0x4}}, @TCA_RATE={0x6, 0x5, {0xe5, 0xfc}}, @tclass_kind_options=@c_prio={0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x44804}, 0x804)

1.533063977s ago: executing program 3 (id=9815):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001140)={<r2=>r0, 0x3, 0xfffffffffffff2e5, 0x75})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001180)={'sit0\x00', 0x1000})
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f00000003c0)={{0x8, @multicast2, 0x4e21, 0x1, 'nq\x00', 0x28, 0x3a6, 0x3}, {@private=0xa010300, 0xfffd, 0x2000, 0x8, 0x8, 0x2000050}}, 0x44)
getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f00000000c0))
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x40, 0x1, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x1b, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000001000)={<r5=>0x0, 0x7}, &(0x7f0000001040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000010c0)={0x4, 0x9, 0x1, 0x5, 0x7f, 0x7, 0x4, 0x5, r5}, &(0x7f0000001100)=0x20)
sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0)

1.518472982s ago: executing program 2 (id=9816):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xab7, 0x4)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000)
sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000400}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r10=>0x0})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r11)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002dbd7000fcdbdf252100000008000300", @ANYRES32=r10, @ANYBLOB="24002d80050001000900000008000300edc7ee6d05000400000000000800020003"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4000094)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IE={0xd, 0x2a, [@random={0xdd, 0x7, 'abcdefg'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r16=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r14, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x3, 0x19}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x8000)

1.46371986s ago: executing program 3 (id=9817):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
shutdown(r1, 0x1)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)

1.35955497s ago: executing program 0 (id=9818):
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x10000}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r4, @ANYBLOB="08801b0000000000"], 0x34}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r10=>0x0})
r11 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', <r12=>0x0})
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r15 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r14, r10, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)
close(r15)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.326825647s ago: executing program 1 (id=9819):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x3, 0x2)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[], 0x138c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
splice(r3, 0x0, r1, 0x0, 0x16a, 0x1200000000000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x8000)
pipe(&(0x7f0000000040)) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async)
accept4(r2, 0x0, 0x0, 0x800) (async)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x3, 0x2) (async)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[], 0x138c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) (async)
splice(r3, 0x0, r1, 0x0, 0x16a, 0x1200000000000000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) (async)

1.262575193s ago: executing program 3 (id=9820):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002480)=ANY=[@ANYBLOB="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", @ANYBLOB="b1e89de5f90c58874c60583a1f815b2abec3d966ed5e58647d465af5b3601e4d55c268c667c6b0f3e18586362cb39dab10369515b187615978046ec1a45f9192cb36845a6e9ec021d7c78439ae777cd0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffb7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x5e8, 0x3d0, 0x3d0, 0xffffffff, 0x298, 0x298, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0xfffffff7, 0x4, 0x0, [0x0, 0x0, 0x0, 0x8, 0xe, 0x3ff, 0x1, 0x5, 0x2, 0x40, 0xfffa, 0x7, 0x86, 0x800, 0x3, 0x588], 0xb}}, @common=@hbh={{0x48}, {0x2, 0x4, 0x0, [0xc, 0x4, 0x6, 0x8001, 0xf2, 0x3ff, 0x0, 0x88d3, 0x5, 0x7, 0x1, 0x6, 0x9, 0x33, 0xb, 0x6], 0x4}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv6=@remote, @ipv6=@private0, @port=0x4e21, @port=0x4e23}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x6}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@mcast2, @icmp_id=0x66, @port=0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x3ceb}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4=@dev={0xac, 0x14, 0x14, 0xa}, @icmp_id=0x65, @port=0x4e20}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x80, 0x8, 0x2}}, @common=@hl={{0x28}, {0x0, 0x6}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x11, @ipv4=@multicast2, @ipv6=@local, @gre_key=0x9, @icmp_id=0x67}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0xfffffdc8, &(0x7f0000000340)}, 0xc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b700009100000000", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.18352318s ago: executing program 2 (id=9821):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c000180060006008848000010"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

1.143077248s ago: executing program 1 (id=9822):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x0, 0x40004000007, 0x6811221d, 0x8, 0x8000000000000003, 0x200000200000003, 0xd}, {0x7, 0xfffffffffffffffd, 0x6, 0x7}, 0x401, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in=@remote, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3, 0xffffffff}}, 0xe8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800800101"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf0300000000000085000000a4000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

1.092870526s ago: executing program 0 (id=9823):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0063ff81", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000100), &(0x7f0000000200)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

925.764554ms ago: executing program 0 (id=9824):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
syz_emit_ethernet(0x6e, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r3=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x6}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRES16=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
sendmsg$802154_raw(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)="0d4356c940acc4ef19b6856b", 0xc}, 0x1, 0x0, 0x0, 0x1}, 0x40001)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001720c002b8008000100", @ANYRES32=r5, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000c8d1)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000000100)='7', 0x1, 0x24044051, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', <r8=>0x0, 0x7800, 0x8708, 0xffffffff, 0xfffffff9, {{0x13, 0x4, 0x3, 0x3e, 0x4c, 0x64, 0x0, 0x2c, 0x0, 0x0, @empty, @loopback, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xd7, [@private=0xa010101]}, @lsrr={0x83, 0x7, 0x2, [@multicast1]}, @generic={0x86, 0x9, "f1efa3d860fa1a"}, @noop, @cipso={0x86, 0xc, 0x1, [{0x5, 0x6, "33af2a73"}]}, @timestamp={0x44, 0x8, 0xb4, 0x0, 0x2, [0x3d2]}, @generic={0x88, 0x7, "00ef0b842f"}]}}}}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x87, &(0x7f0000000200)=""/135, 0x0, 0x0, '\x00', r8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="cfbba9a8cbb600008268682fae9c01de00000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100b00000009500000000000000b7020000000080007b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff7600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000bf9800000000000056080000000000408500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)

925.202711ms ago: executing program 1 (id=9825):
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2bc, 0x9, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DESC={0x208, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0xb8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x41ce}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa6cb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2448}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x838f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4a8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffff7e4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x900}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb4b6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc13}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff65fa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1a}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4b}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x7c, 0x12, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfffff184}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x304}}, 0x20050800) (async, rerun: 32)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x35}, 0x14) (rerun: 32)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x95) (async)
r3 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async)
sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r1, @ANYRES16=r6, @ANYBLOB="a1830000000000000000050000000800030027b558007e7d0c92f994adf6f33aefd336727d166a5b4595875e97d27aa04b8a04c3fe42cd91a696446fb43e04cb1af095"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) (async, rerun: 64)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000f40)={0x3ac, r6, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0xffffffffffffff84}, @val={0xc, 0x99, {0xf, 0x74}}}}, [@NL80211_ATTR_NAN_FUNC={0x384, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xb2}, @NL80211_NAN_FUNC_SRF={0x378, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF={0x103, 0x2, "26fa35e3786dbe4ba8754b0e16f6af081ec370cea3d04eda66990e4101546e26b40ef0aa6b47603a0901b768c1a5a8af5db418db9d8422a35c56c6cdf1948fca47913b04f82c6d994e1ddbcba4374b56f1111a743204eb23f17b361ead68268e1877ede7cd9e70a80d14afd4f1e7536039d44b4eae43335726fe396cd6134a61c89f753eccb07d16b968fc7f71062b1156faeb958e9babbdbabdffc10a6a79b0658410339502927ce1e1e552501477ea9c524618c8f73e4bf2f9a3ff507cd1abf358dfd2cd226bdc9aa6b977fda1f75b4c0927245fda89013dab22047d90a1eba424efe89b71ca040dbf7b8e8b81870e00"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0xffffffffffffffab}, @NL80211_NAN_SRF_BF={0x103, 0x2, "21908eedc98116f80bcc334190539363a079e6fe747ea73262fc2de37d28521e646c917fa93bdf3743ea36131938f59d0abeb4edfcf2242482bc448ac2d6fb3bf53368d084eee747b14903d69502d519acd3306ffd1128cd8506377da1f4c0ec9cdf1ddaca625b9a3b283997fbb489dd3096c49d550baaf96b68b0d9236349acf1afe31e758767213fafc3a5af65cf54dcd0d05579246f154bcd318d9c87ac96e5c54dc00c6de9d5e3562416a17eccbbcdbe1f3a5522e66509e8d98205041d748fb976c1f7d9c2542fc6a4c2b0d83d2de5da6c38829dc456f66aee0de2dad7a9c2fc5b23b5122668e5d4bf13323703fc7559a49c8bc610c7e83cb004bcec5c"}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x8006}, 0x4004005) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f00000002c0)='%', 0x0, 0xd01, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) (async, rerun: 32)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="00000100000000000082117d6e00000000080000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000400"/28], 0x50) (async, rerun: 64)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2, 0x0, 0x1}, 0x50) (rerun: 64)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r7, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r8}, 0x20) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) (rerun: 64)

811.583036ms ago: executing program 0 (id=9826):
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008800)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x71c7}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd292}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x95}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4048000}, 0x240000c0)
recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001040)=""/4117, 0x1044}], 0x1}}], 0x1003, 0x10122, 0x0)

754.484349ms ago: executing program 0 (id=9827):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d30000000000000280016802400018014000b"], 0x64}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x14000008}, 0x20000000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000980)="75909664", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="0667", 0x2}], 0x1, &(0x7f0000004400)=ANY=[@ANYBLOB="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"], 0x1260}}], 0x2, 0x4000801)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000033c0)=""/4101, 0x1005, 0x0, 0x0}, &(0x7f0000002100)=0x40)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES16=r2, @ANYRESOCT=r2, @ANYRES64=r2, @ANYBLOB="747d3920cadf16691142d7791006e38a7ee5489f05fdea223c072daad66ca341a6356af972939c87208933cfc03578553e5a4f2a0c164df733a81011d76b219a8ecf", @ANYBLOB="d17d8f7db7f998d21a8f1364e33236bee01b1a8cabb6a07c91cb3b05598f6b5bb377fdecf243ca32c3dcb182c87b42027c8f7973b7df8073334c55d7166ec5b27282a32bcd01624ab4dd12d3e9b7721fcf8a90e247313f28cf4f9f473417fbdc86571b25fc503e8a267fb54323aefadf3c4fe87c3c1f5732f99b540ec0bb6e21319c7f505546a7aa0d8a0e6bc17de4829b4e785d3395f0"], 0x50)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYRES64=r3], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r3, 0x5, 0x0, @val=@tcx}, 0x1c)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="030000000400000005"], 0xc)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r5 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$unix(r5, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701000002"], 0x28, 0x2000c000}}], 0x2, 0x88)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x68, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x884}, 0x2)
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$sock_timeval(r9, 0x1, 0x15, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX=r6], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xd, '\x00', r8, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

310.38458ms ago: executing program 2 (id=9828):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4)
sendto$unix(r1, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (fail_nth: 28)
bind$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}})

0s ago: executing program 2 (id=9829):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r2=>r1, 0x5f, 0x6, 0xa})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000090000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a0000800000000000ff79ffffffffffff000000", @ANYRES32, @ANYRES16=r5, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r5], 0x50)
write(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)
close(0xffffffffffffffff)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r8=>0x0, &(0x7f0000000100)=0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x2b}, r8}, 0x14)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3006}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80841}, 0x4800)
unshare(0x22020600)
r9 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0xb0000000})
ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000002c0))

kernel console output (not intermixed with test programs):

 in process `syz.4.8690'.
[ 1170.521337][ T8588] netlink: 'syz.3.8698': attribute type 10 has an invalid length.
[ 1170.903227][ T8591] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8700'.
[ 1171.285527][ T8609] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8704'.
[ 1171.313219][ T8609] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8704'.
[ 1171.485370][ T8618] netlink: 'syz.3.8706': attribute type 1 has an invalid length.
[ 1171.493448][ T8618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8706'.
[ 1171.873022][ T8635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8711'.
[ 1172.038444][ T8636] lo speed is unknown, defaulting to 1000
[ 1172.053933][ T8636] lo speed is unknown, defaulting to 1000
[ 1172.148244][ T8647] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8714'.
[ 1172.173640][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8714'.
[ 1172.200820][ T8647] veth1_macvtap: left promiscuous mode
[ 1172.358873][ T8654] team0: No ports can be present during mode change
[ 1172.473446][ T8660] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8719'.
[ 1172.488996][ T8660] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8719'.
[ 1172.604996][   T29] audit: type=1804 audit(1781721454.628:36): pid=8665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8721" name="/newroot/538/cgroup.controllers" dev="tmpfs" ino=2770 res=1 errno=0
[ 1172.700020][   T29] audit: type=1800 audit(1781721454.668:37): pid=8665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8721" name="cgroup.controllers" dev="tmpfs" ino=2770 res=0 errno=0
[ 1173.427090][ T8706] syzkaller1: entered promiscuous mode
[ 1173.433257][ T8706] syzkaller1: entered allmulticast mode
[ 1173.483956][ T8708] syzkaller0: entered promiscuous mode
[ 1173.489616][ T8708] syzkaller0: entered allmulticast mode
[ 1173.871627][ T8726] bond2: option lacp_rate: invalid value (128)
[ 1173.900174][ T8726] bond2 (unregistering): Released all slaves
[ 1173.992780][ T8734] netlink: 'syz.3.8740': attribute type 2 has an invalid length.
[ 1174.014460][ T8734] netlink: 'syz.3.8740': attribute type 1 has an invalid length.
[ 1174.716022][ T8784] lo speed is unknown, defaulting to 1000
[ 1174.728259][ T8784] lo speed is unknown, defaulting to 1000
[ 1177.151230][ T8745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1177.790224][ T8835] __nla_validate_parse: 9 callbacks suppressed
[ 1177.790242][ T8835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8767'.
[ 1177.835166][ T8835] netlink: 'syz.4.8767': attribute type 7 has an invalid length.
[ 1177.846163][ T8835] netlink: 'syz.4.8767': attribute type 8 has an invalid length.
[ 1177.856242][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8767'.
[ 1177.875727][ T8835] gretap0: entered promiscuous mode
[ 1177.883232][ T8835] gretap0: left promiscuous mode
[ 1177.940149][T24332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1177.951800][T24332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1177.960848][T24332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1177.970241][T24332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1177.978487][T24332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1178.076473][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8769'.
[ 1178.280295][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8770'.
[ 1178.315103][ T8848] netlink: 348 bytes leftover after parsing attributes in process `syz.2.8770'.
[ 1178.325847][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8770'.
[ 1178.348561][ T8848] netlink: 348 bytes leftover after parsing attributes in process `syz.2.8770'.
[ 1178.376777][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8770'.
[ 1178.510972][ T8860] netlink: 'syz.4.8772': attribute type 4 has an invalid length.
[ 1178.521140][ T8860] netlink: 'syz.4.8772': attribute type 4 has an invalid length.
[ 1178.531711][ T8863] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8773'.
[ 1178.599809][ T8837] lo speed is unknown, defaulting to 1000
[ 1178.607784][ T8837] lo speed is unknown, defaulting to 1000
[ 1178.613936][ T8868] netlink: 'syz.2.8774': attribute type 21 has an invalid length.
[ 1178.614015][ T8868] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8774'.
[ 1178.742037][ T8874] netlink: 'syz.2.8776': attribute type 1 has an invalid length.
[ 1179.206117][ T8891] 8021q: adding VLAN 0 to HW filter on device bond16
[ 1179.233730][ T8891] bond16: option ad_select: unable to set because the bond device is up
[ 1179.324330][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1179.331793][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1179.340599][ T8837] bridge_slave_0: entered allmulticast mode
[ 1179.348481][ T8837] bridge_slave_0: entered promiscuous mode
[ 1179.357361][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1179.365199][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1179.372792][ T8837] bridge_slave_1: entered allmulticast mode
[ 1179.380491][ T8837] bridge_slave_1: entered promiscuous mode
[ 1179.418531][ T8837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1179.435843][ T8837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1179.489093][ T8837] team0: Port device team_slave_0 added
[ 1179.507502][ T8837] team0: Port device team_slave_1 added
[ 1179.515701][ T8904] netlink: 'syz.0.8785': attribute type 1 has an invalid length.
[ 1179.529163][ T8909] netlink: 'syz.4.8784': attribute type 4 has an invalid length.
[ 1179.582026][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1179.598942][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1179.646593][ T8837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1179.674935][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1179.682339][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1179.737271][ T8837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1179.851238][ T8837] hsr_slave_0: entered promiscuous mode
[ 1179.868740][ T8837] hsr_slave_1: entered promiscuous mode
[ 1179.875448][ T8837] debugfs: 'hsr0' already exists in 'hsr'
[ 1179.881208][ T8837] Cannot create hsr debugfs directory
[ 1180.003937][ T4944] Bluetooth: hci3: command tx timeout
[ 1180.080594][ T8937] openvswitch: netlink: Message has 8 unknown bytes.
[ 1180.162127][ T8943] bridge_slave_0: left allmulticast mode
[ 1180.178544][ T8943] bridge_slave_0: left promiscuous mode
[ 1180.192200][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1180.219911][ T8943] bridge_slave_1: left allmulticast mode
[ 1180.226523][ T8943] bridge_slave_1: left promiscuous mode
[ 1180.232411][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1180.246348][ T8943] bond0: (slave bond_slave_0): Releasing backup interface
[ 1180.256851][ T8943] bond0: (slave bond_slave_1): Releasing backup interface
[ 1180.271129][ T8943] team0: Port device team_slave_0 removed
[ 1180.280577][ T8943] team0: Port device team_slave_1 removed
[ 1180.288737][ T8943] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1180.472271][ T8837] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1180.682215][ T8837] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1180.804775][ T8837] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1180.878021][ T8977] syzkaller0: entered promiscuous mode
[ 1180.887227][ T8977] syzkaller0: entered allmulticast mode
[ 1180.907754][ T8971] lo speed is unknown, defaulting to 1000
[ 1180.946636][ T8837] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1180.963025][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1181.112235][ T8971] lo speed is unknown, defaulting to 1000
[ 1181.166728][ T8988] netlink: 'syz.0.8799': attribute type 13 has an invalid length.
[ 1181.235981][ T8991] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1181.274824][T21970] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1181.736712][ T9001] netlink: 'syz.4.8802': attribute type 13 has an invalid length.
[ 1181.795614][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1181.923547][   T46] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1181.943696][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1182.083183][ T4944] Bluetooth: hci3: command tx timeout
[ 1183.109315][ T8941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1183.146510][ T8837] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1183.188552][ T8837] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1183.205746][ T8837] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1183.261094][ T8837] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1183.291208][ T8837] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1183.311076][ T9015] __nla_validate_parse: 8 callbacks suppressed
[ 1183.311095][ T9015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8805'.
[ 1183.353022][ T8837] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1183.377019][ T9020] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8807'.
[ 1183.385560][ T8837] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1183.405631][ T8837] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1183.430362][ T9029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8808'.
[ 1183.558908][ T8837] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1183.626771][ T8837] 8021q: adding VLAN 0 to HW filter on device team0
[ 1183.651196][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1183.658413][ T6907] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1183.697255][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1183.704465][ T6907] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1183.749654][ T9042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8813'.
[ 1184.130494][ T9069] netlink: 'syz.1.8817': attribute type 3 has an invalid length.
[ 1184.163802][ T4944] Bluetooth: hci3: command tx timeout
[ 1184.540859][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8820'.
[ 1184.679183][ T9100] lo speed is unknown, defaulting to 1000
[ 1184.687391][ T9100] lo speed is unknown, defaulting to 1000
[ 1184.726374][ T9104] netlink: 'syz.1.8824': attribute type 1 has an invalid length.
[ 1184.748033][ T8837] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1184.826139][ T9104] bond17: (slave veth15): Enslaving as an active interface with a down link
[ 1184.877701][ T9106] bond17: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1185.010525][ T8837] veth0_vlan: entered promiscuous mode
[ 1185.031879][ T8837] veth1_vlan: entered promiscuous mode
[ 1185.108865][ T9113] netlink: 'syz.2.8827': attribute type 1 has an invalid length.
[ 1185.132463][ T8837] veth0_macvtap: entered promiscuous mode
[ 1185.144498][ T8837] veth1_macvtap: entered promiscuous mode
[ 1185.178647][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1185.258189][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1185.332288][ T6285] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.349862][ T6285] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.409324][ T9123] netlink: 'syz.4.8830': attribute type 8 has an invalid length.
[ 1185.409351][ T9124] netlink: 'syz.4.8830': attribute type 8 has an invalid length.
[ 1185.440089][ T6285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.456939][ T6285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.466499][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8830'.
[ 1185.526930][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8830'.
[ 1185.594363][ T9123] veth1_to_team: entered promiscuous mode
[ 1185.617057][ T9123] gretap0: entered promiscuous mode
[ 1185.635330][ T9123] veth1_to_team: left promiscuous mode
[ 1185.641933][ T9123] gretap0: left promiscuous mode
[ 1185.753355][ T9124] veth1_to_team: entered promiscuous mode
[ 1185.780032][ T9124] gretap0: entered promiscuous mode
[ 1185.799981][ T9124] veth1_to_team: left promiscuous mode
[ 1185.821441][ T9124] gretap0: left promiscuous mode
[ 1186.005083][ T9142] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8834'.
[ 1186.020000][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8834'.
[ 1186.030876][ T9145] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8836'.
[ 1186.077280][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1186.088891][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1186.135316][ T9142] tap0: tun_chr_ioctl cmd 1074025677
[ 1186.147436][ T9142] tap0: linktype set to 787
[ 1186.170762][ T9142] tap0: tun_chr_ioctl cmd 2148553947
[ 1186.215118][T20561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1186.229313][T20561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1186.244710][ T4944] Bluetooth: hci3: command tx timeout
[ 1186.403486][ T9164] sock: sock_set_timeout: `syz.3.8768' (pid 9164) tries to set negative timeout
[ 1186.448175][ T9156] sctp: [Deprecated]: syz.2.8842 (pid 9156) Use of int in maxseg socket option.
[ 1186.448175][ T9156] Use struct sctp_assoc_value instead
[ 1186.456129][ T9164] ip6tnl1: entered allmulticast mode
[ 1186.936825][T24332] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1186.958008][T24332] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1186.969596][T24332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1186.977891][T24332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1186.991622][T24332] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1187.407613][ T6285] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1187.430006][ T6285] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1187.496798][T28871] syz_tun (unregistering): left promiscuous mode
[ 1187.511224][ T6285] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1187.521482][ T6285] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1187.620493][T20561] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1187.633153][T20561] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 57656 - 0
[ 1187.678399][ T9190] lo speed is unknown, defaulting to 1000
[ 1187.696273][ T9190] lo speed is unknown, defaulting to 1000
[ 1187.858939][T20561] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1187.895147][T20561] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 57656 - 0
[ 1188.037960][T20561] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1188.048332][T20561] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 57656 - 0
[ 1188.102689][ T9237] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 1188.133032][ T9237] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 1188.151154][ T9237] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 1188.179411][T20561] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode
[ 1188.192347][ T9237] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1188.209740][T20561] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1188.220111][T20561] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 57656 - 0
[ 1188.293393][ T9241] netlink: 'syz.1.8857': attribute type 14 has an invalid length.
[ 1188.538181][ T9250] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1188.606286][ T9253] ip6erspan0: entered allmulticast mode
[ 1188.705401][ T9258] __nla_validate_parse: 4 callbacks suppressed
[ 1188.705420][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8863'.
[ 1189.043280][ T4944] Bluetooth: hci5: command tx timeout
[ 1189.207871][T20561] dvmrp0: left allmulticast mode
[ 1189.338719][ T9300] netlink: 'syz.4.8868': attribute type 1 has an invalid length.
[ 1189.699037][T20561] geneve0 (unregistering): left promiscuous mode
[ 1189.806282][T20561] bond0 (unregistering): Released all slaves
[ 1189.817330][T20561] bond1 (unregistering): Released all slaves
[ 1189.835168][T20561] bond2 (unregistering): Released all slaves
[ 1189.854869][T20561] bond3 (unregistering): Released all slaves
[ 1189.871009][T20561] bond4 (unregistering): Released all slaves
[ 1189.891524][T20561] bond5 (unregistering): Released all slaves
[ 1189.908832][T20561] bond6 (unregistering): Released all slaves
[ 1189.925684][T20561] bond7 (unregistering): Released all slaves
[ 1189.941457][T20561] bond8 (unregistering): Released all slaves
[ 1189.958420][T20561] bond9 (unregistering): Released all slaves
[ 1189.977561][T20561] bond10 (unregistering): Released all slaves
[ 1189.997055][T20561] bond11 (unregistering): Released all slaves
[ 1190.017516][T20561] bond12 (unregistering): Released all slaves
[ 1190.033839][T20561] bond13 (unregistering): Released all slaves
[ 1190.056488][T20561] bond14 (unregistering): Released all slaves
[ 1190.070169][T20561] bond15 (unregistering): Released all slaves
[ 1190.084362][T20561] bond16 (unregistering): Released all slaves
[ 1190.107877][T20561] bond17 (unregistering): Released all slaves
[ 1190.121578][T20561] bond18 (unregistering): Released all slaves
[ 1190.139916][T20561] bond19 (unregistering): Released all slaves
[ 1190.161624][T20561] bond20 (unregistering): Released all slaves
[ 1190.191487][T20561] bond21 (unregistering): Released all slaves
[ 1190.219897][T20561] bond22 (unregistering): Released all slaves
[ 1190.259362][ T9300] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1190.264199][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1190.429686][ T9190] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1190.468225][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1190.519275][ T9190] bridge_slave_0: entered allmulticast mode
[ 1190.551001][ T9190] bridge_slave_0: entered promiscuous mode
[ 1190.620840][ T9190] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1190.639128][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1190.663949][ T9190] bridge_slave_1: entered allmulticast mode
[ 1190.681716][ T9190] bridge_slave_1: entered promiscuous mode
[ 1190.688708][ T9328] netlink: 'syz.4.8875': attribute type 1 has an invalid length.
[ 1190.763532][T20561] tipc: Left network mode
[ 1190.819095][ T9324] lo speed is unknown, defaulting to 1000
[ 1190.854193][ T9332] bond2: (slave geneve3): making interface the new active one
[ 1190.874248][ T9332] bond2: (slave geneve3): Enslaving as an active interface with an up link
[ 1190.950259][ T9190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1191.015911][ T9328] bond2 (unregistering): (slave geneve3): Releasing active interface
[ 1191.029202][ T9328] bond2 (unregistering): Released all slaves
[ 1191.108236][ T9324] lo speed is unknown, defaulting to 1000
[ 1191.130071][ T4944] Bluetooth: hci5: command tx timeout
[ 1191.141824][ T9337] 8021q: adding VLAN 0 to HW filter on device macsec1
[ 1191.164096][ T9190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1191.418818][ T9190] team0: Port device team_slave_0 added
[ 1191.493512][ T9190] team0: Port device team_slave_1 added
[ 1191.648536][ T9353] syzkaller0: entered promiscuous mode
[ 1191.660501][ T9353] syzkaller0: entered allmulticast mode
[ 1191.675888][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1191.697005][ T9356] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1191.704162][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1191.713838][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1191.765550][ T9190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1191.784865][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1191.791808][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1191.843239][ T9190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1192.082046][ T9368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8881'.
[ 1192.256115][ T9378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1192.441074][ T9190] hsr_slave_0: entered promiscuous mode
[ 1192.458077][ T9190] hsr_slave_1: entered promiscuous mode
[ 1192.473606][ T9190] debugfs: 'hsr0' already exists in 'hsr'
[ 1192.479429][ T9190] Cannot create hsr debugfs directory
[ 1192.675768][ T9387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8882'.
[ 1192.726407][ T9384] tipc: Started in network mode
[ 1192.738581][ T9384] tipc: Node identity 1256562b28fc, cluster identity 4711
[ 1192.747610][ T9384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1192.756575][ T9382] netlink: 'syz.0.8882': attribute type 1 has an invalid length.
[ 1192.783621][ T9382] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8882'.
[ 1192.806639][ T9382] netlink: 'syz.0.8882': attribute type 1 has an invalid length.
[ 1192.814980][ T9384] syzkaller0: entered promiscuous mode
[ 1192.821117][ T9384] syzkaller0: entered allmulticast mode
[ 1192.832130][ T9382] netlink: 638 bytes leftover after parsing attributes in process `syz.0.8882'.
[ 1192.833265][ T9384] tipc: Resetting bearer <eth:syzkaller0>
[ 1192.857759][ T9382] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8882'.
[ 1192.981684][ T9381] tipc: Resetting bearer <eth:syzkaller0>
[ 1193.205561][ T4944] Bluetooth: hci5: command tx timeout
[ 1195.286407][ T4944] Bluetooth: hci5: command tx timeout
[ 1195.837603][ T9381] tipc: Disabling bearer <eth:syzkaller0>
[ 1195.870098][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1195.878295][T21968] tipc: Node number set to 984241707
[ 1196.121663][ T9428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8891'.
[ 1196.210713][ T9428] IPv6: sit3: Disabled Multicast RS
[ 1196.217498][ T9428] sit3: entered allmulticast mode
[ 1196.232713][ T9424] syzkaller0: entered promiscuous mode
[ 1196.240803][ T9424] syzkaller0: entered allmulticast mode
[ 1196.631587][T20561] batadv0 (unregistering): left promiscuous mode
[ 1196.652052][T20561] batadv0 (unregistering): left allmulticast mode
[ 1196.670558][T20561] team0 (unregistering): Port device batadv0 removed
[ 1196.787176][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8895'.
[ 1197.467259][ T9467] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[ 1197.509843][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1197.834585][ T9487] netlink: 'syz.1.8897': attribute type 1 has an invalid length.
[ 1197.911101][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8897'.
[ 1198.149280][ T9487] bond19: entered promiscuous mode
[ 1198.155277][ T9487] 8021q: adding VLAN 0 to HW filter on device bond19
[ 1198.227352][T20561] IPVS: stop unused estimator thread 0...
[ 1198.920295][ T9517] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1198.956698][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1199.296107][ T9570] netlink: 'syz.4.8910': attribute type 2 has an invalid length.
[ 1199.318199][ T9570] netlink: 'syz.4.8910': attribute type 8 has an invalid length.
[ 1199.326224][ T9570] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8910'.
[ 1199.356325][ T9571] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8910'.
[ 1199.391217][ T9571] netlink: 'syz.4.8910': attribute type 2 has an invalid length.
[ 1199.410870][ T9571] netlink: 'syz.4.8910': attribute type 8 has an invalid length.
[ 1199.419074][ T9571] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8910'.
[ 1199.641508][ T9554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8908'.
[ 1199.846149][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1199.971382][ T9190] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1199.982615][ T9190] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1199.991942][ T9190] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1200.026614][ T9190] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1200.049181][ T9190] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1200.072012][ T9190] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1200.100647][ T9190] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1200.133794][ T9190] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1200.362252][ T9190] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1200.435789][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8917'.
[ 1200.441520][ T9190] 8021q: adding VLAN 0 to HW filter on device team0
[ 1200.454669][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8917'.
[ 1200.487499][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8917'.
[ 1200.511917][T20561] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1200.519171][T20561] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1200.581028][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1200.588253][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1200.856027][ T9624] mac80211_hwsim hwsim132 wlan1: entered promiscuous mode
[ 1201.147687][ T9637] __nla_validate_parse: 1 callbacks suppressed
[ 1201.147718][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8923'.
[ 1201.316206][ T9642] vlan2: entered allmulticast mode
[ 1201.346868][ T9642] hsr0: entered allmulticast mode
[ 1201.375259][ T9642] hsr_slave_0: entered allmulticast mode
[ 1201.391119][ T9642] hsr_slave_1: entered allmulticast mode
[ 1202.141142][ T9190] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1202.280142][ T9684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8930'.
[ 1202.313376][ T9190] veth0_vlan: entered promiscuous mode
[ 1202.373522][ T9190] veth1_vlan: entered promiscuous mode
[ 1202.480358][ T9190] veth0_macvtap: entered promiscuous mode
[ 1202.525629][ T9190] veth1_macvtap: entered promiscuous mode
[ 1202.716478][ T9190] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1202.770210][ T9190] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1202.841197][ T6909] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1202.880275][ T6909] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1202.927468][ T6909] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1202.949557][ T6909] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1203.255827][ T9709] mac80211_hwsim hwsim131 wlan0: entered promiscuous mode
[ 1203.280805][ T9709] batman_adv: batadv0: Adding interface: wlan0
[ 1203.307701][ T9709] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1203.352229][ T9709] batman_adv: batadv0: Interface activated: wlan0
[ 1203.466861][ T8335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1203.498663][ T8335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1203.749100][ T6285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1203.761840][ T6285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1204.489214][ T9715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1204.646005][ T9761] netlink: 'syz.3.8939': attribute type 362 has an invalid length.
[ 1204.953996][ T9773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8943'.
[ 1205.095569][T24332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1205.107933][T24332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1205.117165][T24332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1205.134440][T24332] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1205.145159][ T2367] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1205.866851][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8946'.
[ 1205.918713][ T9796] 8021q: adding VLAN 0 to HW filter on device bond20
[ 1206.208641][ T9805] dummy0: entered promiscuous mode
[ 1206.232451][ T9805] gretap0: entered promiscuous mode
[ 1206.245160][ T9805] debugfs: 'hsr1' already exists in 'hsr'
[ 1206.265479][ T9805] Cannot create hsr debugfs directory
[ 1206.279967][ T9805] hsr1: entered allmulticast mode
[ 1206.288845][ T9805] dummy0: entered allmulticast mode
[ 1206.303075][ T9805] gretap0: entered allmulticast mode
[ 1206.327172][ T9808] tunl0: Caught tx_queue_len zero misconfig
[ 1206.356253][ T9808] sch_tbf: burst 0 is lower than device tunl0 mtu (5376) !
[ 1206.420575][ T9776] lo speed is unknown, defaulting to 1000
[ 1206.447930][ T9776] lo speed is unknown, defaulting to 1000
[ 1206.679927][ T9821] netlink: 'syz.3.8953': attribute type 1 has an invalid length.
[ 1206.811888][ T9821] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1206.870886][ T9834] netlink: 'syz.4.8956': attribute type 1 has an invalid length.
[ 1206.937161][ T9825] bond1: (slave gretap1): making interface the new active one
[ 1206.970707][ T9825] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 1207.000934][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8956'.
[ 1207.161526][ T9834] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1207.203163][ T2367] Bluetooth: hci4: command tx timeout
[ 1207.293504][ T9835] bond2: (slave veth13): Enslaving as an active interface with a down link
[ 1207.321698][ T9836] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1207.333535][ T9836] bond2: (slave batadv1): making interface the new active one
[ 1207.343674][ T9836] batadv1: entered promiscuous mode
[ 1207.349394][ T9836] bond2: (slave batadv1): Enslaving as an active interface with an up link
[ 1207.358830][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8958'.
[ 1207.403097][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8958'.
[ 1207.508327][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8958'.
[ 1207.627526][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8960'.
[ 1207.636444][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8960'.
[ 1207.680094][ T9853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8960'.
[ 1207.712397][ T9865] netlink: 'syz.4.8963': attribute type 1 has an invalid length.
[ 1207.757411][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8960'.
[ 1207.778916][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8960'.
[ 1207.901382][ T9776] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1207.908642][ T9776] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1207.930777][ T9776] bridge_slave_0: entered allmulticast mode
[ 1207.938637][ T9776] bridge_slave_0: entered promiscuous mode
[ 1207.947798][ T9776] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1207.955014][ T9776] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1207.962582][ T9776] bridge_slave_1: entered allmulticast mode
[ 1207.970402][ T9776] bridge_slave_1: entered promiscuous mode
[ 1208.008458][ T9776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1208.021402][ T9776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1208.174828][ T9776] team0: Port device team_slave_0 added
[ 1208.184923][ T9776] team0: Port device team_slave_1 added
[ 1208.227212][ T9776] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1208.234197][ T9776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1208.287636][ T9776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1208.307232][ T9776] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1208.309916][ T9882] openvswitch: netlink: Flow key attr not present in new flow.
[ 1208.314205][ T9776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1208.314234][ T9776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1208.356793][ T9776] hsr_slave_0: entered promiscuous mode
[ 1208.382066][ T9776] hsr_slave_1: entered promiscuous mode
[ 1208.388586][ T9776] debugfs: 'hsr0' already exists in 'hsr'
[ 1208.394335][ T9776] Cannot create hsr debugfs directory
[ 1208.777244][ T9904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8973'.
[ 1208.837473][ T9898] netlink: 'syz.4.8972': attribute type 1 has an invalid length.
[ 1208.872296][ T9909] netlink: 'syz.3.8973': attribute type 1 has an invalid length.
[ 1209.036279][ T9895] gretap3: entered allmulticast mode
[ 1209.061125][ T9912] bond10: (slave dummy0): Releasing active interface
[ 1209.094991][ T9912] batman_adv: batadv0: Adding interface: dummy0
[ 1209.101273][ T9912] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1209.126464][ T9912] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[ 1209.394892][ T4944] Bluetooth: hci4: command tx timeout
[ 1209.697868][ T9945] sctp: [Deprecated]: syz.3.8986 (pid 9945) Use of int in maxseg socket option.
[ 1209.697868][ T9945] Use struct sctp_assoc_value instead
[ 1209.994623][ T9966] netlink: 'syz.2.8990': attribute type 1 has an invalid length.
[ 1210.005619][ T9966] netlink: 'syz.2.8990': attribute type 1 has an invalid length.
[ 1210.013849][ T9966] netlink: 'syz.2.8990': attribute type 2 has an invalid length.
[ 1210.021804][ T9966] netlink: 'syz.2.8990': attribute type 1 has an invalid length.
[ 1210.096958][ T9968] bond2: ARP target 9.0.0.0 is already present
[ 1210.103177][ T9968] bond2: option arp_ip_target: invalid value (9)
[ 1210.111917][ T9968] bond2 (unregistering): Released all slaves
[ 1210.118020][ T9971] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[ 1210.211845][ T9973] xt_hashlimit: size too large, truncated to 1048576
[ 1210.379492][ T9987] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1210.630654][ T9776] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1210.639937][ T9776] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1210.653282][ T9995] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[ 1210.669626][ T9776] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1210.700670][ T9776] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1210.727070][ T9776] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1210.879524][ T9776] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1210.887110][T10001] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1210.956848][ T9776] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1210.967412][ T9776] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1211.091918][T10019] tipc: Invalid UDP bearer configuration
[ 1211.091967][T10019] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1211.118659][T10022] netlink: 'syz.3.9007': attribute type 1 has an invalid length.
[ 1211.140319][T10020] tipc: Invalid UDP bearer configuration
[ 1211.140358][T10020] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1211.190341][ T9776] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1211.204612][T10024] syz.2.9008: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1211.219868][T10024] CPU: 0 UID: 0 PID: 10024 Comm: syz.2.9008 Not tainted syzkaller #0 PREEMPT(full) 
[ 1211.219895][T10024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1211.219908][T10024] Call Trace:
[ 1211.219917][T10024]  <TASK>
[ 1211.219928][T10024]  dump_stack_lvl+0xe8/0x150
[ 1211.219958][T10024]  warn_alloc+0x249/0x340
[ 1211.219985][T10024]  ? __pfx_stack_trace_save+0x10/0x10
[ 1211.220019][T10024]  ? __pfx_warn_alloc+0x10/0x10
[ 1211.220065][ T9776] 8021q: adding VLAN 0 to HW filter on device team0
[ 1211.220062][T10024]  ? __kasan_kmalloc+0x93/0xb0
[ 1211.220089][T10024]  ? __kmalloc_cache_noprof+0x318/0x660
[ 1211.220111][T10024]  ? xskq_create+0x56/0x170
[ 1211.220136][T10024]  ? xsk_init_queue+0x8a/0xe0
[ 1211.220159][T10024]  ? xsk_setsockopt+0x52a/0x960
[ 1211.220182][T10024]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1211.220200][T10024]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 1211.220219][T10024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1211.220245][T10024]  __vmalloc_node_range_noprof+0x12c/0x1730
[ 1211.220301][T10024]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1211.220335][T10024]  ? __kasan_kmalloc+0x93/0xb0
[ 1211.220368][T10024]  vmalloc_user_noprof+0xad/0xe0
[ 1211.220395][T10024]  ? xskq_create+0xbf/0x170
[ 1211.220423][T10024]  xskq_create+0xbf/0x170
[ 1211.220452][T10024]  xsk_init_queue+0x8a/0xe0
[ 1211.220481][T10024]  xsk_setsockopt+0x52a/0x960
[ 1211.220505][T10024]  ? __fget_files+0x2a/0x420
[ 1211.220530][T10024]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1211.220556][T10024]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1211.220674][T10024]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1211.220707][T10024]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1211.220733][T10024]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1211.220760][T10024]  do_sock_setsockopt+0x17c/0x1b0
[ 1211.220785][T10024]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1211.220808][T10024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1211.220829][T10024]  do_syscall_64+0x174/0x580
[ 1211.220848][T10024]  ? trace_irq_disable+0x3b/0x140
[ 1211.220875][T10024]  ? clear_bhb_loop+0x40/0x90
[ 1211.220900][T10024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1211.220920][T10024] RIP: 0033:0x7ff9e199ce59
[ 1211.220940][T10024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1211.220957][T10024] RSP: 002b:00007ff9e27de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1211.220977][T10024] RAX: ffffffffffffffda RBX: 00007ff9e1c15fa0 RCX: 00007ff9e199ce59
[ 1211.220993][T10024] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[ 1211.221006][T10024] RBP: 00007ff9e1a32d6f R08: 0000000000000004 R09: 0000000000000000
[ 1211.221018][T10024] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1211.221038][T10024] R13: 00007ff9e1c16038 R14: 00007ff9e1c15fa0 R15: 00007ffe8f718528
[ 1211.221071][T10024]  </TASK>
[ 1211.221086][T10024] Mem-Info:
[ 1211.241912][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1211.242014][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1211.278121][T20566] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1211.312455][T10024] active_anon:5918 inactive_anon:0 isolated_anon:0
[ 1211.312455][T10024]  active_file:2691 inactive_file:40898 isolated_file:0
[ 1211.312455][T10024]  unevictable:768 dirty:272 writeback:0
[ 1211.312455][T10024]  slab_reclaimable:14517 slab_unreclaimable:180077
[ 1211.312455][T10024]  mapped:29614 shmem:1295 pagetables:3623
[ 1211.312455][T10024]  sec_pagetables:0 bounce:0
[ 1211.312455][T10024]  kernel_misc_reclaimable:0
[ 1211.312455][T10024]  free:1216137 free_pcp:23860 free_cma:0
[ 1211.313375][T20566] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1211.318602][T10024] Node 0 active_anon:23672kB inactive_anon:0kB active_file:10764kB inactive_file:163392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32440kB dirty:1084kB writeback:0kB shmem:3644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18156kB pagetables:14352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1211.432257][T10025] netlink: 'syz.2.9008': attribute type 10 has an invalid length.
[ 1211.457098][T10024] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86016kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1211.480609][ T4944] Bluetooth: hci4: command tx timeout
[ 1211.512119][T10024] Node 0 
[ 1211.782649][T10025] team0: Port device dummy0 added
[ 1211.795458][T10025] openvswitch: netlink: Message has 2 unknown bytes.
[ 1211.802620][T10025] netlink: 'syz.2.9008': attribute type 10 has an invalid length.
[ 1211.849602][T10024] DMA free:11100kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:164kB local_pcp:92kB free_cma:0kB
[ 1211.880123][T10024] lowmem_reserve[]: 0 2493 2493 2493 2493
[ 1211.889420][T10024] Node 0 DMA32 free:1165588kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27376kB inactive_anon:0kB active_file:10764kB inactive_file:163392kB unevictable:1536kB writepending:1092kB zspages:0kB present:3129332kB managed:2552980kB mlocked:0kB bounce:0kB free_pcp:26356kB local_pcp:14472kB free_cma:0kB
[ 1211.923943][T10025] team0: Port device dummy0 removed
[ 1211.935231][T10024] lowmem_reserve[]: 0 0 0 0 0
[ 1211.947130][T10025] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1211.982555][T10024] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:684kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[ 1212.025856][T10024] lowmem_reserve[]: 0 0 0 0 0
[ 1212.084834][T10024] Node 1 Normal free:3687268kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:66548kB local_pcp:32264kB free_cma:0kB
[ 1212.130218][T10024] lowmem_reserve[]: 0 0 0 0 0
[ 1212.135025][T10024] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 0*64kB 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11100kB
[ 1212.152105][T10024] Node 0 DMA32: 7958*4kB (UE) 9180*8kB (UME) 5814*16kB (UM) 600*32kB (UM) 454*64kB (UM) 772*128kB (UME) 697*256kB (UM) 366*512kB (UM) 266*1024kB (UME) 87*2048kB (UM) 0*4096kB = 1161752kB
[ 1212.186313][T10024] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1212.242025][T10024] Node 1 Normal: 11*4kB (UM) 13*8kB (UM) 19*16kB (UM) 21*32kB (UM) 16*64kB (UM) 14*128kB (UM) 16*256kB (UM) 18*512kB (UM) 14*1024kB (UM) 11*2048kB (U) 887*4096kB (UM) = 3687268kB
[ 1212.282065][T10024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1212.291670][T10024] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1212.331351][T10024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1212.348940][T10024] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1212.371965][T10024] 46142 total pagecache pages
[ 1212.379157][T10024] 0 pages in swap cache
[ 1212.384872][T10024] Free swap  = 124996kB
[ 1212.389078][T10024] Total swap = 124996kB
[ 1212.393381][T10024] 2097051 pages RAM
[ 1212.397313][T10024] 0 pages HighMem/MovableOnly
[ 1212.402016][T10024] 427020 pages reserved
[ 1212.406430][T10024] 0 pages cma reserved
[ 1212.412325][T10065] netlink: 'syz.4.9016': attribute type 1 has an invalid length.
[ 1212.420071][T10065] netlink: 'syz.4.9016': attribute type 11 has an invalid length.
[ 1212.427883][T10065] __nla_validate_parse: 7 callbacks suppressed
[ 1212.427900][T10065] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9016'.
[ 1212.887077][T10066] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1213.241207][T10066] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1213.295856][T10066] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1213.497321][T10114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9023'.
[ 1213.543104][ T4944] Bluetooth: hci4: command tx timeout
[ 1213.985854][ T6907] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0
[ 1214.015222][ T6907] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0
[ 1214.038770][ T6907] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.086807][T10131] netlink: 'syz.3.9027': attribute type 1 has an invalid length.
[ 1214.121025][ T6907] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0
[ 1214.135245][ T6907] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0
[ 1214.145551][ T6907] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.181969][ T6907] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0
[ 1214.214745][ T6907] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0
[ 1214.225936][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9028'.
[ 1214.253357][ T6907] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.290027][   T29] audit: type=1107 audit(1781721496.308:38): pid=10136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='vÅ'
[ 1214.310087][ T6907] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0
[ 1214.338373][ T6907] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0
[ 1214.363290][ T6907] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.437314][ T9776] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1214.587455][ T9776] veth0_vlan: entered promiscuous mode
[ 1214.640596][ T9776] veth1_vlan: entered promiscuous mode
[ 1214.715312][ T9776] veth0_macvtap: entered promiscuous mode
[ 1214.747785][T10161] tipc: New replicast peer: 255.255.255.255
[ 1214.764019][T10161] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1214.784421][ T9776] veth1_macvtap: entered promiscuous mode
[ 1214.829447][ T9776] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1214.854862][ T9776] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1214.875551][ T6285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1214.908724][ T6285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1214.945546][ T6285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1214.970797][ T6285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1215.059043][   T29] audit: type=1800 audit(1781721497.088:39): pid=10167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9036" name=20 dev="tmpfs" ino=2421 res=0 errno=0
[ 1215.292407][T20566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1215.342459][T20566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1215.447408][ T6275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1215.470144][ T6275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1215.509508][T10183] sctp: [Deprecated]: syz.2.9038 (pid 10183) Use of int in maxseg socket option.
[ 1215.509508][T10183] Use struct sctp_assoc_value instead
[ 1215.520555][T10182] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9040'.
[ 1215.604326][T10182] syzkaller1: entered promiscuous mode
[ 1215.642062][T10182] syzkaller1: entered allmulticast mode
[ 1215.985905][T10198] xt_CT: No such helper "syz0"
[ 1216.111460][T10209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9045'.
[ 1216.128655][T10209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9045'.
[ 1216.134503][T10206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9044'.
[ 1216.149348][T10206] veth0_to_team: Caught tx_queue_len zero misconfig
[ 1216.304096][T10216] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1216.321204][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9048'.
[ 1216.397895][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9049'.
[ 1216.415167][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9049'.
[ 1216.536514][T10224] syz_tun (unregistering): left allmulticast mode
[ 1216.688558][T10231] bond1: Unable to set up delay as MII monitoring is disabled
[ 1216.697573][T10231] bond1 (unregistering): Released all slaves
[ 1216.778533][T10237] syzkaller0: entered promiscuous mode
[ 1216.784474][T10237] syzkaller0: entered allmulticast mode
[ 1216.890179][T10242] team_slave_1: Caught tx_queue_len zero misconfig
[ 1217.080638][T10254] ip6tnl1: entered allmulticast mode
[ 1217.601972][T10289] __nla_validate_parse: 5 callbacks suppressed
[ 1217.601985][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9072'.
[ 1217.637545][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9072'.
[ 1218.028421][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9082'.
[ 1218.398078][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9087'.
[ 1218.455765][T10328] vxlan0: entered promiscuous mode
[ 1218.474703][T10328] vxlan0: entered allmulticast mode
[ 1218.515132][ T6285] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1218.517186][ T2367] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1218.527904][T10328] netlink: 'syz.0.9088': attribute type 1 has an invalid length.
[ 1218.539813][ T6285] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1218.549098][ T2367] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1218.561816][ T2367] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1218.562795][ T6285] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1218.593464][ T2367] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1218.606839][ T2367] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1218.646200][ T6285] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1218.943983][T20566] batadv1: left promiscuous mode
[ 1219.181149][T10347] xt_NFQUEUE: number of total queues is 0
[ 1219.501971][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9098'.
[ 1219.539452][T10329] lo speed is unknown, defaulting to 1000
[ 1219.548647][T10329] lo speed is unknown, defaulting to 1000
[ 1219.916678][T10386] lo: Caught tx_queue_len zero misconfig
[ 1219.942923][T10388] netlink: 292 bytes leftover after parsing attributes in process `syz.0.9109'.
[ 1219.955010][T10388] netlink: 292 bytes leftover after parsing attributes in process `syz.0.9109'.
[ 1220.274127][T10396] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1220.281941][T10396] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1220.509912][T10396] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1220.528719][T10396] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1220.576900][T10418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9121'.
[ 1220.643408][ T4944] Bluetooth: hci2: command tx timeout
[ 1220.785524][T10418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1220.793290][T10418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1220.936127][T10418] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1220.955017][T10418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1221.170184][T10418] batman_adv: batadv0: Interface deactivated: wlan0
[ 1221.249337][T20566] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1221.251006][T10438] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1221.269564][T20566] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1221.329714][T10435] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1221.359884][T20566] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1221.391715][T20566] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1221.420938][T20566] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1221.452014][T20566] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1221.520709][T20566] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1221.530996][T20566] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1221.574558][T20566] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1221.603066][T20566] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1221.629705][T20566] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1221.640002][T10329] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1221.647660][T10329] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1221.655511][T10329] bridge_slave_0: entered allmulticast mode
[ 1221.663869][T10329] bridge_slave_0: entered promiscuous mode
[ 1221.671630][ T3361] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1221.709936][T10329] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1221.723723][T10329] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1221.738785][T10329] bridge_slave_1: entered allmulticast mode
[ 1221.748774][T10329] bridge_slave_1: entered promiscuous mode
[ 1221.805718][T10329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1221.846903][T10329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1221.931599][T10329] team0: Port device team_slave_0 added
[ 1221.971573][T10329] team0: Port device team_slave_1 added
[ 1222.070663][T10329] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1222.087217][T10471] xt_hashlimit: size too large, truncated to 1048576
[ 1222.094304][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1222.155242][T10329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1222.193651][T10329] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1222.213962][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1222.290445][T10329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1222.343926][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9147'.
[ 1222.467309][T10329] hsr_slave_0: entered promiscuous mode
[ 1222.489366][T10329] hsr_slave_1: entered promiscuous mode
[ 1222.505660][T10329] debugfs: 'hsr0' already exists in 'hsr'
[ 1222.531768][T10329] Cannot create hsr debugfs directory
[ 1222.691468][T10492] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1222.726624][ T4944] Bluetooth: hci2: command tx timeout
[ 1222.786800][T10499] netlink: 388 bytes leftover after parsing attributes in process `syz.4.9154'.
[ 1222.894365][T10507] netlink: 'syz.3.9157': attribute type 1 has an invalid length.
[ 1222.923938][T10507] netlink: 228 bytes leftover after parsing attributes in process `syz.3.9157'.
[ 1222.979937][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9158'.
[ 1223.348367][T10531] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1223.609203][T10547] netlink: 'syz.4.9168': attribute type 1 has an invalid length.
[ 1223.656761][T10547] netlink: 476 bytes leftover after parsing attributes in process `syz.4.9168'.
[ 1223.681861][T10547] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.9168'.
[ 1223.736875][T10555] netlink: 732 bytes leftover after parsing attributes in process `syz.0.9171'.
[ 1223.749265][T10555] netlink: 732 bytes leftover after parsing attributes in process `syz.0.9171'.
[ 1223.866640][T10565] netlink: 'syz.0.9171': attribute type 10 has an invalid length.
[ 1223.893238][T10565] team0: Port device dummy0 added
[ 1224.090446][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9176'.
[ 1224.236939][T10585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9177'.
[ 1224.277982][T10579] macvlan2: entered allmulticast mode
[ 1224.293063][T10579] erspan0: entered allmulticast mode
[ 1224.367986][T20566] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1224.395594][T20566] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1224.428622][T20566] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1224.460528][T20566] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1224.528538][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9179'.
[ 1224.602202][T10593] bond0: (slave dummy0): Releasing backup interface
[ 1224.635365][T10602] netlink: 'syz.2.9179': attribute type 10 has an invalid length.
[ 1224.667559][T10593] bridge1: port 1(dummy0) entered blocking state
[ 1224.683815][T10593] bridge1: port 1(dummy0) entered disabled state
[ 1224.696762][T10593] dummy0: entered allmulticast mode
[ 1224.704995][T10593] dummy0: entered promiscuous mode
[ 1224.729833][T10602] bridge1: port 1(dummy0) entered blocking state
[ 1224.736388][T10602] bridge1: port 1(dummy0) entered forwarding state
[ 1224.747853][T10602] dummy0: left allmulticast mode
[ 1224.753960][T10602] bridge1: port 1(dummy0) entered disabled state
[ 1224.766701][ T5290] veth0_vlan: left promiscuous mode
[ 1224.783325][ T5290] veth0_vlan: entered promiscuous mode
[ 1224.804422][ T4944] Bluetooth: hci2: command tx timeout
[ 1224.947265][T10329] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1225.277757][T10329] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1225.290539][T10329] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1225.442896][T10329] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1225.591048][T10329] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1225.629137][T10329] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1225.732088][T10626] syzkaller0: entered promiscuous mode
[ 1225.740754][T10626] syzkaller0: entered allmulticast mode
[ 1225.761371][T10329] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1225.806602][T10329] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1226.190229][T10664] xt_l2tp: v2 doesn't support IP mode
[ 1226.893242][ T4944] Bluetooth: hci2: command tx timeout
[ 1229.382372][T10684] bond1: entered promiscuous mode
[ 1229.547370][T10681] __nla_validate_parse: 6 callbacks suppressed
[ 1229.547389][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9194'.
[ 1229.694420][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9200'.
[ 1229.704999][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9200'.
[ 1229.709689][T10699] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1229.730152][T10696] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1229.739826][T10708] sit0: Master is either lo or non-ether device
[ 1229.757544][T10708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9200'.
[ 1229.767283][T10329] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1229.800047][T10329] 8021q: adding VLAN 0 to HW filter on device team0
[ 1229.815215][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1229.822400][ T6909] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1229.847211][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1229.854465][ T6909] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1230.318744][T10729] netlink: 'syz.0.9204': attribute type 10 has an invalid length.
[ 1230.350030][T10729] 8021q: adding VLAN 0 to HW filter on device team0
[ 1230.381986][T10729] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1230.538783][T10329] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1230.697807][T10329] veth0_vlan: entered promiscuous mode
[ 1230.735585][T10329] veth1_vlan: entered promiscuous mode
[ 1230.848518][T10747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9211'.
[ 1230.855673][T10329] veth0_macvtap: entered promiscuous mode
[ 1230.890364][T10329] veth1_macvtap: entered promiscuous mode
[ 1230.929172][T10749] syzkaller0: entered promiscuous mode
[ 1230.938282][T10749] syzkaller0: entered allmulticast mode
[ 1231.023335][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9212'.
[ 1231.058425][T10751] bond1: entered promiscuous mode
[ 1231.074355][T10751] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1231.094729][T10329] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1231.107129][T10751] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9212'.
[ 1231.138075][T10329] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1231.211689][ T6909] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1231.214799][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9216'.
[ 1231.241637][ T6909] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1231.256268][ T6909] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1231.311279][T10768] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1231.318702][ T6909] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1231.339874][T10769] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1231.539711][T10784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9220'.
[ 1231.674318][ T6285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1231.719722][ T6285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1231.787734][ T6907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1231.799899][ T6907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1231.800027][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9224'.
[ 1231.839447][T10799] veth1_to_bond: entered promiscuous mode
[ 1231.872132][T10799] veth1_to_bond: entered allmulticast mode
[ 1232.031297][T10799] veth1_to_bond (unregistering): left promiscuous mode
[ 1232.048519][T10799] veth1_to_bond (unregistering): left allmulticast mode
[ 1232.095174][T10799] bond0: (slave bond_slave_1): Releasing backup interface
[ 1232.486816][T10839] syzkaller1: entered promiscuous mode
[ 1232.498142][T10839] syzkaller1: entered allmulticast mode
[ 1232.551278][T10839] ip6tnl1: entered allmulticast mode
[ 1232.819731][T10851] sctp: [Deprecated]: syz.0.9239 (pid 10851) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1232.819731][T10851] Use struct sctp_sack_info instead
[ 1232.878465][T10856] netlink: 'syz.3.9241': attribute type 4 has an invalid length.
[ 1233.036959][T10866] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1233.064154][T10867] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1233.193734][T10871] bond0: (slave bond_slave_0): Releasing backup interface
[ 1233.280900][T10871] bond_slave_0: entered promiscuous mode
[ 1233.291461][T10871] bond_slave_0: entered allmulticast mode
[ 1233.358664][T10849] veth0_to_team: entered promiscuous mode
[ 1233.393835][T10849] gretap0: entered promiscuous mode
[ 1233.421323][T10849] debugfs: 'hsr1' already exists in 'hsr'
[ 1233.451119][T10849] Cannot create hsr debugfs directory
[ 1234.183074][T10933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1234.921133][T10977] __nla_validate_parse: 14 callbacks suppressed
[ 1234.921155][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9271'.
[ 1235.777016][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9275'.
[ 1235.947955][T11019] netlink: 'syz.1.9278': attribute type 4 has an invalid length.
[ 1235.971654][T11019] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9278'.
[ 1235.983984][T11024] netlink: 'syz.3.9281': attribute type 7 has an invalid length.
[ 1236.503437][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9286'.
[ 1236.697141][T11058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9290'.
[ 1236.727735][T11058] openvswitch: netlink: Flow key attr not present in new flow.
[ 1236.756526][T11063] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[ 1236.778653][T11063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1236.861366][T11066] netlink: 'syz.0.9292': attribute type 21 has an invalid length.
[ 1236.905292][T11066] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1237.103364][T11070] netlink: del zone limit has 8 unknown bytes
[ 1237.164641][T11072] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1237.182916][T11072] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.896985][T11095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9301'.
[ 1237.983660][T11098] syzkaller0: entered promiscuous mode
[ 1238.009524][T11098] syzkaller0: entered allmulticast mode
[ 1238.025711][T11095] pim6reg1: entered promiscuous mode
[ 1238.041340][T11095] pim6reg1: entered allmulticast mode
[ 1238.561456][T11116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9305'.
[ 1239.016449][T10779] udevd[10779]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1239.051349][T10877] udevd[10877]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1239.461312][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9309'.
[ 1239.561682][ T5290] netdevsim netdevsim4 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1239.653675][ T5290] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1239.704671][T11138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9309'.
[ 1239.714538][T11138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9309'.
[ 1240.115243][T11155] netlink: 'syz.4.9310': attribute type 1 has an invalid length.
[ 1240.120711][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9312'.
[ 1240.141401][T11156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9311'.
[ 1240.172696][T11155] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1240.382350][T11163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1240.775471][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9317'.
[ 1241.067855][T11193] lo speed is unknown, defaulting to 1000
[ 1241.095353][T11193] lo speed is unknown, defaulting to 1000
[ 1241.237460][T11206] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9325'.
[ 1241.304386][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9323'.
[ 1241.486752][T11210] netlink: 'syz.2.9326': attribute type 89 has an invalid length.
[ 1241.509923][T11211] netlink: 'syz.2.9326': attribute type 89 has an invalid length.
[ 1241.569670][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9328'.
[ 1241.626218][T11219] geneve0: entered promiscuous mode
[ 1241.657109][T11219] geneve0: left promiscuous mode
[ 1242.110722][T11255] netlink: 'syz.2.9335': attribute type 1 has an invalid length.
[ 1242.158408][T11255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1243.063605][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9341'.
[ 1243.148428][T11284] syzkaller1: entered promiscuous mode
[ 1243.179493][T11284] syzkaller1: entered allmulticast mode
[ 1243.312314][T11286] 8021q: VLANs not supported on vxcan1
[ 1243.732620][T11308] bond2: entered promiscuous mode
[ 1244.059084][T11324] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1244.064566][T11338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9361'.
[ 1244.081979][T11324] 8021q: adding VLAN 0 to HW filter on device team0
[ 1244.119318][T11324] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1244.207806][T11324] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1244.238716][T11324] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1244.260143][T11324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1244.277916][T11324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1244.296814][T11324] veth1_vlan: left promiscuous mode
[ 1244.303992][T11324] veth0_vlan: left promiscuous mode
[ 1244.310294][T11324] veth0_vlan: entered promiscuous mode
[ 1244.318839][T11324] veth1_vlan: entered promiscuous mode
[ 1244.334704][T11324] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1244.343478][T11324] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1244.351444][T11324] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1244.360270][T11324] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1244.368564][T11324] batman_adv: batadv0: Interface activated: wlan0
[ 1244.398446][T11324] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1244.411623][T11324] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1244.420295][T11324] 8021q: adding VLAN 0 to HW filter on device batadv2
[ 1244.434361][T11318] lo speed is unknown, defaulting to 1000
[ 1244.440769][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1244.448066][ T3361] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1244.464020][ T3361] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1244.471252][ T3361] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1244.571450][ T6909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1244.591783][T11318] lo speed is unknown, defaulting to 1000
[ 1244.630880][ T6909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1244.655144][ T6909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1244.686414][T20566] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1244.711169][ T6909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1245.102071][T11359] dummy0: left promiscuous mode
[ 1245.269194][T11359] bond1: left promiscuous mode
[ 1245.294799][T11359] bond2: left promiscuous mode
[ 1245.300731][T11359] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1245.357299][T11363] bridge0: port 3(vlan2) entered blocking state
[ 1245.374387][T11363] bridge0: port 3(vlan2) entered disabled state
[ 1245.387543][T11363] vlan2: entered allmulticast mode
[ 1245.398033][T11363] bridge0: entered allmulticast mode
[ 1245.420023][T11363] vlan2: left allmulticast mode
[ 1245.433528][T11363] bridge0: left allmulticast mode
[ 1245.488626][T11371] mac80211_hwsim hwsim107 syzkaller0: entered promiscuous mode
[ 1245.503465][T11371] mac80211_hwsim hwsim107 syzkaller0: entered allmulticast mode
[ 1245.586353][ T4944] block nbd2: Receive control failed (result -32)
[ 1245.810441][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9371'.
[ 1245.860210][T11377] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9371'.
[ 1245.860382][T11375] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9371'.
[ 1246.382147][T11413] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9376'.
[ 1246.635937][T11419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9378'.
[ 1246.660904][T11419] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1246.752762][T11430] lo: entered promiscuous mode
[ 1246.764942][T11430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1246.871519][T11434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9381'.
[ 1246.921576][T11430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9381'.
[ 1247.016073][T11442] netlink: 'syz.3.9384': attribute type 1 has an invalid length.
[ 1247.038883][T11442] netlink: 280 bytes leftover after parsing attributes in process `syz.3.9384'.
[ 1247.154805][T11453] x_tables: duplicate entry at hook 2
[ 1247.331268][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9392'.
[ 1247.370274][T11464] netlink: 'syz.3.9390': attribute type 84 has an invalid length.
[ 1247.685334][T11489] netlink: 'syz.1.9398': attribute type 10 has an invalid length.
[ 1247.704945][T11489] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9398'.
[ 1247.750444][T11489] team0: Port device geneve1 added
[ 1247.843377][ T2367] Bluetooth: hci2: command 0x0405 tx timeout
[ 1248.429066][T11519] mac80211_hwsim hwsim131 wlan0: left promiscuous mode
[ 1248.448770][T11519] mac80211_hwsim hwsim132 wlan1: left promiscuous mode
[ 1249.026115][T11562] macsec2: entered allmulticast mode
[ 1249.042747][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1249.053697][T11562] bond0: (slave macsec2): Error -34 calling dev_set_mtu
[ 1249.321620][T11581] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1249.348013][T11581] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1249.380469][T11581] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1249.433582][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1249.440802][ T6907] bridge0: port 1(bridge_slave_0) entered listening state
[ 1249.480559][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1249.487761][ T6907] bridge0: port 2(bridge_slave_1) entered listening state
[ 1249.586055][T11597] nbd: couldn't find a device at index 65546
[ 1249.926545][T11628] syzkaller0: entered promiscuous mode
[ 1249.935896][T11628] syzkaller0: entered allmulticast mode
[ 1250.404441][T11653] netlink: 'syz.3.9439': attribute type 2 has an invalid length.
[ 1251.223155][T11689] __nla_validate_parse: 4 callbacks suppressed
[ 1251.223173][T11689] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9452'.
[ 1251.410773][T11705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1251.458600][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9456'.
[ 1251.508291][T11711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1251.641445][T11715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9459'.
[ 1251.692632][T11721] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1251.951037][T11739] sctp: [Deprecated]: syz.4.9464 (pid 11739) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1251.951037][T11739] Use struct sctp_sack_info instead
[ 1251.985705][T11737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9465'.
[ 1252.041584][T11743] netlink: 'syz.0.9467': attribute type 3 has an invalid length.
[ 1252.241723][T11756] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1252.300773][T11757] tc action pedit 'at' offset -4096 out of bounds
[ 1252.308753][T11757] tc action pedit 'at' offset -4096 out of bounds
[ 1252.315269][T11757] tc action pedit 'at' offset -4096 out of bounds
[ 1252.321728][T11757] tc action pedit 'at' offset -4096 out of bounds
[ 1252.328207][T11757] tc action pedit 'at' offset -4096 out of bounds
[ 1252.334698][T11757] tc action pedit 'at' offset -4096 out of bounds
[ 1252.341132][T11757] tc action pedit 'at' offset -4096 out of bounds
[ 1252.347566][T11757] tc action pedit 'at' offset -4096 out of bounds
[ 1252.353982][T11757] tc action pedit 'at' offset -4096 out of bounds
[ 1252.360386][T11757] tc action pedit 'at' offset -4096 out of bounds
[ 1252.366850][T11757] TC_ACT_REPEAT abuse ?
[ 1252.568774][T11753] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9469'.
[ 1252.632034][T11767] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[ 1253.087860][T11782] netlink: 'syz.3.9477': attribute type 1 has an invalid length.
[ 1253.099130][T11782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9477'.
[ 1253.520678][T11794] veth15: entered allmulticast mode
[ 1253.593881][T11796] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[ 1253.624296][T11806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9483'.
[ 1253.938228][T11827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9487'.
[ 1254.337794][T10112] IPVS: starting estimator thread 0...
[ 1254.373460][T11846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9492'.
[ 1254.443018][T11848] IPVS: using max 31 ests per chain, 74400 per kthread
[ 1254.483367][T11853] xt_hashlimit: size too large, truncated to 1048576
[ 1254.740606][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9499'.
[ 1254.966954][T11877] syzkaller0: entered promiscuous mode
[ 1254.983837][T11877] syzkaller0: entered allmulticast mode
[ 1255.627188][T11902] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[ 1256.206622][T11948] netlink: 'syz.0.9507': attribute type 10 has an invalid length.
[ 1257.768883][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1259.050137][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1259.318955][T11948] bridge0: port 3(netdevsim1) entered blocking state
[ 1259.329767][T11948] bridge0: port 3(netdevsim1) entered disabled state
[ 1259.337579][T11948] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[ 1259.347744][T11948] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[ 1259.374857][T11964] __nla_validate_parse: 5 callbacks suppressed
[ 1259.374875][T11964] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9511'.
[ 1259.716732][T11993] sch_tbf: burst 259 is lower than device syzkaller0 mtu (1514) !
[ 1259.741925][T11993] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[ 1261.339976][T11965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1261.446751][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9519'.
[ 1261.511629][T11997] ip6tnl2: entered allmulticast mode
[ 1261.543365][T11926] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1261.711142][T12016] netlink: 'syz.3.9526': attribute type 13 has an invalid length.
[ 1261.739456][T12017] netlink: 632 bytes leftover after parsing attributes in process `syz.0.9525'.
[ 1262.086964][T12022] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) !
[ 1262.180523][T12036] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1262.195617][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9532'.
[ 1262.226888][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9532'.
[ 1262.471602][T12059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9540'.
[ 1262.558413][T12062] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9538'.
[ 1262.656358][T12071] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9543'.
[ 1263.019021][T12101] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9545'.
[ 1263.425252][T12115] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 1263.471815][T12123] netlink: 'syz.4.9554': attribute type 1 has an invalid length.
[ 1263.508751][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9547'.
[ 1263.587242][T12123] bond3: (slave veth15): Enslaving as an active interface with a down link
[ 1263.659007][T12127] bond3: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1263.699736][  T112] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1263.735579][  T112] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1263.886134][T12126] syzkaller0: entered promiscuous mode
[ 1263.894553][T12126] syzkaller0: entered allmulticast mode
[ 1263.903309][  T112] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1263.912251][  T112] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1263.947685][T12141] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 1263.957246][T12141] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1263.982190][T12142] netlink: 'syz.4.9559': attribute type 1 has an invalid length.
[ 1264.802789][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[ 1264.810088][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[ 1265.447767][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1267.015194][T12142] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[ 1267.082388][T12178] lo speed is unknown, defaulting to 1000
[ 1267.115219][T12185] __nla_validate_parse: 10 callbacks suppressed
[ 1267.115238][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9567'.
[ 1267.129676][T12178] lo speed is unknown, defaulting to 1000
[ 1267.132440][T12164] lo speed is unknown, defaulting to 1000
[ 1267.269576][T12185] bond2: option broadcast_neighbor: invalid value (30)
[ 1267.362309][T12185] bond2 (unregistering): Released all slaves
[ 1267.577869][T12197] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1267.599953][T12197] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1267.626081][T12164] lo speed is unknown, defaulting to 1000
[ 1267.669219][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9572'.
[ 1267.721269][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9572'.
[ 1267.838015][ T2367] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1267.861646][ T2367] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1267.871438][ T2367] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1267.882912][ T2367] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1267.892134][ T2367] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1268.141818][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9575'.
[ 1268.156301][T12212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9575'.
[ 1268.521357][T12226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9579'.
[ 1268.530980][T12226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9579'.
[ 1268.790313][T12201] lo speed is unknown, defaulting to 1000
[ 1268.804928][T12201] lo speed is unknown, defaulting to 1000
[ 1269.695857][T12279] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9587'.
[ 1269.923068][ T4944] Bluetooth: hci1: command tx timeout
[ 1270.435979][T12272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9589'.
[ 1270.462055][T12272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9589'.
[ 1270.540548][T12201] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1270.589518][T12201] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1270.622098][T12201] bridge_slave_0: entered allmulticast mode
[ 1270.659096][T12201] bridge_slave_0: entered promiscuous mode
[ 1270.740104][T12201] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1270.774910][T12201] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1270.800328][T12201] bridge_slave_1: entered allmulticast mode
[ 1270.820208][T12201] bridge_slave_1: entered promiscuous mode
[ 1270.896882][T12201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1270.927242][T12201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1270.998142][T12315] bridge0: port 4(batadv1) entered blocking state
[ 1271.004907][T12315] bridge0: port 4(batadv1) entered disabled state
[ 1271.017384][T12322] netlink: 'syz.3.9597': attribute type 13 has an invalid length.
[ 1271.027189][T12315] batadv1: entered allmulticast mode
[ 1271.037344][T12315] batadv1: entered promiscuous mode
[ 1271.047783][T12323] bridge0: port 5(batadv2) entered blocking state
[ 1271.054627][T12323] bridge0: port 5(batadv2) entered disabled state
[ 1271.061124][T12323] batadv2: entered allmulticast mode
[ 1271.068794][T12323] batadv2: entered promiscuous mode
[ 1271.153655][T12201] team0: Port device team_slave_0 added
[ 1271.176515][T12201] team0: Port device team_slave_1 added
[ 1271.220659][T12201] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1271.228254][T12201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1271.272643][T12201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1271.304232][T12201] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1271.317143][T12201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1271.345008][T12201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1271.494892][T11925] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[ 1271.503232][T12201] hsr_slave_0: entered promiscuous mode
[ 1271.504903][T11925] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[ 1271.519016][T12201] hsr_slave_1: entered promiscuous mode
[ 1271.531860][T12201] debugfs: 'hsr0' already exists in 'hsr'
[ 1271.543714][T12201] Cannot create hsr debugfs directory
[ 1271.553487][T11924] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[ 1271.562961][T11924] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[ 1271.585003][T12349] 8021q: adding VLAN 0 to HW filter on device macsec1
[ 1271.594174][T12347] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1271.602289][T10112] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 1271.620655][T12349] netlink: 'syz.2.9604': attribute type 1 has an invalid length.
[ 1271.708790][T12349] bond3: entered promiscuous mode
[ 1271.714984][T12349] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1271.756601][T12361] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1271.779633][T12361] bond3: (slave vti0): The slave device specified does not support setting the MAC address
[ 1271.795108][T12361] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode
[ 1271.817740][T12361] bond3: (slave vti0): making interface the new active one
[ 1271.843975][T12361] vti0: entered promiscuous mode
[ 1271.858090][T12361] bond3: (slave vti0): Enslaving as an active interface with an up link
[ 1271.999946][T12380] netlink: 'syz.1.9611': attribute type 30 has an invalid length.
[ 1272.003888][ T4944] Bluetooth: hci1: command tx timeout
[ 1272.299053][T12394] __nla_validate_parse: 7 callbacks suppressed
[ 1272.299069][T12394] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9616'.
[ 1272.360612][T12394] netlink: 196 bytes leftover after parsing attributes in process `syz.1.9616'.
[ 1272.548837][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9617'.
[ 1272.604237][T12410] netlink: 'syz.1.9617': attribute type 10 has an invalid length.
[ 1272.624480][T12410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9617'.
[ 1272.680177][T12410] dummy0: entered promiscuous mode
[ 1272.851076][T12201] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1272.897576][T12428] netlink: 'syz.1.9621': attribute type 1 has an invalid length.
[ 1272.909458][T12201] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1272.919829][T12431] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1273.191706][T12428] bond1: entered promiscuous mode
[ 1273.211048][T12428] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1273.400225][T12201] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1273.426343][T12201] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1273.509307][T12448] vlan3: entered promiscuous mode
[ 1273.514379][T12448] bridge0: entered promiscuous mode
[ 1273.732961][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9632'.
[ 1273.742040][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9632'.
[ 1273.750899][T12474] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1273.763194][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1273.832124][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9631'.
[ 1273.868552][T12201] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1273.881024][T12201] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1273.892303][T12472] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9631'.
[ 1273.912982][T12472] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9631'.
[ 1273.980065][T12478] 8021q: VLANs not supported on ip6gre0
[ 1274.146265][ T4944] Bluetooth: hci1: command tx timeout
[ 1275.684602][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1276.171873][ T4944] Bluetooth: hci1: command tx timeout
[ 1277.581143][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9638'.
[ 1277.611407][T12516] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9641'.
[ 1277.735015][T12521] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9640'.
[ 1277.867298][T12507] veth3: entered allmulticast mode
[ 1277.887470][T12507] bond2: (slave veth3): Enslaving as an active interface with an up link
[ 1277.896531][T12521] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9640'.
[ 1277.938955][T12524] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[ 1277.981679][T12519] bond2 (unregistering): (slave veth3): Releasing backup interface
[ 1277.995296][T12507] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9638'.
[ 1278.011040][T12519] bond2 (unregistering): Released all slaves
[ 1278.090686][T12201] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1278.132427][T12201] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1278.148926][T12201] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1278.161427][T12201] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1278.225184][T12201] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1278.238450][T12201] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1278.274620][T12201] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1278.305953][T12201] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1278.409740][T12552] netlink: 'syz.3.9646': attribute type 11 has an invalid length.
[ 1278.552197][T12201] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1278.579249][T12201] 8021q: adding VLAN 0 to HW filter on device team0
[ 1278.605215][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1278.612389][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1278.648193][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1278.655410][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1278.675538][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9648'.
[ 1278.790253][T12569] netlink: 'syz.1.9651': attribute type 11 has an invalid length.
[ 1278.798304][T12569] netlink: 'syz.1.9651': attribute type 4 has an invalid length.
[ 1278.803278][T12567] syz_tun: entered allmulticast mode
[ 1278.806022][T12569] netlink: 'syz.1.9651': attribute type 6 has an invalid length.
[ 1278.806039][T12569] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.9651'.
[ 1278.877225][T12567] bond0: entered promiscuous mode
[ 1278.882303][T12567] bond_slave_0: entered promiscuous mode
[ 1278.888282][T12567] bond_slave_1: entered promiscuous mode
[ 1278.894151][T12567] team0: entered promiscuous mode
[ 1278.900969][T12567] team_slave_0: entered promiscuous mode
[ 1278.907379][T12567] team_slave_1: entered promiscuous mode
[ 1278.913456][T12567] dummy0: entered promiscuous mode
[ 1279.114003][T12587] netlink: 'syz.0.9654': attribute type 1 has an invalid length.
[ 1279.140609][T12587] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1279.264767][T12598] team0: Device xfrm0 is of different type
[ 1279.448381][T12201] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1279.760012][T12637] x_tables: duplicate underflow at hook 1
[ 1279.959077][T12632] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1279.966806][T12632] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1280.193513][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1280.200802][    C1] bridge0: topology change detected, propagating
[ 1280.207444][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1280.214691][    C1] bridge0: topology change detected, propagating
[ 1280.652158][T12632] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1280.682263][T12632] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1280.744340][T12657] FAULT_INJECTION: forcing a failure.
[ 1280.744340][T12657] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1280.757405][T12657] CPU: 0 UID: 0 PID: 12657 Comm: syz.3.9667 Not tainted syzkaller #0 PREEMPT(full) 
[ 1280.757452][T12657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1280.757476][T12657] Call Trace:
[ 1280.757484][T12657]  <TASK>
[ 1280.757492][T12657]  dump_stack_lvl+0xe8/0x150
[ 1280.757518][T12657]  should_fail_ex+0x40c/0x560
[ 1280.757550][T12657]  _copy_from_user+0x2d/0xb0
[ 1280.757572][T12657]  ___sys_recvmsg+0x173/0x590
[ 1280.757599][T12657]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1280.757625][T12657]  ? __fget_files+0x2a/0x420
[ 1280.757677][T12657]  do_recvmmsg+0x329/0x810
[ 1280.757705][T12657]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1280.757737][T12657]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1280.757774][T12657]  __x64_sys_recvmmsg+0x198/0x250
[ 1280.757797][T12657]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1280.757827][T12657]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1280.757846][T12657]  do_syscall_64+0x174/0x580
[ 1280.757864][T12657]  ? trace_irq_disable+0x3b/0x140
[ 1280.757888][T12657]  ? clear_bhb_loop+0x40/0x90
[ 1280.757911][T12657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1280.757928][T12657] RIP: 0033:0x7fb80b59ce59
[ 1280.757946][T12657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1280.757961][T12657] RSP: 002b:00007fb80c4e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1280.757981][T12657] RAX: ffffffffffffffda RBX: 00007fb80b815fa0 RCX: 00007fb80b59ce59
[ 1280.757995][T12657] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000003
[ 1280.758007][T12657] RBP: 00007fb80c4e6090 R08: 0000000000000000 R09: 0000000000000000
[ 1280.758018][T12657] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001
[ 1280.758030][T12657] R13: 00007fb80b816038 R14: 00007fb80b815fa0 R15: 00007ffffbf363c8
[ 1280.758062][T12657]  </TASK>
[ 1281.440660][T12675] FAULT_INJECTION: forcing a failure.
[ 1281.440660][T12675] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1281.455084][T12675] CPU: 0 UID: 0 PID: 12675 Comm: syz.3.9672 Not tainted syzkaller #0 PREEMPT(full) 
[ 1281.455108][T12675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1281.455118][T12675] Call Trace:
[ 1281.455125][T12675]  <TASK>
[ 1281.455133][T12675]  dump_stack_lvl+0xe8/0x150
[ 1281.455159][T12675]  should_fail_ex+0x40c/0x560
[ 1281.455191][T12675]  _copy_from_user+0x2d/0xb0
[ 1281.455212][T12675]  ___sys_recvmsg+0x173/0x590
[ 1281.455239][T12675]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1281.455271][T12675]  ? __fget_files+0x2a/0x420
[ 1281.455324][T12675]  do_recvmmsg+0x329/0x810
[ 1281.455353][T12675]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1281.455385][T12675]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1281.455420][T12675]  __x64_sys_recvmmsg+0x198/0x250
[ 1281.455445][T12675]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1281.455472][T12675]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1281.455491][T12675]  do_syscall_64+0x174/0x580
[ 1281.455507][T12675]  ? trace_irq_disable+0x3b/0x140
[ 1281.455531][T12675]  ? clear_bhb_loop+0x40/0x90
[ 1281.455553][T12675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1281.455571][T12675] RIP: 0033:0x7fb80b59ce59
[ 1281.455589][T12675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1281.455603][T12675] RSP: 002b:00007fb80c4e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1281.455623][T12675] RAX: ffffffffffffffda RBX: 00007fb80b815fa0 RCX: 00007fb80b59ce59
[ 1281.455636][T12675] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004
[ 1281.455648][T12675] RBP: 00007fb80c4e6090 R08: 0000000000000000 R09: 0000000000000000
[ 1281.455660][T12675] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[ 1281.455671][T12675] R13: 00007fb80b816038 R14: 00007fb80b815fa0 R15: 00007ffffbf363c8
[ 1281.455702][T12675]  </TASK>
[ 1281.745282][T12634] macvtap1: entered promiscuous mode
[ 1281.761281][T12634] vlan0: entered promiscuous mode
[ 1281.775876][T12634] vlan0: left promiscuous mode
[ 1281.848727][ T6278] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1281.858607][ T6278] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1281.962461][ T6278] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1282.009493][ T6278] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1282.015540][T12690] sctp: [Deprecated]: syz.2.9679 (pid 12690) Use of int in maxseg socket option.
[ 1282.015540][T12690] Use struct sctp_assoc_value instead
[ 1282.131707][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9681'.
[ 1282.244111][T12201] veth0_vlan: entered promiscuous mode
[ 1282.301534][T12201] veth1_vlan: entered promiscuous mode
[ 1282.325382][T12704] netlink: 292 bytes leftover after parsing attributes in process `syz.2.9682'.
[ 1282.392028][T12704] ksmbd: Unknown IPC event: 8, ignore.
[ 1282.418741][T12201] veth0_macvtap: entered promiscuous mode
[ 1282.450348][T12201] veth1_macvtap: entered promiscuous mode
[ 1282.525261][T12201] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1282.566305][T12201] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1282.648186][T12713] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9686'.
[ 1282.685799][T12708] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1282.699243][T11924] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1282.711466][T11924] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1282.774737][T11924] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1282.836077][T12716] netlink: 170844 bytes leftover after parsing attributes in process `syz.1.9684'.
[ 1282.848457][T11924] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1282.978613][T12719] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1283.162072][  T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1283.210401][  T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1283.287702][ T3361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1283.301603][ T3361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1283.627069][T12754] bond1: option mode: invalid value (254)
[ 1283.665111][T12754] bond1 (unregistering): Released all slaves
[ 1283.719365][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9697'.
[ 1283.788407][T12757] netlink: 'syz.2.9696': attribute type 1 has an invalid length.
[ 1283.884632][T12757] bond4: entered promiscuous mode
[ 1283.890194][T12757] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1284.065721][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9704'.
[ 1284.570777][T12810] netlink: 'syz.1.9713': attribute type 1 has an invalid length.
[ 1284.590360][T12810] netlink: 244 bytes leftover after parsing attributes in process `syz.1.9713'.
[ 1284.613258][T12811] workqueue: Failed to create a rescuer kthread for wq "nbd6-recv": -EINTR
[ 1284.613351][T12811] block (null): Could not allocate knbd recv work queue.
[ 1284.674855][T12811] nbd: failed to add new device
[ 1284.756474][T12832] sctp: [Deprecated]: syz.1.9718 (pid 12832) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1284.756474][T12832] Use struct sctp_sack_info instead
[ 1284.776593][ T4944] block nbd4: Receive control failed (result -32)
[ 1284.956622][T12839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9721'.
[ 1284.987096][T12845] ip6tnl2: entered allmulticast mode
[ 1285.024871][T12845] xt_HMARK: spi-set and port-set can't be combined
[ 1285.065252][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9722'.
[ 1285.126952][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9725'.
[ 1285.528881][T12876] netlink: 'syz.2.9733': attribute type 1 has an invalid length.
[ 1285.544747][T12873] bond2 (unregistering): Released all slaves
[ 1285.577994][T12876] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[ 1285.674350][T12882] FAULT_INJECTION: forcing a failure.
[ 1285.674350][T12882] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1285.708908][T12884] netlink: 47 bytes leftover after parsing attributes in process `syz.0.9735'.
[ 1285.712538][T12882] CPU: 1 UID: 0 PID: 12882 Comm: syz.2.9734 Not tainted syzkaller #0 PREEMPT(full) 
[ 1285.712560][T12882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1285.712571][T12882] Call Trace:
[ 1285.712579][T12882]  <TASK>
[ 1285.712587][T12882]  dump_stack_lvl+0xe8/0x150
[ 1285.712613][T12882]  should_fail_ex+0x40c/0x560
[ 1285.712645][T12882]  _copy_from_user+0x2d/0xb0
[ 1285.712665][T12882]  ___sys_recvmsg+0x173/0x590
[ 1285.712691][T12882]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1285.712715][T12882]  ? __fget_files+0x2a/0x420
[ 1285.712770][T12882]  do_recvmmsg+0x329/0x810
[ 1285.712798][T12882]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1285.712829][T12882]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1285.712863][T12882]  __x64_sys_recvmmsg+0x198/0x250
[ 1285.712886][T12882]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1285.712914][T12882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1285.712933][T12882]  do_syscall_64+0x174/0x580
[ 1285.712949][T12882]  ? trace_irq_disable+0x3b/0x140
[ 1285.712972][T12882]  ? clear_bhb_loop+0x40/0x90
[ 1285.712994][T12882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1285.713011][T12882] RIP: 0033:0x7ff9e199ce59
[ 1285.713028][T12882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1285.713043][T12882] RSP: 002b:00007ff9e27de028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1285.713061][T12882] RAX: ffffffffffffffda RBX: 00007ff9e1c15fa0 RCX: 00007ff9e199ce59
[ 1285.713074][T12882] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000003
[ 1285.713090][T12882] RBP: 00007ff9e27de090 R08: 0000000000000000 R09: 0000000000000000
[ 1285.713101][T12882] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002
[ 1285.713112][T12882] R13: 00007ff9e1c16038 R14: 00007ff9e1c15fa0 R15: 00007ffe8f718528
[ 1285.713142][T12882]  </TASK>
[ 1286.188474][T12902] IPv6: addrconf: prefix option has invalid lifetime
[ 1286.357707][T12907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9741'.
[ 1286.909355][T12939] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1287.023794][ T4944] block nbd6: Receive control failed (result -1)
[ 1287.727435][T12960] __nla_validate_parse: 4 callbacks suppressed
[ 1287.727453][T12960] netlink: 260 bytes leftover after parsing attributes in process `syz.2.9754'.
[ 1287.835403][T12960] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9754'.
[ 1287.945366][T12972] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.9754'.
[ 1288.014540][T12974] lo speed is unknown, defaulting to 1000
[ 1288.022113][T12974] lo speed is unknown, defaulting to 1000
[ 1288.256026][T12960] nbd16: detected capacity change from 0 to 3
[ 1288.290916][ T4944] block nbd16: Receive control failed (result -32)
[ 1288.312438][T12731] block nbd16: Send control failed (result -32)
[ 1288.333148][T12731] block nbd16: Request send failed, requeueing
[ 1288.388992][ T1680] block nbd16: Dead connection, failed to find a fallback
[ 1288.399775][ T1680] block nbd16: shutting down sockets
[ 1288.413276][T12731] Buffer I/O error on dev nbd16, logical block 1, async page read
[ 1288.413460][ T1680] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1288.432898][ T1680] Buffer I/O error on dev nbd16, logical block 0, async page read
[ 1288.479957][T12731] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1288.519002][T12731] Buffer I/O error on dev nbd16, logical block 0, async page read
[ 1288.541834][T12731] Buffer I/O error on dev nbd16, logical block 1, async page read
[ 1288.553227][T12731] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1288.553726][T12985] syzkaller0: entered promiscuous mode
[ 1288.572821][T12731] Buffer I/O error on dev nbd16, logical block 0, async page read
[ 1288.583451][T12731] Buffer I/O error on dev nbd16, logical block 1, async page read
[ 1288.599507][T12731] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1288.601310][T12985] syzkaller0: entered allmulticast mode
[ 1288.615404][T12731] Buffer I/O error on dev nbd16, logical block 0, async page read
[ 1288.628367][T12731] Buffer I/O error on dev nbd16, logical block 1, async page read
[ 1288.640732][T12731] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1288.656433][T12731] Buffer I/O error on dev nbd16, logical block 0, async page read
[ 1288.690497][T12731] Buffer I/O error on dev nbd16, logical block 1, async page read
[ 1288.734318][T12731] ldm_validate_partition_table(): Disk read failed.
[ 1288.767346][T12731] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1288.785547][T12731] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1288.795322][T12731] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1288.805457][T12731] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1288.816180][T12731] Dev nbd16: unable to read RDB block 0
[ 1288.825926][T12731] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1288.861691][T12731]  nbd16: unable to read partition table
[ 1288.877375][T12731] nbd16: partition table beyond EOD, truncated
[ 1288.921775][T12731] ldm_validate_partition_table(): Disk read failed.
[ 1288.945038][T12731] Dev nbd16: unable to read RDB block 0
[ 1288.951270][T12731]  nbd16: unable to read partition table
[ 1288.957285][T12731] nbd16: partition table beyond EOD, truncated
[ 1288.985054][T12926] ldm_validate_partition_table(): Disk read failed.
[ 1289.030497][T12926] Dev nbd16: unable to read RDB block 0
[ 1289.039731][T12926]  nbd16: unable to read partition table
[ 1289.048231][T12926] nbd16: partition table beyond EOD, truncated
[ 1289.067505][T12926] ldm_validate_partition_table(): Disk read failed.
[ 1289.075721][T12926] Dev nbd16: unable to read RDB block 0
[ 1289.082092][T12926]  nbd16: unable to read partition table
[ 1289.088546][T12926] nbd16: partition table beyond EOD, truncated
[ 1289.769967][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1291.609835][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9763'.
[ 1291.639706][T13010] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9764'.
[ 1291.810693][T13029] netlink: 'syz.1.9767': attribute type 11 has an invalid length.
[ 1291.830350][T13029] netlink: 'syz.1.9767': attribute type 11 has an invalid length.
[ 1291.851453][T13029] netlink: 204 bytes leftover after parsing attributes in process `syz.1.9767'.
[ 1291.970431][T13034] FAULT_INJECTION: forcing a failure.
[ 1291.970431][T13034] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1291.984651][T13034] CPU: 1 UID: 0 PID: 13034 Comm: syz.1.9770 Not tainted syzkaller #0 PREEMPT(full) 
[ 1291.984674][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1291.984685][T13034] Call Trace:
[ 1291.984692][T13034]  <TASK>
[ 1291.984701][T13034]  dump_stack_lvl+0xe8/0x150
[ 1291.984726][T13034]  should_fail_ex+0x40c/0x560
[ 1291.984758][T13034]  _copy_from_user+0x2d/0xb0
[ 1291.984780][T13034]  ___sys_recvmsg+0x173/0x590
[ 1291.984806][T13034]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1291.984838][T13034]  ? __fget_files+0x2a/0x420
[ 1291.984890][T13034]  do_recvmmsg+0x329/0x810
[ 1291.984919][T13034]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1291.984950][T13034]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1291.984988][T13034]  __x64_sys_recvmmsg+0x198/0x250
[ 1291.985011][T13034]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1291.985040][T13034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1291.985062][T13034]  do_syscall_64+0x174/0x580
[ 1291.985078][T13034]  ? trace_irq_disable+0x3b/0x140
[ 1291.985103][T13034]  ? clear_bhb_loop+0x40/0x90
[ 1291.985125][T13034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1291.985143][T13034] RIP: 0033:0x7fbb0db9ce59
[ 1291.985160][T13034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1291.985175][T13034] RSP: 002b:00007fbb0e9e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1291.985195][T13034] RAX: ffffffffffffffda RBX: 00007fbb0de15fa0 RCX: 00007fbb0db9ce59
[ 1291.985209][T13034] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000003
[ 1291.985221][T13034] RBP: 00007fbb0e9e1090 R08: 0000000000000000 R09: 0000000000000000
[ 1291.985232][T13034] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002
[ 1291.985244][T13034] R13: 00007fbb0de16038 R14: 00007fbb0de15fa0 R15: 00007ffccb8995b8
[ 1291.985275][T13034]  </TASK>
[ 1292.185877][T13032] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1292.195046][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9768'.
[ 1292.218472][T13036] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9771'.
[ 1292.260908][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9771'.
[ 1292.349041][T13036] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9771'.
[ 1292.377386][T13045] netlink: 'syz.1.9773': attribute type 1 has an invalid length.
[ 1292.430780][T13036] bond0 (unregistering): Released all slaves
[ 1292.577554][T13045] bond3: entered promiscuous mode
[ 1292.605854][T13045] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1292.627527][T13048] syzkaller1: entered promiscuous mode
[ 1292.639718][T13048] syzkaller1: entered allmulticast mode
[ 1292.837157][T13067] __nla_validate_parse: 1 callbacks suppressed
[ 1292.837176][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9777'.
[ 1293.480376][T13083] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9779'.
[ 1293.726688][T13060] hmó3)ó: entered promiscuous mode
[ 1293.793173][T13082] lo: left promiscuous mode
[ 1293.911706][T13082] bond0: left promiscuous mode
[ 1293.917707][T13082] bond_slave_0: left promiscuous mode
[ 1293.923829][T13082] bond_slave_1: left promiscuous mode
[ 1293.929482][T13082] team0: left promiscuous mode
[ 1293.932281][T13095] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9782'.
[ 1293.936210][T13082] team_slave_0: left promiscuous mode
[ 1293.949761][T13082] team_slave_1: left promiscuous mode
[ 1293.956283][T13082] dummy0: left promiscuous mode
[ 1293.965670][T13082] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1293.976438][T13082] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1294.021117][T13082] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1294.031628][T13082] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1294.044685][T13082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1294.056149][T13082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1294.084966][T13082] veth1_vlan: left promiscuous mode
[ 1294.092155][T13082] veth1_vlan: entered promiscuous mode
[ 1294.103243][T13082] veth1_macvtap: left promiscuous mode
[ 1294.109864][T13082] veth0_macvtap: left promiscuous mode
[ 1294.117438][T13082] veth0_macvtap: entered promiscuous mode
[ 1294.124841][T13082] veth1_macvtap: entered promiscuous mode
[ 1294.135735][T13082] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1294.144395][T13082] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1294.152704][T13082] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1294.160982][T13082] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1294.172406][T13082] vxlan0: left promiscuous mode
[ 1294.180203][T13082] bond1: left promiscuous mode
[ 1294.185437][T13082] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1294.195088][T13082] ip6gretap0: entered promiscuous mode
[ 1294.221666][T13082] bridge0: port 4(batadv1) entered blocking state
[ 1294.228208][T13082] bridge0: port 4(batadv1) entered forwarding state
[ 1294.236979][T13082] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1294.248105][T13082] bridge0: port 5(batadv2) entered blocking state
[ 1294.254738][T13082] bridge0: port 5(batadv2) entered forwarding state
[ 1294.263183][T13082] 8021q: adding VLAN 0 to HW filter on device batadv2
[ 1294.361280][T11926] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1294.368491][T11926] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1294.398930][T11926] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1294.406124][T11926] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1294.499553][T13104] FAULT_INJECTION: forcing a failure.
[ 1294.499553][T13104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1294.529686][  T112] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1294.540521][T13115] netlink: 'syz.2.9787': attribute type 2 has an invalid length.
[ 1294.542966][  T112] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1294.566488][T13104] CPU: 0 UID: 0 PID: 13104 Comm: syz.3.9784 Not tainted syzkaller #0 PREEMPT(full) 
[ 1294.566514][T13104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1294.566524][T13104] Call Trace:
[ 1294.566531][T13104]  <TASK>
[ 1294.566539][T13104]  dump_stack_lvl+0xe8/0x150
[ 1294.566564][T13104]  should_fail_ex+0x40c/0x560
[ 1294.566605][T13104]  _copy_from_user+0x2d/0xb0
[ 1294.566627][T13104]  ___sys_recvmsg+0x173/0x590
[ 1294.566652][T13104]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1294.566676][T13104]  ? __fget_files+0x2a/0x420
[ 1294.566727][T13104]  do_recvmmsg+0x329/0x810
[ 1294.566755][T13104]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1294.566786][T13104]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1294.566822][T13104]  __x64_sys_recvmmsg+0x198/0x250
[ 1294.566845][T13104]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1294.566873][T13104]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1294.566893][T13104]  do_syscall_64+0x174/0x580
[ 1294.566910][T13104]  ? trace_irq_disable+0x3b/0x140
[ 1294.566935][T13104]  ? clear_bhb_loop+0x40/0x90
[ 1294.566958][T13104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1294.566974][T13104] RIP: 0033:0x7fb80b59ce59
[ 1294.566991][T13104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1294.567006][T13104] RSP: 002b:00007fb80c4e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1294.567025][T13104] RAX: ffffffffffffffda RBX: 00007fb80b815fa0 RCX: 00007fb80b59ce59
[ 1294.567037][T13104] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000003
[ 1294.567048][T13104] RBP: 00007fb80c4e6090 R08: 0000000000000000 R09: 0000000000000000
[ 1294.567059][T13104] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002
[ 1294.567070][T13104] R13: 00007fb80b816038 R14: 00007fb80b815fa0 R15: 00007ffffbf363c8
[ 1294.567100][T13104]  </TASK>
[ 1294.568540][T13115] netlink: 'syz.2.9787': attribute type 2 has an invalid length.
[ 1294.775179][  T112] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1294.808587][  T112] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1294.887794][T13126] netlink: 'syz.0.9789': attribute type 12 has an invalid length.
[ 1295.447601][T13155] FAULT_INJECTION: forcing a failure.
[ 1295.447601][T13155] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1295.488447][T13155] CPU: 1 UID: 0 PID: 13155 Comm: syz.1.9799 Not tainted syzkaller #0 PREEMPT(full) 
[ 1295.488471][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1295.488482][T13155] Call Trace:
[ 1295.488489][T13155]  <TASK>
[ 1295.488497][T13155]  dump_stack_lvl+0xe8/0x150
[ 1295.488522][T13155]  should_fail_ex+0x40c/0x560
[ 1295.488554][T13155]  _copy_from_user+0x2d/0xb0
[ 1295.488575][T13155]  ___sys_recvmsg+0x173/0x590
[ 1295.488601][T13155]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1295.488624][T13155]  ? __fget_files+0x2a/0x420
[ 1295.488677][T13155]  do_recvmmsg+0x329/0x810
[ 1295.488706][T13155]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1295.488738][T13155]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1295.488774][T13155]  __x64_sys_recvmmsg+0x198/0x250
[ 1295.488797][T13155]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1295.488827][T13155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1295.488846][T13155]  do_syscall_64+0x174/0x580
[ 1295.488863][T13155]  ? trace_irq_disable+0x3b/0x140
[ 1295.488888][T13155]  ? clear_bhb_loop+0x40/0x90
[ 1295.488910][T13155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1295.488928][T13155] RIP: 0033:0x7fbb0db9ce59
[ 1295.488945][T13155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1295.488960][T13155] RSP: 002b:00007fbb0e9e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1295.488980][T13155] RAX: ffffffffffffffda RBX: 00007fbb0de15fa0 RCX: 00007fbb0db9ce59
[ 1295.488994][T13155] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004
[ 1295.489006][T13155] RBP: 00007fbb0e9e1090 R08: 0000000000000000 R09: 0000000000000000
[ 1295.489017][T13155] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[ 1295.489036][T13155] R13: 00007fbb0de16038 R14: 00007fbb0de15fa0 R15: 00007ffccb8995b8
[ 1295.489067][T13155]  </TASK>
[ 1295.508828][T13156] x_tables: duplicate underflow at hook 2
[ 1295.901898][T13170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9803'.
[ 1296.255166][T13186] Cannot find add_set index 2 as target
[ 1296.261030][T13187] xt_bpf: check failed: parse error
[ 1296.268295][T13186] Cannot find add_set index 2 as target
[ 1296.298109][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9809'.
[ 1296.330656][T13191] netlink: 'syz.2.9810': attribute type 2 has an invalid length.
[ 1296.428913][T13195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9811'.
[ 1296.496192][T13199] tipc: Started in network mode
[ 1296.502144][T13199] tipc: Node identity 3a42e24ece0f, cluster identity 4711
[ 1296.518669][T13199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1296.536855][T13199] syzkaller0: entered promiscuous mode
[ 1296.555323][T13199] syzkaller0: entered allmulticast mode
[ 1296.575363][T13202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9814'.
[ 1296.593870][T13206] netlink: 'syz.2.9816': attribute type 4 has an invalid length.
[ 1296.690671][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9818'.
[ 1296.745347][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9818'.
[ 1296.774868][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9818'.
[ 1296.944059][T13222] openvswitch: netlink: Key 0 has unexpected len 12 expected 0
[ 1297.760365][T13245] FAULT_INJECTION: forcing a failure.
[ 1297.760365][T13245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1297.775208][T13245] CPU: 1 UID: 0 PID: 13245 Comm: syz.2.9828 Not tainted syzkaller #0 PREEMPT(full) 
[ 1297.775231][T13245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1297.775242][T13245] Call Trace:
[ 1297.775250][T13245]  <TASK>
[ 1297.775258][T13245]  dump_stack_lvl+0xe8/0x150
[ 1297.775283][T13245]  should_fail_ex+0x40c/0x560
[ 1297.775316][T13245]  _copy_from_user+0x2d/0xb0
[ 1297.775336][T13245]  ___sys_recvmsg+0x173/0x590
[ 1297.775363][T13245]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1297.775388][T13245]  ? __fget_files+0x2a/0x420
[ 1297.775441][T13245]  do_recvmmsg+0x329/0x810
[ 1297.775470][T13245]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1297.775502][T13245]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1297.775537][T13245]  __x64_sys_recvmmsg+0x198/0x250
[ 1297.775559][T13245]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1297.775586][T13245]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.775605][T13245]  do_syscall_64+0x174/0x580
[ 1297.775622][T13245]  ? trace_irq_disable+0x3b/0x140
[ 1297.775646][T13245]  ? clear_bhb_loop+0x40/0x90
[ 1297.775669][T13245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.775687][T13245] RIP: 0033:0x7ff9e199ce59
[ 1297.775704][T13245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1297.775718][T13245] RSP: 002b:00007ff9e27de028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1297.775736][T13245] RAX: ffffffffffffffda RBX: 00007ff9e1c15fa0 RCX: 00007ff9e199ce59
[ 1297.775749][T13245] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004
[ 1297.775761][T13245] RBP: 00007ff9e27de090 R08: 0000000000000000 R09: 0000000000000000
[ 1297.775772][T13245] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[ 1297.775783][T13245] R13: 00007ff9e1c16038 R14: 00007ff9e1c15fa0 R15: 00007ffe8f718528
[ 1297.775813][T13245]  </TASK>
[ 1298.166415][T13237] 
[ 1298.168770][T13237] ======================================================
[ 1298.175790][T13237] WARNING: possible circular locking dependency detected
[ 1298.182819][T13237] syzkaller #0 Not tainted
[ 1298.187234][T13237] ------------------------------------------------------
[ 1298.194243][T13237] syz.0.9827/13237 is trying to acquire lock:
[ 1298.200300][T13237] ffffffff8ea80d80 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x680
[ 1298.210140][T13237] 
[ 1298.210140][T13237] but task is already holding lock:
[ 1298.217495][T13237] ffff88805abb2ae0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110
[ 1298.226204][T13237] 
[ 1298.226204][T13237] which lock already depends on the new lock.
[ 1298.226204][T13237] 
[ 1298.236600][T13237] 
[ 1298.236600][T13237] the existing dependency chain (in reverse order) is:
[ 1298.245608][T13237] 
[ 1298.245608][T13237] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 1298.253345][T13237]        lock_sock_nested+0x41/0x100
[ 1298.258657][T13237]        inet_shutdown+0x6a/0x390
[ 1298.263698][T13237]        nbd_mark_nsock_dead+0x2cb/0x550
[ 1298.269427][T13237]        recv_work+0x1cef/0x1e10
[ 1298.274367][T13237]        process_scheduled_works+0xa8e/0x14e0
[ 1298.280450][T13237]        worker_thread+0xa47/0xfb0
[ 1298.285571][T13237]        kthread+0x389/0x470
[ 1298.290163][T13237]        ret_from_fork+0x514/0xb70
[ 1298.295297][T13237]        ret_from_fork_asm+0x1a/0x30
[ 1298.300592][T13237] 
[ 1298.300592][T13237] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1298.308240][T13237]        __mutex_lock+0x19d/0x1590
[ 1298.313359][T13237]        nbd_queue_rq+0x373/0x1150
[ 1298.318473][T13237]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1298.324618][T13237]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1298.331513][T13237]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1298.338016][T13237]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1298.343646][T13237]        blk_mq_dispatch_list+0xd11/0xe10
[ 1298.349402][T13237]        blk_mq_flush_plug_list+0x45f/0x540
[ 1298.355311][T13237]        __blk_flush_plug+0x3ed/0x4d0
[ 1298.360743][T13237]        __submit_bio+0x465/0x560
[ 1298.365768][T13237]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1298.371921][T13237]        block_read_full_folio+0x599/0x830
[ 1298.377730][T13237]        filemap_read_folio+0x12c/0x3a0
[ 1298.383285][T13237]        do_read_cache_folio+0x354/0x590
[ 1298.388954][T13237]        read_part_sector+0xb6/0x2b0
[ 1298.394303][T13237]        adfspart_check_ICS+0xb1/0x960
[ 1298.399765][T13237]        bdev_disk_changed+0x82b/0x1780
[ 1298.405310][T13237]        blkdev_get_whole+0x372/0x510
[ 1298.410733][T13237]        bdev_open+0x324/0xd70
[ 1298.415496][T13237]        blkdev_open+0x461/0x600
[ 1298.420444][T13237]        do_dentry_open+0x816/0x1380
[ 1298.425738][T13237]        vfs_open+0x3b/0x340
[ 1298.430326][T13237]        path_openat+0x2e3b/0x3890
[ 1298.435449][T13237]        do_file_open+0x23e/0x4a0
[ 1298.440481][T13237]        do_sys_openat2+0x113/0x200
[ 1298.445683][T13237]        __x64_sys_openat+0x138/0x170
[ 1298.451055][T13237]        do_syscall_64+0x174/0x580
[ 1298.456171][T13237]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1298.462588][T13237] 
[ 1298.462588][T13237] -> #4 (&cmd->lock){+.+.}-{4:4}:
[ 1298.469802][T13237]        __mutex_lock+0x19d/0x1590
[ 1298.474914][T13237]        nbd_queue_rq+0xc1/0x1150
[ 1298.479944][T13237]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1298.486012][T13237]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1298.492867][T13237]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1298.499390][T13237]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1298.505023][T13237]        blk_mq_dispatch_list+0xd11/0xe10
[ 1298.510747][T13237]        blk_mq_flush_plug_list+0x45f/0x540
[ 1298.516639][T13237]        __blk_flush_plug+0x3ed/0x4d0
[ 1298.522013][T13237]        __submit_bio+0x465/0x560
[ 1298.527038][T13237]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1298.533191][T13237]        block_read_full_folio+0x599/0x830
[ 1298.539000][T13237]        filemap_read_folio+0x12c/0x3a0
[ 1298.544551][T13237]        do_read_cache_folio+0x354/0x590
[ 1298.550190][T13237]        read_part_sector+0xb6/0x2b0
[ 1298.555475][T13237]        adfspart_check_ICS+0xb1/0x960
[ 1298.560982][T13237]        bdev_disk_changed+0x82b/0x1780
[ 1298.566530][T13237]        blkdev_get_whole+0x372/0x510
[ 1298.571906][T13237]        bdev_open+0x324/0xd70
[ 1298.576671][T13237]        blkdev_open+0x461/0x600
[ 1298.581610][T13237]        do_dentry_open+0x816/0x1380
[ 1298.586903][T13237]        vfs_open+0x3b/0x340
[ 1298.591492][T13237]        path_openat+0x2e3b/0x3890
[ 1298.596607][T13237]        do_file_open+0x23e/0x4a0
[ 1298.601635][T13237]        do_sys_openat2+0x113/0x200
[ 1298.606834][T13237]        __x64_sys_openat+0x138/0x170
[ 1298.612205][T13237]        do_syscall_64+0x174/0x580
[ 1298.617312][T13237]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1298.623728][T13237] 
[ 1298.623728][T13237] -> #3 (set->srcu){.+.+}-{0:0}:
[ 1298.630856][T13237]        __synchronize_srcu+0xc9/0x2f0
[ 1298.636311][T13237]        elevator_switch+0x1e8/0x7b0
[ 1298.641677][T13237]        elevator_change+0x2fa/0x480
[ 1298.646975][T13237]        elevator_set_default+0x375/0x440
[ 1298.652699][T13237]        blk_register_queue+0x3f3/0x4e0
[ 1298.658247][T13237]        __add_disk+0x6cb/0xe30
[ 1298.663118][T13237]        add_disk_fwnode+0xfb/0x4b0
[ 1298.668321][T13237]        nbd_dev_add+0x733/0xb60
[ 1298.673276][T13237]        nbd_init+0x15f/0x1e0
[ 1298.677957][T13237]        do_one_initcall+0x250/0x870
[ 1298.683249][T13237]        do_initcall_level+0x10a/0x1a0
[ 1298.688716][T13237]        do_initcalls+0x59/0xa0
[ 1298.693585][T13237]        kernel_init_freeable+0x29d/0x3e0
[ 1298.699303][T13237]        kernel_init+0x1d/0x1d0
[ 1298.704153][T13237]        ret_from_fork+0x514/0xb70
[ 1298.709286][T13237]        ret_from_fork_asm+0x1a/0x30
[ 1298.714571][T13237] 
[ 1298.714571][T13237] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[ 1298.722396][T13237]        __mutex_lock+0x19d/0x1590
[ 1298.723132][ T2367] Bluetooth: hci1: command 0x0405 tx timeout
[ 1298.727499][T13237]        elevator_change+0x1af/0x480
[ 1298.738739][T13237]        elevator_set_none+0xb5/0x140
[ 1298.744123][T13237]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[ 1298.750454][T13237]        nbd_start_device+0x189/0xb30
[ 1298.755850][T13237]        nbd_genl_connect+0x1597/0x1c10
[ 1298.761412][T13237]        genl_family_rcv_msg_doit+0x233/0x340
[ 1298.767493][T13237]        genl_rcv_msg+0x614/0x7a0
[ 1298.772530][T13237]        netlink_rcv_skb+0x226/0x4a0
[ 1298.777825][T13237]        genl_rcv+0x28/0x40
[ 1298.782331][T13237]        netlink_unicast+0x7bb/0x940
[ 1298.787624][T13237]        netlink_sendmsg+0x813/0xb40
[ 1298.792921][T13237]        ____sys_sendmsg+0x9b9/0xa20
[ 1298.798212][T13237]        ___sys_sendmsg+0x2a5/0x360
[ 1298.803420][T13237]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1298.808881][T13237]        do_syscall_64+0x174/0x580
[ 1298.813993][T13237]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1298.820409][T13237] 
[ 1298.820409][T13237] -> #1 (&q->q_usage_counter(io)#58){++++}-{0:0}:
[ 1298.829018][T13237]        blk_alloc_queue+0x544/0x690
[ 1298.834304][T13237]        __blk_mq_alloc_disk+0x194/0x390
[ 1298.839951][T13237]        nbd_dev_add+0x494/0xb60
[ 1298.844894][T13237]        nbd_init+0x15f/0x1e0
[ 1298.849576][T13237]        do_one_initcall+0x250/0x870
[ 1298.854859][T13237]        do_initcall_level+0x10a/0x1a0
[ 1298.860344][T13237]        do_initcalls+0x59/0xa0
[ 1298.865201][T13237]        kernel_init_freeable+0x29d/0x3e0
[ 1298.870939][T13237]        kernel_init+0x1d/0x1d0
[ 1298.875793][T13237]        ret_from_fork+0x514/0xb70
[ 1298.880903][T13237]        ret_from_fork_asm+0x1a/0x30
[ 1298.886188][T13237] 
[ 1298.886188][T13237] -> #0 (fs_reclaim){+.+.}-{0:0}:
[ 1298.893406][T13237]        __lock_acquire+0x1520/0x2cd0
[ 1298.898792][T13237]        lock_acquire+0x106/0x350
[ 1298.903813][T13237]        fs_reclaim_acquire+0x71/0x100
[ 1298.909272][T13237]        kmem_cache_alloc_node_noprof+0x4a/0x680
[ 1298.915605][T13237]        __alloc_skb+0x1d7/0x7a0
[ 1298.920550][T13237]        tcp_send_active_reset+0x8a/0x550
[ 1298.926271][T13237]        __tcp_close+0x462/0xec0
[ 1298.931206][T13237]        tcp_close+0x28/0x110
[ 1298.935882][T13237]        inet_release+0x143/0x190
[ 1298.940911][T13237]        sock_close+0xad/0x220
[ 1298.945672][T13237]        __fput+0x418/0xa50
[ 1298.950176][T13237]        task_work_run+0x1d9/0x270
[ 1298.955290][T13237]        exit_to_user_mode_loop+0x193/0x6b0
[ 1298.961190][T13237]        do_syscall_64+0x353/0x580
[ 1298.966306][T13237]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1298.972731][T13237] 
[ 1298.972731][T13237] other info that might help us debug this:
[ 1298.972731][T13237] 
[ 1298.982954][T13237] Chain exists of:
[ 1298.982954][T13237]   fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET6
[ 1298.982954][T13237] 
[ 1298.995650][T13237]  Possible unsafe locking scenario:
[ 1298.995650][T13237] 
[ 1299.003095][T13237]        CPU0                    CPU1
[ 1299.008468][T13237]        ----                    ----
[ 1299.013842][T13237]   lock(sk_lock-AF_INET6);
[ 1299.018360][T13237]                                lock(&nsock->tx_lock);
[ 1299.025298][T13237]                                lock(sk_lock-AF_INET6);
[ 1299.032341][T13237]   lock(fs_reclaim);
[ 1299.036326][T13237] 
[ 1299.036326][T13237]  *** DEADLOCK ***
[ 1299.036326][T13237] 
[ 1299.044475][T13237] 2 locks held by syz.0.9827/13237:
[ 1299.049666][T13237]  #0: ffff88809ab85e40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220
[ 1299.059873][T13237]  #1: ffff88805abb2ae0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110
[ 1299.070330][T13237] 
[ 1299.070330][T13237] stack backtrace:
[ 1299.076221][T13237] CPU: 1 UID: 0 PID: 13237 Comm: syz.0.9827 Not tainted syzkaller #0 PREEMPT(full) 
[ 1299.076244][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1299.076256][T13237] Call Trace:
[ 1299.076263][T13237]  <TASK>
[ 1299.076271][T13237]  dump_stack_lvl+0xe8/0x150
[ 1299.076295][T13237]  print_circular_bug+0x2e1/0x300
[ 1299.076325][T13237]  check_noncircular+0x12e/0x150
[ 1299.076350][T13237]  __lock_acquire+0x1520/0x2cd0
[ 1299.076377][T13237]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1299.076401][T13237]  ? kmem_cache_alloc_node_noprof+0x4a/0x680
[ 1299.076423][T13237]  lock_acquire+0x106/0x350
[ 1299.076439][T13237]  ? kmem_cache_alloc_node_noprof+0x4a/0x680
[ 1299.076463][T13237]  ? lock_acquire+0x106/0x350
[ 1299.076484][T13237]  fs_reclaim_acquire+0x71/0x100
[ 1299.076507][T13237]  ? kmem_cache_alloc_node_noprof+0x4a/0x680
[ 1299.076528][T13237]  kmem_cache_alloc_node_noprof+0x4a/0x680
[ 1299.076551][T13237]  ? __alloc_skb+0x1d7/0x7a0
[ 1299.076573][T13237]  ? __local_bh_enable_ip+0xd0/0x130
[ 1299.076593][T13237]  __alloc_skb+0x1d7/0x7a0
[ 1299.076618][T13237]  tcp_send_active_reset+0x8a/0x550
[ 1299.076645][T13237]  __tcp_close+0x462/0xec0
[ 1299.076668][T13237]  tcp_close+0x28/0x110
[ 1299.076687][T13237]  inet_release+0x143/0x190
[ 1299.076711][T13237]  sock_close+0xad/0x220
[ 1299.076732][T13237]  ? __pfx_sock_close+0x10/0x10
[ 1299.076752][T13237]  __fput+0x418/0xa50
[ 1299.076776][T13237]  task_work_run+0x1d9/0x270
[ 1299.076800][T13237]  ? __pfx_task_work_run+0x10/0x10
[ 1299.076827][T13237]  exit_to_user_mode_loop+0x193/0x6b0
[ 1299.076853][T13237]  ? rcu_is_watching+0x15/0xb0
[ 1299.076873][T13237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1299.076891][T13237]  do_syscall_64+0x353/0x580
[ 1299.076909][T13237]  ? clear_bhb_loop+0x40/0x90
[ 1299.076930][T13237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1299.076947][T13237] RIP: 0033:0x7fc7f019ce59
[ 1299.076964][T13237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1299.076979][T13237] RSP: 002b:00007ffed196f128 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1299.076999][T13237] RAX: 0000000000000000 RBX: 00007fc7f0417da0 RCX: 00007fc7f019ce59
[ 1299.077012][T13237] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1299.077023][T13237] RBP: 00007fc7f0417da0 R08: 0000000000000006 R09: 0000000000000000
[ 1299.077035][T13237] R10: 00007fc7f0417cb0 R11: 0000000000000246 R12: 000000000013cedd
[ 1299.077047][T13237] R13: 00007fc7f041618c R14: 000000000013ccd6 R15: 00007fc7f0416180
[ 1299.077070][T13237]  </TASK>
[ 1299.872938][T13196] tipc: Resetting bearer <eth:syzkaller0>
[ 1299.917839][T13196] tipc: Disabling bearer <eth:syzkaller0>
[ 1299.927205][T13238] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 1299.936676][T13238] __nla_validate_parse: 2 callbacks suppressed
[ 1299.936686][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9827'.
[ 1299.956594][  T809] tipc: Node number set to 4098744910
[ 1307.202732][ T2367] Bluetooth: hci3: command 0x0406 tx timeout