last executing test programs:

3.389821663s ago: executing program 3 (id=482):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)

3.176816085s ago: executing program 3 (id=486):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000480)={0x89, 0x0, 0x1, 0x80}, 0x8)
recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000c00}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000a40)={0x1508, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [{{0x254, 0x1, {{0x2, 0x40000000}, 0x7, 0x81, 0x3, 0x6, 0x9, 'syz0\x00', "6a7e3b29cdee0babe48cf0b808d69a0101aaa5e22cee7f65ad1a2b56ab414ed1", "14b03696a6eb80805a2928ed85e24dd2847a9dc32f22420157da2801a23e6e68", [{0x0, 0x2, {0x3, 0x3ff}}, {0x8, 0x5, {0x3, 0x1ff}}, {0x4, 0x5c9f, {0x1, 0xc}}, {0xc33, 0x8, {0x4, 0x7}}, {0x5, 0x6, {0x1, 0xfffffffb}}, {0x7ff, 0x1ff, {0x3, 0x7fffffff}}, {0x1, 0x8, {0x0, 0x80}}, {0xb, 0x9, {0x2, 0x9}}, {0xff, 0xb16, {0x2, 0x7}}, {0x0, 0x9, {0x0, 0x8}}, {0x2, 0x5, {0x0, 0x1}}, {0x7fff, 0x7, {0x1, 0xff}}, {0x353, 0x6, {0x0, 0x9}}, {0xf, 0xac, {0x0, 0x5}}, {0x5, 0x9, {0x2, 0x9}}, {0xfd63, 0x9, {0x0, 0x3}}, {0x1, 0x2, {0x3, 0xffff}}, {0x9214, 0x8, {0x2, 0x81}}, {0x8, 0x6, {0x0, 0x7}}, {0x8, 0x6}, {0x9, 0xd, {0x1, 0xfff}}, {0x1fc, 0xfff9, {0x2, 0x6}}, {0xc, 0x9, {0x3, 0x6}}, {0x7, 0x6, {0x3, 0x200}}, {0x4, 0x6, {0x1, 0x101}}, {0x2, 0x3, {0x3, 0x3}}, {0xb3f6, 0x4, {0x3, 0x8}}, {0x5, 0x9, {0x2, 0x101}}, {0x3, 0x4, {0x0, 0x7}}, {0x0, 0x81, {0x2, 0x3}}, {0x7, 0x0, {0x1, 0x3}}, {0xfffe, 0xaf, {0x3, 0x73}}, {0x1, 0x8000, {0x1, 0x5}}, {0x8, 0x2, {0x1, 0x3}}, {0x3, 0x8000, {0x2, 0x3}}, {0x3, 0x7fff, {0x0, 0x80}}, {0xfffe, 0x8, {0x0, 0x9}}, {0x1, 0x5, {0x2, 0x3}}, {0x7, 0x6, {0x0, 0x2}}, {0xfff8, 0x6, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0xe0}, 0x4, 0xb3, 0xcd68, 0x0, 0x17, 'syz1\x00', "d0daafca12e7204fa813b80c0732e97d0e269fc8615cf296a61d5cce419fab4f", "87251e209dfb148e52d79d9c160d72d531fa079aeacfe465d5e3500e038ec1d0", [{0x472, 0x4}, {0x3585, 0x6, {0x1, 0xd3220}}, {0x3, 0x8, {0x1, 0x1000}}, {0x2, 0x8, {0x1, 0xfffffffd}}, {0x3, 0x4974, {0x0, 0x100}}, {0x6, 0x93, {0x1, 0x80}}, {0x7, 0x2, {0x0, 0x3}}, {0x200, 0x8, {0x0, 0x7fff}}, {0x3, 0x0, {0x0, 0x18c}}, {0xf09d, 0x1, {0x2, 0x7b}}, {0x8, 0xb, {0x0, 0x5}}, {0xfff, 0x29, {0x0, 0x7}}, {0x0, 0x9, {0x2, 0xffff}}, {0x7, 0x45, {0x2, 0xb6}}, {0xffff, 0x2, {0x0, 0xffffffff}}, {0x101, 0x3, {0x0, 0x2}}, {0x80, 0x3, {0x2, 0x3e}}, {0x8001, 0x4, {0x1, 0x8}}, {0x1, 0x3, {0x2, 0x8}}, {0x3, 0x1000, {0x3, 0xf}}, {0x0, 0xfff8, {0x0, 0x9b}}, {0x7, 0x1f6f, {0x0, 0xfffffffd}}, {0x1b5, 0x3, {0x0, 0x101}}, {0x6, 0x9, {0x3, 0x2}}, {0x6, 0x7, {0x1, 0x9}}, {0x290a, 0x1, {0x0, 0x4}}, {0x64b2, 0x0, {0x0, 0x5}}, {0x8, 0x8, {0x1, 0x9}}, {0x8, 0x6, {0x1}}, {0x81, 0x8, {0x3, 0xb3ea}}, {0x7, 0xc987, {0x2}}, {0x4, 0x8, {0x2, 0x7f}}, {0xe, 0xa, {0x0, 0xffffffff}}, {0x5, 0x6, {0x0, 0x80000001}}, {0x6494, 0x0, {0x1, 0x8}}, {0x7, 0x0, {0x2, 0x1ff}}, {0x5, 0x3, {0xa343f636d6f0148d, 0x7}}, {0x0, 0x40, {0x0, 0x8}}, {0x1, 0xf3, {0x0, 0x7}}, {0x4ca2, 0x9, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0xf, 0x5, 0x401, 0x3, 0x20, 'syz1\x00', "b832fe4566e04358680dbc90a740ca8ec4454d92418aee4dc408aeeb7f830386", "2ebf1cbd6695ca16512ef4ae893598049da1feeb6ce505b90f5eb4c0318dc3e4", [{0x2, 0x9be6, {0x98ecc344498d9b7, 0x4}}, {0x7, 0x2, {0x1, 0x1}}, {0x7f, 0x1, {0x3, 0x5b}}, {0x1, 0xcd, {0x3, 0x3}}, {0x6ca8, 0x2, {0x1, 0x4}}, {0x4, 0x5, {0x0, 0x200}}, {0x9, 0x1, {0x3, 0xfffffff6}}, {0x1, 0x0, {0x3, 0x5}}, {0x7, 0x0, {0x3}}, {0x10, 0x4, {0x3, 0x4}}, {0xffff, 0x5, {0x2, 0xffffffff}}, {0x4, 0x5, {0x1, 0x4}}, {0x1c, 0x3, {0x0, 0x101}}, {0x4, 0x6, {0x2, 0x9}}, {0x4, 0x10, {0x0, 0x10000}}, {0xe1, 0x5, {0x3, 0x5}}, {0x5, 0x509e, {0x7, 0x6}}, {0x8, 0x7, {0x3, 0x4}}, {0x2, 0x1000, {0x3}}, {0x39b4, 0x7, {0x0, 0x3}}, {0x83e, 0x6, {0x2, 0x1}}, {0xa4, 0xb9f9, {0x0, 0xa000}}, {0xfff9, 0x8, {0x2, 0x3}}, {0x7d4, 0x9, {0x0, 0x8}}, {0xe18c, 0x88f8, {0x2}}, {0xe, 0xfffc, {0x1, 0x80000000}}, {0x90, 0x7, {0x3, 0xb9dd}}, {0x4, 0x3f, {0x1, 0x1}}, {0x70, 0x3e, {0x3, 0x5}}, {0x2200, 0x4, {0x0, 0x4}}, {0x7, 0x7, {0x0, 0x4d0}}, {0x5, 0xff, {0x1, 0x9}}, {0x9, 0x7ff, {0x3, 0x2712}}, {0x7363, 0x9, {0x3, 0x4bc}}, {0x0, 0x81, {0x0, 0x7}}, {0x8001, 0x8001, {0x3, 0x9}}, {0x3, 0x2, {0x2, 0x9}}, {0x7, 0x2, {0x1, 0x1}}, {0xffff, 0x1, {0x3, 0x3}}, {0xe, 0x7fff, {0x1, 0xfffffffa}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0x0, 0x7, 0xf, 0xfb06, 0x7, 'syz0\x00', "3637cac84ca46e191322e0b7085f805ab508ad12b4119d7539470305a80c2ce5", "3272d8c40438bd4e3ffea6923cfddb7a73ecc033af29232e74547a6a4d46982a", [{0x6, 0x1cf, {0x2, 0x1}}, {0x3, 0x1000, {0x0, 0x1b35}}, {0x8, 0x2, {0x2, 0x100}}, {0x4, 0x120, {0x3, 0x4}}, {0x7, 0xe, {0x2, 0x9}}, {0xe, 0x3, {0x2, 0x1}}, {0x200, 0x1, {0x0, 0x2}}, {0x9, 0xd81e, {0x3, 0x8}}, {0xb93a, 0xff}, {0x7, 0x4, {0x0, 0x6}}, {0x6, 0x1000, {0x1, 0x1000}}, {0x1ff, 0xffff, {0x1, 0x4}}, {0x6, 0x1677, {0x0, 0xc}}, {0xe, 0x2, {0x0, 0xffffffff}}, {0x38, 0xe, {0x2, 0x10}}, {0x0, 0x7, {0x0, 0x2}}, {0x6, 0x800, {0x0, 0x1}}, {0x615, 0x0, {0x2, 0x2}}, {0x2b, 0x9, {0x0, 0x6}}, {0xc2, 0x2, {0x1, 0x4}}, {0x4, 0xd, {0x1, 0xe}}, {0x2, 0x5, {0x1, 0xe}}, {0x1, 0x5d, {0x0, 0xe}}, {0x42, 0xa, {0x2, 0x5}}, {0xf, 0x3ff, {0x0, 0xfff}}, {0x1ff, 0xe37, {0x3, 0xc796a771}}, {0xe, 0x3, {0x0, 0x6}}, {0x9fcc, 0x40, {0x0, 0xfffffffd}}, {0x9, 0x6, {0x0, 0x40}}, {0x8, 0x1, {0x3, 0xffffff7f}}, {0x4, 0x61f, {0x0, 0x4}}, {0xfffd, 0x3, {0x2, 0x2}}, {0x2, 0x4, {0x0, 0x9c}}, {0xf515, 0x3, {0x0, 0x4}}, {0x3, 0x7fff, {0x1, 0x101}}, {0xb, 0x9, {0x1, 0x5}}, {0x40, 0x2, {0x3, 0x3}}, {0x5, 0x98e8, {0x2, 0x6}}, {0x2, 0x8, {0x0, 0x6}}, {0x4, 0x1, {0x0, 0xec8}}]}}}, {{0x254, 0x1, {{0x2, 0xffffffff}, 0xfd, 0x80, 0xbba, 0x1, 0xf, 'syz0\x00', "9de6edf637d498d4e973cc009ffecb2001d68423afcc16d11525ced7e9d94052", "f1ecc6079c2ac90e9ec81021ab66bc96b389605eb9926f4984e76f0dc139a7a3", [{0x8001, 0x5354, {0x3, 0x6}}, {0x1, 0x100}, {0x4, 0x0, {0x3, 0x5}}, {0x1, 0xfff3, {0x0, 0x7fff}}, {0x5, 0x37d, {0x3, 0x1ff}}, {0x0, 0x7ff, {0x1, 0x3c4c}}, {0xfff, 0xfa9, {0x2, 0xcf}}, {0x250a, 0x1, {0x1}}, {0x2, 0x1, {0x2}}, {0x401, 0x3, {0x0, 0xb}}, {0xcbb5, 0x1, {0x3, 0x2}}, {0x5, 0x9, {0x3, 0x3}}, {0xb, 0x432, {0x2, 0xfffffff9}}, {0xc000, 0x6, {0x2}}, {0x7ff, 0x6, {0x0, 0x40}}, {0x50, 0x27ca, {0x3, 0x19}}, {0x7a4, 0x8, {0x1, 0x2}}, {0xc, 0x7ff, {0x0, 0x5}}, {0x0, 0x7, {0x2, 0x6}}, {0xfffc, 0x2, {0x1, 0x7}}, {0x7, 0x8c, {0x1, 0x8}}, {0x7, 0xc, {0x0, 0x8000}}, {0x101, 0x40, {0x3, 0x9}}, {0x7f, 0x9, {0x2, 0x1}}, {0x81, 0xf, {0x3, 0x5}}, {0x1, 0x6d64, {0x0, 0xd}}, {0x2, 0xe, {0x2, 0x2}}, {0x8, 0x0, {0x3, 0x1}}, {0x1000, 0x0, {0x3}}, {0x6, 0x6, {0x2, 0x2}}, {0x8000, 0x7f, {0x1, 0x4}}, {0x4, 0x7, {0x0, 0x8}}, {0x0, 0xb, {0x3, 0x7a}}, {0x1000, 0x7ff, {0x1, 0x7}}, {0x7, 0xffff, {0x2, 0x3c}}, {0xff3c, 0x7, {0x3, 0x20000000}}, {0x2, 0xcca, {0x2, 0x7}}, {0x8, 0xff, {0x0, 0x1}}, {0x9, 0x7, {0x0, 0x6}}, {0x8, 0x0, {0x0, 0xe}}]}}}, {{0x254, 0x1, {{0x3, 0x66}, 0x7, 0x5, 0x6, 0x6, 0x26, 'syz0\x00', "ca9e65f11c7aced2221419be50df2bf114810774ab223a2b7f1f432defcc7fe0", "f26b546d941aee77e2506a8fed7aa259a890af547340f222120a1a0cd3c48e67", [{0xa, 0xff7f, {0x0, 0x8}}, {0x7, 0x1, {0x2, 0x6060baf}}, {0x9, 0x886, {0x0, 0xc}}, {0xffff, 0x13c9, {0x2, 0x100}}, {0xea9, 0x7, {0x0, 0x8}}, {0x3, 0x3b5d, {0x2, 0x8}}, {0xd, 0x6b8, {0x3, 0x2}}, {0x6, 0xfff, {0x1, 0xfffffffc}}, {0x2, 0xfffd, {0x3, 0xf}}, {0x6, 0x6, {0x3, 0x6}}, {0x8, 0xe, {0x0, 0x7}}, {0x9, 0x1, {0x1, 0x1601}}, {0x7fff, 0x9, {0x1, 0x2}}, {0x8, 0x800, {0x2}}, {0x1ff, 0x0, {0x1, 0x40}}, {0x4, 0x80, {0x2, 0x8}}, {0x4, 0xb, {0x3, 0x80}}, {0x7, 0x8, {0x2, 0x6}}, {0x4, 0x2, {0x3, 0x1}}, {0x8, 0x9, {0x1}}, {0x67, 0x2, {0x0, 0x10}}, {0x2, 0x2, {0x1, 0xaef0}}, {0x6, 0x6, {0x0, 0xb873}}, {0x1, 0x30, {0x2}}, {0xdce1, 0x8ad0, {0x1, 0x1}}, {0x10, 0x8001, {0x0, 0x9}}, {0x6ef, 0x400, {0x0, 0x2}}, {0x9, 0x2}, {0x9, 0x7, {0x0, 0x8}}, {0x3ff, 0xfffc, {0x3}}, {0x6, 0xabd, {0x2, 0x6}}, {0x6, 0x1, {0x2, 0x7f}}, {0x0, 0x0, {0x0, 0x2}}, {0x87f6, 0x3, {0x2, 0x4}}, {0x8, 0x8eb, {0x1, 0x3}}, {0x928, 0x7, {0x1, 0x400}}, {0x7, 0x8, {0x3}}, {0x7ff, 0x9, {0x1, 0x101}}, {0x100, 0x8, {0x3}}, {0x6, 0xe7, {0x3, 0x8746}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x0, 0x7e, 0x7, 0x8000, 0x25, 'syz0\x00', "17dc1fce57d59acbc87aa546c3d16fd6e082ea40117dc41f400691e6b9d18476", "65f8af2d33e27cb7dfc2e326c4cddb0b517bbe0b1ac62352383b87a1862d9a90", [{0x1, 0x3b1, {0x3, 0xfffffffe}}, {0x8, 0x5, {0x3, 0x6}}, {0x3, 0x8, {0x2, 0x9}}, {0x3, 0x1, {0x1, 0x9}}, {0x6, 0x7fff, {0x3, 0x6}}, {0x9, 0x1, {0x3, 0x7fff}}, {0xfff9, 0xb5, {0x2, 0x1}}, {0x8d9, 0xb4, {0x2, 0x5}}, {0x1, 0xffff, {0x3, 0xc1a}}, {0xc, 0x8001, {0x0, 0x1}}, {0x4, 0x6, {0x1, 0x9}}, {0x1000, 0x2, {0x1, 0xffffffc0}}, {0x67, 0x5, {0x2, 0x5}}, {0x80, 0x100, {0x3, 0xffff}}, {0x0, 0x1, {0x2, 0x7}}, {0x9, 0x7ff, {0x3, 0x9}}, {0x8, 0x401, {0x2, 0x8}}, {0x8, 0x1000, {0x2, 0x800}}, {0x9, 0x101, {0x3, 0x9}}, {0x6, 0xec54, {0x1, 0x6}}, {0x5, 0x0, {0x1, 0x9c0}}, {0x5, 0xc714, {0x3, 0xb46f}}, {0xd6cb, 0x8ab, {0x1, 0x1}}, {0x800, 0x1000, {0x3, 0x8}}, {0x6, 0xf6c, {0x3, 0x6}}, {0x7fff, 0x800, {0x2, 0x7}}, {0x8001, 0x6, {0x0, 0x4}}, {0x5, 0x800, {0x2, 0x1}}, {0x0, 0x47e, {0x1, 0x6}}, {0x800, 0x0, {0x1, 0x4}}, {0x0, 0x4f6, {0x1, 0x1}}, {0xd3e2}, {0x2, 0x2, {0x0, 0x300}}, {0x1, 0x94, {0x1, 0x6}}, {0xc, 0x7, {0x0, 0xee}}, {0x6, 0x3, {0x3, 0x40}}, {0x6, 0x2, {0x2, 0x8680}}, {0x2, 0x5, {0x1, 0x6}}, {0x2, 0x5b87, {0x3, 0x80}}, {0x1, 0x3, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0xf}, 0x9, 0x1e, 0x5, 0xc, 0x4, 'syz1\x00', "ff94329cd4423af7d984db021c31d7ac4e7e36b7ae287308be73b92405b2a74c", "be80cfc3383386b17d816213682b8810db7f47fe46916be164d09787b87258ea", [{0x8, 0xee, {0x0, 0x8}}, {0x8, 0xe, {0x0, 0x9}}, {0xd4d, 0xae, {0x3, 0x3}}, {0x8c91, 0x6, {0x1, 0x4}}, {0x3, 0x0, {0x1, 0x9}}, {0x9, 0xb, {0x1, 0x6a56}}, {0x3, 0x40, {0x2, 0x9}}, {0x40, 0x2, {0x1, 0x8e}}, {0xf, 0xfffe, {0x2, 0x6}}, {0x1, 0x3, {0x2, 0x1}}, {0xf, 0x10, {0x3, 0xff}}, {0x6, 0x0, {0x0, 0x5}}, {0x1, 0x17b, {0x3, 0x4}}, {0x10, 0x1, {0x1, 0x1}}, {0x3ff, 0x8000, {0x3, 0x8}}, {0x6f, 0x8000, {0x2, 0xffffff10}}, {0x0, 0x3, {0x1, 0x6}}, {0x5, 0x4e, {0x2, 0x7f}}, {0x6, 0x4, {0x3, 0x8}}, {0x1, 0x2, {0x3, 0x4}}, {0x8000, 0x3ef7, {0x0, 0x2}}, {0x0, 0x1, {0x0, 0x8}}, {0x0, 0x80, {0x0, 0x5e}}, {0xa, 0x38, {0x0, 0xc00}}, {0x7f8, 0x5, {0x2, 0x2}}, {0x0, 0xff, {0x0, 0x7}}, {0xffff, 0x5, {0x2, 0x4}}, {0x7, 0x4f6d, {0x3, 0x9}}, {0x5, 0x8000, {0x3, 0x766}}, {0x0, 0x6, {0x1, 0xbf}}, {0x7f, 0xc, {0x1, 0x5}}, {0xbc, 0x1ff, {0x2, 0x3}}, {0x9, 0x6, {0x1, 0xfffffffb}}, {0x4, 0xb, {0x0, 0x3}}, {0xf, 0xedd6, {0x0, 0x7}}, {0x5, 0x5, {0x0, 0x4}}, {0x6, 0x3, {0x2, 0x7}}, {0x10, 0xc87, {0x0, 0x7ff}}, {0x4, 0x2ba, {0x1}}, {0x1, 0x401, {0x1, 0xa}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x3, 0x0, 0xfbff, 0x7, 0x18, 'syz0\x00', "a982a69dfe73957d1b9e1007012e5f8fa8dea52fa204dfeda27093b135b9dbd7", "579668e6666dfc5e17de3b51371105872762cd38c89c95d3820edfbb3539a552", [{0x1ff, 0x8, {0x3, 0x3}}, {0xfff, 0x5, {0x1, 0x200}}, {0xf07b, 0x400, {0x0, 0x3ff}}, {0xfffb, 0x7}, {0x7, 0x2, {0x3, 0x20}}, {0x73, 0xee, {0x1}}, {0x75, 0x5, {0x0, 0x8}}, {0xff, 0x7ff, {0x3, 0x28}}, {0x8001, 0x9, {0x0, 0x6}}, {0x80, 0x700, {0x3, 0x80000000}}, {0x200, 0x2, {0x0, 0x2}}, {0x1000, 0x2, {0x2, 0x3}}, {0x9, 0xb, {0x2, 0x4}}, {0x8, 0x9, {0x0, 0x1906}}, {0x5, 0xfff9, {0x1, 0x5}}, {0x2, 0x168, {0x2, 0x5}}, {0x3, 0x6, {0x0, 0x80000000}}, {0x996e, 0x6, {0x2, 0x6}}, {0x9, 0x7, {0x1, 0x3ff}}, {0x6f88, 0x8000, {0x2, 0xa69}}, {0xd4, 0x5, {0x1, 0x1}}, {0x8, 0x5, {0x2, 0xa}}, {0x2, 0x9, {0x2, 0x5}}, {0xfffb, 0x6, {0x3, 0x3}}, {0xfffe, 0x760, {0x3, 0x2}}, {0x8, 0x10, {0x1, 0x40000}}, {0x1, 0x7ff, {0x7, 0x4}}, {0x63, 0x0, {0x2, 0x1}}, {0x8, 0xa85a, {0x1, 0xd1b}}, {0x3, 0x0, {0x0, 0x4}}, {0x4, 0x7, {0x3, 0x2}}, {0xc, 0x8000, {0x2, 0x93d0}}, {0x9631, 0x7, {0x3, 0x9e68}}, {0x2, 0x5, {0x3, 0x10}}, {0x5, 0x9, {0x3, 0xfffffffb}}, {0x2, 0x80, {0x2, 0x48d}}, {0x2, 0x42bc, {0x1, 0x4}}, {0xf57b, 0x3, {0x2}}, {0xb35, 0xe, {0x1, 0x5}}, {0x2, 0x88a6, {0x1, 0x7}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x2020824}, 0x800)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

2.902530303s ago: executing program 3 (id=491):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x1a8, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x0, 'pim6reg0\x00', {0x1}, 0xffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000040000024001280110001006272696467655f736c617665000000000c00058006001f00a4b70000"], 0x44}}, 0x0)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T1(r9, 0x103, 0x1, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x800, 0x55007}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.573669483s ago: executing program 3 (id=496):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x87)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
readv(r9, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r13 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendfile(r13, r0, 0x0, 0xfffbffff)

2.042724315s ago: executing program 1 (id=502):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x40, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.754834079s ago: executing program 4 (id=506):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x200000c0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0)

1.625666399s ago: executing program 2 (id=508):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x22021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x40000}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048800}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@private, @local, <r2=>0x0}, &(0x7f0000000100)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000120002002bbd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="04000000a8b40200050010000700b50feb62f000c0a1dc65890326ec000024000e00030000010000000008000000070004000000000008002000551a4bf923786b14ff0f00000500210008000000a5660247131d26681d342eb7af60a4"], 0x5c}, 0x1, 0x0, 0x0, 0x20044010}, 0x0)

1.463251024s ago: executing program 1 (id=509):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x600})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 32)
r2 = socket(0x400000000010, 0x3, 0x0) (rerun: 32)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0x10, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd8}, 0x20004804)

1.46141942s ago: executing program 0 (id=510):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}}, 0x0, 0x0, 0x4f, 0x0, "279ffdf6338e1cfb1d8504630341b14ea4d74f99a1453d555010a39a6aa18a5219b9c6ff4105d965946a9d7e83fb4b4e9fe122a483416e978bcf6270f80f063e8ad39f33b8772a192d726ad4384db5ab"}, 0xd8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x38}, 0x48)

1.458034424s ago: executing program 3 (id=511):
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) (async)
r0 = socket(0x28, 0x5, 0x0) (async)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
listen(r1, 0x4) (async)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r2 = accept4$unix(r1, 0x0, 0x0, 0x800)
r3 = accept$unix(r2, &(0x7f0000000140), &(0x7f0000000200)=0x6e)
recvfrom$unix(r3, &(0x7f0000000240)=""/248, 0xf8, 0x40, 0x0, 0x0)

1.411527923s ago: executing program 4 (id=512):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000300)=0x8)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@deltclass={0x60, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x3, 0x7}, {0xb, 0xa}, {0x10, 0xc}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_RATE={0x6, 0x5, {0x76, 0x80}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfb}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x60}}, 0x4008000)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10b, 0x10b, 0x5, [@struct={0x6, 0x7, 0x0, 0x4, 0x1, 0x1ff, [{0xe, 0x0, 0x6}, {0x8, 0x0, 0x7}, {0xb, 0x1, 0x9}, {0x8, 0x0, 0x6}, {0x7, 0x2, 0x2}, {0x0, 0x0, 0x5}, {0x7, 0x2}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x2}, @fwd={0x5}, @restrict={0x9}, @datasec={0x5, 0x9, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x5}, {0x3, 0x4, 0x6}, {0x4, 0x9, 0x2}, {0x5, 0x0, 0xa}, {0x1, 0x714d, 0x2}, {0x1, 0x800, 0x6}, {0x5, 0x6, 0x4}, {0x4, 0x5, 0x1}, {0x5, 0x1, 0xfffffff7}], "badbcb"}, @typedef={0x7, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x0, 0x5f, 0x5f]}}, &(0x7f0000000000)=""/28, 0x129, 0x1c, 0x1, 0x5}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0xffffffff, 0x8f4c, 0x80000000, 0x24101, r0, 0x401, '\x00', r3, r4, 0x5, 0x0, 0x1}, 0x50)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000780)={0x0, 0x226, 0xffffffff, 0x1323, 0xe, 0xdf0, 0x4, 0x10000, {0x0, @in6={{0xa, 0x4e21, 0x7, @loopback, 0x9}}, 0x80000001, 0x4b, 0x7fffffff, 0x2, 0x3}}, &(0x7f0000000840)=0xb0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001fc0)={r0, &(0x7f0000001e80), 0x0}, 0x20)

1.284200656s ago: executing program 0 (id=513):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYBLOB], 0x48) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa00000000000000000200130001"], 0x70}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bind$bt_sco(r0, &(0x7f00000004c0)={0x1f, @fixed}, 0x8)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="450400000000000000000a00"], 0x20}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xffffffffffffffc8, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000327bd7000fedbdf250d0000001c0001800700060064680000060002005c0000000800050001000000540003800600040001000000080001000000000006000400020000001400020073697430000000000000000000000000050008006000000014000600fc010000000000000000000000000000060007004e24000050000380080005000a01010008000500ac1414aa080001000100000008000500ac1e00011400060000000000000000000000ffff0000000006000400fcff00000600040042a000000800010000000000100001800a0006006c626c6372000000"], 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x20004084)
listen(r2, 0x3) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)) (async)
sendmsg$NFC_CMD_FW_DOWNLOAD(r7, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) (async)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) (async, rerun: 64)
ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=<r12=>0x0) (rerun: 64)
sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRES8=r5, @ANYRESOCT=r8, @ANYBLOB="010026bd70003c02b8f40000000000000100", @ANYRES32=r12], 0xfd45}}, 0x1)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (rerun: 64)

1.198890954s ago: executing program 2 (id=514):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110b0000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@rand_addr=0x64010102, @remote}, 0xc)

999.155214ms ago: executing program 1 (id=515):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', <r1=>0x0, 0x40, 0x20, 0x200, 0x2, {{0x12, 0x4, 0x1, 0x15, 0x48, 0x68, 0x0, 0x1, 0x29, 0x0, @multicast2, @remote, {[@noop, @timestamp={0x44, 0x8, 0x98, 0x0, 0x7, [0x7]}, @timestamp={0x44, 0x28, 0xb8, 0x0, 0xf, [0x7, 0x3, 0x7, 0x285c, 0xd681, 0xfffffffd, 0x7fff, 0x4, 0x81]}]}}}}})
r2 = accept4(r0, &(0x7f0000000140)=@ethernet={0x0, @random}, &(0x7f00000001c0)=0x80, 0x80000)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
syz_emit_ethernet(0x21, &(0x7f0000001a40)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "e3", "dc094a", 0x22eb, "81b5be3181fd3b87d0a0a7"}}}}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0xffe0}}]}}]}, 0x3c}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000015000100fcfffffffcdbdf350f"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async)
ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000040)={@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x1, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r10, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) (async)
ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f00000003c0)={0x400, 0x3, 0x5, 0x7})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x54c, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1, 0x3e}}}}, [@NL80211_ATTR_IE={0x2db, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x7, 0x8}}, @fast_bss_trans={0x37, 0xdd, {0x4, 0x5, "538709c684448e461de57fb6e5e6e7bf", "4a422d1e649cdca22354a729f074b35dd656bfaf146c849899127275c523f709", "eed28b3c03e5eaf5b89aaa07fa68155156e72cd878cca38eefc618a7eeb7bba4", [{0x4, 0x19, "bfd1436b34a1147a5167245980eb97c3968174b13691f260d2"}, {0x1, 0x28, "b1161ecd5e0b76188df14d8ec09d58bca08bbcb4002db831190944f1dce0b8464c25ef67f621d394"}, {0x4, 0xf, "c2af9de7b800efd67a22c0bff1184a"}, {0x1, 0x25, "2d96750871de97740fe84fdd67dd06b3a2dd87fb7e5f4bb085b559a526cfd12077a3502034"}, {0x1, 0xc, "3f41f0b3dfd74033ba6ce014"}]}}, @ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x6a, {0x8, 0x2, "30b67aca7e044932113c5259dd02f85f", "a1d3fe85f7f8a01def59bdfe1b61c174a9d232a75a9a5857e18df84c556ab9f2", "8e55b5f7a8abf27909f7e34d36781abbfad00535b2bb7e00c5e24affa7a214a1", [{0x3, 0xb, "42f01c93108f55be68508a"}, {0x1, 0x9, "b28167abec141037f0"}]}}, @erp={0x2a, 0x1, {0x1}}, @random_vendor={0xdd, 0x8b, "8204c71e3180e61833a9ef987c5ea35480a82469ca542ba35ecac57e9de4d6e019553bced4c526b761e361ddb5ba293d219ed1611539160366c012ea682dffa13c5c25ac4260cc0608edf0b137d98c6372a3f070203712cbf7d5b169a10082890766635ec119d2581c9bc143b6009046b385ebcb37efb197ebe30eea1c40558f03157502f92628844376ed"}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @random={0x58, 0xd6, "0451cc467c511f18a2adcfea4a30b4b9fe4e852a6a1bf8d0a0e1b7c51f9ae2c843f201af9b834537f56a24db6075fb055fd738575da12ca9a1c8332e7481a55d16bd034df5ceb83071a73a0156f30f794d42a58ecd38009fdc8f9aad2ae1358028bebd502269581b5a94398f708568c0dbe7924469fbf98c8d23d4173a216046f34e1a67d37a271a119c6574fb35cf7a8fcbd8f79c2c14eaee0687a4c30318ce8af3eab3a16a1557c64ba4bee2e8a637fd5dc9f459937785fa8c00efa1095a9aeb64b01f70bf6752343c3c93180eb30bedf541f59974"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x60, 0xfc, "c2a65f2c29a56d6bf27cb59b04b080c1d53837ca8a3c97759b0bb25870611e7a991c53774394e3cede9a0331b55488183632d47031e074df560f37754b6569971d14ba2f04fff4e9204103b11d0a1efc9ddb282b7377506e82cb2eee"}, @NL80211_ATTR_FILS_ERP_REALM={0xfe, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0xe6, 0xfc, "b00a1dc243890163983fec515e38898d72c470716295f3c398a4e461800e1c7e427fc7f348763fa8f45411e91261016b67f65bfaf8ffb894dc27a7e4e84b7124ed65225ae8396e00863a21e17129a6ee588275365004232b177e23e9e0587a58f55fbbad7ad64e7381d57a9e449985bb026fc639717f0e43a3308242a3210d98f1a0e3bad61184e2db113cd45ed0925b0928e51a45960a8a65ae3d6a811bad7a46992918449dc69fd87dd0eed346f47b349e0ecf8fa755c44bc9332bf0ff80d11dbe126fcf16ebde80804184f444a7706adab88690570ee04742b4c571926acf9fcd"}]]}, 0x54c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async)
bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0xe, r1, 0x2e, r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000009161562ec007b51d90053d1224ac10003040000080000", @ANYRES32=0x0, @ANYBLOB="3502000081280000180012800e000100776972656775617264000000040002800800040005000000"], 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0)

975.176579ms ago: executing program 4 (id=516):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x200, 0x0, @l2={'ib', 0x3a, 'gretap0\x00'}}}}}, 0x34}}, 0x4000)
syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x25, 0x0, "394281e595fd9eb506cd1a5555af72cd375de18882e299a83da979fa66c8f49889716b8dc73f6c5518c12abfb88e8b811ed8bd3623253c58eed51af8b75008e2576da2b0f564a63d98fb21dc8ab90d76"}, 0xd8)
accept(r2, 0x0, &(0x7f0000000280)) (async)
r3 = accept(r2, 0x0, &(0x7f0000000280))
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000002c0)={r0, 0x2, 0x5, "07ec4655cc449eb3cf115dedcf84c6b9e208ec8038bb4f"})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x7a7241, 0x0)
close(r4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="f0000000100001000000000000000000fc01000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd00000000000000"], 0xf0}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r7 = epoll_create1(0x0)
epoll_create1(0x0) (async)
r8 = epoll_create1(0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000400)={0xa})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f00000003c0)={0x1008})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x2}, @alu={0x4, 0x1, 0x2, 0x3, 0x1, 0x10}], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x2}, @alu={0x4, 0x1, 0x2, 0x3, 0x1, 0x10}], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) (async)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xc) (async)
r10 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

938.513666ms ago: executing program 2 (id=517):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002b000b00000000ff0f00000007000000040003000c00018006000000e948ef000c000200070001"], 0x30}}, 0x4000)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000180)=0x5, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = socket$inet6(0x10, 0x806, 0x5)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfff00005}, {0x16}]}, 0x10)
sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r7=>0x0})
r8 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r7, @ANYBLOB="0800db00", @ANYRES32=r8, @ANYBLOB="0e754a16878f7475af95c172ae848b890700000093bd8ca3f1daa2d05964690e42121ef07091cc9b24322d9e04d1a043d6244cce94473ffc60980bc30fb039ca1c975c171926b8ec14b67d4aba275d816abba9766efa655aab6e2127a678e0c91b301b92063e19f27f86e3a163b391ea963e3d312f95806c647c217aab15aa56b15084cca590aa21c5a39bcf1b0c38b851682adc8d3eec9d1eca88b3405c7848ba13f6a930c1c432194117db9b57315b0846591e", @ANYRES64=r5, @ANYRESHEX=r3], 0x24}}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="fff800007ed8", @ANYRES16=r9, @ANYBLOB="01000000000000000000350000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x64}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000825bd7000ffdbdf254a0000000f00a8007365636f6e646e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d308000082df15b82c26b07700001007063690011000200303030303a30303a31302e3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(r3, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close(0x3)

698.786868ms ago: executing program 0 (id=518):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0)

698.425984ms ago: executing program 1 (id=519):
accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@rose, @rose, @bcast, @default, @bcast, @null, @netrom, @rose]}, &(0x7f0000000080)=0x48, 0x800) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

636.364519ms ago: executing program 4 (id=520):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001880)={@map, 0xffffffffffffffff, 0x16}, 0x20)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="040100001c0007"], 0x104}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r2, 0x0, 0x31, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x20000800)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r3, 0xffffe000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x80000)
recvmsg$can_raw(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f00000005c0)=""/118, 0x76}], 0x2}, 0x2021)
sendmsg$xdp(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f0000000380)="6331179493fa800f013ca7feab7756ef78150000f95f9f8233b654ea53ae1b0fa7f812f4c0d8", 0x26}], 0x2, 0x0, 0x0, 0x20000080}, 0x240000d0)
sendmsg$NFT_MSG_GETRULE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x14000051)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}]}, 0x54}}, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
poll(&(0x7f0000004040)=[{r8, 0x202}], 0x1, 0x4)
sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc5}, 0x4050)

612.922331ms ago: executing program 2 (id=521):
r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000)
pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x200)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x23, 0x0)
ioctl$SIOCGSTAMP(r1, 0x8906, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r3, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40)
connect$rose(r3, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c)
sendto$rose(r3, 0x0, 0x0, 0xc0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r10, @ANYBLOB="040046000500340040000000080026006c0900002c0051802800008009000100b168fa31670000000800030004ac0f00050002"], 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000001a80)={0x9f0, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x74, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffd}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x62}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x42}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x600, 0x11d, 0x0, 0x1, [{0x230, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x266b, 0x4, 0x6, 0x3, 0x7f, 0xf, 0x1]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x4, 0x48, 0x1f, 0x36, 0xc, 0x1, 0x5, 0x1, 0x12, 0x6, 0x12, 0x18, 0x24, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa08, 0x0, 0xdd, 0x9, 0x7fff, 0x1, 0xef8, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x7, 0x4}, {0x6, 0x2}, {0x4, 0x1}, {0x4, 0x5}, {0x3, 0x6}, {0x1, 0x7}, {0x4}, {0x2, 0xa}, {0x2}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x8}, {0x7}, {0x0, 0xa}, {0x4, 0x3}, {0x7, 0x9}, {0x4, 0x5}, {0x5, 0x4}, {0x4}, {0x4, 0x8}, {0x5, 0xe}, {0x0, 0x5}, {0x7, 0x5}, {0x1, 0x3}, {0x3, 0x8}, {0x6, 0x4}, {0x1, 0x4}, {0x4, 0x3}, {0x1, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x7}, {}, {0x0, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x4, 0xa}, {0x0, 0x5}, {0x6}, {0x3, 0x2}, {0x2, 0x3}, {0x7, 0x3}, {0x4, 0xa}, {0x4, 0x3}, {}, {0x5, 0x1}, {0x3, 0x8}, {0x1, 0x1}, {0x4, 0x2}, {0x6, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x9}, {0x1}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x24, 0x48, 0xc, 0x1, 0x4, 0xc, 0x36, 0x65c2b588471c52e5, 0x1, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x0, 0x0, 0xb, 0xffd1, 0x44ce, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x8, 0x1, 0xfffa, 0xf7, 0x6, 0x817]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x8}, {0x0, 0x8}, {0x4, 0x7}, {0x5, 0x9}, {0x7}, {0x1, 0x7}, {0x4, 0x1}, {0x6, 0x5}, {0x7, 0x5}, {0x6, 0x6}, {0x4, 0x2}, {0x3, 0x2}, {0x7, 0x3}]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x30, 0x24, 0x3, 0x346684b669d001e3, 0x19, 0xb, 0x27]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x2, 0x6, 0x36, 0xb, 0x1b, 0x21, 0x4, 0x24, 0x18, 0x60, 0x16, 0x36, 0x36, 0x16, 0x4, 0x3, 0x16, 0x8, 0x30, 0x5a, 0x6, 0x3, 0x2, 0x24, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x7b02, 0x8, 0x4180, 0x5, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x401, 0x9, 0x1ff, 0x8, 0x5, 0xe, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x5, 0x1b, 0x3, 0xee, 0xc, 0x2, 0x1, 0x30, 0x2, 0x16, 0x6c, 0x30, 0x3, 0x6c, 0x48, 0x9, 0x1, 0x60, 0x1, 0x3, 0xc, 0x6, 0x30, 0x9, 0x5]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x72d7, 0x8, 0x313e, 0x2, 0x8, 0x4, 0x7]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x1}, {0x5}, {0x3, 0x7}, {0x2, 0x7}, {0x6, 0xa}, {0x6, 0x2}, {0x3, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x4, 0x8}, {0x4, 0xa}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x5}, {0x7, 0x6}, {0x2, 0x3}, {0x4, 0x6}, {}, {}, {}, {0x3, 0x5}, {0x5, 0x7}, {0x6}, {0x5, 0x8}, {0x5, 0x4}, {0x0, 0xa}, {0x6, 0x1}, {0x4, 0x6}, {0x0, 0x7}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0xa}, {0x2, 0x3}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x2, 0x8}, {0x2, 0x2}, {0x2}, {0x7, 0x2}, {}, {0x0, 0x7}, {0x2, 0x5}, {0x2, 0x9}, {0x4, 0xa}, {0x2, 0x1}, {0x3, 0x5}, {0x6, 0x6}, {0x1, 0xa}, {0x6, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfff}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x340, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x6, 0x48, 0x3, 0x30, 0x2, 0x30, 0x48, 0xc3, 0x36, 0x3, 0x6, 0x60]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x5e, 0x36, 0x6, 0x1b, 0xb, 0x30, 0x0, 0x1b]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x36, 0x16, 0x3, 0x1b, 0x3, 0x62, 0x60, 0x30, 0x1, 0x16, 0x3, 0x6, 0x9, 0xc, 0xc, 0x36, 0x5, 0x3, 0x3, 0x48, 0xb, 0x6, 0x36, 0x3, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x4, 0x8, 0xfff8, 0x3e64, 0x7f, 0x31ec, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc72b, 0x3ff, 0x9, 0x0, 0x0, 0x7ff, 0xfffe, 0x3807]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x48, 0x0, 0x1b, 0x30, 0xc, 0x6, 0x6c, 0x12, 0x4, 0x2d, 0x4, 0x4, 0x6c, 0x2, 0x48, 0x12, 0x3, 0x2, 0x9, 0x1b, 0x1b, 0x3, 0x36, 0x6c, 0x6, 0x18, 0xb, 0x66]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7061, 0x1ff, 0xb, 0x7, 0xa78e, 0x2, 0x2, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8b, 0xe000, 0x9, 0x9, 0xbec, 0x3, 0x800, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x4000, 0x4, 0x6, 0xf3d1, 0x6]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x7}, {0x0, 0x2}, {0x4, 0x6}, {0x0, 0x5}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x5, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x6}, {0x3, 0x4}, {0x7, 0x5}, {0x2, 0x1}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x7, 0x4}, {0x1}, {0x2, 0x7}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x2}, {0x0, 0x8}, {0x6, 0x1}, {0x2, 0x4}, {0x6, 0x2}, {0x5, 0x8}, {0x4, 0x5}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x3}, {0x0, 0x2}, {0x3, 0x9}, {0x2, 0x3}, {0x3, 0x5}, {0x6, 0x1}, {0x0, 0x3}, {0x2, 0x8}, {0x2, 0xa}, {0x7, 0x4}, {}, {0x6, 0x4}, {0x4, 0x8}, {0x3, 0xa}, {0x3, 0x4}, {0x5, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x4, 0xa, 0x8000, 0xbc2, 0x4, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd88b, 0x0, 0x8, 0x1e0, 0x9, 0xf531, 0x5, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8000, 0x3, 0xb, 0x4, 0x10, 0x100, 0x5]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x12, 0x1, 0x5, 0x67, 0xc, 0x3, 0x1b, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x2}, {0x6, 0x6}, {0x4, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x9}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0x5}, {0x0, 0x4}, {0x7}, {0x6, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x9}, {0x4, 0xa}, {0x2, 0x5}, {0x6}, {0x5, 0x6}, {0x4}, {0x3, 0x9}, {0x5, 0x9}, {0x1, 0x4}, {0x4, 0x4}, {0x2, 0x8}, {0x5, 0x2}, {0x5, 0x2}, {0x0, 0x8}, {0x7, 0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x5, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x2, 0x2}, {0x4, 0x1}, {0x6, 0x4}, {0x3}, {0x2, 0x8}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {0x1}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x5}, {0x4, 0x3}, {0x3}, {0x6, 0x9}, {0x2, 0x2}, {0x4, 0x5}, {0x7, 0xa}, {0x2, 0x5}, {0x6}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x1}, {0x1, 0x6}, {0x6, 0x1}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x9}, {0x5, 0x2}, {0x5, 0x1}, {0x1, 0x3}, {0x1, 0x9}, {0x0, 0x3}, {0x5, 0x7}, {0x6, 0x4}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0xfe00, 0x5, 0xba6, 0x3bd, 0x3, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x83ab, 0x2, 0x100, 0x5, 0x3, 0xccb4, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0xfffa, 0x6, 0xa, 0x3, 0xa24, 0x4, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x5, 0x12, 0x5e, 0x60, 0x36, 0x1, 0x9, 0x3, 0x6, 0x0, 0x48, 0x24, 0x60, 0x6c, 0x30, 0x24, 0x36, 0x6967c83feadb6b6d, 0x4c, 0xc, 0x9, 0x6, 0x6, 0x24, 0x30]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x6}, {0x3, 0x3}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0xa}, {0x5, 0x2}, {0x7, 0x6}, {0x7, 0x5}, {0x5, 0xa}, {0x1, 0x5}, {0x5, 0x2}, {0x5, 0x5}, {0x3, 0x4}, {0x4}, {0x5, 0x2}, {0x4, 0x7}, {0x1, 0x5}, {0x3, 0x3}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x2}, {0x4, 0x8}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0x7}, {}, {0x0, 0x5}, {0x7, 0x4}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0x4}, {0x7, 0x9}, {0x5, 0x9}, {0x2, 0x5}, {0x6}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x98, 0x3, 0x2, 0x200, 0xfff8, 0x1, 0x2, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4b}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0x33c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x53}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x14}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x2c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2ac, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x667, 0x401, 0xff8, 0xc, 0x6, 0x0, 0x9, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x9}, {0x4, 0xa}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0xa}, {0x6, 0x5}, {0x7, 0x5}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x7, 0x1}, {0x6, 0x9}, {0x6, 0xa}, {0x3, 0x5}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x8}, {0x3, 0x7}, {0x3, 0x2}, {0x4, 0x3}, {0x6, 0x6}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x1}, {0x4, 0x9}, {0x6}, {0x4}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x3}, {0x4}, {0x5, 0x4}, {0x3, 0x4}, {0x3, 0x2}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x30, 0x1b, 0x30, 0x4e, 0x4]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x5}, {0x6, 0x1}, {0x3, 0x5}, {0x5, 0x1}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x9}, {0x3, 0x2}, {0x7, 0x6}, {0x5, 0x7}, {0x5, 0x1}, {0x7, 0x1}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x6}, {0x0, 0x6}, {0x0, 0x5}, {0x4, 0x8}, {0x0, 0xa}, {0x6, 0xa}, {0x5, 0x9}, {0x1, 0xa}, {0x5, 0x4}, {}, {0x2, 0xa}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0xa}, {0x7, 0x2}, {0x4, 0x2}, {0x6, 0xa}, {0x6, 0x4}, {0x5, 0x6}, {0x7, 0xa}, {0x7, 0x6}, {0x0, 0x9}, {0x5, 0xa}, {0x6, 0x8}, {0x0, 0x7}, {0x6, 0xa}, {0x2, 0x1}, {0x3, 0x4}, {0x3, 0x1}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x3}, {0x7, 0x9}, {0x1, 0x9}, {0x5, 0x9}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x1}, {0x1, 0x9}, {0x7, 0x1}, {0x3, 0x3}, {0x1, 0x8}, {0x7, 0x1f}, {0x3, 0x9}, {0x4, 0x8}, {0x7, 0x3}, {0x2, 0x2}, {0x5, 0x4}, {0x2, 0x8}, {0x4, 0x3}, {0x4, 0x8}, {0x5, 0x3}, {0x6, 0x2}, {0x1, 0x2}, {0x1, 0x6}, {0x4, 0xa}, {0x7, 0x7}, {0x5, 0x2}, {0x7, 0xa}, {0x5, 0x7}, {0x0, 0x8}, {0x1, 0x5}, {0x3, 0x6}, {0x6, 0x1}, {0x0, 0x3}, {0x6, 0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0x1}, {0x1}, {0x3, 0x9}, {0x2, 0x4}, {0x0, 0xa}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x5}, {0x6, 0x4}, {0x1}, {0x6, 0x2}, {0x2, 0x7}, {0x4, 0x1}, {0x6, 0x6}, {0x3, 0x3}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x6, 0x8}, {0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x7, 0x6}, {0x6, 0x6}, {0x1, 0xa}, {0x5, 0x3}, {0x2, 0x4}]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x4}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x7, 0x2}, {0x5, 0x9}, {0x4, 0x3}, {0x3, 0x9}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x3}, {0x5, 0x5}, {0x4, 0xa}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x3}, {0x4, 0x3}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0x2, 0x6}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x5, 0x9, 0xf03, 0x6, 0x800, 0x5, 0xfff3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x40, 0x8, 0x0, 0x5, 0x9, 0x4, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1ff, 0x81, 0x5, 0xfc01, 0x5, 0xe, 0x6ea]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0xa}, {0x4, 0x4}, {0x3, 0x5}, {0x3, 0x5}, {0x3, 0x7}, {}, {0x1, 0xa}, {0x5, 0x5}, {0x2, 0x3}, {0x5, 0x4}, {0x2, 0x7}, {0x4, 0x3}, {0x6, 0x8}, {}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x3}, {0x1, 0x3}, {0x1, 0xa}, {0x2, 0x5}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0x9}, {0x7, 0x6}, {0x1}, {0x0, 0x6}, {0x1}, {0x1, 0x8}, {0x5, 0x4}, {0x5, 0x5}, {0x3, 0x5}, {0x1, 0x7}, {0x1, 0x6}, {0x2, 0x6}, {0x6, 0x2}, {0x7, 0x1a}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x3}, {0x7, 0x3}, {0x7, 0x8}, {0x5}, {0x3, 0x5}, {0x2, 0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x1}, {0x6, 0x8}, {0x6, 0xa}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x79, 0x401, 0x9, 0x800, 0x5, 0x100, 0xf1, 0xc]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x9, 0x6c, 0x36, 0x6, 0x30, 0x30, 0x6, 0x16, 0x12, 0x18, 0x30, 0x5, 0xc, 0xb, 0xb, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe3, 0xa28c, 0x0, 0xb, 0x3, 0x5, 0x1, 0xf800]}}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8, 0x0, 0x5, 0x9, 0x101, 0x3, 0xff]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0x60, 0x36, 0x3, 0x30, 0x16, 0x5, 0x33, 0x1b, 0x0, 0x6c, 0x6, 0x36, 0xc, 0x65, 0x3, 0x3, 0x18, 0x6c, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f9, 0x6, 0x5, 0x40, 0x3, 0xcb7, 0x3, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x3, 0xc, 0x8, 0xefbf, 0x9, 0x8890, 0x2]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x8}, {0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x4, 0x2}, {0x6, 0x2}, {0x4, 0x9}, {0x3, 0x2}, {0x1, 0x7}, {0x4, 0x3}, {0x6, 0x2}, {0x5, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x40}]}]}]}, 0x9f0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000306200002800126c5b57e24a6ab4d9616e0000001800aab8fbc6260280140001", @ANYRES32=0x0, @ANYBLOB="4c4400000000000008001b0064076955"], 0x50}}, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000480))
r11 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000034000701fcffffff00000000017c0000000000000000060029000000"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044)

514.4589ms ago: executing program 1 (id=522):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={<r1=>0x0, 0x62}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x8001, 0x100, 0x3f651663, 0xb, 0x3}, 0x14)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4eb}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc350}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x1406, 0x401, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4004014)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@sack_perm, @mss={0x2, 0x400}, @sack_perm], 0x3)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400)={0x6, [<r4=>0x0, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0, 0x0]}, &(0x7f0000000440)=0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000480)={r4, 0x9e26, 0x9}, 0x8)
bind$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3}, 0x1c)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r6, 0x5}, &(0x7f0000000540)=0x8)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@ipv4, @in6=@remote}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8)
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000740))
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000780)={<r8=>r6, 0x6cec}, &(0x7f00000007c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000800)={r8, 0x38, "64143011fad9f47a04ddf435466834cb7b0062b9b43d4a2de90a2eb057db40a9f9ee0aad1234f8ba1be00f8b4f280da907f109a193fc9fa3"}, &(0x7f0000000840)=0x40)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000880)={<r9=>r7, 0x5}, &(0x7f00000008c0)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000900)={r9, 0x76, "98f9b9f130ca31b5883e231ced289b2c0136908d1c7f14ea66efd2317b4a0c965bc21200cf9b8e7fd5c2f075e91a5a02a445f5a1d3d5c2a79b3f585f54cdb08774f0eda063d13c18af2213f4a8db4ca1a8940101c42ddd7fa9f6aff0280adbe52176ea2069e72a37cb6074e7a7b5c393b7d136e92e23"}, &(0x7f0000000980)=0x7e)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000009c0))
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000a00)={<r10=>r9, 0xfff}, &(0x7f0000000a40)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000a80)={r10, @in={{0x2, 0x4e20, @empty}}, 0x2, 0x8}, &(0x7f0000000b40)=0x90)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000b80)={<r11=>r7, 0x8}, &(0x7f0000000bc0)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000c00)={r11, 0x7}, &(0x7f0000000c40)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000c80)={r11, 0x2, 0x5, 0x6}, &(0x7f0000000cc0)=0x10)
sendmsg$nl_netfilter(r3, 0x0, 0x80)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000d00)={<r12=>r5, 0x6}, &(0x7f0000000d40)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000d80)=@assoc_value={r12, 0x1}, 0x8)
setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000dc0), 0x4)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000e00)={r11, 0x10000}, &(0x7f0000000e40)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000fc0)={0x0, 0x0, 0x1, [0x4dda]}, &(0x7f0000001000)=0xa)

486.626963ms ago: executing program 0 (id=523):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="03000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff00000700000000000000070001000406f0027f0006a72503018c08720603030303030300000006000f0001000000080026006c09000008000c006400000008000d00000000000a00340001010101010100003400a6800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000800a500000000001000a6800a00060008021100000000000a0034000101010101010000"], 0xe0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)

384.114941ms ago: executing program 1 (id=524):
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00', <r1=>0x0})
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f00000012c0)={0x1, 0x1, 0x86, r1, 0x4}, 0xc)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000800000000000000000001837dacb0400"/48], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000800000000000000000001837dacb0400"/48], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r5 = gettid()
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000013c0)={&(0x7f0000001300), 0x1, &(0x7f0000001380)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r6, @ANYRES16=r7, @ANYBLOB="00042dbd7000fcdbdf25050000000c00050002000000000000000c0005000100000000000000b42f1b7140b63357912ecf13d693d72438e22d59e5ffa81bb6390a0f62eae8eb69a633fdb3e466510b3d6afdbc3e7fea7466d84306cc80a04894f1afabefa24ca5df045a16f88870"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x95)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)={0x48, r7, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8008}, 0x20000000) (async)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)={0x48, r7, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8008}, 0x20000000)
sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '+'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r5, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) (async)
r10 = openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000380)=ANY=[@ANYBLOB="2b752000000000000000000000000000005e220542f44ad40109d4ca73ee57bb11ee87b672c8ece3278b104093c24cbb4b1e5f52c84178dd41c5f72ced62c18296a02927677469b7893e2abd06a9dc0f49ab04c2affb00b6fa6f016130299962daf9fc6a6c99e23952b748b6e4a597505eb2500998"], 0x5)
openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x2002)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x2b, 0x2, 0x200) (async)
socket(0x2b, 0x2, 0x200)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)

302.699045ms ago: executing program 4 (id=525):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x2, 0x80805, 0x0)
socket$inet(0x2, 0x80001, 0x84) (async)
socket$inet(0x2, 0x80001, 0x84)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket(0xa, 0x3, 0x3a) (async)
socket(0xa, 0x3, 0x3a)
socket$inet6(0x10, 0x2, 0x0) (async)
socket$inet6(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x21, @dev={0xac, 0x14, 0x14, 0x2c}, 0x4e21, 0x0, 'ovf\x00', 0x15, 0xff, 0x6d}, {@remote, 0x4e24, 0x4, 0x3, 0x6, 0x9}}, 0x44)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x1c}}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

294.649225ms ago: executing program 3 (id=526):
getsockname(0xffffffffffffffff, &(0x7f0000000300)=@un=@abs, &(0x7f0000000380)=0x80)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={<r1=>0x0, @in={{0x2, 0x4e20, @multicast2}}, 0xc, 0x1}, &(0x7f00000005c0)=0x90)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000600)={0x9, 0x200, 0x10bdc17d, 0x90000000, r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r3, 0x1)
setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}}], 0x1, 0x20080058)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = accept(r2, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r6}, 0x18)
recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000080)=@srh, 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x68)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x40, r9, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r9, 0x800, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc840}, 0x4040050)

279.181666ms ago: executing program 2 (id=527):
r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async, rerun: 64)
getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x10}, {0xffff}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
getpeername$l2tp6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000300)=0x20)
r6 = socket(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r1}) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c40)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2, 0xfff3}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

261.032097ms ago: executing program 0 (id=528):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0x8}, 0x48)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000280)={'ip6tnl0\x00', 0x7f})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}})

66.468436ms ago: executing program 4 (id=529):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008045)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x54, 0x20, 0x1, 0x70bd2b, 0xfffffff9, {0xa, 0x0, 0x10, 0x8, 0xf6, 0x0, 0x0, 0x5, 0x10002}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x6}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x41000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48)

15.420561ms ago: executing program 0 (id=530):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x10) (async)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x10)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000200)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff000000001200000008000300", @ANYRES32=r4, @ANYBLOB="0a000600ffffffffffff00000800140049"], 0x30}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff000000001200000008000300", @ANYRES32=r4, @ANYBLOB="0a000600ffffffffffff00000800140049"], 0x30}}, 0x0)

0s ago: executing program 2 (id=531):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r5 = socket$inet(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x190, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_STAB={0x16c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x80, 0x3, 0x8, 0x0, 0xc0000000, 0x8, 0x2}}, {0x8, 0x2, [0x40, 0x81]}}, {{0x1c, 0x1, {0xa, 0x5, 0x3ff, 0xb, 0x1, 0x0, 0x7, 0x2}}, {0x8, 0x2, [0x4, 0x22]}}, {{0x1c, 0x1, {0x1, 0x9, 0x88b8, 0x568, 0x1, 0x5, 0x8, 0x7}}, {0x12, 0x2, [0x9, 0x7, 0x3ff, 0x4, 0x5, 0x6, 0xffff]}}, {{0x1c, 0x1, {0x4, 0xe, 0x3, 0x2, 0xeee8301644d5a732, 0x6, 0xab, 0x7}}, {0x12, 0x2, [0x7ff, 0x8, 0x2, 0x6, 0x7, 0x7, 0x800]}}, {{0x1c, 0x1, {0x8, 0x65, 0x101, 0x1, 0x0, 0x7ff, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0xf, 0x10, 0x401, 0xfffffff7, 0x1, 0xa, 0x9, 0x4}}, {0xc, 0x2, [0x8, 0x7, 0xb4f1, 0x6b]}}, {{0x1c, 0x1, {0x1, 0xb3, 0xfffa, 0x5, 0x0, 0x7, 0x80}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x3, 0x9, 0x1000, 0x2, 0x0, 0x9, 0x1}}, {0x6, 0x2, [0xfff]}}, {{0x1c, 0x1, {0x3, 0x80, 0x9, 0x3d7a, 0x1, 0x1ff, 0x1c040000, 0x7}}, {0x12, 0x2, [0xfffb, 0x5, 0x1, 0x101, 0x2, 0x5, 0x9]}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xc850}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x4, 0x2, {0x0, 0x0, 0x0, r4, {0x3}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts.
[   68.520291][ T5851] cgroup: Unknown subsys name 'net'
[   68.709740][ T5851] cgroup: Unknown subsys name 'cpuset'
[   68.718352][ T5851] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   70.172445][ T5851] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.389704][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[   71.396342][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[   74.275485][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.289124][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.297255][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.316179][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.324164][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.332375][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.340093][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.341111][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.354799][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   74.363150][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.376482][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.378463][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   74.392414][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.400148][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   74.408501][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.408889][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.423084][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   74.433790][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.441114][ T5879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   74.448256][ T5881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   74.457521][ T5881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   74.465213][ T5881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   74.466194][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   74.480941][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   74.489923][ T5881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.008847][ T5866] chnl_net:caif_netlink_parms(): no params data found
[   75.167822][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   75.275493][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   75.303128][ T5865] chnl_net:caif_netlink_parms(): no params data found
[   75.477137][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.484378][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.492800][ T5866] bridge_slave_0: entered allmulticast mode
[   75.501074][ T5866] bridge_slave_0: entered promiscuous mode
[   75.513910][ T5876] chnl_net:caif_netlink_parms(): no params data found
[   75.545786][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.553355][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.560656][ T5866] bridge_slave_1: entered allmulticast mode
[   75.568620][ T5866] bridge_slave_1: entered promiscuous mode
[   75.600669][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.608020][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.615181][ T5861] bridge_slave_0: entered allmulticast mode
[   75.623386][ T5861] bridge_slave_0: entered promiscuous mode
[   75.653299][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.660594][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.668015][ T5875] bridge_slave_0: entered allmulticast mode
[   75.675005][ T5875] bridge_slave_0: entered promiscuous mode
[   75.682307][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.689537][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.697308][ T5861] bridge_slave_1: entered allmulticast mode
[   75.704339][ T5861] bridge_slave_1: entered promiscuous mode
[   75.750800][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.758324][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.765442][ T5875] bridge_slave_1: entered allmulticast mode
[   75.772745][ T5875] bridge_slave_1: entered promiscuous mode
[   75.793699][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.807387][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.872154][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.880183][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.887808][ T5865] bridge_slave_0: entered allmulticast mode
[   75.894785][ T5865] bridge_slave_0: entered promiscuous mode
[   75.922240][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.944687][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.952020][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.959738][ T5865] bridge_slave_1: entered allmulticast mode
[   75.967331][ T5865] bridge_slave_1: entered promiscuous mode
[   75.982972][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.994514][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.005668][ T5866] team0: Port device team_slave_0 added
[   76.038917][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.062946][ T5866] team0: Port device team_slave_1 added
[   76.136962][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.146545][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.154153][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.162443][ T5876] bridge_slave_0: entered allmulticast mode
[   76.169796][ T5876] bridge_slave_0: entered promiscuous mode
[   76.192031][ T5861] team0: Port device team_slave_0 added
[   76.212392][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.232925][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.240450][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.247730][ T5876] bridge_slave_1: entered allmulticast mode
[   76.254767][ T5876] bridge_slave_1: entered promiscuous mode
[   76.263372][ T5875] team0: Port device team_slave_0 added
[   76.274771][ T5861] team0: Port device team_slave_1 added
[   76.281671][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.288660][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.314732][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.328143][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.335095][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.361092][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.396876][ T5875] team0: Port device team_slave_1 added
[   76.422969][ T5865] team0: Port device team_slave_0 added
[   76.426777][ T5879] Bluetooth: hci0: command tx timeout
[   76.432058][ T5865] team0: Port device team_slave_1 added
[   76.481184][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.488219][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.514640][ T5879] Bluetooth: hci1: command tx timeout
[   76.514915][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.546082][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.569015][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.576031][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.602476][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.602961][ T5879] Bluetooth: hci3: command tx timeout
[   76.619184][ T5184] Bluetooth: hci4: command tx timeout
[   76.624881][ T5184] Bluetooth: hci2: command tx timeout
[   76.630651][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.638229][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.664540][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.690243][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.712917][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.720005][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.746161][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.769475][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.776602][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.803081][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.846556][ T5866] hsr_slave_0: entered promiscuous mode
[   76.852844][ T5866] hsr_slave_1: entered promiscuous mode
[   76.861837][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.868833][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.895417][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.958918][ T5876] team0: Port device team_slave_0 added
[   77.015552][ T5876] team0: Port device team_slave_1 added
[   77.060239][ T5875] hsr_slave_0: entered promiscuous mode
[   77.066800][ T5875] hsr_slave_1: entered promiscuous mode
[   77.073044][ T5875] debugfs: 'hsr0' already exists in 'hsr'
[   77.078945][ T5875] Cannot create hsr debugfs directory
[   77.101793][ T5861] hsr_slave_0: entered promiscuous mode
[   77.108535][ T5861] hsr_slave_1: entered promiscuous mode
[   77.115054][ T5861] debugfs: 'hsr0' already exists in 'hsr'
[   77.121225][ T5861] Cannot create hsr debugfs directory
[   77.155669][ T5865] hsr_slave_0: entered promiscuous mode
[   77.162508][ T5865] hsr_slave_1: entered promiscuous mode
[   77.169142][ T5865] debugfs: 'hsr0' already exists in 'hsr'
[   77.174957][ T5865] Cannot create hsr debugfs directory
[   77.210027][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.217081][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.243112][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.256449][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.263400][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.289614][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.515218][ T5876] hsr_slave_0: entered promiscuous mode
[   77.521606][ T5876] hsr_slave_1: entered promiscuous mode
[   77.528169][ T5876] debugfs: 'hsr0' already exists in 'hsr'
[   77.533902][ T5876] Cannot create hsr debugfs directory
[   77.873025][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   77.884999][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   77.920168][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   77.947920][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.022362][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.032754][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.060042][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.070481][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.141499][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.153568][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.165450][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.199089][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.305239][ T5875] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   78.335016][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.342281][ T5875] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   78.359159][ T5875] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   78.370996][ T5875] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   78.483531][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   78.517240][ T5879] Bluetooth: hci0: command tx timeout
[   78.522970][ T5876] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.534858][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.542152][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.568942][ T5876] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.583726][ T5876] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.591616][ T5879] Bluetooth: hci1: command tx timeout
[   78.600966][ T5876] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.621433][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.632251][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.639629][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.666362][ T5184] Bluetooth: hci2: command tx timeout
[   78.671800][ T5184] Bluetooth: hci4: command tx timeout
[   78.677688][ T5879] Bluetooth: hci3: command tx timeout
[   78.760239][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   78.790387][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.797576][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.806732][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.813900][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.827672][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.898453][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.913689][ T5865] 8021q: adding VLAN 0 to HW filter on device team0
[   78.973759][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   78.988731][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.995973][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.039227][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.046436][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.064906][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.072122][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.108790][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.116074][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.169976][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.232864][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.371764][ T5876] 8021q: adding VLAN 0 to HW filter on device team0
[   79.392431][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.399720][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.485867][ T5866] veth0_vlan: entered promiscuous mode
[   79.511783][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.519060][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.567511][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.630073][ T5866] veth1_vlan: entered promiscuous mode
[   79.772786][ T5866] veth0_macvtap: entered promiscuous mode
[   79.799839][ T5861] veth0_vlan: entered promiscuous mode
[   79.808183][ T5866] veth1_macvtap: entered promiscuous mode
[   79.844870][ T5861] veth1_vlan: entered promiscuous mode
[   79.874926][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.892965][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.908971][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.940230][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.071748][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.098632][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.125229][ T5865] veth0_vlan: entered promiscuous mode
[   80.134757][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.150998][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.166311][ T5861] veth0_macvtap: entered promiscuous mode
[   80.210930][ T5861] veth1_macvtap: entered promiscuous mode
[   80.253869][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.268959][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.283806][ T5865] veth1_vlan: entered promiscuous mode
[   80.361603][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.376380][ T4897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.413979][ T4897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.458292][ T4897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.468704][ T4897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.494732][ T4897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.507100][ T5865] veth0_macvtap: entered promiscuous mode
[   80.518819][ T4897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.562413][ T5865] veth1_macvtap: entered promiscuous mode
[   80.586868][ T5184] Bluetooth: hci0: command tx timeout
[   80.621872][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.628594][ T5875] veth0_vlan: entered promiscuous mode
[   80.646630][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.650095][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.667797][ T5184] Bluetooth: hci1: command tx timeout
[   80.672409][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.693803][ T5875] veth1_vlan: entered promiscuous mode
[   80.739167][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.750268][ T5184] Bluetooth: hci2: command tx timeout
[   80.756219][ T5879] Bluetooth: hci3: command tx timeout
[   80.761724][ T5184] Bluetooth: hci4: command tx timeout
[   80.767537][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.769580][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   80.841740][ T5876] veth0_vlan: entered promiscuous mode
[   80.849308][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.858404][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.871202][ T1166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.880052][ T1166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.927514][ T1166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.939050][ T1166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.952313][ T5875] veth0_macvtap: entered promiscuous mode
[   80.980101][ T5876] veth1_vlan: entered promiscuous mode
[   80.994088][ T5875] veth1_macvtap: entered promiscuous mode
[   81.061860][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.110136][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.162935][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.214304][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.225216][ T5876] veth0_macvtap: entered promiscuous mode
[   81.246337][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.268266][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.278425][ T5990] Zero length message leads to an empty skb
[   81.314922][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.324304][   T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.354616][ T5876] veth1_macvtap: entered promiscuous mode
[   81.395333][   T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.422687][   T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.490085][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.514064][ T5998] netlink: 'syz.0.9': attribute type 1 has an invalid length.
[   81.523758][ T5998] netlink: 'syz.0.9': attribute type 4 has an invalid length.
[   81.562835][ T5998] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.9'.
[   81.584309][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.641954][ T1166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.654370][ T1166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.668607][ T6001] netlink: 212388 bytes leftover after parsing attributes in process `syz.3.4'.
[   81.693891][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.695203][ T1166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.711145][ T6001] openvswitch: netlink: Message has 5 unknown bytes.
[   81.724906][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.730154][ T1166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.914732][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.930957][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.154288][ T4897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.212001][ T4897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.320866][ T6016] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14'.
[   82.320978][ T6014] netlink: 'syz.0.13': attribute type 1 has an invalid length.
[   82.343087][ T6014] netlink: 15 bytes leftover after parsing attributes in process `syz.0.13'.
[   82.369197][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.399962][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.666870][ T5184] Bluetooth: hci0: command tx timeout
[   82.746345][ T5184] Bluetooth: hci1: command tx timeout
[   82.826496][ T5184] Bluetooth: hci2: command tx timeout
[   82.832072][ T5184] Bluetooth: hci4: command tx timeout
[   82.837716][ T5879] Bluetooth: hci3: command tx timeout
[   82.974451][ T6058] netlink: 'syz.4.21': attribute type 6 has an invalid length.
[   83.013248][ T6058] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.21'.
[   83.106302][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'.
[   83.186114][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'.
[   83.443978][ T6074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.481690][ T6084] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.29'.
[   83.591412][ T6090] netlink: 'syz.2.26': attribute type 9 has an invalid length.
[   83.614858][ T6071] veth3: entered allmulticast mode
[   83.745855][ T6092] warning: `syz.3.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   83.778700][ T6092] syz.3.30 uses obsolete (PF_INET,SOCK_PACKET)
[   83.921782][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'.
[   84.068190][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'.
[   84.090057][ T6107] veth0_to_team: entered promiscuous mode
[   84.106038][ T6107] veth0_to_team: entered allmulticast mode
[   84.423554][ T6126] trusted_key: syz.2.40 sent an empty control message without MSG_MORE.
[   84.457560][ T6128] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   84.555454][ T6128] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[   84.577640][ T6136] netlink: 'syz.0.43': attribute type 1 has an invalid length.
[   84.637904][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.646269][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.729288][ T6134] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   84.870199][ T6146] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.991172][    C1] Illegal XDP return value 16128 on prog  (id 5) dev team0, expect packet loss!
[   85.103891][ T6159] netlink: 'syz.0.51': attribute type 23 has an invalid length.
[   85.206974][ T6156] vlan2: entered allmulticast mode
[   85.212127][ T6156] veth1: entered allmulticast mode
[   85.264347][ T6156] batman_adv: batadv0: Adding interface: vlan2
[   85.303227][ T6156] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.352489][ T6156] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[   85.713547][ T6187] tap0: tun_chr_ioctl cmd 1074025678
[   85.742247][ T6187] tap0: group set to 0
[   85.753596][ T6191] netem: change failed
[   85.894637][ T6198] Bluetooth: MGMT ver 1.23
[   86.030355][ T3578] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[   86.200633][ T6213] openvswitch: netlink: Missing key (keys=40, expected=80)
[   86.760278][  T929] cfg80211: failed to load regulatory.db
[   86.884774][ T6258] __nla_validate_parse: 9 callbacks suppressed
[   86.884793][ T6258] netlink: 108 bytes leftover after parsing attributes in process `syz.2.76'.
[   87.690758][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'.
[   87.706176][ T6301] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.800295][ T6307] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20004
[   87.914142][ T6279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.837062][ T6362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.104'.
[   89.243561][ T6382] tipc: Started in network mode
[   89.259354][ T6382] tipc: Node identity , cluster identity 4711
[   89.270725][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'.
[   89.283225][ T6382] tipc: Failed to obtain node identity
[   89.290941][ T6382] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   89.304198][ T6384] tunl0: entered allmulticast mode
[   89.422797][ T6385] syzkaller0: entered promiscuous mode
[   89.430881][ T6385] syzkaller0: entered allmulticast mode
[   89.550413][ T6394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.119'.
[   89.655151][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'.
[   89.785581][ T6412] netlink: 'syz.3.119': attribute type 6 has an invalid length.
[   89.822638][ T6412] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.119'.
[   89.977534][ T6419] vxcan1: tx address claim with dlc 1
[   89.983989][ T6419] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   90.742495][ T6394] veth3: entered allmulticast mode
[   91.005174][ T6428] netlink: 'syz.0.126': attribute type 1 has an invalid length.
[   91.029839][ T6428] netlink: 'syz.0.126': attribute type 2 has an invalid length.
[   91.104286][ T6431] tipc: Started in network mode
[   91.115352][ T6431] tipc: Node identity 46c6856aa59e, cluster identity 4711
[   91.123740][ T6431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.147287][ T6431] syzkaller0: entered promiscuous mode
[   91.152803][ T6431] syzkaller0: entered allmulticast mode
[   91.291040][ T6444] tipc: Resetting bearer <eth:syzkaller0>
[   91.334513][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'.
[   91.345110][ T6430] tipc: Resetting bearer <eth:syzkaller0>
[   91.369094][ T6430] tipc: Disabling bearer <eth:syzkaller0>
[   91.709936][ T6471] netlink: 'syz.2.141': attribute type 10 has an invalid length.
[   91.770452][ T6471] team0: Device veth1_macvtap failed to register rx_handler
[   91.813739][ T6471] syz.2.141 (6471) used greatest stack depth: 19832 bytes left
[   92.077555][ T6490] netlink: 'syz.2.147': attribute type 1 has an invalid length.
[   92.113511][ T6490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.203316][ T6501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.149'.
[   92.225480][ T6499] netlink: 'syz.3.148': attribute type 1 has an invalid length.
[   92.304234][ T6508] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[   92.947524][ T6534] netlink: 51 bytes leftover after parsing attributes in process `syz.0.161'.
[   92.992663][ T6538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.164'.
[   93.007597][ T6538] netlink: 160 bytes leftover after parsing attributes in process `syz.3.164'.
[   93.176466][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'.
[   93.442697][ T6567] netlink: 'syz.2.173': attribute type 21 has an invalid length.
[   93.469466][ T6569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.172'.
[   93.524415][ T6569] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[   93.654343][ T5926] IPVS: starting estimator thread 0...
[   93.668943][ T6569] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   93.766072][ T6581] IPVS: using max 34 ests per chain, 81600 per kthread
[   94.273542][ T6612] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   94.378415][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'.
[   94.378988][ T6617] veth5: entered allmulticast mode
[   94.401213][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'.
[   94.405224][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'.
[   94.416012][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'.
[   94.541670][ T6617] can: request_module (can-proto-0) failed.
[   94.855420][ T6648] veth0_to_bridge: entered promiscuous mode
[   95.280037][ T6668] veth0: entered promiscuous mode
[   95.350410][ T6668] veth0: left promiscuous mode
[   95.470885][ T6678] netlink: 'syz.1.201': attribute type 12 has an invalid length.
[   95.478900][ T6678] netlink: 'syz.1.201': attribute type 29 has an invalid length.
[   95.535128][ T6683] Unsupported ieee802154 address type: 0
[   95.651679][ T6644] veth0_to_bridge: left promiscuous mode
[   95.989240][ T6704] netlink: 'syz.4.211': attribute type 33 has an invalid length.
[   96.298731][ T6724] tipc: Started in network mode
[   96.308035][ T6724] tipc: Node identity 5a8d1342ca86, cluster identity 4711
[   96.345688][ T6724] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.382857][ T6735] syzkaller0: entered promiscuous mode
[   96.390440][ T6735] syzkaller0: entered allmulticast mode
[   96.411691][ T6724] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   96.525774][   T30] audit: type=1107 audit(1754760951.187:2): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='^��な'
[   96.591155][ T6735] tipc: Resetting bearer <eth:syzkaller0>
[   96.630473][ T6717] tipc: Resetting bearer <eth:syzkaller0>
[   96.643451][ T6717] tipc: Disabling bearer <eth:syzkaller0>
[   97.598672][ T6809] __nla_validate_parse: 76 callbacks suppressed
[   97.598691][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'.
[   97.668630][ T6809] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.833326][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'.
[   97.907337][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'.
[   98.058800][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'.
[   98.305206][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[   98.458705][   T30] audit: type=1800 audit(1754760953.127:3): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.246" name="memory.events" dev="tmpfs" ino=253 res=0 errno=0
[   98.496950][ T6867] netlink: 300 bytes leftover after parsing attributes in process `syz.2.247'.
[   98.625651][ T6875] netlink: 'syz.1.250': attribute type 1 has an invalid length.
[   98.723625][ T6888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.253'.
[   98.765098][ T6888] openvswitch: netlink: VXLAN extension 173 out of range max 1
[   98.845096][ T6894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.254'.
[   98.845099][ T6893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.254'.
[   98.905224][ T6898] netlink: 'syz.3.256': attribute type 11 has an invalid length.
[   98.920330][ T6898] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   99.041296][ T6905] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[   99.063763][ T6907] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[   99.076018][ T5879] Bluetooth: hci3: command tx timeout
[   99.328647][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'.
[   99.363288][ T6922] geneve2: entered promiscuous mode
[   99.734114][ T6940] netlink: 'syz.4.268': attribute type 1 has an invalid length.
[   99.877844][ T6946] hsr_slave_0: left promiscuous mode
[   99.909612][ T6946] hsr_slave_1: left promiscuous mode
[  100.054481][ T6952] tipc: Enabling <ib:lo> not permitted
[  100.069248][ T6952] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  100.972492][ T6999] veth5: entered allmulticast mode
[  101.902173][ T7037] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  101.919592][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.928160][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.182859][ T7055] netlink: 'syz.1.305': attribute type 33 has an invalid length.
[  102.201200][ T7055] openvswitch: netlink: Duplicate or invalid key (type 0).
[  102.210526][ T7055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.341088][ T7061] netlink: 'syz.4.303': attribute type 5 has an invalid length.
[  102.993435][ T7077] __nla_validate_parse: 7 callbacks suppressed
[  102.993453][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'.
[  103.022801][ T6840] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  103.251792][ T7092] bridge: RTM_NEWNEIGH with invalid state 0x8
[  103.609110][ T7111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.319'.
[  103.770231][ T7096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.942415][ T7118] tap0: tun_chr_ioctl cmd 1074025678
[  103.964838][ T7118] tap0: group set to 0
[  103.975131][ T7120] tap0: tun_chr_ioctl cmd 1074025678
[  103.979595][ T7125] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  103.995625][ T7120] tap0: group set to 0
[  104.340304][ T7141] 8021q: VLANs not supported on lo
[  104.526478][ T7148] nbd: socks must be embedded in a SOCK_ITEM attr
[  104.564136][ T7148] netlink: 148 bytes leftover after parsing attributes in process `syz.4.331'.
[  104.627780][ T7148] netlink: 'syz.4.331': attribute type 83 has an invalid length.
[  104.880871][ T7168] ieee802154 phy0 wpan0: encryption failed: -22
[  105.244122][   T30] audit: type=1107 audit(1754760959.907:4): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='��ӱӗ����'
[  105.451557][ T7195] netlink: 60 bytes leftover after parsing attributes in process `syz.0.344'.
[  105.461182][ T7195] netlink: 60 bytes leftover after parsing attributes in process `syz.0.344'.
[  105.510157][ T7199] netlink: 152064 bytes leftover after parsing attributes in process `syz.2.347'.
[  105.543674][ T7199] netlink: zone id is out of range
[  105.564977][ T7199] netlink: zone id is out of range
[  105.580251][ T7199] netlink: zone id is out of range
[  105.593158][ T7199] netlink: zone id is out of range
[  105.610100][ T7199] netlink: zone id is out of range
[  105.639364][ T7199] netlink: zone id is out of range
[  105.651924][ T7199] netlink: zone id is out of range
[  105.684628][ T7199] netlink: zone id is out of range
[  105.710886][ T7199] netlink: zone id is out of range
[  106.032188][ T7225] netlink: 'syz.0.354': attribute type 10 has an invalid length.
[  106.043395][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.051752][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.082857][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'.
[  106.084590][ T7232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.356'.
[  106.102478][ T7225] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.109758][ T7225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.117980][ T7225] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.125151][ T7225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.201001][ T7225] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  106.281277][ T7240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.358'.
[  106.326446][ T7239] tipc: Started in network mode
[  106.362758][ T7239] tipc: Node identity , cluster identity 4711
[  106.464709][ T7245] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  106.609618][ T7255] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  106.648585][ T7261] netlink: 'syz.2.366': attribute type 9 has an invalid length.
[  106.651134][ T7256] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  106.669005][ T7251] netlink: 40 bytes leftover after parsing attributes in process `syz.0.362'.
[  106.691170][ T7254] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  106.713980][ T7264] ip6gre1: entered allmulticast mode
[  108.199533][ T7332] __nla_validate_parse: 4 callbacks suppressed
[  108.199549][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'.
[  108.366828][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'.
[  108.414932][ T7342] sctp: [Deprecated]: syz.0.387 (pid 7342) Use of int in maxseg socket option.
[  108.414932][ T7342] Use struct sctp_assoc_value instead
[  108.484494][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'.
[  108.518339][ T7344] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  108.543492][ T7347] netlink: 144 bytes leftover after parsing attributes in process `syz.0.387'.
[  108.665300][ T7347] net veth1_virt_wifi .: renamed from virt_wifi0
[  109.097712][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'.
[  109.143781][ T7378] net_ratelimit: 228 callbacks suppressed
[  109.143800][ T7378] netlink: zone id is out of range
[  109.703847][ T7413] netlink: 'syz.0.404': attribute type 2 has an invalid length.
[  109.777705][ T7417] netlink: 100 bytes leftover after parsing attributes in process `syz.2.405'.
[  110.462159][ T7434] netlink: 'syz.2.414': attribute type 58 has an invalid length.
[  110.474867][ T7434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.414'.
[  110.610444][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'.
[  110.702732][ T7446] netlink: 'syz.4.418': attribute type 1 has an invalid length.
[  110.721110][ T7446] netlink: 'syz.4.418': attribute type 2 has an invalid length.
[  110.826680][ T7452] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  110.865677][ T7453] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  110.893087][ T7456] veth0: entered promiscuous mode
[  110.906261][ T5879] Bluetooth: hci3: command 0x0405 tx timeout
[  110.924456][ T7454] veth0: left promiscuous mode
[  110.946851][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'.
[  111.034057][ T7462] syzkaller1: entered promiscuous mode
[  111.061801][ T7462] syzkaller1: entered allmulticast mode
[  111.599459][ T7491] delete_channel: no stack
[  111.642629][ T7494] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.434'.
[  112.497474][ T7528] netlink: 'syz.0.444': attribute type 10 has an invalid length.
[  112.578979][ T7528] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  113.304509][ T7567] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  113.360317][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.368104][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.400106][ T7573] netlink: 'syz.1.454': attribute type 6 has an invalid length.
[  114.022694][ T7615] __nla_validate_parse: 3 callbacks suppressed
[  114.022713][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'.
[  114.341509][ T7631] netlink: 36 bytes leftover after parsing attributes in process `syz.0.469'.
[  114.510097][ T7636] netlink: 68 bytes leftover after parsing attributes in process `syz.3.471'.
[  114.554619][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'.
[  114.778615][ T7650] netlink: 112 bytes leftover after parsing attributes in process `syz.3.473'.
[  115.365752][ T7677] lo: entered promiscuous mode
[  115.394160][ T7677] netlink: 'syz.1.479': attribute type 2 has an invalid length.
[  115.432556][ T7677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  115.481998][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.480'.
[  115.699405][ T7681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.480'.
[  116.015405][ T7712] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  116.158665][ T7722] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  116.233420][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.241819][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.736197][ T7750] netlink: 'syz.3.496': attribute type 10 has an invalid length.
[  116.749661][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'.
[  116.811849][ T7750] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  117.031196][ T5925] IPVS: starting estimator thread 0...
[  117.057729][ T7781] netlink: 'syz.1.502': attribute type 22 has an invalid length.
[  117.087796][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'.
[  117.192677][ T7782] IPVS: using max 28 ests per chain, 67200 per kthread
[  117.199817][ T6849] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.209912][ T7781] netlink: 'syz.1.502': attribute type 22 has an invalid length.
[  117.237196][ T6849] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.254096][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'.
[  117.299432][ T3578] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.350673][ T3578] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.371516][ T7799] netlink: 'syz.4.506': attribute type 33 has an invalid length.
[  117.390321][ T7799] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  117.552436][ T7805] 8021q: adding VLAN 0 to HW filter on device bond1
[  118.014418][ T7840] tipc: Failed to obtain node identity
[  118.040657][ T7840] tipc: Enabling of bearer <ib:gretap0> rejected, failed to enable media
[  118.090275][ T7840] team_slave_0: mtu greater than device maximum
[  118.169917][ T7848] netlink: 'syz.2.517': attribute type 1 has an invalid length.
[  118.189724][ T7848] netlink: 'syz.2.517': attribute type 1 has an invalid length.
[  118.199002][ T7848] netlink: 'syz.2.517': attribute type 4 has an invalid length.
[  119.024021][ T7881] 
[  119.026376][ T7881] ======================================================
[  119.033399][ T7881] WARNING: possible circular locking dependency detected
[  119.040416][ T7881] 6.16.0-syzkaller-12084-g33caa208dba6 #0 Not tainted
[  119.047247][ T7881] ------------------------------------------------------
[  119.054416][ T7881] syz.1.524/7881 is trying to acquire lock:
[  119.060286][ T7881] ffff88801b2ff988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x30/0x60
[  119.069604][ T7881] 
[  119.069604][ T7881] but task is already holding lock:
[  119.076948][ T7881] ffff888024b94558 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  119.087294][ T7881] 
[  119.087294][ T7881] which lock already depends on the new lock.
[  119.087294][ T7881] 
[  119.097678][ T7881] 
[  119.097678][ T7881] the existing dependency chain (in reverse order) is:
[  119.106674][ T7881] 
[  119.106674][ T7881] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  119.115348][ T7881]        lock_acquire+0x120/0x360
[  119.120370][ T7881]        blk_alloc_queue+0x538/0x620
[  119.125656][ T7881]        __blk_mq_alloc_disk+0x15c/0x340
[  119.131285][ T7881]        nbd_dev_add+0x46c/0xae0
[  119.136213][ T7881]        nbd_init+0x168/0x1f0
[  119.140920][ T7881]        do_one_initcall+0x233/0x820
[  119.146191][ T7881]        do_initcall_level+0x104/0x190
[  119.151642][ T7881]        do_initcalls+0x59/0xa0
[  119.156477][ T7881]        kernel_init_freeable+0x334/0x4b0
[  119.162181][ T7881]        kernel_init+0x1d/0x1d0
[  119.167017][ T7881]        ret_from_fork+0x3fc/0x770
[  119.172120][ T7881]        ret_from_fork_asm+0x1a/0x30
[  119.177387][ T7881] 
[  119.177387][ T7881] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  119.184666][ T7881]        lock_acquire+0x120/0x360
[  119.189676][ T7881]        fs_reclaim_acquire+0x72/0x100
[  119.195216][ T7881]        kmem_cache_alloc_lru_noprof+0x49/0x3d0
[  119.201534][ T7881]        alloc_inode+0xb8/0x1b0
[  119.206454][ T7881]        iget_locked+0xf0/0x570
[  119.211289][ T7881]        kernfs_get_inode+0x4f/0x780
[  119.216555][ T7881]        kernfs_get_tree+0x5a9/0x920
[  119.221818][ T7881]        sysfs_get_tree+0x46/0x110
[  119.226999][ T7881]        vfs_get_tree+0x92/0x2b0
[  119.231924][ T7881]        do_new_mount+0x2a2/0x9e0
[  119.236932][ T7881]        __se_sys_mount+0x317/0x410
[  119.242117][ T7881]        do_syscall_64+0xfa/0x3b0
[  119.247128][ T7881]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.253524][ T7881] 
[  119.253524][ T7881] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[  119.261502][ T7881]        validate_chain+0xb9b/0x2140
[  119.266781][ T7881]        __lock_acquire+0xab9/0xd20
[  119.271965][ T7881]        lock_acquire+0x120/0x360
[  119.277002][ T7881]        down_write+0x96/0x1f0
[  119.281842][ T7881]        kernfs_remove+0x30/0x60
[  119.286771][ T7881]        __kobject_del+0xe1/0x300
[  119.291785][ T7881]        kobject_del+0x45/0x60
[  119.296528][ T7881]        elevator_change_done+0xf2/0x470
[  119.302320][ T7881]        elevator_set_none+0x42/0xb0
[  119.307586][ T7881]        blk_mq_update_nr_hw_queues+0x68f/0x1890
[  119.313899][ T7881]        nbd_start_device+0x17f/0xb10
[  119.319259][ T7881]        nbd_genl_connect+0x135b/0x18f0
[  119.324788][ T7881]        genl_family_rcv_msg_doit+0x215/0x300
[  119.330837][ T7881]        genl_rcv_msg+0x60e/0x790
[  119.335845][ T7881]        netlink_rcv_skb+0x205/0x470
[  119.341111][ T7881]        genl_rcv+0x28/0x40
[  119.345621][ T7881]        netlink_unicast+0x82c/0x9e0
[  119.350887][ T7881]        netlink_sendmsg+0x805/0xb30
[  119.356158][ T7881]        __sock_sendmsg+0x219/0x270
[  119.361347][ T7881]        ____sys_sendmsg+0x505/0x830
[  119.366967][ T7881]        ___sys_sendmsg+0x21f/0x2a0
[  119.372147][ T7881]        __x64_sys_sendmsg+0x19b/0x260
[  119.377589][ T7881]        do_syscall_64+0xfa/0x3b0
[  119.382599][ T7881]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.389026][ T7881] 
[  119.389026][ T7881] other info that might help us debug this:
[  119.389026][ T7881] 
[  119.399245][ T7881] Chain exists of:
[  119.399245][ T7881]   &root->kernfs_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#49
[  119.399245][ T7881] 
[  119.413136][ T7881]  Possible unsafe locking scenario:
[  119.413136][ T7881] 
[  119.420563][ T7881]        CPU0                    CPU1
[  119.425909][ T7881]        ----                    ----
[  119.431253][ T7881]   lock(&q->q_usage_counter(io)#49);
[  119.436625][ T7881]                                lock(fs_reclaim);
[  119.443107][ T7881]                                lock(&q->q_usage_counter(io)#49);
[  119.450982][ T7881]   lock(&root->kernfs_rwsem);
[  119.455818][ T7881] 
[  119.455818][ T7881]  *** DEADLOCK ***
[  119.455818][ T7881] 
[  119.464033][ T7881] 6 locks held by syz.1.524/7881:
[  119.469119][ T7881]  #0: ffffffff8f599f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  119.477294][ T7881]  #1: ffffffff8f599d48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  119.486235][ T7881]  #2: ffff888024f3b188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa6/0x1890
[  119.497619][ T7881]  #3: ffff888024f3b0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb9/0x1890
[  119.508584][ T7881]  #4: ffff888024b94558 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  119.519283][ T7881]  #5: ffff888024b94590 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  119.529970][ T7881] 
[  119.529970][ T7881] stack backtrace:
[  119.535855][ T7881] CPU: 0 UID: 0 PID: 7881 Comm: syz.1.524 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) 
[  119.535871][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  119.535886][ T7881] Call Trace:
[  119.535893][ T7881]  <TASK>
[  119.535901][ T7881]  dump_stack_lvl+0x189/0x250
[  119.535921][ T7881]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.535938][ T7881]  ? __pfx__printk+0x10/0x10
[  119.535957][ T7881]  ? print_lock_name+0xde/0x100
[  119.535976][ T7881]  print_circular_bug+0x2ee/0x310
[  119.535994][ T7881]  check_noncircular+0x134/0x160
[  119.536017][ T7881]  validate_chain+0xb9b/0x2140
[  119.536039][ T7881]  __lock_acquire+0xab9/0xd20
[  119.536060][ T7881]  ? kernfs_remove+0x30/0x60
[  119.536076][ T7881]  lock_acquire+0x120/0x360
[  119.536095][ T7881]  ? kernfs_remove+0x30/0x60
[  119.536115][ T7881]  down_write+0x96/0x1f0
[  119.536134][ T7881]  ? kernfs_remove+0x30/0x60
[  119.536149][ T7881]  ? __pfx_down_write+0x10/0x10
[  119.536167][ T7881]  ? kernfs_root+0x1c/0x230
[  119.536181][ T7881]  ? kernfs_root+0x1c/0x230
[  119.536196][ T7881]  ? kernfs_root+0x1ea/0x230
[  119.536210][ T7881]  kernfs_remove+0x30/0x60
[  119.536226][ T7881]  __kobject_del+0xe1/0x300
[  119.536246][ T7881]  kobject_del+0x45/0x60
[  119.536263][ T7881]  elevator_change_done+0xf2/0x470
[  119.536282][ T7881]  elevator_set_none+0x42/0xb0
[  119.536299][ T7881]  blk_mq_update_nr_hw_queues+0x68f/0x1890
[  119.536325][ T7881]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  119.536344][ T7881]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  119.536367][ T7881]  ? sysfs_add_file_mode_ns+0x259/0x300
[  119.536390][ T7881]  nbd_start_device+0x17f/0xb10
[  119.536410][ T7881]  ? device_create_file+0xf4/0x1c0
[  119.536430][ T7881]  nbd_genl_connect+0x135b/0x18f0
[  119.536450][ T7881]  ? __pfx_nbd_genl_connect+0x10/0x10
[  119.536471][ T7881]  ? __nla_parse+0x40/0x60
[  119.536489][ T7881]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  119.536508][ T7881]  genl_family_rcv_msg_doit+0x215/0x300
[  119.536524][ T7881]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  119.536543][ T7881]  ? stack_trace_save+0x9c/0xe0
[  119.536561][ T7881]  genl_rcv_msg+0x60e/0x790
[  119.536576][ T7881]  ? __pfx_genl_rcv_msg+0x10/0x10
[  119.536588][ T7881]  ? __pfx_nbd_genl_connect+0x10/0x10
[  119.536609][ T7881]  netlink_rcv_skb+0x205/0x470
[  119.536625][ T7881]  ? __lock_acquire+0xab9/0xd20
[  119.536644][ T7881]  ? __pfx_genl_rcv_msg+0x10/0x10
[  119.536657][ T7881]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  119.536680][ T7881]  ? down_read+0x1ad/0x2e0
[  119.536698][ T7881]  genl_rcv+0x28/0x40
[  119.536717][ T7881]  netlink_unicast+0x82c/0x9e0
[  119.536735][ T7881]  ? __pfx_netlink_unicast+0x10/0x10
[  119.536751][ T7881]  ? netlink_sendmsg+0x642/0xb30
[  119.536768][ T7881]  ? skb_put+0x11b/0x210
[  119.536787][ T7881]  netlink_sendmsg+0x805/0xb30
[  119.536807][ T7881]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.536825][ T7881]  ? aa_sock_msg_perm+0xf1/0x1d0
[  119.536844][ T7881]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  119.536859][ T7881]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.536877][ T7881]  __sock_sendmsg+0x219/0x270
[  119.536893][ T7881]  ____sys_sendmsg+0x505/0x830
[  119.536914][ T7881]  ? __pfx_____sys_sendmsg+0x10/0x10
[  119.536936][ T7881]  ? import_iovec+0x74/0xa0
[  119.536950][ T7881]  ___sys_sendmsg+0x21f/0x2a0
[  119.536970][ T7881]  ? __pfx____sys_sendmsg+0x10/0x10
[  119.537000][ T7881]  ? __fget_files+0x2a/0x420
[  119.537024][ T7881]  ? __fget_files+0x3a0/0x420
[  119.537046][ T7881]  __x64_sys_sendmsg+0x19b/0x260
[  119.537066][ T7881]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  119.537089][ T7881]  ? rcu_is_watching+0x15/0xb0
[  119.537104][ T7881]  ? do_syscall_64+0xbe/0x3b0
[  119.537122][ T7881]  do_syscall_64+0xfa/0x3b0
[  119.537139][ T7881]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.537155][ T7881]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.537169][ T7881]  ? clear_bhb_loop+0x60/0xb0
[  119.537185][ T7881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.537199][ T7881] RIP: 0033:0x7fa54b58ebe9
[  119.537216][ T7881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.537229][ T7881] RSP: 002b:00007fa5497d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  119.537243][ T7881] RAX: ffffffffffffffda RBX: 00007fa54b7b6090 RCX: 00007fa54b58ebe9
[  119.537253][ T7881] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000008
[  119.537263][ T7881] RBP: 00007fa54b611e19 R08: 0000000000000000 R09: 0000000000000000
[  119.537271][ T7881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.537280][ T7881] R13: 00007fa54b7b6128 R14: 00007fa54b7b6090 R15: 00007ffe8fb9fbc8
[  119.537295][ T7881]  </TASK>
[  120.004583][ T7902] __nla_validate_parse: 4 callbacks suppressed
[  120.004600][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'.
[  120.030247][ T7903] veth0: entered promiscuous mode
[  120.031433][ T7902] xt_limit: Overflow, try lower: 271964/0
[  120.131021][ T7881] nbd0: detected capacity change from 0 to 127
[  120.137993][ T7899] veth0: left promiscuous mode
[  120.266633][ T7880] nbd1: detected capacity change from 0 to 127
[  120.287708][ T5874] block nbd1: Receive control failed (result -104)
[  120.287708][ T5879] block nbd0: Receive control failed (result -32)
[  120.287784][ T5184] block nbd0: Receive control failed (result -32)
[  120.294278][ T5881] block nbd1: Receive control failed (result -32)