last executing test programs:

3m41.163639867s ago: executing program 0 (id=2642):
syz_emit_ethernet(0x46, &(0x7f0000000b00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a00a6", 0x10, 0x0, 0x0, @private0, @remote, {[@dstopts={0x0, 0x1, '\x00', [@ra, @ra={0x31}]}]}}}}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

3m41.08465724s ago: executing program 0 (id=2644):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000001010400000000000000000200"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x44090}, 0x4040) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async)
r3 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r3) (async)
ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040), 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=<r6=>0x0) (async)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, 0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r8, 0x0, 0x40000) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) (async)
sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x22}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xd0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010081}, 0x4040000) (async)
r11 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000100)=0x200) (async)
sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000006060500000000000000000000000007050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)

3m40.945730231s ago: executing program 0 (id=2646):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_pauseparam={0x12, 0x1, 0x3, 0x7}})
close(0x3)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000480)={r4, 0x4}, &(0x7f0000000700)=0x8)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000400dd8d00000000ffdbdf2502002004fe00000600210000"], 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000600)={'ip_vti0\x00', r5, 0x10, 0x20, 0x2, 0x5, {{0x31, 0x4, 0x0, 0x38, 0xc4, 0x64, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@lsrr={0x83, 0xb, 0x9, [@multicast1, @dev={0xac, 0x14, 0x14, 0x14}]}, @cipso={0x86, 0x37, 0x1, [{0x1, 0x5, "61a602"}, {0x3, 0x6, "966bf8c1"}, {0x6, 0x3, "16"}, {0x2, 0x11, "dfacd4c14a91f95e2012e6b57686f7"}, {0x2, 0xc, "379035fe6ad81d6f06f9"}, {0x1, 0x6, "b8573bd3"}]}, @lsrr={0x83, 0xb, 0x50, [@remote, @local]}, @generic={0x88, 0x3, '\x00'}, @timestamp_prespec={0x44, 0x3c, 0x39, 0x3, 0x3, [{@rand_addr=0x64010105, 0x3}, {@broadcast, 0x927}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x9}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x8}, {@remote, 0x8000}]}, @timestamp_addr={0x44, 0xc, 0xdd, 0x1, 0x8, [{@local, 0x1}]}, @noop, @lsrr={0x83, 0x13, 0xed, [@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$can_j1939(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)="047bf51765960a6b7de1bcfd0572b14a949ac22913b38429dd8570c0f32bb69856cb5632e3a9153b69c9be8d9084c4a3d66da10df3c00db37e4d1f7261e8d31edd41558d43831147561814e419233fa1821e30900e5c025361c71494e6135836b8d8954533c5d753fd787f6c9ac849d5437c49ddbe9eb87c0ada16eb6b3782c31db8cb36408a243ba08a7bc636af98ed26c5ac90b222c1bb97675dbe9c28a9a9e3c9b367ebf83b17419e80df4941e8d41dc9b7044dff3b006b1b39f29ab39c9e189f9a596f7552a4eb71e879a97a9e0ec58e5453e810fa7f7c5bc04b71db6401", 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001800dd8d26bd7000000000000200800017000006"], 0x1c}}, 0x8c0)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r11, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, 0x20000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0)
sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0)
r13 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r13, 0x84, 0x6d, &(0x7f0000000280)={r4, 0x58, "28ae284cfa37b3690ea244e5b06e9d7b8f8ae8f9ca8d46fb9d7d4a247eb486fbba9e9d5ec830896fadfe5e99abfb31de29f39d27e7b949fc0c6a2bd4b0b49011df913fe55a9d5c346367cb406c331a34fe7fe722ea731b12"}, &(0x7f0000000200)=0x60)

3m40.630763644s ago: executing program 0 (id=2652):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r0)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x0, 0x20000001, 0x8, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="65572abd70000600000004"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r2)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)={0x3c, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0)
getsockname$packet(r11, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
socketpair(0xb, 0x80000, 0x800, &(0x7f0000000040)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r13=>0xffffffffffffffff})
r14 = socket(0x10, 0xa, 0x3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r15=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r16=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r17=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '%[@'}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r16}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r17}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008000}, 0x804)

3m40.206015663s ago: executing program 0 (id=2659):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
sendmmsg(r3, &(0x7f000000bb80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)="524985", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)="e5", 0x1}], 0x1, &(0x7f0000008f00)=ANY=[], 0x1140}}, {{0x0, 0x0, &(0x7f000000b140)=[{&(0x7f000000a040)="e514", 0x2}], 0x1}}], 0x3, 0x4000005)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r4, 0x0, 0x4)
close(0x3)
shutdown(r3, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r5 = socket(0x28, 0x5, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40)
shutdown(r6, 0x1)
getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)
bind$vsock_stream(r5, 0x0, 0x0)
listen(r5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r7, 0x0, 0x20000010)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4)
recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0)

3m39.870070943s ago: executing program 0 (id=2662):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x7c, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:initrc_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x2}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44090}, 0x45080)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x18, 0x80a, 0x80, &(0x7f0000000400)={<r4=>0xffffffffffffffff})
sendmsg$rds(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/150, 0x96}, {&(0x7f0000000480)=""/41, 0x29}], 0x3, &(0x7f0000000980)=[@fadd={0x58, 0x114, 0x6, {{0x80000001, 0x2}, &(0x7f0000000700)=0x4, &(0x7f0000000740)=0x4f7e640b, 0x0, 0x1ff, 0x6, 0x2, 0x0, 0x4ef}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000cc0)=""/249, 0xf9}, &(0x7f0000000340)}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff7, 0x2}, &(0x7f0000000800)=0x1, &(0x7f0000000840)=0x3, 0x3, 0x4, 0xd41a, 0x3, 0x0, 0x81}}, @cswp={0x58, 0x114, 0x7, {{0x0, 0x5e6939f2}, &(0x7f0000000880)=0x5, &(0x7f00000008c0), 0x3, 0x0, 0x3, 0x44, 0x0, 0x7}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x99b}, &(0x7f0000000900)=0x8001, &(0x7f0000000940)=0xd, 0x3, 0x4000000000000000, 0x4, 0x8, 0x2, 0x8001}}], 0x1a8, 0x2004c031}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x54, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x54}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6)
sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x3c}}, 0x0)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c40)=ANY=[@ANYBLOB="34000000d09829043e5b3f4e59000000000000", @ANYRES16=r9, @ANYBLOB="000328bd7000fddbdf25230000000500270005000000050023005200000005002800090000000500220000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048814}, 0x20040010)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r10 = openat$cgroup_procs(r7, &(0x7f0000000bc0)='tasks\x00', 0x2, 0x0)
r11 = gettid()
write$cgroup_pid(r10, &(0x7f0000000c00)=r11, 0x12)
sendto$inet(r2, 0x0, 0x0, 0x12, 0x0, 0x0)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r12, 0x400448cb, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000000000000aa1088b28ac131130009000014001680040008800c00028008000100"/56], 0x38}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000400700000000000000000061120080000543240000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

3m24.805181829s ago: executing program 32 (id=2662):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x7c, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:initrc_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x2}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44090}, 0x45080)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x18, 0x80a, 0x80, &(0x7f0000000400)={<r4=>0xffffffffffffffff})
sendmsg$rds(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/150, 0x96}, {&(0x7f0000000480)=""/41, 0x29}], 0x3, &(0x7f0000000980)=[@fadd={0x58, 0x114, 0x6, {{0x80000001, 0x2}, &(0x7f0000000700)=0x4, &(0x7f0000000740)=0x4f7e640b, 0x0, 0x1ff, 0x6, 0x2, 0x0, 0x4ef}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000cc0)=""/249, 0xf9}, &(0x7f0000000340)}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff7, 0x2}, &(0x7f0000000800)=0x1, &(0x7f0000000840)=0x3, 0x3, 0x4, 0xd41a, 0x3, 0x0, 0x81}}, @cswp={0x58, 0x114, 0x7, {{0x0, 0x5e6939f2}, &(0x7f0000000880)=0x5, &(0x7f00000008c0), 0x3, 0x0, 0x3, 0x44, 0x0, 0x7}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x99b}, &(0x7f0000000900)=0x8001, &(0x7f0000000940)=0xd, 0x3, 0x4000000000000000, 0x4, 0x8, 0x2, 0x8001}}], 0x1a8, 0x2004c031}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x54, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x54}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6)
sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x3c}}, 0x0)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c40)=ANY=[@ANYBLOB="34000000d09829043e5b3f4e59000000000000", @ANYRES16=r9, @ANYBLOB="000328bd7000fddbdf25230000000500270005000000050023005200000005002800090000000500220000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048814}, 0x20040010)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r10 = openat$cgroup_procs(r7, &(0x7f0000000bc0)='tasks\x00', 0x2, 0x0)
r11 = gettid()
write$cgroup_pid(r10, &(0x7f0000000c00)=r11, 0x12)
sendto$inet(r2, 0x0, 0x0, 0x12, 0x0, 0x0)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r12, 0x400448cb, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000000000000aa1088b28ac131130009000014001680040008800c00028008000100"/56], 0x38}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000400700000000000000000061120080000543240000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

2.598134283s ago: executing program 3 (id=4190):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xa1)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x11, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x41100, 0x18}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r5, 0x8b1a, &(0x7f0000000040))
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x40)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, 0x0, 0x0)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000100), &(0x7f0000000240)=0x8)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r8, @ANYRES16=r7, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="2e000000000092d2d60b92f77e18124d2d6f9d9d03926f8bf2af93", @ANYRESDEC=r3, @ANYBLOB, @ANYRES16=r4], 0x20)
r9 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c40000000000000000000000c001d"], 0x2c}], 0x1, 0x0, 0x0, 0x40804}, 0x0)
close(0x4)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4008001}, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r7], 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x0, 0x1}, 0x6)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)

2.065837043s ago: executing program 5 (id=4202):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0xfffffffffffffc9a}}, 0x28}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000000) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000fc0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4da, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5785}}], 0x18}}], 0x2, 0x4c040)
ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000080)='bridge0\x00') (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async, rerun: 64)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0) (async, rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000780)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000001040)={0x117c, r7, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x3e0, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x30, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb0fa, 0xfff, 0x9, 0x8, 0x5, 0x6, 0x400, 0xef64]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0xfffb, 0x2, 0x3, 0x3ff, 0x5, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6c}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x81}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0x48, 0x12, 0x36, 0x5, 0x9, 0x36, 0x2, 0x9, 0x1, 0x6d, 0x12, 0x18, 0x9, 0x3, 0x36, 0x3]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x36, 0x24, 0x2, 0x1b, 0x9, 0x2, 0x12, 0x24, 0x6f, 0x9, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7f, 0x6, 0x1, 0x4, 0x7, 0x5, 0x9c7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4ba1, 0x3ff, 0x3, 0x3, 0x2, 0x7, 0x60]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x40}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd22e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ac, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x5}, {0x1, 0x1}, {0x6, 0xa}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x2}, {0x5, 0x4}, {0x3, 0x5}, {0x2, 0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x6}, {0x4}, {}, {0x7}, {0x0, 0x3}, {0x6, 0x2}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x8}, {0x5, 0x8}, {0x7, 0x9}, {0x7, 0x8}, {0x7, 0x9}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x4}, {0x6}, {0x4, 0x5}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0x7}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x5}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x6, 0x4}, {0x2, 0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x2, 0x5}, {0x3, 0x1}, {0x4}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x16, 0x1b, 0x48, 0x24, 0x12, 0x1b, 0x12, 0x2, 0xb, 0x16, 0xc, 0x1b, 0x1b, 0x18, 0xb, 0x36, 0x16, 0x30, 0xb, 0x2, 0x57, 0x36]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x2, 0x9, 0x493, 0xc99, 0x4, 0x3ff]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x9}, {0x3, 0x9}, {0x6, 0x4}, {}, {0x6}, {0x7, 0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x9}, {0x5, 0x1}, {0x5, 0x7}, {0x0, 0x6}, {0x1}, {0x1, 0x9}, {0x2, 0x3}, {0x5, 0xa}, {0x7}, {0x3, 0x7}, {0x2, 0x9}, {0x3, 0x5}, {0x5, 0x2}, {0x0, 0xa}, {0x7, 0x4}, {0x4, 0xa}, {0x6, 0x6}, {0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x2}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x6}, {0x6, 0x1}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x4}, {0x1, 0xa}, {0x1, 0x3}, {0x5, 0x8}, {0x1}, {0x4}, {0x7, 0x3}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xed9, 0xe, 0x906a, 0x40, 0x3, 0x9, 0x9, 0xcd01]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x8, 0x1, 0x7, 0x401, 0x8, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x1}, {0x4, 0x5}, {0x7, 0x2}, {0x5}, {0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x7, 0x7}, {0x5, 0xa}, {0x3, 0x4}, {0x7, 0x8}, {0x7, 0x4}, {0x2, 0x5}, {0x5, 0x4}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x5, 0x7}]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x3}, {0x2, 0xa}, {0x2, 0x9}, {0x2, 0x5}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x18, 0x60, 0x5, 0x4, 0x3b, 0x2b, 0x6c, 0xb, 0x6, 0x6c, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x30, 0x48, 0x1b, 0x60, 0x36, 0x6c, 0xb, 0x1b, 0x24, 0x60, 0x3, 0x5c, 0x60, 0x24, 0x12, 0x5, 0x1b, 0x30, 0x1b, 0x5, 0x6c, 0xc, 0x6, 0x6c, 0xc, 0x24, 0x30, 0x12, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x86}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x2b8, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x900000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x23}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xea}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x230, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x36}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x214, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe02, 0x0, 0xfe01, 0xff, 0x5, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x161, 0x8, 0x9, 0x1ff, 0x7, 0x8, 0x401, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x4}, {0x0, 0x8}, {0x3}, {0x2, 0x7}, {0x0, 0x8}, {0x2, 0x3}, {0x0, 0x7}, {0x6}, {0x5, 0x3}, {0x2, 0x8}, {0x1, 0x2}, {0x6, 0x6}, {0x5, 0xa}, {0x3, 0x4}, {0x0, 0x1}, {0x0, 0x8}, {0x4, 0x5}, {0x2}, {0x4}, {}, {0x7}, {0x1, 0x1}, {0x0, 0xa}, {0x0, 0x6}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x3}, {0x5, 0x9}, {0x6, 0x5}, {0x5, 0x1}, {0x4, 0x6}, {0x2, 0x4}, {0x3, 0x2}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x9}, {}, {0x3}, {0x0, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x3, 0x2}, {}, {0x4, 0x2}, {0x6, 0x6}, {0x6, 0xa}, {0x3, 0x7}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0x4}, {0x3, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0xa}, {0x4, 0xa}, {0x0, 0x8}, {0x3, 0x6}, {0x7, 0x6}, {0x1, 0x5}, {0x7, 0x4}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x8}, {0x6, 0x8}, {0x2, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7f, 0x400, 0x5, 0x3, 0x75, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x9}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xe, 0x7, 0x7, 0x20, 0xfffb, 0x584f, 0x2afb]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0xc, 0x2, 0x48, 0x5, 0x48, 0x9, 0x48, 0x18, 0x48, 0x18, 0x24, 0x0, 0x16, 0x30, 0x12, 0x5, 0x30, 0x9, 0xb, 0x60, 0x6c, 0x4, 0x48, 0x2, 0x48, 0x5, 0x18, 0x30, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xff81, 0x100, 0x1000, 0x6, 0x8001, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x0, 0x6c, 0x9, 0x24, 0x16, 0x18, 0x1]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0x6, 0x60, 0x30, 0x4, 0x36, 0x60, 0x1, 0xb, 0x79]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0x60, 0x0, 0x18, 0x28, 0x36, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x401, 0x6, 0x7, 0x800, 0xffff, 0xea, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1}, {0x6, 0x2}, {0x5, 0x3}, {0x2, 0x5}, {0x1, 0xa}, {0x0, 0x9}, {0x1}, {0x4, 0x5}, {0x2, 0x5}, {0x4, 0x6}, {0x4, 0x6}, {0x6, 0x2}, {0x2, 0x9}, {0x3}, {0x1, 0x7}, {0x4, 0x8}, {0x7, 0x6}, {0x5, 0x3}, {0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0xb}, {0x1, 0x6}, {0x4, 0x8}, {0x2}, {0x7, 0x6}, {0x2, 0x9}, {0x5, 0x7}, {0x7, 0x6}, {0x0, 0x4}, {0x5, 0x1}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x1b}, {0x7, 0x2}, {0x5, 0x5}, {0x4, 0x8}, {0x6, 0x7}, {0x1, 0x4}, {0x3, 0x6}, {0x4, 0x2}, {0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x5, 0x3}, {0x2, 0xa}, {0x5, 0x7}, {0x6, 0xa}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x2}, {}, {0x2}, {0x2, 0x1}, {0x5, 0x4}, {0x6, 0x6}, {0x6, 0x2}, {0x4, 0x7}, {0x6, 0x8}, {0x7, 0x6}, {}, {0x2, 0x2}, {0x4, 0x7}, {0x0, 0xa}, {}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x6, 0xa}, {0x1, 0x5}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x2, 0x6}, {0x3, 0x6}, {0x0, 0x6}, {0x1}, {0x2, 0xa}, {0x3}, {0x4, 0x1}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0x4}, {0x0, 0x9}, {0x7, 0x1}, {0x2, 0x4}, {0x6, 0x9}, {0x1, 0x2}, {0x6, 0x1}, {0x6, 0xa}, {0x1, 0x3}, {0x5, 0x3}, {0x0, 0x8}, {0x1, 0x5}, {0x6, 0x1}, {0x7, 0x4}, {0x6, 0x9}, {0x7, 0x7}, {0x6, 0x4}, {0x6, 0x4}, {0x7, 0x17}, {0x3, 0x3}, {0x6, 0x9}, {0x6, 0x7}, {0x6, 0xa}, {0x0, 0x8}, {0x0, 0x5}, {0x3, 0xa}, {0x5, 0x5}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {}, {0x7, 0xa}, {0x1, 0xa}, {0x5, 0x4}, {0x7, 0x1}, {0x2, 0x2}, {0x7, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x2, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x3}, {0x2, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xa8, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x46}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5854}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}]}, @NL80211_ATTR_TID_CONFIG={0x90, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x40}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x69}]}]}, @NL80211_ATTR_TID_CONFIG={0x5ec, 0x11d, 0x0, 0x1, [{0x1b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x65}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x5}, {0x1, 0x5}, {0x1, 0x4}, {0x2, 0x9}, {0x4, 0x4}, {0x7, 0xa}, {0x5}, {0x2, 0xa}, {0x5, 0x3}, {0x3, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x3, 0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x6}, {0x1, 0x7}, {0x3, 0x9}, {0x3, 0xa}, {0x5, 0x6}, {0x1, 0x8}, {0x5, 0x1}, {0x2, 0x2}, {0x5, 0x5}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0x6}, {0x1, 0x4}, {0x5, 0x7}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x8}, {0x3, 0x2}, {0x6, 0x1}, {0x5, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x4, 0x9}, {0x6, 0x8}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x76, 0x8001, 0x1, 0x57f1, 0x7, 0x6, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x6, 0x8}, {0x1, 0x4}, {0x3, 0x4}, {0x5}, {0x7, 0x9}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x6, 0x3}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x5, 0xa}, {0x3, 0x3}, {0x2, 0x4}, {0x1, 0x3}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x6}, {0x7, 0x8}, {0x3, 0x2}, {0x3, 0x7}, {0x3, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x7, 0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0x4}, {0x2, 0x4}, {0x3, 0x1}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x9}, {0x4, 0x4}, {0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x5, 0x8}, {0x4, 0x5}, {0x7, 0xa}, {0x4, 0x7}, {0x2, 0xa}, {0x4, 0xa}, {0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x3}, {0x1, 0x9}, {0x6}, {0x6, 0x7}, {0x6, 0x1}, {0x5, 0x8}, {0x1, 0x6}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x7}, {0x4}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x7, 0x4}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x4, 0x5, 0x1, 0xf66b, 0x1000, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3}, {0x0, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf874, 0x5, 0x7, 0x5, 0x2, 0x1000, 0x100, 0xff]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x6}, {0x6, 0x9}, {0x5, 0x8}, {0x1}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x3}, {}, {0x4}, {0x6, 0x6}, {0x7, 0xa}, {0x2, 0x8}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8000, 0x40, 0x7, 0x4, 0x8, 0x3, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x18, 0x2, 0x6, 0x6c, 0xb, 0x36, 0x79, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x4, 0x7, 0xffff, 0xe, 0x1, 0xee39]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xdb2f, 0x4, 0xd055, 0x3, 0xfffa, 0x7, 0x4]}}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x50}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x370}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x300, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2ec, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x81, 0x8, 0x9, 0x1, 0x5, 0xffff, 0x66ab]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x60, 0x3, 0x60, 0x24, 0x6, 0x16, 0x6, 0x6dc4c88cc2bc9c54, 0x1, 0xb, 0x30, 0x18, 0x2, 0x48]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x99, 0x0, 0x7ff, 0x1, 0x5, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0x6c, 0x1, 0x16, 0x6, 0xb, 0xb, 0x0, 0x0, 0x9, 0x60, 0x48, 0x9, 0x6c, 0xc, 0x24, 0x48, 0x1, 0x16, 0x4, 0x9, 0x1b, 0x36, 0x9, 0x9, 0x8]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x6, 0x60, 0x4, 0x36, 0x36, 0x60, 0x6]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x9, 0x4, 0x8, 0xd9, 0x100, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x248, 0x37b4, 0xf, 0x1, 0x3, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xa471, 0x3f, 0x2, 0x5159, 0x8001, 0x1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc9, 0x1, 0x3, 0x6, 0x273d, 0x1, 0x3, 0x2]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x2}, {0x2, 0x6}, {0x1}, {0x3, 0xa}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x36, 0x6, 0x48, 0x16, 0x6, 0x1b, 0x30, 0x48, 0x24, 0x60, 0x4, 0x1, 0x24, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc76, 0x798, 0xf, 0xffff, 0x2d3b, 0x8, 0x1, 0x186]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x6, 0xe, 0x8001, 0x401, 0x7ff]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1}, {0x4, 0x3}, {0x2, 0x9}, {0x6, 0x6}, {0x7, 0x8}, {0x7, 0x6}, {0x2, 0x3}, {0x4, 0x9}, {0x7, 0x6}, {0x2, 0x9}, {0x4, 0x6}, {0x4, 0x9}, {0x1, 0x3}, {0x5, 0x3}, {0x2, 0x8}, {0x7, 0x4}, {0x0, 0x6}, {}, {0x0, 0x7}, {0x3, 0x8}]}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x0, 0x0, 0x9, 0x9, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x5}, {0x2, 0x6}, {0x6}, {0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x4, 0x9}, {0x2, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x2}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x7, 0x8}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x9}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x6}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0x5}, {0x7, 0x4}, {0x3}, {0x7, 0x7}, {0x1, 0x6}, {0x5, 0x9}, {0x3, 0xa}, {0x0, 0x3}, {0x2, 0x7}, {0x4, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x2}, {0x0, 0x3}, {0x4, 0x3}, {0x0, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x5, 0x1}, {0x4, 0x2}, {0x3, 0x2}, {0x5, 0x6}, {0x4, 0x8}, {0x0, 0x9}, {0x0, 0x7}, {0x2, 0x6}, {0x5, 0x9}, {0x7, 0x4}, {0x6, 0x7}, {0x1, 0x7}, {0x4, 0x9}, {0x4, 0x7}, {0x3, 0x7}, {0x0, 0x3}, {0x7, 0x3}, {0x7, 0x7}, {0x0, 0x7}, {0x2, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0x3}, {0x5, 0x1}, {0x5, 0x2}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x8}, {0x0, 0x3}, {0x4, 0x6}, {0x3, 0x7}, {0x2, 0xa}, {0x4, 0x6}, {0x2, 0x4}, {0x4, 0xa}, {0x0, 0x5}, {0x7, 0x7}, {0x4, 0x8}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x9}, {0x5, 0x5}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x5}, {0x2, 0x6}, {0x2, 0x8}, {0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x2, 0x5, 0x7, 0x0, 0x4, 0x4, 0x9f1]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x7fff, 0x0, 0x2, 0x8, 0x4, 0x7, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xb, 0x5, 0x3, 0x3, 0x800, 0x6, 0xfff7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x1, 0x5, 0x0, 0x5, 0x5, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x7}, {0x0, 0xa}, {0x4, 0xa}, {0x2}, {0x4}, {0x3, 0x9}, {0x4, 0x2}, {0x3, 0x1}, {0x0, 0x2}, {0x1, 0x9}, {0x2, 0x4}, {0x7, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x2}, {0x4, 0x4}, {0x4, 0x7}, {0x4, 0x4}, {0x0, 0x9}, {0x3}, {0x3, 0xa}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x3}, {0x4, 0x4}, {0x2, 0x5}, {0x2, 0x4}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x4, 0x5}, {0x4, 0x3}, {0x4, 0x5}, {0x2, 0x7}, {0x6, 0x5}, {0x7, 0x5}, {0x4, 0x3}, {0x7, 0x7}, {0x6, 0x4}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0xa}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x1}, {0x4, 0x8}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x7}, {0x3, 0x4}, {0x5, 0x1}, {0x0, 0xa}, {0x7, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x2}, {0x4}, {0x6, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {0x4, 0x2}, {0x7, 0x4}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x8}, {0x5, 0x6}, {0x0, 0xa}, {0x1, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0xa, 0x4a, 0xc0, 0x101, 0x7, 0x99]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0x6c, 0x48, 0x60, 0x18, 0x12, 0x5, 0x18, 0x9, 0x48, 0x48, 0xb, 0x30, 0x48, 0x6, 0x6, 0x9, 0x60, 0x39, 0x5, 0x6, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x2, 0x400, 0x621, 0x7, 0x101, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xb, 0x18, 0x5, 0x9, 0x0, 0xb, 0x48, 0xb, 0x1, 0x60, 0x9]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5e}]}]}, @NL80211_ATTR_TID_CONFIG={0x48, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xaa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x21}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x244, 0x11d, 0x0, 0x1, [{0x1f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x6, 0x9, 0x1000, 0x5, 0x1, 0x5, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x8, 0x7c5, 0x4, 0x1, 0x1, 0x5]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x8}, {0x3}, {0x2, 0x2}, {0x6, 0x8}, {0x7, 0x8}, {0x4, 0xa}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x8}, {}, {0x4, 0x3}, {0x5, 0x5}, {0x4, 0x3}, {0x7, 0xa}, {0x7, 0x6}, {0x1, 0x7}, {0x2}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0x3}, {0x6, 0x1}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x9}, {0x2, 0x3}, {0x5, 0x7}, {0x6, 0x7}, {0x6, 0x5}, {0x7, 0x2}, {0x3, 0x4}, {0x7, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0x6, 0x3}, {0x5, 0x2}, {0x3, 0xa}, {0x2, 0x9}, {0x5, 0x7}, {0x4, 0x8}, {0x5, 0x7}, {0x3, 0x9}, {0x0, 0x7}, {0x2, 0x6}, {0x5, 0x9}, {0x2, 0x3}, {0x2, 0x3}, {0x2, 0x3}, {0x6, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x1}, {0x1, 0x2}, {0x4, 0x6}, {0x0, 0x2}, {0x4, 0x7}, {0x2, 0x8}, {0x0, 0x6}, {0x2, 0x4}, {0x4, 0x7}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x0, 0xa}, {0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0x6}, {}, {0x2, 0x8}, {0x3, 0x5}, {0x2, 0x4}, {0x3}, {0x3, 0x4}, {0x7, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {0x7, 0x4}, {0x2, 0x2}, {0x4, 0x7}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x1}, {0x4, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x3, 0x5, 0xffff, 0x6, 0x100, 0x6, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0xc, 0x4, 0xb, 0x2, 0x66, 0x5, 0x24, 0x1]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x2}, {0x4, 0x5}, {0x2, 0x4}, {0x6, 0x7}, {0x5, 0x2}, {0x6, 0x8}, {0x4, 0x5}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0x1}, {0x6, 0x3}, {0x7, 0x7}, {0x1, 0x3}, {0x0, 0x1}, {0x5, 0xa}, {0x1, 0x6}, {0x7, 0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x9}, {0x7, 0xa}, {0x4, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb8, 0x8, 0x81, 0x8, 0x9, 0x7ff, 0x52f1]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x2, 0x5, 0x3000, 0x9, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x255d, 0x0, 0x7, 0xa457, 0x400, 0x6, 0x2]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x60, 0x60, 0x4, 0x1, 0x18, 0x30, 0x9, 0x9, 0x18, 0x2, 0x48, 0x30, 0x1b, 0x3, 0x6c, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x2, 0x1, 0x3, 0x882, 0x9, 0x3, 0x38]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x1b, 0x9]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xbd55, 0x6e2, 0x0, 0x6, 0x2ccf, 0xfff6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x7, 0xf3bd, 0x6, 0x5, 0x7190, 0xfff9]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x53}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x68}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc8, 0x11d, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x7c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xc, 0x2, 0x4, 0x4d3f, 0x401, 0xfffe, 0xf0fd]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0xa}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x6}, {0x6}, {0x0, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xb, 0x832c, 0x1, 0x7, 0x7, 0xfff9, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x91, 0x4, 0xfffa, 0x8, 0x2, 0x5, 0xfffd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0xfffc, 0x849, 0x5, 0x20, 0x2, 0xf71d]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf3}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x117c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x8050) (async, rerun: 64)
sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000428bd70000200b4ad4ce61000020009000000a0af00000000080032002628199488137fa5"], 0x24}}, 0x2000c000) (async, rerun: 64)
sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async, rerun: 64)
sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x4020000) (async, rerun: 64)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7aa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x895}, 0x48080)

1.947987894s ago: executing program 2 (id=4205):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x4000000)
close(0x4)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f0000e0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0xfffd}], 0x1}, 0x40)

1.879109923s ago: executing program 3 (id=4207):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011000116563d09933cffd6048efe24ffb58094b1028e625baa6f3468472b4858c8a6716decbf89091cdaf8705061e082026ca0a496a421246fd2cbe208f42d6e4cf83a1893f5caf678ab1f1741366494355543cf3e292d5246a30dbd832b7832435e62b3ab9f062f38cb1b292a30f10a9434"], 0x7c}}, 0xebf77c436c8ef39b)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000840800034000000010080004400002000f0800014000000000180005800e0001007d6d6d656469617465000000040002800900010073797a30000000000900020073797a32"], 0xa4}}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x80)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x500, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda01})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000041}, 0x200088d0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000100)={'gretap0\x00', <r11=>0x0, 0x7, 0x1, 0x400, 0x80000000, {{0xb, 0x4, 0x3, 0x2d, 0x2c, 0x67, 0x0, 0x0, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xb}, {[@timestamp={0x44, 0x10, 0x35, 0x0, 0x5, [0x81, 0x2, 0x3]}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}})
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1e, 0x1, 0x62fa, 0xb, 0x0, 0x1, 0x2, '\x00', r11, r12, 0x4, 0x1, 0x2}, 0x50)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@mcast2, 0x3c, r11})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r13, 0x107, 0x7, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r14)

1.850059499s ago: executing program 5 (id=4208):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x20088004)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000001c0)=0x4, 0x4)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000040)="3b00000001000b", 0x7)

1.693738901s ago: executing program 4 (id=4209):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a07040000000000000000020000000900010073797a30000000000900020073797a3200000000300004802c0001800e000100696d6d6564696174650000001800028008000140000000000c000280050002"], 0x84}}, 0x0) (async)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000280)=0xd1, 0x4)

1.608446414s ago: executing program 4 (id=4210):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0) (async)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) (rerun: 32)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={r2, 0x2, 0x7}, 0x8)
r3 = socket$alg(0x26, 0x5, 0x0) (async)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x8) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000084"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000001880)=""/4105, 0x1009}}, 0x10) (async)
bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x1) (async)
r5 = socket$inet6(0xa, 0x2, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r7 = socket(0x400000000010, 0x3, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x1000) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0x8, 0x15}, {0xb, 0xfff1}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x2000c115)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10) (async, rerun: 32)
r11 = socket(0xa, 0x80000, 0x0) (rerun: 32)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) (async, rerun: 64)
r12 = socket$unix(0x1, 0x2, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmmsg$inet(r5, &(0x7f0000000340)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0x30}}], 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r11, 0x6, 0x18, &(0x7f00000000c0)=0xc1b, 0x4)

1.607951814s ago: executing program 4 (id=4211):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x36, 0xe, {{{}, {}, @broadcast, @broadcast}, 0xdc8, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x9, 0xb4, 0xf3}}, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x2d}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x0)

1.144759839s ago: executing program 1 (id=4212):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r5=>0x0})
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14)
syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x100, 0x70bd29, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0xfff0}, {0xffe0, 0xffe0}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0)
socket(0x2a, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
close(0x4)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001e31a4989000000000000000000", @ANYRES16=r3, @ANYBLOB="a821000000a40000140003006e657464657673696d30000084ce614407c64fee100001800c000900030000000d000000"], 0x48}, 0x1, 0x0, 0x0, 0x4008040}, 0x810)

995.874618ms ago: executing program 5 (id=4213):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r1}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x7, <r6=>0x0}, 0x8)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r0}, 0x20)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x10, 0x1ff, 0x4, 0x8, 0x1, 0x1, 0x36, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x2f, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x50}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @alu={0x7, 0x1, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xb9, &(0x7f00000000c0)=""/185, 0x40f00, 0x5f, '\x00', 0x0, @sk_skb=0x4, r5, 0x8, &(0x7f0000000180)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x2, 0x5, 0x4}, 0x10, r6, 0xffffffffffffffff, 0x4, &(0x7f0000000700)=[r7, r8, r9, 0x1, 0x1, r10, 0xffffffffffffffff, r11, r12], &(0x7f0000000740)=[{0x4, 0x3, 0x0, 0xd}, {0x1, 0x3, 0xb, 0x3}, {0x0, 0x2, 0xd, 0x1}, {0x4, 0x5, 0xb}], 0x10, 0x6}, 0x94)

936.859134ms ago: executing program 4 (id=4214):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
writev(r2, &(0x7f0000000100)=[{&(0x7f0000001800)="a2084c49b102abaf151a0e6eb5c735003c384b6860994f6e8523d331cda230ba2083a146e85e4843bde73803dd92dd898958334de012246801c81ef288be22247c3b29383a678ba9d82801c88ab1e1cff1afad642faf9c8a7c9f704effffffffffffffff89197eba22bb02dcc66b65e2cacfb8ef97479900ef41dec06cbab052edacf66984549618c66ba03303f350266736f73a3e88098b713ada6ad53c61ef1cd59657025ab79c0c029feda8d58bb7f8b14582f5b145b6905770a9e2dcdc025381d9e2ceda6c9e82edc26f4888e3ff17e99cdc006c50a620dd0b39d2a7821e63bda80a3103f5c65b4324c98a0c69c5e9bdd6ad920dc642", 0xf8}, {&(0x7f0000000040)="cb200c1b873b291396dcf0a3ba0c3a340af058e7e72a527ec0a6271566c00c212cede160307a8093ace7ad42a1695c64420ac7b05788aaf7a030281b5599854843f5484d1cb77bfd", 0x48}, {&(0x7f0000000700)="1e69e50c5e2f2d6112f2395ed65e41a64fd574400398933b38759bf7684d33b970e48f8ce10930f7b7965ea93e7ccb0ae02c3f578e6b81290d1f0cd280730f9c1034b6210b74a5210e5febabe4c3fb277fb9bcce270d0a45129502b212573db29e35835f4399100d7a76a9ae92317f584242b2d3e6f29667e62ecd48de85886d5f3dd75bcd1806b235bc1629fe89d564ccf5b877b337e11ff65bf5ed6660d56ae8cd060bbd4ce7da6aeaf0d024c39323ae77b57d8aac8fe828b6aef887b0c612df2fa50403f0297228fd8cf818dba11e0deda256cbb5be68c23e80bca7ee68a947dd4774c962b692717fb0bad46d5ba2fdd0d463480887c8f73d5b2f177ae4", 0xff}, {&(0x7f0000000800)="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", 0x1000}], 0x4) (async)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001900)={0x6, {{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0x1, 0x9, [{{0xa, 0x4e20, 0x5, @local, 0x7d}}, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}, 0x3}}, {{0xa, 0x4e23, 0x5103, @local, 0xd}}, {{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {{0xa, 0x4e22, 0x6, @loopback, 0x7}}, {{0xa, 0x4e20, 0x1000, @private2, 0x8}}, {{0xa, 0x4e22, 0x1, @private0, 0xf2}}, {{0xa, 0x4e22, 0x31, @empty, 0x7fffffff}}, {{0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffb}}]}, 0x510) (async)
r3 = getpid()
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x36) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000800ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000030000000008000000000000000000007f00000100000000000000000000000000000000320000000000000000000000000000000000ffff7f0000010000800003000000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d46c00000000000000e00000010000000000000000000000000300000000000000000000000000000000000000fc000000000000000000000000000001000000003c0000000a000000fc010000000000accb6e156b4743068732ab9fa209"], 0x23c}}, 0x0)

935.292565ms ago: executing program 1 (id=4215):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r4, 0x0, 0x0}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x90)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
read(r6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r5}, 0x10)
close(r1)
r7 = socket$netlink(0x10, 0x3, 0x0)
listen(0xffffffffffffffff, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r8], 0x20}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x437, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x4000)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000088520300440012800b000100697036746e6c00003400028014000300fc00000000000000000000000000000008000100", @ANYRES32, @ANYBLOB="14000200fe0000bb"], 0x64}}, 0x4000080)

933.334572ms ago: executing program 2 (id=4216):
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x1800)
accept4(r0, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000000000000000000000000000016e6560000"], 0x48)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vxcan0\x00', <r7=>0x0})
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000000)={0x1d, r7, 0x0, {}, 0xfe}, 0x18)
sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xff}, 0x18, &(0x7f0000000180)={0x0}}, 0xee)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, 0x0)
socket$kcm(0x11, 0x3, 0x0)
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(0x3)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r14, 0x0, 0x30, 0x4, @val=@netkit={@void, @value=r14}}, 0x1c)

841.753543ms ago: executing program 3 (id=4217):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x20008050)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10)
recvmmsg$unix(r0, &(0x7f0000002a40), 0x0, 0x2080, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5010000030810000240012800e00010069703665727370616e0000001000028005001600420000000400120033135bd2ed04127c2305f831a18617d51538c8fd352c93498f6af33eed3b9ccd999cf3c53d6ce4d99b3bb05e967fb0a3be276d60de473397a0bb347c7166a2a265b7b3f58e482bfc745899a282d6a6cae3a5b0"], 0x44}}, 0x0)

760.83241ms ago: executing program 5 (id=4218):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000340)="08000000010000", 0x7)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r3, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x1d, 0x2, 0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0xffffffffffffff4f}]}]}]}, 0x30}}, 0x4000890)
sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x55, 0xac, "15d7c482fe605711e210b56766bff01a5612016fe71615309b4c6bbfafaacd503eacc06c9c2c5d072417f2ad98d9e8eb4ef3e5ddd843ad252c6d3167b8e84d1388c8a34b87ecaf379f04627d34cf89e4ad"}]}, 0x74}, 0x1, 0x0, 0x0, 0x600e084}, 0xc000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8}, {0x7, 0xf}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000002c0)={r4, 0x3840, 0x4, 0x7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94)

692.684557ms ago: executing program 1 (id=4219):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x317}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}]}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x40288c5)
syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000442f00fc000000000000000000000000000000ff020000000000000000000000000001242022eb0000000000000872000086dd080088be00000006000700000100000000000000080022eb0000000020000000020000000000006a6c80000300000800655800000000"], 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x2, 0x0)
write(r6, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001d00000000000000", 0x1c)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x11}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8811}, 0x40040c1)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006301edff0000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f000000f740)={&(0x7f00000003c0)={0x38, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0x1000}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x44040)

667.86651ms ago: executing program 3 (id=4220):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r3=>0x0})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x10011, 0x2, 0x2, 0x7, 0xc}, 0x20)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
ioctl(r4, 0x8b32, &(0x7f0000000040))
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000dcdf251700000008000300", @ANYRES32=r3, @ANYBLOB="300030801400044d403a050c5baee2004ef2b6d704f3a99910000c80040003800800010000000000050002004000c041f848924ed564408103c32fd5f3dfaf0c9471734ab70c7e50a44f7cfad78c8b324f5db25ec39bfeb0fd182ca4790463cf14f68b579e3239500630fef211ce15d01c10c39bcaf52391b69cc1586e2b48bdbcd4334c46105c526f4c9a01d085550d57a92cc3bac0465bdf04bbd7dd40a0b0d6ba17df695ca09937b28a43"], 0x4c}}, 0x4000000)

572.709482ms ago: executing program 4 (id=4221):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x7fff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xf6, 0x8, 0x9}, {0x1, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x2000800)
connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r6, 0x0, {0x2, 0xff}}, 0x18)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r8, 0x1)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r9, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xb, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8)
syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466fb19f71e96642faa2300"}]}}}}}}}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)

512.68323ms ago: executing program 2 (id=4222):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
unshare(0x20400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000002a00000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES64=r2, @ANYRESOCT=r3], 0x110)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000c001c002100000000000000000002000000"], 0x14}}, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3b, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000000000}, 0x48)
setsockopt$rose(r5, 0x104, 0x3, &(0x7f0000000180), 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r0, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x58}}, 0x0)
socket(0x28, 0x80000, 0xffffffff)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r8 = socket(0x40000000015, 0x5, 0x0)
bind$qrtr(r8, 0x0, 0x0)
r9 = socket$isdn_base(0x22, 0x3, 0x0)
bind$isdn_base(r9, &(0x7f0000000040), 0x6)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x54, 0x2, 0xb8, 0x80, 0x85, 0x9, 0x21, 0x80, 0x8, 0x82, 0x4e, 0xff, 0x3}, 0xe)
sendmsg$inet_sctp(r10, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
readv(r11, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/174, 0xae}, {&(0x7f0000000440)=""/228, 0xe4}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/112, 0x70}, {&(0x7f0000000140)=""/46, 0x2e}], 0x5)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0))
ioctl$sock_inet6_tcp_SIOCATMARK(r7, 0x40047440, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001ffdfcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00001c0012800e0002802440120008000a000000000000000000e5", @ANYRES32=r0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)

482.665632ms ago: executing program 1 (id=4223):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x5b0, 0x148, 0x2f8, 0x228, 0x228, 0x228, 0x618, 0x618, 0x618, 0x618, 0x618, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0x0, 0x0, 0xff000000], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x120, 0x148, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [], [], 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@mcast2, @dev, [0x0, 0x0, 0x0, 0xffffffff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x8}, {}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @empty, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0x0, 0xff000000], [0x0, 0x0, 0xff000000, 0xffffffff], 'veth1_to_hsr\x00', '\x00', {0xff}, {}, 0x62, 0x35, 0x1, 0x10}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@remote, 0x0, 0x37}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x70, 0xd0, 0x0, {0x390, 0x8f00}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x803, r4}, 0x38)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)

444.557937ms ago: executing program 5 (id=4224):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@delchain={0x68, 0x65, 0x11, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x4, 0xffe0}, {0xa, 0xffff}, {0xb, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_HASH={0x8, 0x2, 0xb2}, @TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x7}}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0xed}}]}}]}, 0x68}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@delchain={0x68, 0x65, 0x11, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x4, 0xffe0}, {0xa, 0xffff}, {0xb, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_HASH={0x8, 0x2, 0xb2}, @TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x7}}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0xed}}]}}]}, 0x68}}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r3)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20)
sendto$inet(r4, &(0x7f0000000440)='!', 0x1, 0x4048845, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10)
socket$packet(0x11, 0x2, 0x300)

380.826719ms ago: executing program 3 (id=4225):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socket(0x10, 0x80002, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
sendto$inet(r1, &(0x7f0000000280)="1b780951b3642685992ddc96fb019ba67a536706e73e646f53c2cbbafa351ed37eba", 0x22, 0x80, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) (async)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r1, 0x8) (async, rerun: 32)
accept4(r1, 0x0, 0x0, 0x800) (rerun: 32)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32)
socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32)
socket$xdp(0x2c, 0x3, 0x0) (async)
recvmsg$qrtr(r0, &(0x7f00000026c0)={&(0x7f00000001c0), 0xc, &(0x7f0000002580)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {0xfffffffffffffffc}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f00000012c0)=""/65, 0x41}, {&(0x7f0000001340)=""/236, 0xec}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/151, 0x97}, {&(0x7f0000002500)=""/76, 0x4c}], 0x8, &(0x7f0000002600)=[{0x68, 0x0, 0x0, ""/84}, {0x28, 0x0, 0x0, ""/17}], 0x90, 0x2020}, 0x38, 0x2021)
socket$netlink(0x10, 0x3, 0x400000000000004)
socket(0x10, 0x803, 0x4) (async)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
r3 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (rerun: 64)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="53fb7bdc0f56297e8d81469a615db4192f58aa8c358d9957d4f84ba90ec0a5bfe9ec59611f6a064f", 0x28}], 0x1, 0x0, 0x24c0}}], 0x1, 0x60040d1) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68)
socket$alg(0x26, 0x5, 0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)

283.238407ms ago: executing program 4 (id=4226):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) (async)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000140)={0x54, r1, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x146}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x15c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x12c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x44, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xae6}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xbc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xcb}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xeff9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x40}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x11, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x48}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYBLOB="0a0001"], 0x48}}, 0x0)

273.624392ms ago: executing program 2 (id=4227):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x74, 0x40000000, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8, 0x0, 0xfffffff9}})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r1}, 0x38)
r3 = socket(0x10, 0x6, 0x88c1)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4080000000000006110750000000000a60000000000000095000000000000003653228cd904f74914599da1771adfc296cb21e04c0618c33a1d54aee4a165e5c2557c9f3f40c1c3a59ebed8e65f93b1413e6e1a1d2b883a9893c2bd94209ca723e47788b9dee7abf8d822c475720c971d4b6911b77cb1e1e5d99b932b292159d1302e9f0f9843e8ed993aa2c7918bb6d24dd05aade7e6f855bc55a21995f9b7c6f3cf7eb8b0f046b031e74a98e47a9bf2a7773e6eb32461081aa9e674acc360e484f7555f740cd263bf"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)

132.578704ms ago: executing program 3 (id=4228):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendto(r0, &(0x7f0000000000)="e98547ef66e6e7bcfa983a5e49aac8a4397c2c546f4ee031d02f6a8fd6d6a45cd0d28ef2aa59cfc67f4738d8d876033a3a234472e1729fb867dc3a31e0ba682535d16b59210589443aa82ee13ba0e0604ecd3d41608ce9f294f1587b90412ed82afdfb2c8ec00951f58128d43930aa307d4da9191d03a4d82514bdeb91a8f3b48e213dc9c37e066c52acbfd1415b757655bb783aa16281934a4e20e7f380855686f35969302146359fe41dff65ac189674ec41f8e6d29a9df6441d2ca6a9d4bd98219ab7b58af5993d5d2a8dcfc36a04ac7097a8688b3ca283e44796417fe6fcec3984", 0xe3, 0x840, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x80) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.controllers\x00', 0x0, 0x0)
getsockname$unix(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) (async)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={<r2=>0x0, @empty, @empty}, &(0x7f00000002c0)=0xc)
sendmsg$sock(r1, &(0x7f0000000a80)={&(0x7f0000000300)=@can={0x1d, r2}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000380)="a6c8d4f26f6ff64029db7d787015395a2a4b87a270badd6a6473c1ac5aeb4bdda80def072c9c4c01af0106dbef87d371d0b976e79651568b338159e8f196314dfb37cbf3d8fc7a767d9c88778cae5264fd4b1f557221222a6a5f5ea52d9a54f4b9c664e5d34e53257c1f32d742141b447db57a87fa84df62bb2b9b22cc0086d99cc7a4cc13272df1467197963be22380", 0x90}, {&(0x7f0000000440)="ff96ebe110643ddd5f9cb59ec01dde1d6a3d37c6dc5e76c706a5", 0x1a}, {&(0x7f0000000480)="0aaf6ecfb502e2d3c892c9dac47a901ffe531e72ca001ed86803d757aa575c4dcb1219fa7847c969eb7aae17095a50d9f8089087fb8a33098ad7dbb2cae27243c0eee13e6d99deb7f6c0b4dc29064875815e248265e701696ffede11d45cb7b281da4167bef649d7c0b3db2241100a101837a763855940255aca59", 0x7b}, {&(0x7f0000000500)="84863cf2b8b8ac651979551e50e60dc0b73d00a6901b446623e47ddddb29af70dd6a26d4aece2e1220bfe85f0e2830f38a8d95de06887aa7f38d848c64e7ea674382d6f5674546221c9167ddab1cc9d60674c00df7", 0x55}, {&(0x7f0000000580)="82db8f49eca574c281afadd6f74efd9175d60b64743c6e60f6e06bc5100db4250c1fda28", 0x24}, {&(0x7f00000005c0)="ef615d915f3992e192f33f1600d8499af0aa4263fe30f3263cf53c3cf9b41010635ead1e630036093eed60d04ed671f5a09b7a7971bbeeb811696321a104a3b046b87a67c7cbfa8ca7facbb2f26217544dc7b9da016ec73b5ad363f7ccddf32e516f933b4042c2e9be2ec4a7d43d19de8a62bb819b5bc4a6be9c9902692d27d85f232d96826b1b10b736e7556c8a7bee04b1163153a25f8bab2c0fe533da288e6fa63f4c22b2977dd9de5776ed1d519af9008433fac61d3e2552499b66d77f3e694eb5d81d807643581257", 0xcb}, {&(0x7f00000006c0)="bfd23645eb90c6fc93e29323cb926eb99ba39d47d62e37f58dfab6afb55de831dd3ba60f7ce779cacf4b7807f37394db00eac1c5f42c8b1b", 0x38}, {&(0x7f0000000700)="4f777e38cde97f20e41a23f6450ce134b8705e48d71a5eb63427f8dd862a78069eb068d71c8010973cfb74c330135e373033d168e411531821cfe1937152da9921cda0ff00a1584e07d65984310932528359417af9077377c9d26848d124c91e2d9cf6c1a6a16ebe716de659b30cc2079796c87e2ce7703ad82dcd9b96d40c6f288814b080368128391b36270a66a544c1c0be301f555e60487105129210f96a6322d09910032fd6e5279d70a5187f7e424e5555fff2ad52ab825f7561851387fc13fd7788198f487a66ec808005d0837d6c215bf0a1", 0xd6}, {&(0x7f0000000800)="81dd487ea9f9fb0c79e9e255c65b5bda487dbe5339f41e9b2d933812e04e191035509547f8e26b37f05281bc0bf4754f5bd2321396292163d403e220b851c2a3ba0f8b3c8c2ffdc6204d0a65a0f0642bf534ef87e64efae12efa547c91429246ead16c122da4d30e3c9746a453724af98d95f1a02577e6b8fcf65ce3cc91b9ab99359217139b26929a5a1ac394f71dba2cd0983cf860bf5b6996abd2b705cd6b90d1e790bc4baf6868e49ef022880cb4519f89894ee575d249291954", 0xbc}], 0x9, &(0x7f0000000980)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xcb0}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x575e}}], 0xd8}, 0x4000050)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000ac0)=0x100, 0x2) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000b00)={<r4=>r3}) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000b40)=[@sack_perm, @sack_perm, @mss={0x2, 0x1}, @window={0x3, 0x4, 0x5137}, @timestamp], 0x5)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b80)={'erspan0\x00', <r5=>r2, 0x20, 0x10, 0xf9, 0x4063, {{0x5, 0x4, 0x2, 0x22, 0x14, 0x66, 0x0, 0xb, 0x2f, 0x0, @private=0xa010100, @loopback}}}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r1, <r6=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r1}, 0x20) (async)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
sendfile(r6, r7, &(0x7f0000000cc0)=0x77, 0x6) (async)
ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000d40)={0x0, @l2={0x1f, 0x401, @none, 0xaa3, 0x1}, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x2, 0x1}}, @isdn={0x22, 0x3, 0x4, 0x0, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000d00)='geneve0\x00', 0x7, 0xa9b, 0xb8}) (async)
socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e00), r1)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r8, 0x800, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x20000001) (async)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000f80)={@vsock={0x28, 0x0, 0x2711, @local}, {&(0x7f0000000f00)=""/25, 0x19}, &(0x7f0000000f40)}, 0xa0) (async)
writev(r6, &(0x7f00000010c0)=[{&(0x7f0000001040)="19547b9625902fe35acc06cef60e74e3fb48d22587762179a2913d11afe02d6a18be446e75952d9a4c652f9fc302b87a7f751c228e333671868635524aa00339d02cf74c662a1e458f3e27a77b7b2c546bb14120d9a599c91ba73df76347010170ef", 0x62}], 0x1) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000011c0)={'gretap0\x00', &(0x7f0000001100)={'gretap0\x00', r5, 0x700, 0x7, 0xfffeffff, 0x7fff, {{0x25, 0x4, 0x0, 0xb, 0x94, 0x68, 0x0, 0x1, 0x2, 0x0, @multicast2, @private=0xa010101, {[@rr={0x7, 0x1b, 0x24, [@empty, @dev={0xac, 0x14, 0x14, 0x25}, @local, @loopback, @broadcast, @private=0xa010100]}, @generic={0x83, 0x10, "2f8c0b63018334d969c5b79ebc48"}, @timestamp_addr={0x44, 0x34, 0xca, 0x1, 0x4, [{@loopback}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x3}, {@local, 0x7}, {@broadcast}, {@multicast1, 0x8000}, {@rand_addr=0x64010100, 0x6}]}, @lsrr={0x83, 0x17, 0x8f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @local, @remote]}, @ssrr={0x89, 0x7, 0xbc, [@multicast1]}]}}}}}) (async)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000001200)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x4, 0x0, 0x0, 0xd, 0x9, 0x6}, &(0x7f0000001240)=0x20) (async)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000001280)={0x1, 0x2}) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
recvfrom$inet6(r4, &(0x7f00000012c0)=""/74, 0x4a, 0xb608223d0cfaefb9, &(0x7f0000001340)={0xa, 0x4e21, 0x5, @private0, 0xfffff931}, 0x1c)
ioctl$BTRFS_IOC_QGROUP_CREATE(r7, 0x4010942a, &(0x7f0000001380)={0x0, 0x2})
setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f00000013c0)=0xfe, 0x4) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "388f2c835517d683afb9b8ee62"}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "95dc771e1b"}]}, 0x40}, 0x1, 0x0, 0x0, 0x48d0}, 0x81)

118.173275ms ago: executing program 1 (id=4229):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) (async)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)

102.441031ms ago: executing program 5 (id=4230):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x1, 0x12, 0x7, 0x800, <r1=>0x0}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={<r2=>r1, 0x101}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x6, 0x4) (async)
bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @host}, 0x10) (async)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r2, 0x9, 0xcf, "ce9cf4e54e727abc3d13eedfbbdcc3a6629e401693cc141a01b9efbc0056068333a2e9ec4f677d9cb13f09fa40c2b598164122211d662704b5cb46eb91d31bd2285b2f2bed0c520d6f0d1bdb3432f9d409e29f6b054c0bcb073d99f7566f654f5af6b638b01938a99aa5cc0e4b7fdc551bd30f6b27763adc29181ac026c05763a3053cb0f2070c25c52e8fe56a9b60ab06727bea854a4f37063be3a9f4e464c5732a40f1aaf010145161f2938bfc77f2ab97520bce7ef96a3ae50e9b5298e5d6d7f40a8ebcbdde2649334267df6bbb"}, 0xd7) (async)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='xen_mmu_set_pmd\x00', r0, 0x0, 0x8}, 0x18)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000340)=0x10) (async)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000380)={0x1, 0x7ff, 0x2}) (async)
r4 = epoll_create(0x2)
ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000003c0)={{r0}, 0x8cd6, 0xf8, 0x67}) (async)
getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={<r5=>r2, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000540)=0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000580)={r5, 0x7fff, 0x1000, "9ded61045309c5af60ac4ece67cf4eb5273da612a88aede813d00c8a1442a558f8f9d094037ae991c06cf18398f2bda83aaff16dc8da04b930d6dede12d294e0e7f52d9c03dc224d875bb19a23f0166e8672fe90fe183cba20ef62194df75b97f8a2085b9c7bd71b2d5a6adbd846ab14946f86dd7ac90a5eb829159051b786e6c5ba01843bbbb92843206c5ca6b523ffebe1919a793bb72b7ce205c2de9d8f86064d9a5a1ac80cb7956d1607848b54080af16fed38b2d001f873fef5a120c398ea430668bab8b85abf41f0b806a165a1ee4a0bcbca141f554192d1762a0052127411b54c0cc0a27318e9937d1a79e16531b274f26e71245354b6780c0af16d238cb9fd83b55b024538e42fe6dfe29331d46194c4a3931f597c75c64f87568b4f0b2dc1dab592763d4f916cbdc91d3de51bae92e7d5269c07f8e771a74edfde4f7c56821ac9f705f1c682e34eec2eaec812e0ca367ea248289a9226b8d7bce86cddecc25986b550edd35998fdbf1905a617d4f8242eabe6ff92683794f4f306d2d5ebd22ae2b67afc65c54edbbfe09cf081266508f7b6a53e7293587298895f17e44fa604c4b92c621c8df75624d1311b837d4045f26cd4db358fd851ed9326a6a1efc846e142408dbfd6994828e487a304a6bbaa17308caba4a6617aee76a14a8398263310898837de83de341fe6609bf6293bbd3ce7db1deeff292d0733f66c5537d9152e6b52710e55f15518af568777afd0ba6550155693941f25ed4c1cc2550a5f69954c265fe0b7c28a2562d08979e23b7398354f476c1af9a39227af7d6e7860e0534e976aaa88d2c627d0f6a67e306fe937c0bd6f656e4ed60262264bb673e51d3f4452a8d4e8618d8825710fa984ff6ae3739d64bddfe3ac3f6471fea0e868fb9f183da66b83ebcf86b29b4182c7599b04e670aad344a461ad53c083e6aec369e41a042d9a242d7b63aef7e68ae2dfa51c00734d517ea6444d7f6929be8bd9ddc0ca870135a06ab09798a7ba1627cc4210eca1f9b6d567ebffaeca4d5d052bf666d059d0cc1003083012758c2b1433a06ec8b5051ae345bdd2ae6c66e990845586499e718a0507adb95b3c015ec42412c7ff6d4ae50c4a9275dc4840ca7e188a721eabd597834d26c752ed0a0c60d5297db4a268f2b12dec8a7874459b2f2f48343aa96830ff98131d738ce030e36bce5278a2eb212395dcb894f3835f7bb425443a06f65495542eb99594fbad4b3889b15f9dce1d9a37e9e413747d3c6b5fb4fc59b1edf52a9dadc97d498dac33cf3e213b20368ddd2a3aae6502179704e123920ad8372db692908f5c1cd364b0e5410c2c429ebfc0dd05384b1bd5d24d3b665a6ded47a6e97c655d532680feb6af0788a7c91a6a6c345fa49e6a7ca6e851aef98be906be05b026cc9b9f4b74c20e22ad0c0fcb6324829b918f2a59dcd219f7599b2ad192113a6a8e04caf0e429d676c25a24d4006256f440df02ddf0260b0654088c2d217f557376fd804ce786282fbbffc94f7cf9fd3b9c689d71a33393e6b206ec80ebd0e64cd3eb146b6ed6ec6b3010589767592d9f4714e0e21809f89a3aa4e9b0411278ae8c0e1c6b322f3619755a91998a73bb427ad557e9050cb4cdd6d8be7d85e0245d4bb49cee5f78def7ea4ca01d08efce2fd478fab8060c13228db8a5cbbe60a4520aa50b804807ed19e450793da67c8d94f3b6a7d24649ce25865ed51787204e652baa5bc459d1b71edaf8d1ab268a95bbcacf51c66867b24e20c64d359d553cbb1240dfed43008356956a35bc4a62665e798d1f85fa372cf23db139a9f0919fe64a8975b53cbc7835f8cde87b50395687e9f72e887bbd0796404a5c5a746b13ee8de89a1805bc681cf3f5014302886b5421414add52127c8e0014cf96607f022e4e12f5c986d6d302ae680c0664318db9fb3f52fdfbf22c73b5cf82e39c6e07e6fb83153ea73c1cc099a8efcfbd8ba4ee8bd54fe6e94bbaa937212f281dd79a829568e0644adb3632827841b02fb3cdafd5c0fa371d8ec1133293b4d11ca103eba261592b9c71db659b2fa4c6ee533c5ce7fe286bfcfc2c3154eb47ced3fbaa462987b1551d7fd28084232df3b1bf093278a027982fb886b4788be6c7d6c3375f38145cfdf938a6d48a41fcdb12c88fea21145877f1252416606da16373dcf3f6ba96608336e079381f8050f96acd96d831655e48027822d2a3e6148f64cc9fb4db10782c3f2bc5903e0964c6c6a9cbb88cf8644101576b61a7dcfcbf48b2af37f0c18dbfa060352a9b0fe032bae31a94bd786cd19b9fce2d9ed83a9f189e9b1cbdc52f3627d169eecddaa38346f36247c6fe610564b24371c825d5104e13fe1beb0b22366c127a76a80170ab221b1337eb32d98397ddc1e8396ef92c8116ffa09be92b680e0afaf1248a2b1b2b4a414a0082437135940b160985e0e5d86702c96b03695b9b3316a28be585d1418e3d251b8171b761d24ca85943a0b2d3d61c55e7158e87100eb0700019a8eeb6a4f30cd733cc630a0c5b338d2f0cbb3bb61a9a902c95a07ede3e0967daab47df0071e6ac6268a7cd0505ff96f497d81ab933c1828c29b81ab996fccb75913b19fa8869832cd6e194f17ae6568b3f021c0265ddf86ce5a84285ad00cbdd994622af1029c5104787f6cc5372dbd4b9d0c45ac9651d332da98e13d5c6fa87548bd96f268514eb4eabf32e68a939293418ee59e1f02f611766c2ccce3666c968d799b968205c36e87449e9a17b8a7897d12b24496149e1fb5f5a6ae06f5146755d5d0fcffbe0ede7275b3a7db0c1a66dc78932303dcd15c0eaae5155a5bef9549e717c568d9ebae953a655dd4dc3bb0da2a9dc11d28dfbe5bb929705ce219af3d065a186f116e24dac16d222e204b4eac58fb990966d315f69d4e671f66331f5fb0e78130298b898929dab0f92f4aea87e438a469b6e5eb78626a0858a22c3e8499724ecac61aa245971a06e0f88b13c67ff5059c17de02acf193ac60427536751caabed86f250e3d6ce669c0d6d6d400c2316a5cbbf25947e68700472f22ccd249e5a33fbca7c7c2f21b0e678ac0f16b957782301958d178dd7b9bea6b39df0fbc2b9126de894a218bd2d2e76126389b18a49f158e2e9f689d57e133c8a6bab52b446b807d9b6b397ff28987f488be68efcf92b8cc010230ff8c4294b8a6429b4bbec79f73b2e1b259df1c21ecb940aa3b170984298c0f1556521cc864f346730bdbc13fc05667f7c9953803e3d1ac674e6654121db424b5cb711c4476d2fd0150fd1049019b0a294fde0fc7b7b4417ce6210417e05011433c5b34e9b777980e90d80af621ce01518587349decdc376bb1fb379d4c1f031356821106e2830a0f30cf25c31f54a4334dc746d5334330ea308e5467eb388f162b40c7004e719b5200c95fd522d28cd61836d709b678a04e7ded11cb587f43596e9b8adb2ed3e4b2fb3e0e1a72d6b6eab7f529f1532f29f0cfe27970ad9ce3de59e6a2ef953abaaac619b72b6692971ec5628f1ee10443b6fad7eabd63b075f41abd4ee93069c16bffd227e40770ebb163d616e6375bf7d180d9cdda9585295ddf16c2729e8336ca45d1991f47881353a3f069c56fee6059255061d5cde01c6d9e77ac2d185b3782484b560210ec369a69735c185eedbf75a48400ed1a5da9b51e55385bb74cfe3894bb89ee038ee55ba89a3011157851c29c51e533d5e019ca7b05d426a79c194dc5da6a590b60f9d47078b04142313f52fad9c89ca6254b3181a4e6bd0852a2e1d1b1be7de364b1a8f0ec49f64b28f97f8ab53306cb0e4aef40209f8925f4fd39b0bca7d7e5fac4ea63657c735632aa64a7f0da25f88583b88e64557c66899446ab8ecad8a5abda40b4c3a779c6793b8cec3066632dcfda7da5d5b9be31add69dac9e0797553b73680f1924c9aa21c566e37212414cd8f9c93d0fc08220065bb3fd21f09c53dfb6b520b1fe23a8c71e5f6ed4e7273de6e0b0ab8524227c2a939bad90e0df7139198c5017ff90b5d6b41741db042203231d2626bc0804cea188fb247c2374900c1ff3942a77150507f7395f9e3fa37a02a44badc55295045beb6d9e6d91b58a3de7e36fb319c80853f367a419ec781d2016b5558ccd27244f3290500b12ca27a05e8b1f817cae6159df8912e5d99ede04a7ee0425c6017de3379a5795ab64c4dc5fd06674be7c556d60bf34f859e3f6e91e1b6c847c6f066031eb23ddc3e97a9cc8c18fd53988bf9773d4c4ffe6a61124c205918bc3e5eb51cb4c463c059945aa95f2a48cdf6036d1fc547abe6960169884d20389f443ad9ed4b0a4f19c952803b3b1be56f113a14a072b9666a2ae3937be109bc3a1935e5361e46926005dc9d505b6133a940536cfe18e73884e548fe72d24499f01200a8742a3f979cf0b92fed4810c3da23f50c67309d4e246b909c969ff0a56ad15984bc23d0af8ad873b8d66483c178ac27374b510be00435f95a6ab765b0be022133fd64ba30a1c0d5443ca8028a1a51c04e3b4e71450e83d27c1656ce047ed23fb6f826444acc3ed1db35050783446db79cfa5d3ec3cc98144ee96dae64aab66186eab26999f415554e0cd9e941cd5cea035c33cb4fc6a6a0ec5ce4a76668241eb52894586737dca1ac2ddb2e1eb720f1ed4d145f17932c0978089d61344060565341bad0122964f6adb72f847800d5a7657f38cb17f17852aabbc321603c357ad4580a2ba614f485a138862d4434d680c99d05e14df892e1d9442ab9bccf8d5b31d5d8e2c8b2fa380035f3c4d6e68bb51cfee26261bcb0bd49cb80180ccbfc245ac7a603bd58e9a98c07e8aa1088a45dcb6ab3101e21feb7e2c3e01dd504a06ed171052a1aedfb488af22fb9e5aac9608c7572816a72c2f207179e13c30a663bd8dded95337d5884937b4f997676cf22be298d20274503defb20efe15dad94b37553d44317de253bf3cc1f68df012a3ca0bc65f3076075e856b96131b5143fa0de2c61347c7c6821a6d50eddbe304f39bbaeb9c2b60024bcec2b0e1e8a7eceff2566f28dbacddf7ace760f05ad1b05b62c5f340955b168d2878e6ef7cc3ef03cab833175a85588221e37d4c075f9c72ff211a55a29107507d1c1919ee983938b9d7e6268a2a68ced8a396f7286b3d2fb7bf61d84c85eb363c14e552b641b2164a36808317b2b0e30f985e666871e0611c4cd810d6de83c7d246d11a5e42abd8a94e9b0457123fd9b073e2513c716570c6ce9583eaeff36fabb5d37c8a9f8aa71d4b6b50a1e5a2cf2e04f2762eee7ff73a2097b3cb99e0ef41a336cf40347cf53dfe1f93cab00b8bcb460a4b05a09d4ccffc65eb4474dd87fa5aa32d027e2225d3905769595c836ba24febceb4c07d48ddc2c9ea743004ee537fca3125c91700532e2f2038ff4d200f2f1339162f8356bfa82a5b55a52e22e633c2574af647d8ca1dfc8cdfe6b06b7df6078b0c42929f398de4e803c4ef6747f03de3b2999177d57866a0c9206b22234acefaf560a7481d8b1dd7afbcfaf05f6289aa3b2e609263d36c730ad2c54601bf0d2cd2c39c386e3dc332022f47db9ecbda647a2bd99db6acff82822626dddb6aa9b55dabaab87289acbfd3e0305d7df32f7e1e3547288e244cb20f1a837362fae210eaf34aec770b61816c6ce1876be6168342eea0b5a3a490d3994a3489bfc02dd7d7ca7a59bbd92f2185ea9b79b80957d7ab4fb77a63d05f179a243966272d564187af042afd2ac86e10858bb3dd1c2127ff6b342ad6bc9c1d1259b84e260869519"}, 0x1008)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) (async)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000015c0)={r2, 0x1000, 0x83, "a50475d9a01e4806d3d02e74535d7140922dc404c90720fa13cbfca4709c498de09d6c78d3d32c1049210db7c39e4e42cb7a2d240999e8cb3f9748db497e7c062e48bfb89d3685713f1ce116ffdcef8ae89f0c1c756e091451dc76ab169bf0c07e1b406aec8bec0f2a213898693e9e474984d96d4648058a026da4caf190104fa47d94"}, 0x8b) (async)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001680)={r2, 0x80000001}, 0x8)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000016c0))
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001700)={r5, 0x9, 0xed}, 0x8) (async, rerun: 64)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000018c0)={&(0x7f0000001740), 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xd0, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001940), r0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x54, r7, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffff000}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xb4}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001a80)={r1, 0x4b}, 0xc)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000001ac0)={r5, 0x3, 0xcf, "8ca1f34af84006f43c2502425a57d29ccf1eac40472911ba01b063962651a2cf7209e545cdbc29470986aaa0a5c155a2003b6ead22927747fd6ff490c8f2502eeb2f2f072968e20aadc5b7395c6ce9aed997631114251f0e4fd3e14c15197800042f60a6f0b74c5a8d45e81f6db2db453e1fcf96ffb2923d3009602391329b096a237f6c6820882b14545b772973ec8908e1b70825c498e7d7ea3a7b4dd986d24cede6f4b31002d462ff6463128cbfb1f5b3d2f76022345a5f907f3f0fb79f5a7eab4cbd2cd59a78fc75ca411d1247"}, 0xd7) (async)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001bc0)={r2, 0xfffb}, &(0x7f0000001c00)=0x8) (async)
ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000001c40)={{r6}, "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"}) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002cc0)={{r0}, &(0x7f0000002c40), &(0x7f0000002c80)=r0}, 0x20) (async)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002d00)={r1, 0x89, 0x2, [0xf, 0x5]}, 0xc)
getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000002d40), &(0x7f0000002d80)=0x8)

8.917716ms ago: executing program 2 (id=4231):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x20000)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x5, 0x0, &(0x7f0000000080)=0x39)

8.317071ms ago: executing program 1 (id=4232):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
connect$llc(r0, &(0x7f0000001500)={0x1a, 0xf, 0x7, 0x4c, 0x13, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)={<r1=>0xffffffffffffffff})
getsockopt$sock_int(r1, 0x1, 0x47, 0x0, &(0x7f0000002100))
r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000001480)=0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000014c0)={'ip_vti0\x00', 0x8001})
recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000040)=""/208, 0xd0}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000001280)=""/196, 0xc4}], 0x5, &(0x7f0000001380)=""/219, 0xdb}, 0x10003)

0s ago: executing program 2 (id=4233):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000001c0)={0x7, 0x1000, 0x2, 0x0, 0x0, [{{r2}, 0xfffffffffffffff4}, {{r0}, 0x6}]})
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@caif=@dbg={0x25, 0x0, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0)
r3 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0)

kernel console output (not intermixed with test programs):

z.1.2367'.
[  299.190579][T14313] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2367'.
[  299.335817][T14312] bridge0: port 4(vlan2) entered blocking state
[  299.342587][T14312] bridge0: port 4(vlan2) entered disabled state
[  299.351281][T14312] vlan2: entered allmulticast mode
[  299.357004][T14312] bridge0: entered allmulticast mode
[  299.382126][T14312] vlan2: left allmulticast mode
[  299.389554][T14330] xt_socket: unknown flags 0x50
[  299.395850][T14312] bridge0: left allmulticast mode
[  300.101264][T14360] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  300.259649][T14363] netlink: 'syz.4.2379': attribute type 21 has an invalid length.
[  300.274666][T14363] netlink: 'syz.4.2379': attribute type 22 has an invalid length.
[  300.309642][T14363] netlink: 'syz.4.2379': attribute type 23 has an invalid length.
[  300.317971][T14363] netlink: 'syz.4.2379': attribute type 25 has an invalid length.
[  300.330272][T14363] netlink: 'syz.4.2379': attribute type 26 has an invalid length.
[  300.650526][T14378] can: request_module (can-proto-3) failed.
[  300.862048][T14391] netlink: 'syz.0.2389': attribute type 2 has an invalid length.
[  300.871064][T14391] __nla_validate_parse: 8 callbacks suppressed
[  300.871082][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'.
[  300.889893][T14391] netlink: 'syz.0.2389': attribute type 2 has an invalid length.
[  300.907953][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'.
[  301.152796][T14408] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2392'.
[  301.292648][T14413] bridge0: port 1(ipvlan0) entered blocking state
[  301.316044][T14413] bridge0: port 1(ipvlan0) entered disabled state
[  301.332650][T14413] ipvlan0: entered allmulticast mode
[  301.343793][T14413] bridge0: entered allmulticast mode
[  301.361724][T14413] ipvlan0: left allmulticast mode
[  301.369084][T14413] bridge0: left allmulticast mode
[  301.569192][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2399'.
[  301.630870][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'.
[  301.987672][T14458] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2407'.
[  302.187687][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2411'.
[  302.342423][T14482] wlan0 speed is unknown, defaulting to 1000
[  302.369749][T14482] lo speed is unknown, defaulting to 1000
[  302.498480][T14487] wlan0 speed is unknown, defaulting to 1000
[  303.097094][T14502] netlink: 'syz.0.2420': attribute type 16 has an invalid length.
[  303.186344][T14502] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.201461][T14502] 8021q: adding VLAN 0 to HW filter on device team0
[  303.225371][T14502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  303.458532][T14487] lo speed is unknown, defaulting to 1000
[  303.854396][T14533] nbd: must specify at least one socket
[  303.885349][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  304.152445][T14543] xt_hashlimit: overflow, rate too high: 0
[  304.648885][T14561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.882027][T14579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2435'.
[  304.896001][T14579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2435'.
[  305.072765][T14589] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  305.321448][T14563] tipc: Resetting bearer <eth:syzkaller0>
[  305.411215][T14597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2442'.
[  305.666633][T14611] validate_nla: 1 callbacks suppressed
[  305.666654][T14611] netlink: 'syz.0.2445': attribute type 1 has an invalid length.
[  305.772346][T14617] netlink: 'syz.3.2448': attribute type 12 has an invalid length.
[  306.059717][T14626] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  306.120524][T14622] netlink: 'syz.4.2450': attribute type 10 has an invalid length.
[  306.211179][T14626] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  306.346921][T14636] __nla_validate_parse: 1 callbacks suppressed
[  306.346939][T14636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2453'.
[  306.584693][T14646] syzkaller0: entered promiscuous mode
[  306.595559][T14646] syzkaller0: entered allmulticast mode
[  306.649761][T14659] IPv6: NLM_F_CREATE should be specified when creating new route
[  306.897882][T14679] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  306.910036][T14679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.976072][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2464'.
[  307.179360][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057146c00: rx timeout, send abort
[  307.677783][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057146000: rx timeout, send abort
[  307.688835][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057146c00: abort rx timeout. Force session deactivation
[  308.186236][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057146000: abort rx timeout. Force session deactivation
[  309.017774][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'.
[  309.078905][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'.
[  309.113741][T14698] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2471'.
[  309.124793][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2468'.
[  309.193096][T14711] bond9: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  309.218552][T14711] bond9: entered promiscuous mode
[  309.230337][T14711] bond9: entered allmulticast mode
[  309.236668][T14711] 8021q: adding VLAN 0 to HW filter on device bond9
[  309.264432][T14714] xt_CT: No such helper "pptp"
[  309.886260][T14745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.302318][T14780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2487'.
[  310.494629][T14784] pim6reg1: entered promiscuous mode
[  310.529374][T14784] pim6reg1: entered allmulticast mode
[  310.563253][T14790] pimreg: entered allmulticast mode
[  310.647370][T14799] netlink: 'syz.3.2496': attribute type 1 has an invalid length.
[  310.666501][T14800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2496'.
[  310.692799][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'.
[  310.707651][T14803] erspan0: entered allmulticast mode
[  310.782866][T14800] 8021q: adding VLAN 0 to HW filter on device bond11
[  311.270184][T14850] sock: sock_set_timeout: `syz.1.2507' (pid 14850) tries to set negative timeout
[  311.272555][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2508'.
[  311.400554][T14861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2511'.
[  311.652132][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2519'.
[  311.688900][T14885] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2518'.
[  311.742959][T14885] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  311.763131][T14885] bond6 (unregistering): Released all slaves
[  311.867336][T14890] syzkaller0: entered promiscuous mode
[  311.873179][T14890] syzkaller0: entered allmulticast mode
[  312.034605][T14904] netlink: 'syz.3.2525': attribute type 1 has an invalid length.
[  312.056183][T14905] netlink: 'syz.3.2525': attribute type 1 has an invalid length.
[  312.104666][T14905] 8021q: adding VLAN 0 to HW filter on device bond12
[  312.135273][T14912] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2527'.
[  312.200770][T14914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2529'.
[  312.215534][T14914] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2529'.
[  312.224607][T14914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2529'.
[  312.256046][T14917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'.
[  312.280901][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2528'.
[  312.449045][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2532'.
[  312.626163][T14934] syzkaller1: entered promiscuous mode
[  312.644606][T14934] syzkaller1: entered allmulticast mode
[  313.173411][T14964] ipip0: entered promiscuous mode
[  313.356068][T14977] syzkaller0: entered promiscuous mode
[  313.364614][T14977] syzkaller0: entered allmulticast mode
[  313.715587][T15004] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  314.210755][T15042] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  314.341428][T15039] openvswitch: netlink: Key type 129 is out of range max 32
[  315.648427][T15134] ip6tnl4: entered promiscuous mode
[  315.763014][T15142] netlink: 'syz.0.2595': attribute type 21 has an invalid length.
[  315.875789][T15147] erspan0: entered allmulticast mode
[  316.036597][T15169] netlink: 'syz.4.2602': attribute type 2 has an invalid length.
[  316.053476][T15169] netlink: 'syz.4.2602': attribute type 2 has an invalid length.
[  316.463059][T15202] __nla_validate_parse: 14 callbacks suppressed
[  316.463078][T15202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2609'.
[  316.897318][T15230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.180245][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  317.188679][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  317.308540][T15249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2620'.
[  317.386279][T15249] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2620'.
[  317.462162][T15259] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2624'.
[  317.485113][T15259] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2624'.
[  317.517492][T15259] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  317.524664][T15259] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  317.551035][T15259] tipc: Resetting bearer <eth:syzkaller0>
[  317.585927][T15259] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2624'.
[  317.757473][T15280] tunl0: entered promiscuous mode
[  317.779037][T15282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.782545][T15280] netlink: 'syz.4.2632': attribute type 3 has an invalid length.
[  317.797082][T15280] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2632'.
[  317.832447][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2634'.
[  317.931361][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2635'.
[  318.001123][T15292] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  318.066586][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2638'.
[  318.167166][T15302] netlink: 'syz.4.2641': attribute type 29 has an invalid length.
[  318.178122][T15302] netlink: 'syz.4.2641': attribute type 29 has an invalid length.
[  318.427181][ T2142] tipc: Resetting bearer <eth:syzkaller0>
[  318.636666][T15331] wireguard1: entered promiscuous mode
[  318.642356][T15331] wireguard1: entered allmulticast mode
[  318.661534][T15331] team0: Refused to change device type
[  318.948598][T15344] block nbd2: server does not support multiple connections per device.
[  318.993864][T15344] block nbd2: shutting down sockets
[  319.176433][T15358] wlan0 speed is unknown, defaulting to 1000
[  319.228289][T15355] bond13 (unregistering): Released all slaves
[  319.293918][T15358] lo speed is unknown, defaulting to 1000
[  319.610902][T15379] netlink: 'syz.3.2663': attribute type 42 has an invalid length.
[  319.649308][T15379] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  320.553731][T15422] ieee802154 phy0 wpan0: encryption failed: -22
[  320.582638][T15422] ieee802154 phy0 wpan0: encryption failed: -22
[  321.378479][T15473] sctp: [Deprecated]: syz.4.2689 (pid 15473) Use of int in maxseg socket option.
[  321.378479][T15473] Use struct sctp_assoc_value instead
[  321.512057][T15479] __nla_validate_parse: 6 callbacks suppressed
[  321.512075][T15479] netlink: 412 bytes leftover after parsing attributes in process `syz.1.2691'.
[  321.580681][T15485] vlan6: entered promiscuous mode
[  321.603799][T15485] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2693'.
[  321.633440][T15487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2690'.
[  321.719021][T15494] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.736568][T15494] syzkaller0: entered promiscuous mode
[  321.750310][T15494] syzkaller0: entered allmulticast mode
[  321.761766][T15494] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  321.823604][T15494] tipc: Resetting bearer <eth:syzkaller0>
[  321.851527][T15493] tipc: Resetting bearer <eth:syzkaller0>
[  321.887504][T15493] tipc: Disabling bearer <eth:syzkaller0>
[  321.903436][T15504] lo: Caught tx_queue_len zero misconfig
[  322.011651][T15510] netlink: 'syz.4.2696': attribute type 4 has an invalid length.
[  322.112662][T15516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  322.204651][T15524] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2702'.
[  322.246661][T15527] netlink: 'syz.2.2703': attribute type 1 has an invalid length.
[  322.663484][T15546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2708'.
[  322.974187][T15574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2714'.
[  323.000726][T15574] bridge_slave_0: default FDB implementation only supports local addresses
[  323.045730][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2714'.
[  323.071062][T15577] bridge_slave_0: default FDB implementation only supports local addresses
[  323.113123][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'.
[  323.128503][T15582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2716'.
[  323.141957][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'.
[  323.460135][T15602] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[  323.534179][T15604] netlink: 'syz.2.2725': attribute type 1 has an invalid length.
[  323.617906][T15608] bond10: entered promiscuous mode
[  323.623499][T15608] 8021q: adding VLAN 0 to HW filter on device bond10
[  324.619561][T15655] netlink: 'syz.2.2735': attribute type 1 has an invalid length.
[  324.690901][ T3552] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.719138][ T3552] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.750839][ T3552] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.794961][ T3552] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.097154][ T3552] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  325.121236][ T3552] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.142779][ T3552] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  325.167645][ T3552] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.644604][T15698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  325.652999][T15698] IPv6: NLM_F_CREATE should be set when creating new route
[  325.660535][T15698] IPv6: NLM_F_CREATE should be set when creating new route
[  325.668855][T15698] IPv6: NLM_F_CREATE should be set when creating new route
[  325.716858][T15698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  325.768641][T15704] bond0: Error: Cannot enslave bond to itself.
[  325.813001][T15708] xt_CT: You must specify a L4 protocol and not use inversions on it
[  326.030892][T15719] xt_TCPMSS: Only works on TCP SYN packets
[  326.717799][T15762] nbd: must specify an index to disconnect
[  326.830253][T15772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.831544][T15767] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  326.951344][T15780] __nla_validate_parse: 14 callbacks suppressed
[  326.951365][T15780] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2773'.
[  327.270149][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2779'.
[  327.307629][T15798] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  327.348234][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2779'.
[  327.390763][T15799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2778'.
[  327.403616][T15798] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  328.259472][T15828] bond7 (unregistering): Released all slaves
[  328.598086][T15852] openvswitch: netlink: IP tunnel dst address not specified
[  328.789997][T15861] openvswitch: netlink: nsh attr 60 is out of range max 3
[  328.813096][T15861] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.940605][T15870] netlink: 'syz.2.2796': attribute type 1 has an invalid length.
[  328.999404][T15870] bond7: entered promiscuous mode
[  329.042977][T15870] 8021q: adding VLAN 0 to HW filter on device bond7
[  329.088317][T15870] syzkaller0: entered promiscuous mode
[  329.093842][T15870] syzkaller0: entered allmulticast mode
[  329.270267][T15870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2796'.
[  329.527385][T15904] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2802'.
[  329.809055][T15916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2805'.
[  330.344167][T15924] pim6reg: entered allmulticast mode
[  330.410590][T15930] pim6reg: left allmulticast mode
[  330.468052][T15928] wlan0 speed is unknown, defaulting to 1000
[  330.523360][T15928] lo speed is unknown, defaulting to 1000
[  331.018636][T15953] netlink: 'syz.2.2815': attribute type 3 has an invalid length.
[  331.070952][T15959] netlink: 'syz.3.2816': attribute type 11 has an invalid length.
[  331.081194][T15959] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2816'.
[  331.235782][T15967] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2819'.
[  331.710477][T15990] sit2: entered promiscuous mode
[  331.723717][T15990] sit2: entered allmulticast mode
[  331.789030][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2826'.
[  331.930707][T15996] bond12: option xmit_hash_policy: invalid value (64)
[  331.943457][T15996] bond12 (unregistering): Released all slaves
[  332.142292][T16009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2831'.
[  332.349125][T16016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.377682][T16019] netlink: 'syz.3.2836': attribute type 5 has an invalid length.
[  332.395262][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2834'.
[  332.482176][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2837'.
[  332.527406][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1)
[  332.541032][T16031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  332.621050][T16037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2840'.
[  332.659118][T16023] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2837'.
[  332.712072][T16039] netlink: 'syz.2.2841': attribute type 13 has an invalid length.
[  332.812056][T16039] tipc: Resetting bearer <eth:macvlan1>
[  333.050847][T16060] xt_limit: Overflow, try lower: 271964/0
[  333.123322][T16060] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2848'.
[  333.134049][T16060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2848'.
[  333.144606][T16060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2848'.
[  333.159058][T16071] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  333.173523][T16063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2849'.
[  333.601879][T16094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2857'.
[  333.617365][T16096] netlink: 'syz.1.2858': attribute type 1 has an invalid length.
[  333.629342][T16096] bond0: Caught tx_queue_len zero misconfig
[  333.772237][T16107] openvswitch: netlink: Duplicate key (type 1).
[  335.163253][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  335.186147][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  335.197762][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  335.225161][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  335.241507][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  336.868705][T16142] wlan0 speed is unknown, defaulting to 1000
[  336.905701][T16142] lo speed is unknown, defaulting to 1000
[  336.909279][T16162] wlan0 speed is unknown, defaulting to 1000
[  336.958866][T16175] netlink: 'syz.4.2874': attribute type 8 has an invalid length.
[  337.174418][T16181] __nla_validate_parse: 6 callbacks suppressed
[  337.174437][T16181] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2877'.
[  337.213504][T16180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2877'.
[  337.234399][T16185] netlink: 'syz.4.2878': attribute type 2 has an invalid length.
[  337.251618][T16180] lo: Caught tx_queue_len zero misconfig
[  337.327751][   T52] Bluetooth: hci5: command tx timeout
[  337.336290][T16162] lo speed is unknown, defaulting to 1000
[  337.421950][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2880'.
[  337.477989][T16198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2881'.
[  337.489866][T16198] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:21
[  337.497647][T16198] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000
[  337.831351][T16211] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2885'.
[  337.904327][T16211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.277435][T16228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2892'.
[  338.435968][T16232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2895'.
[  338.814452][T16257] delete_channel: no stack
[  338.979685][T16261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.002103][T16257] syzkaller0: entered promiscuous mode
[  339.009033][T16257] syzkaller0: entered allmulticast mode
[  339.046649][T16264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2901'.
[  339.087224][T16257] tipc: Resetting bearer <eth:syzkaller0>
[  339.102261][T16255] tipc: Resetting bearer <eth:syzkaller0>
[  339.129385][T16255] tipc: Disabling bearer <eth:syzkaller0>
[  339.151698][T16269] No such timeout policy "syz0"
[  339.159631][T16266] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  339.213162][T16270] team0: Mode changed to "loadbalance"
[  339.223287][T16162] chnl_net:caif_netlink_parms(): no params data found
[  339.358326][T16277] syzkaller1: entered promiscuous mode
[  339.363851][T16277] syzkaller1: entered allmulticast mode
[  339.405373][   T52] Bluetooth: hci5: command tx timeout
[  339.667446][T16306] netlink: 'syz.3.2912': attribute type 7 has an invalid length.
[  339.677823][T16162] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.693813][T16162] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.710705][T16162] bridge_slave_0: entered allmulticast mode
[  339.734257][T16162] bridge_slave_0: entered promiscuous mode
[  339.754271][T16162] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.800376][T16162] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.811057][T16162] bridge_slave_1: entered allmulticast mode
[  339.820003][T16162] bridge_slave_1: entered promiscuous mode
[  339.833449][T16309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2913'.
[  340.017267][T16317] sctp: [Deprecated]: syz.4.2917 (pid 16317) Use of int in max_burst socket option.
[  340.017267][T16317] Use struct sctp_assoc_value instead
[  340.037763][T16162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.052373][T16162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.165895][T16327] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2921'.
[  340.175161][T16330] xt_hashlimit: size too large, truncated to 1048576
[  340.254710][T16162] team0: Port device team_slave_0 added
[  340.661814][T16162] team0: Port device team_slave_1 added
[  340.852256][T16353] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  340.882358][T16162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.893329][T16162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  340.954939][T16162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.986823][T16365] xfrm2: entered allmulticast mode
[  340.997609][T16162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.025509][T16162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  341.099021][T16162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.329882][T16162] hsr_slave_0: entered promiscuous mode
[  341.348676][T16162] hsr_slave_1: entered promiscuous mode
[  341.359881][T16162] debugfs: 'hsr0' already exists in 'hsr'
[  341.370740][T16162] Cannot create hsr debugfs directory
[  341.419367][T16392] IPVS: set_ctl: invalid protocol: 98 100.1.1.2:20002
[  341.488815][   T52] Bluetooth: hci5: command tx timeout
[  342.070862][T16430] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.099295][T16430] syzkaller0: entered promiscuous mode
[  342.104822][T16430] syzkaller0: entered allmulticast mode
[  342.130791][T16430] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  342.160541][T16430] tipc: Resetting bearer <eth:syzkaller0>
[  342.167287][T16430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.178071][T16433] IPVS: Unknown mcast interface: vcan0
[  342.192579][T16429] tipc: Resetting bearer <eth:syzkaller0>
[  342.226992][T16429] tipc: Disabling bearer <eth:syzkaller0>
[  342.247900][T16162] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  342.260097][T16162] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  342.276562][T16162] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  342.305169][T16162] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  342.383235][T16447] __nla_validate_parse: 2 callbacks suppressed
[  342.383254][T16447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2949'.
[  342.567002][T16162] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.609385][T16162] 8021q: adding VLAN 0 to HW filter on device team0
[  342.635992][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.643207][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.691914][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.699164][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.714655][ T3552] nci: nci_rx_work: unknown MT 0x7
[  342.843228][T16476] vlan7: entered allmulticast mode
[  343.004450][T16162] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.223064][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2959'.
[  343.283307][T16499] bond8: option mode: unable to set because the bond device has slaves
[  343.325147][T16162] veth0_vlan: entered promiscuous mode
[  343.338148][T16162] veth1_vlan: entered promiscuous mode
[  343.369795][T16162] veth0_macvtap: entered promiscuous mode
[  343.380310][T16162] veth1_macvtap: entered promiscuous mode
[  343.398952][T16162] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.418033][T16162] batman_adv: batadv0: Interface activated: batadv_slave_1
[  343.442132][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.467159][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.553252][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.568696][   T52] Bluetooth: hci5: command tx timeout
[  343.579464][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.628545][T16511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2960'.
[  343.763785][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2963'.
[  343.824734][T16524] x_tables: duplicate underflow at hook 2
[  343.904650][ T2142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.930584][ T2142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.023805][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.049101][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.193461][T16541] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.203095][T16541] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  344.218355][T16541] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  344.238694][T16541] tipc: Resetting bearer <eth:syzkaller0>
[  344.412492][T16552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2971'.
[  345.046772][T16574] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2976'.
[  345.210799][T16584] veth1_to_bond: entered allmulticast mode
[  345.238888][T16584] veth1_to_bond: left allmulticast mode
[  345.413499][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  345.424384][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  345.435524][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  345.443735][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  345.453609][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  345.511019][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2984'.
[  345.538298][T16597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2983'.
[  345.579358][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2987'.
[  345.594734][T16610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2987'.
[  345.625482][T16613] sctp: [Deprecated]: syz.5.2988 (pid 16613) Use of int in maxseg socket option.
[  345.625482][T16613] Use struct sctp_assoc_value instead
[  345.696534][T16594] wlan0 speed is unknown, defaulting to 1000
[  345.747401][T16594] lo speed is unknown, defaulting to 1000
[  345.907014][T16616] veth0: entered promiscuous mode
[  346.357664][T16615] veth0: left promiscuous mode
[  346.987135][T16675] openvswitch: netlink: Key type 129 is out of range max 32
[  346.996906][T16677] veth1_to_bond: entered allmulticast mode
[  347.153386][T16677] bond0: (slave bond_slave_1): Releasing backup interface
[  347.195430][T16677] veth1_to_bond (unregistering): left allmulticast mode
[  347.469878][T16699] __nla_validate_parse: 6 callbacks suppressed
[  347.469897][T16699] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3011'.
[  347.487569][T16704] netlink: 'syz.2.3012': attribute type 1 has an invalid length.
[  347.496052][T16704] netlink: 'syz.2.3012': attribute type 1 has an invalid length.
[  347.509240][T16704] netlink: 'syz.2.3012': attribute type 1 has an invalid length.
[  347.520050][T16704] netlink: 'syz.2.3012': attribute type 1 has an invalid length.
[  347.551297][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3013'.
[  347.566325][   T52] Bluetooth: hci6: command tx timeout
[  347.712454][T16716] sctp: [Deprecated]: syz.2.3015 (pid 16716) Use of struct sctp_assoc_value in delayed_ack socket option.
[  347.712454][T16716] Use struct sctp_sack_info instead
[  347.738552][T16715] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  347.788249][T16594] chnl_net:caif_netlink_parms(): no params data found
[  348.107093][T16594] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.117134][T16594] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.124562][T16594] bridge_slave_0: entered allmulticast mode
[  348.133276][T16594] bridge_slave_0: entered promiscuous mode
[  348.144006][T16594] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.152099][T16594] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.163146][T16594] bridge_slave_1: entered allmulticast mode
[  348.170364][T16594] bridge_slave_1: entered promiscuous mode
[  348.201391][T16594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.214115][T16594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.244235][T16594] team0: Port device team_slave_0 added
[  348.252596][T16594] team0: Port device team_slave_1 added
[  348.279286][T16594] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.286635][T16594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  348.313192][T16594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.331396][T16594] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.339083][T16594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  348.366348][T16594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.408767][T16594] hsr_slave_0: entered promiscuous mode
[  348.415781][T16594] hsr_slave_1: entered promiscuous mode
[  348.421991][T16594] debugfs: 'hsr0' already exists in 'hsr'
[  348.428353][T16594] Cannot create hsr debugfs directory
[  348.556142][T16594] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  348.568289][T16594] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.640658][T16594] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  348.651189][T16594] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.724282][T16594] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  348.736367][T16594] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.806952][T16594] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode
[  348.840032][T16594] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  348.851200][T16594] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.979371][T16594] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  348.990482][T16594] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  349.000252][T16594] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  349.010248][T16594] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  349.079923][T16594] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.102313][T16594] 8021q: adding VLAN 0 to HW filter on device team0
[  349.116313][T12749] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.123445][T12749] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.141189][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.148589][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.327200][T16594] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.513552][T16594] veth0_vlan: entered promiscuous mode
[  349.528492][T16594] veth1_vlan: entered promiscuous mode
[  349.561000][T16594] veth0_macvtap: entered promiscuous mode
[  349.571577][T16594] veth1_macvtap: entered promiscuous mode
[  349.591899][T16594] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.608311][T16594] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.622617][ T1013] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.631876][ T1013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.643552][ T1013] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.653040][   T52] Bluetooth: hci6: command tx timeout
[  349.659987][ T1013] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.736442][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.746689][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.778111][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.786539][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.725987][   T52] Bluetooth: hci6: command tx timeout
[  353.805936][   T52] Bluetooth: hci6: command tx timeout
[  378.613408][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  395.931713][T16770] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.3022'.
[  395.969210][T16770] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  395.979743][T16770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.100316][T16777] nbd: socks must be embedded in a SOCK_ITEM attr
[  396.545481][T16796] syzkaller0: entered promiscuous mode
[  396.550996][T16796] syzkaller0: entered allmulticast mode
[  396.579026][T16796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.677609][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  396.688713][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  396.698514][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  396.711160][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  396.721262][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  396.793216][T16820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3037'.
[  396.832548][T16806] wlan0 speed is unknown, defaulting to 1000
[  396.852584][T16820] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3037'.
[  396.868437][T16806] lo speed is unknown, defaulting to 1000
[  396.936533][T16827] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3037'.
[  397.358111][T16793] tipc: Resetting bearer <eth:syzkaller0>
[  397.392651][T16793] tipc: Disabling bearer <eth:syzkaller0>
[  397.432916][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3042'.
[  398.042761][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3053'.
[  398.058671][T16878] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.128327][T16806] chnl_net:caif_netlink_parms(): no params data found
[  398.363996][T16883] wlan0 speed is unknown, defaulting to 1000
[  398.403804][T16898] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3057'.
[  398.417130][T16891] wlan0 speed is unknown, defaulting to 1000
[  398.423213][T16883] lo speed is unknown, defaulting to 1000
[  398.463995][T16898] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3057'.
[  398.477440][T16806] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.488986][T16806] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.501723][T16806] bridge_slave_0: entered allmulticast mode
[  398.510626][T16806] bridge_slave_0: entered promiscuous mode
[  398.523983][T16900] IPVS: length: 139 != 8
[  398.557104][T16806] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.565075][T16806] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.574350][T16806] bridge_slave_1: entered allmulticast mode
[  398.594550][T16806] bridge_slave_1: entered promiscuous mode
[  398.776880][   T52] Bluetooth: hci3: command tx timeout
[  398.868164][T16806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.880154][T16891] lo speed is unknown, defaulting to 1000
[  398.893536][T16806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.928890][T16907] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3060'.
[  399.012378][T16909] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3061'.
[  399.111668][T16806] team0: Port device team_slave_0 added
[  399.129527][T16806] team0: Port device team_slave_1 added
[  399.223278][T16806] batman_adv: batadv0: Adding interface: batadv_slave_0
[  399.245523][T16806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  399.284553][T16806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.333923][T16806] batman_adv: batadv0: Adding interface: batadv_slave_1
[  399.354106][T16806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  399.380386][T16806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.566956][T16806] hsr_slave_0: entered promiscuous mode
[  399.581243][T16806] hsr_slave_1: entered promiscuous mode
[  399.597103][T16806] debugfs: 'hsr0' already exists in 'hsr'
[  399.610354][T16806] Cannot create hsr debugfs directory
[  400.640747][T16936] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.772105][T16936] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.849548][   T52] Bluetooth: hci3: command tx timeout
[  401.003935][T16806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.044120][T16806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.056893][T16806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  401.080052][T16806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  401.116018][T16942] tunl0: Caught tx_queue_len zero misconfig
[  401.177959][T16944] bridge1: entered promiscuous mode
[  401.183372][T16944] bridge1: entered allmulticast mode
[  401.193556][T16944] team0: Port device bridge1 added
[  401.199554][T16946] bridge0: port 3(team0) entered blocking state
[  401.207412][T16946] bridge0: port 3(team0) entered disabled state
[  401.213882][T16946] team0: entered allmulticast mode
[  401.220087][T16946] team_slave_0: entered allmulticast mode
[  401.227404][T16946] team_slave_1: entered allmulticast mode
[  401.237733][T16946] team0: entered promiscuous mode
[  401.242798][T16946] team_slave_0: entered promiscuous mode
[  401.252441][T16946] team_slave_1: entered promiscuous mode
[  401.261601][T16946] bridge0: port 3(team0) entered blocking state
[  401.268080][T16946] bridge0: port 3(team0) entered forwarding state
[  401.362815][T16806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.373631][T16806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.385861][T16806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  401.397036][T16806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  401.419595][T16945] syzkaller1: entered promiscuous mode
[  401.425309][T16945] syzkaller1: entered allmulticast mode
[  401.479357][T16806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.490948][T16806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.503569][T16806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  401.514090][T16806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  401.583114][T16806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.595855][T16806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.607143][T16806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  401.617801][T16806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  401.648471][T16957] netlink: 'syz.1.3077': attribute type 1 has an invalid length.
[  401.694578][T16957] bond13: (slave xfrm2): The slave device specified does not support setting the MAC address
[  401.705716][T16957] bond13: (slave xfrm2): Setting fail_over_mac to active for active-backup mode
[  401.718918][T16957] bond13: (slave xfrm2): making interface the new active one
[  401.727511][T16957] bond13: (slave xfrm2): Enslaving as an active interface with an up link
[  401.739072][T16957] __nla_validate_parse: 1 callbacks suppressed
[  401.739088][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3077'.
[  401.756300][T16960] netlink: 'syz.4.3078': attribute type 29 has an invalid length.
[  401.783001][T16957] bond13 (unregistering): (slave xfrm2): Releasing backup interface
[  401.821159][T16957] bond13 (unregistering): Released all slaves
[  401.965823][T16806] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  401.991491][T16806] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  402.033681][T16806] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  402.049851][T16806] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  402.060199][T16976] netlink: 'syz.1.3083': attribute type 10 has an invalid length.
[  402.068701][T16976] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3083'.
[  402.488599][T16806] 8021q: adding VLAN 0 to HW filter on device bond0
[  402.535343][T16806] 8021q: adding VLAN 0 to HW filter on device team0
[  402.571829][T12749] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.579051][T12749] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.632714][T12747] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.639936][T12747] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.747868][T17013] syzkaller0: entered promiscuous mode
[  402.753488][T17013] syzkaller0: entered allmulticast mode
[  402.856090][T17013] geneve2: entered promiscuous mode
[  402.864371][T12747] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0
[  402.908981][T17027] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3094'.
[  402.921120][T17030] netlink: 4296 bytes leftover after parsing attributes in process `syz.5.3096'.
[  402.932196][   T52] Bluetooth: hci3: command tx timeout
[  402.954496][T12747] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0
[  402.996460][T12747] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0
[  403.042632][T12747] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0
[  403.128855][T17040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3098'.
[  403.147342][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3099'.
[  403.284612][T17031] syzkaller1: entered promiscuous mode
[  403.293530][T17031] syzkaller1: entered allmulticast mode
[  403.556471][T17057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3103'.
[  403.595038][T16806] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.631937][T17063] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3104'.
[  403.697780][T17062] netlink: 'syz.3.3105': attribute type 1 has an invalid length.
[  403.799103][T17067] veth5: entered promiscuous mode
[  403.933938][T16806] veth0_vlan: entered promiscuous mode
[  403.953807][T17077] netlink: 'syz.1.3109': attribute type 32 has an invalid length.
[  403.962824][T16806] veth1_vlan: entered promiscuous mode
[  404.017633][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3109'.
[  404.066344][T17077] bond13: option coupled_control: invalid value (52)
[  404.075551][T17077] bond13 (unregistering): Released all slaves
[  404.079512][T17085] netlink: 'syz.3.3112': attribute type 1 has an invalid length.
[  404.099675][T17085] netlink: 'syz.3.3112': attribute type 11 has an invalid length.
[  404.112765][T17085] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3112'.
[  404.137145][T16806] veth0_macvtap: entered promiscuous mode
[  404.151094][T16806] veth1_macvtap: entered promiscuous mode
[  404.214103][T16806] batman_adv: batadv0: Interface activated: batadv_slave_0
[  404.258498][T16806] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.307536][T12747] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.333625][T17096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  404.348634][T17095] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  404.362720][T12747] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.373994][T17098] tipc: Resetting bearer <eth:syzkaller0>
[  404.380023][T17090] Cannot find set identified by id 0 to match
[  404.397903][T12747] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.409177][T12747] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.518052][T17098] tipc: Disabling bearer <eth:syzkaller0>
[  404.571073][T17106] netlink: 'syz.4.3117': attribute type 1 has an invalid length.
[  404.642664][T17107] veth3: entered promiscuous mode
[  404.721916][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.736563][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.803536][T12747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.830514][T12747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.961674][T17124] netlink: 'syz.5.3120': attribute type 12 has an invalid length.
[  404.969690][T17124] netlink: 'syz.5.3120': attribute type 11 has an invalid length.
[  405.005034][   T52] Bluetooth: hci3: command tx timeout
[  405.423223][T17146] xt_TCPMSS: Only works on TCP SYN packets
[  405.609195][T17151] macvlan2: entered promiscuous mode
[  405.672558][T17152] macvlan3: entered promiscuous mode
[  405.812672][T17158] IPv6: NLM_F_CREATE should be specified when creating new route
[  405.881510][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  405.901289][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  405.913326][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  405.922556][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  405.931905][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  406.014671][T17160] wlan0 speed is unknown, defaulting to 1000
[  406.049827][T17160] lo speed is unknown, defaulting to 1000
[  406.133164][T17166] openvswitch: netlink: Tunnel attr 148 out of range max 16
[  406.467885][T17185] Cannot find add_set index 0 as target
[  407.082061][T17210] __nla_validate_parse: 10 callbacks suppressed
[  407.082081][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3150'.
[  407.102996][T17210] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3150'.
[  407.166312][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3150'.
[  407.210566][T17210] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3150'.
[  407.355737][T17218] netlink: 'syz.5.3153': attribute type 28 has an invalid length.
[  407.363810][T17218] netlink: 'syz.5.3153': attribute type 3 has an invalid length.
[  407.388266][T17218] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3153'.
[  407.479295][T17224] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3154'.
[  407.628008][T17230] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3154'.
[  407.802329][T17160] chnl_net:caif_netlink_parms(): no params data found
[  407.966016][   T52] Bluetooth: hci2: command tx timeout
[  408.199221][T17160] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.229528][T17160] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.237603][T17160] bridge_slave_0: entered allmulticast mode
[  408.255166][T17160] bridge_slave_0: entered promiscuous mode
[  408.262053][T17252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3162'.
[  408.264043][T17160] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.282014][T17160] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.293238][T17160] bridge_slave_1: entered allmulticast mode
[  408.304280][T17160] bridge_slave_1: entered promiscuous mode
[  408.311841][   T61] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  408.334394][   T61] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  408.497663][   T61] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  408.521169][ T1013] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  408.536535][T17160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  408.559013][T17160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  408.667835][T17160] team0: Port device team_slave_0 added
[  408.688968][T17160] team0: Port device team_slave_1 added
[  408.808691][T17160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  408.824176][T17160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  408.853846][T17160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  408.888566][T17160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  408.915375][T17160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.014747][T17160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  409.184028][T17274] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3170'.
[  409.280351][T17160] hsr_slave_0: entered promiscuous mode
[  409.293897][T17277] atomic_op ffff8880296c2198 conn xmit_atomic 0000000000000000
[  409.303222][T17160] hsr_slave_1: entered promiscuous mode
[  409.318734][T17160] debugfs: 'hsr0' already exists in 'hsr'
[  409.337556][T17160] Cannot create hsr debugfs directory
[  409.475639][T17279] netlink: 'syz.5.3172': attribute type 10 has an invalid length.
[  409.506702][T17279] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  409.523693][T17279] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3172'.
[  409.968550][T17290] openvswitch: netlink: Missing key (keys=40, expected=80)
[  410.046756][   T52] Bluetooth: hci2: command tx timeout
[  410.172948][T17296] netlink: 'syz.4.3178': attribute type 1 has an invalid length.
[  410.190817][T17296] netlink: 'syz.4.3178': attribute type 39 has an invalid length.
[  410.374577][T17304] netlink: 'syz.2.3179': attribute type 12 has an invalid length.
[  410.460894][T17160] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  410.481789][T17160] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  410.524720][T17160] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  410.558184][T17160] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  410.768940][T17330] veth0_macvtap: left promiscuous mode
[  410.771438][T17332] netlink: 'syz.1.3188': attribute type 21 has an invalid length.
[  410.784427][T17332] IPv6: NLM_F_CREATE should be specified when creating new route
[  410.793459][T17332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  410.800771][T17332] IPv6: NLM_F_CREATE should be set when creating new route
[  410.808053][T17332] IPv6: NLM_F_CREATE should be set when creating new route
[  410.815333][T17332] IPv6: NLM_F_CREATE should be set when creating new route
[  410.895475][T17336] openvswitch: netlink: Duplicate or invalid key (type 0).
[  410.897389][T17160] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.904002][T17336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.925256][T17337] openvswitch: netlink: Duplicate or invalid key (type 0).
[  410.932693][T17337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.001980][T17160] 8021q: adding VLAN 0 to HW filter on device team0
[  411.021425][T17339] netlink: 'syz.4.3191': attribute type 1 has an invalid length.
[  411.036116][ T2142] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.043325][ T2142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  411.054036][ T2142] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.061265][ T2142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  411.071523][T17339] netlink: 'syz.4.3191': attribute type 2 has an invalid length.
[  411.172345][T17160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  411.268860][T17348] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  411.323113][T17355] syzkaller0: entered promiscuous mode
[  411.346758][T17355] syzkaller0: entered allmulticast mode
[  411.383312][T17355] syzkaller1: entered promiscuous mode
[  411.401244][T17355] syzkaller1: entered allmulticast mode
[  411.904141][T17160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.920686][T17384] netlink: 'syz.1.3202': attribute type 11 has an invalid length.
[  412.040294][T17160] veth0_vlan: entered promiscuous mode
[  412.125030][   T52] Bluetooth: hci2: command tx timeout
[  412.233025][T17160] veth1_vlan: entered promiscuous mode
[  412.339372][T17160] veth0_macvtap: entered promiscuous mode
[  412.400419][T17160] veth1_macvtap: entered promiscuous mode
[  412.441606][T17160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  412.500070][T17160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  412.529481][T17422] dvmrp0: entered allmulticast mode
[  412.547748][T12749] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.570415][T12749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.577708][T17426] validate_nla: 2 callbacks suppressed
[  412.577727][T17426] netlink: 'syz.5.3214': attribute type 1 has an invalid length.
[  412.596330][T17427] __nla_validate_parse: 5 callbacks suppressed
[  412.596348][T17427] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3214'.
[  412.651080][T12749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.668799][T17426] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  412.678558][T12749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.727118][T17433] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3216'.
[  412.838629][T12748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.848173][T12748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.969393][T12749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.979416][T12749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  413.411907][T17472] IPVS: length: 37 != 24
[  413.503051][T17479] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3231'.
[  413.518360][T17480] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3231'.
[  413.580639][T17482] netlink: 'syz.3.3232': attribute type 39 has an invalid length.
[  413.616996][T17484] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3233'.
[  414.013512][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3238'.
[  414.205281][   T52] Bluetooth: hci2: command tx timeout
[  414.382874][T17507] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3242'.
[  414.416266][T17510] openvswitch: netlink: Message has 536 unknown bytes.
[  414.431432][T17510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.527917][T17513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3243'.
[  414.640485][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  414.669178][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  414.689837][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  414.707769][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  414.731787][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  416.744132][T17516] wlan0 speed is unknown, defaulting to 1000
[  416.772486][T17516] lo speed is unknown, defaulting to 1000
[  416.854690][   T52] Bluetooth: hci0: command tx timeout
[  417.152003][T17575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3255'.
[  417.186781][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3255'.
[  417.197855][T17580] openvswitch: netlink: Duplicate or invalid key (type 0).
[  417.205147][T17580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.363613][T17584] syzkaller0: entered promiscuous mode
[  417.376842][T17584] syzkaller0: entered allmulticast mode
[  417.938725][T17604] __nla_validate_parse: 63 callbacks suppressed
[  417.938744][T17604] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3266'.
[  417.954530][T17604] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3266'.
[  418.152525][T17516] chnl_net:caif_netlink_parms(): no params data found
[  418.338616][T17625] syzkaller0: entered promiscuous mode
[  418.344123][T17625] syzkaller0: entered allmulticast mode
[  418.356754][T17516] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.359688][T17625] netlink: 'syz.3.3275': attribute type 1 has an invalid length.
[  418.372918][T17516] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.374979][T17625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3275'.
[  418.384714][T17516] bridge_slave_0: entered allmulticast mode
[  418.398528][T17516] bridge_slave_0: entered promiscuous mode
[  418.408160][T17516] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.417044][T17516] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.426324][T17516] bridge_slave_1: entered allmulticast mode
[  418.440831][T17516] bridge_slave_1: entered promiscuous mode
[  418.506749][T17516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.521908][T17516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.647869][T17516] team0: Port device team_slave_0 added
[  418.667525][T17516] team0: Port device team_slave_1 added
[  418.781343][T17516] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.788903][T17516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.822002][T17516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.851461][T17647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3279'.
[  418.855018][T17516] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.886336][T17516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.922322][T17650] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3283'.
[  418.932782][   T52] Bluetooth: hci0: command tx timeout
[  418.946486][T17516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.107306][T17516] hsr_slave_0: entered promiscuous mode
[  419.113925][T17516] hsr_slave_1: entered promiscuous mode
[  419.121398][T17516] debugfs: 'hsr0' already exists in 'hsr'
[  419.128201][T17516] Cannot create hsr debugfs directory
[  419.607471][T17516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  419.621901][T17516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.637445][T17516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  419.831636][T17706] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3301'.
[  419.859972][T17516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  419.877968][T17516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.894682][T17516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  420.050735][T17516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.071251][T17516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.097569][T17516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  420.192945][T17720] netlink: 'syz.3.3306': attribute type 2 has an invalid length.
[  420.284116][T17516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.299783][T17516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.310880][T17516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  420.359427][T17742] netlink: 'syz.2.3310': attribute type 24 has an invalid length.
[  420.464057][T17745] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3309'.
[  420.481820][T17749] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3309'.
[  420.619918][T17751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3312'.
[  420.640853][T17516] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  420.660567][T17516] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  420.672609][T17762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3312'.
[  420.726312][T17516] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  420.736703][T17516] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  420.767072][T17762] tipc: Started in network mode
[  420.772704][T17762] tipc: Node identity 826947eb266d, cluster identity 4711
[  420.781100][T17762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.796078][T17751] syzkaller0: entered promiscuous mode
[  420.801749][T17751] syzkaller0: entered allmulticast mode
[  420.810551][T17751] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  420.860717][T17751] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) !
[  420.875768][T17751] tipc: Resetting bearer <eth:syzkaller0>
[  420.892123][T17750] tipc: Resetting bearer <eth:syzkaller0>
[  420.909198][T17750] tipc: Disabling bearer <eth:syzkaller0>
[  420.942340][T17775] netlink: 'syz.5.3318': attribute type 4 has an invalid length.
[  420.983803][   T24] IPVS: starting estimator thread 0...
[  420.993183][T17775] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  421.006279][ T5837] Bluetooth: hci0: command tx timeout
[  421.114978][T17779] IPVS: using max 27 ests per chain, 64800 per kthread
[  421.130128][T17516] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.199150][T17516] 8021q: adding VLAN 0 to HW filter on device team0
[  421.237161][ T2142] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.244345][ T2142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.281051][ T2142] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.288261][ T2142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.333968][T17800] ieee802154 phy0 wpan0: encryption failed: -22
[  421.702913][ T5915] IPVS: starting estimator thread 0...
[  421.747609][T17516] 8021q: adding VLAN 0 to HW filter on device batadv0
[  421.808377][T17822] IPVS: using max 35 ests per chain, 84000 per kthread
[  421.973695][T17835] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.003232][T17835] bond0: (slave rose0): Enslaving as an active interface with an up link
[  422.023747][T17516] veth0_vlan: entered promiscuous mode
[  422.069109][T17516] veth1_vlan: entered promiscuous mode
[  422.294167][T17848] xfrm1: entered promiscuous mode
[  422.301390][T17848] xfrm1: entered allmulticast mode
[  422.330151][T17516] veth0_macvtap: entered promiscuous mode
[  423.088252][ T5837] Bluetooth: hci0: command 0x0419 tx timeout
[  424.332306][T17516] veth1_macvtap: entered promiscuous mode
[  424.411144][T17516] batman_adv: batadv0: Interface activated: batadv_slave_0
[  424.448661][T17516] batman_adv: batadv0: Interface activated: batadv_slave_1
[  424.467428][T17892] __nla_validate_parse: 12 callbacks suppressed
[  424.467449][T17892] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3343'.
[  424.517093][ T1013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.542943][ T1013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.573033][ T1013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.625032][ T3503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  424.798729][T17899] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3344'.
[  424.831952][T17899] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3344'.
[  424.953495][T17918] bond1: invalid ARP target 0.0.0.0 specified for addition
[  424.969522][T17918] bond1: option arp_ip_target: invalid value (0)
[  424.988254][T17918] bond1 (unregistering): Released all slaves
[  425.054318][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.081543][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.148751][ T2142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.157951][ T2142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.175451][ T5837] Bluetooth: hci0: command 0x0419 tx timeout
[  425.309115][T17940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3352'.
[  425.353987][T17940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3352'.
[  425.376957][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3351'.
[  425.598194][T17947] nbd2: detected capacity change from 0 to 127
[  425.607731][ T5837] block nbd2: Receive control failed (result -32)
[  425.636543][T17955] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3356'.
[  425.908843][T17972] delete_channel: no stack
[  426.343647][T18000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3364'.
[  426.397509][T18004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3365'.
[  426.441645][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3364'.
[  426.787220][T18016] ieee802154 phy0 wpan0: encryption failed: -22
[  427.389006][T18057] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  427.570607][T18069] Bluetooth: hci0: Opcode 0x080f failed: -4
[  427.628543][T18068] netlink: 'syz.4.3382': attribute type 10 has an invalid length.
[  427.697717][T18068] 8021q: adding VLAN 0 to HW filter on device team0
[  427.711338][T18068] bond0: (slave team0): Enslaving as an active interface with an up link
[  428.019604][T18105] netlink: 'syz.3.3394': attribute type 12 has an invalid length.
[  428.123972][T18105] bond1: option primary_reselect: invalid value (255)
[  428.153298][T18105] bond1 (unregistering): Released all slaves
[  428.514690][T18138] netlink: 'syz.5.3403': attribute type 2 has an invalid length.
[  428.813256][T18169] netlink: 'syz.3.3404': attribute type 1 has an invalid length.
[  428.951508][T18176] syzkaller0: entered promiscuous mode
[  428.957331][T18176] syzkaller0: entered allmulticast mode
[  428.990390][T18181] Bluetooth: MGMT ver 1.23
[  429.569934][ T5837] Bluetooth: hci0: command 0x0419 tx timeout
[  429.670811][T18198] __nla_validate_parse: 13 callbacks suppressed
[  429.670829][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3415'.
[  430.597213][T18202] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3416'.
[  430.991158][T18205] netlink: 'syz.2.3417': attribute type 11 has an invalid length.
[  431.030358][T18206] netlink: 'syz.5.3418': attribute type 26 has an invalid length.
[  431.273007][T18215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3422'.
[  431.449781][T18237] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  432.728220][T18258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3434'.
[  432.820206][T18258] bond2: entered promiscuous mode
[  432.830005][T18258] 8021q: adding VLAN 0 to HW filter on device bond2
[  432.841336][T18263] netlink: 'syz.1.3437': attribute type 21 has an invalid length.
[  432.852303][T18263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'.
[  432.867366][T18268] netlink: 'syz.5.3436': attribute type 3 has an invalid length.
[  432.870854][T18263] netlink: 'syz.1.3437': attribute type 21 has an invalid length.
[  432.885830][T18263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'.
[  432.904128][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  432.932122][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  432.997661][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  433.029079][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  433.069306][T18270] netlink: 'syz.4.3438': attribute type 10 has an invalid length.
[  433.098552][T18270] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.117021][T18270] bridge_slave_1: left allmulticast mode
[  433.123042][T18270] bridge_slave_1: left promiscuous mode
[  433.129936][T18270] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.151438][T18270] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  433.318344][T18304] siw: device registration error -23
[  433.420085][T18312] netlink: 'syz.4.3445': attribute type 39 has an invalid length.
[  433.718553][T18327] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3450'.
[  433.850878][T18335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3455'.
[  433.952068][T18339] openvswitch: netlink: IP tunnel dst address not specified
[  434.053690][T18348] netlink: 'syz.4.3458': attribute type 13 has an invalid length.
[  434.084237][T18348] netlink: 'syz.4.3458': attribute type 17 has an invalid length.
[  434.095101][T18350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3461'.
[  434.154878][T18353] netlink: 'syz.5.3462': attribute type 10 has an invalid length.
[  434.157231][T18348] netlink: 'syz.4.3458': attribute type 27 has an invalid length.
[  434.622727][T18371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3468'.
[  434.665887][T18371] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  434.679107][T18371] batman_adv: batadv0: Removing interface: batadv_slave_0
[  434.697957][T18371] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  434.705588][T18371] batman_adv: batadv0: Removing interface: batadv_slave_1
[  434.781770][T18379] __nla_validate_parse: 1 callbacks suppressed
[  434.781789][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3471'.
[  434.799219][T18384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3473'.
[  434.831252][T18384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3473'.
[  434.844447][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3471'.
[  434.861995][ T5915] IPVS: starting estimator thread 0...
[  434.871910][T18384] IPVS: sh: SCTP 127.0.0.1:0 - no destination available
[  434.973382][T18390] IPVS: using max 29 ests per chain, 69600 per kthread
[  435.030243][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3476'.
[  435.030919][T18398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3476'.
[  435.049224][T18399] x_tables: duplicate underflow at hook 1
[  435.229306][T18406] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3481'.
[  435.271078][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3484'.
[  435.413434][T18417] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  435.437347][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3484'.
[  435.667659][T18437] wlan0: mtu less than device minimum
[  435.680547][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3492'.
[  435.981952][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  436.001307][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  436.018816][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  436.029327][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  436.112603][T18461] IPv6: NLM_F_CREATE should be specified when creating new route
[  436.332812][T18476] sctp: [Deprecated]: syz.1.3504 (pid 18476) Use of int in maxseg socket option.
[  436.332812][T18476] Use struct sctp_assoc_value instead
[  436.472795][T18483] netlink: 'syz.5.3506': attribute type 10 has an invalid length.
[  436.521808][T18483] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  436.709579][T18497] bond0: entered allmulticast mode
[  436.714760][T18497] bond_slave_0: entered allmulticast mode
[  436.734371][T18497] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode
[  436.760246][T18497] sit0: entered promiscuous mode
[  436.813039][T18505] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20003
[  436.820444][T18505] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004
[  436.983758][T18516] openvswitch: netlink: IP tunnel dst address not specified
[  437.054347][T18521] xt_TPROXY: Can be used only with -p tcp or -p udp
[  437.345523][T18539] xt_TPROXY: Can be used only with -p tcp or -p udp
[  437.605627][T18557] nbd: device at index 4 is going down
[  437.748236][T18567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  437.862186][T18578] validate_nla: 1 callbacks suppressed
[  437.862209][T18578] netlink: 'syz.2.3538': attribute type 1 has an invalid length.
[  438.017695][T18585] x_tables: duplicate underflow at hook 1
[  438.036486][T18579] bond1 (unregistering): Released all slaves
[  438.167983][T18592] bond0: Error: Cannot enslave bond to itself.
[  438.367320][T18607] netlink: 'syz.4.3545': attribute type 9 has an invalid length.
[  438.394302][T18607] 8021q: VLANs not supported on sit0
[  438.479154][T18609] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  438.585398][T18621] sctp: [Deprecated]: syz.4.3547 (pid 18621) Use of struct sctp_assoc_value in delayed_ack socket option.
[  438.585398][T18621] Use struct sctp_sack_info instead
[  438.603380][T18621] sctp: [Deprecated]: syz.4.3547 (pid 18621) Use of struct sctp_assoc_value in delayed_ack socket option.
[  438.603380][T18621] Use struct sctp_sack_info instead
[  438.696970][T18627] Bluetooth: MGMT ver 1.23
[  439.652185][T18671] IPv6: Can't replace route, no match found
[  439.910797][T18687] syzkaller1: entered promiscuous mode
[  439.938859][T18687] syzkaller1: entered allmulticast mode
[  440.062415][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  440.980222][T18744] __nla_validate_parse: 19 callbacks suppressed
[  440.980242][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3582'.
[  441.029197][T18744] openvswitch: netlink: IP tunnel dst address not specified
[  441.052171][T18748] tls_set_device_offload_rx: netdev not found
[  441.063391][T18745] netlink: 'syz.1.3581': attribute type 4 has an invalid length.
[  441.116073][T18752] netlink: 'syz.1.3581': attribute type 4 has an invalid length.
[  441.180470][T18745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3581'.
[  441.198151][T18760] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  441.199480][T18745] netlink: 'syz.1.3581': attribute type 2 has an invalid length.
[  441.252821][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3586'.
[  441.414496][T18773] netlink: 'syz.2.3588': attribute type 10 has an invalid length.
[  441.445760][T18773] 8021q: adding VLAN 0 to HW filter on device team0
[  441.471795][T18773] bond0: (slave team0): Enslaving as an active interface with an up link
[  441.631502][T18784] syzkaller1: entered promiscuous mode
[  441.638915][T18784] syzkaller1: entered allmulticast mode
[  442.040006][T18802] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3595'.
[  442.088861][T18804] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3596'.
[  442.444501][T18829] netlink: 'syz.2.3603': attribute type 1 has an invalid length.
[  442.464166][T18829] netlink: 'syz.2.3603': attribute type 1 has an invalid length.
[  442.481597][T18829] netlink: 'syz.2.3603': attribute type 1 has an invalid length.
[  442.490345][T18829] netlink: 'syz.2.3603': attribute type 2 has an invalid length.
[  442.500811][T18829] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3603'.
[  442.513426][T18835] IPVS: length: 239 != 24
[  442.702765][T18846] --map-set only usable from mangle table
[  442.742494][T18851] syzkaller0: entered promiscuous mode
[  442.748350][T18851] syzkaller0: entered allmulticast mode
[  442.835935][T18852] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  457.486035][ T5837] Bluetooth: hci5: command 0x0406 tx timeout
[  467.726272][ T5837] Bluetooth: hci6: command 0x0406 tx timeout
[  491.582071][ T3503] smc: removing net device gre0 with user defined pnetid SYZ1
[  491.661981][ T3503] bond1 (unregistering): (slave geneve2): Releasing active interface
[  491.699887][ T3503] team0: Port device geneve0 removed
[  492.060540][ T3503] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  492.073125][ T3503] bond0 (unregistering): Released all slaves
[  492.086544][ T3503] bond1 (unregistering): Released all slaves
[  492.198343][ T3503] bond2 (unregistering): Released all slaves
[  492.306249][ T3503] bond3 (unregistering): Released all slaves
[  492.416005][ T3503] bond4 (unregistering): Released all slaves
[  492.522341][ T3503] bond5 (unregistering): Released all slaves
[  492.536047][ T3503] bond6 (unregistering): Released all slaves
[  492.647833][ T3503] bond7 (unregistering): Released all slaves
[  493.741746][T18862] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3614'.
[  494.160330][T18893] validate_nla: 3 callbacks suppressed
[  494.160349][T18893] netlink: 'syz.5.3622': attribute type 10 has an invalid length.
[  494.191481][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3624'.
[  494.218672][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3624'.
[  494.278873][T18902] netlink: 'syz.3.3625': attribute type 30 has an invalid length.
[  494.349406][ T3503] : left promiscuous mode
[  494.448941][ T3503] : left promiscuous mode
[  494.536911][ T3503] tipc: Disabling bearer <eth:macvlan1>
[  494.614361][ T3503] tipc: Left network mode
[  494.757943][T18936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  495.056702][T18950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  495.267232][T18962] SET target dimension over the limit!
[  495.274292][T18962] netlink: 'syz.5.3642': attribute type 1 has an invalid length.
[  495.358831][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3642'.
[  495.394211][T18964] x_tables: duplicate underflow at hook 1
[  495.422695][T18972] syz.1.3645: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  495.438869][T18972] CPU: 0 UID: 0 PID: 18972 Comm: syz.1.3645 Not tainted syzkaller #0 PREEMPT(full) 
[  495.438896][T18972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  495.438914][T18972] Call Trace:
[  495.438922][T18972]  <TASK>
[  495.438930][T18972]  dump_stack_lvl+0x189/0x250
[  495.438961][T18972]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  495.438988][T18972]  ? __pfx_dump_stack_lvl+0x10/0x10
[  495.439010][T18972]  ? __pfx__printk+0x10/0x10
[  495.439038][T18972]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  495.439063][T18972]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  495.439093][T18972]  warn_alloc+0x214/0x310
[  495.439117][T18972]  ? stack_depot_save_flags+0x40/0x860
[  495.439148][T18972]  ? __pfx_warn_alloc+0x10/0x10
[  495.439175][T18972]  ? kasan_save_track+0x3e/0x80
[  495.439195][T18972]  ? __kasan_kmalloc+0x93/0xb0
[  495.439218][T18972]  ? xsk_setsockopt+0x4dc/0x8d0
[  495.439237][T18972]  ? do_sock_setsockopt+0x17c/0x1b0
[  495.439253][T18972]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  495.439268][T18972]  ? do_syscall_64+0xfa/0xfa0
[  495.439289][T18972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.439315][T18972]  __vmalloc_node_range_noprof+0x125/0x12d0
[  495.439369][T18972]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  495.439397][T18972]  ? __kasan_kmalloc+0x93/0xb0
[  495.439428][T18972]  vmalloc_user_noprof+0xad/0xf0
[  495.439452][T18972]  ? xskq_create+0xbf/0x170
[  495.439475][T18972]  xskq_create+0xbf/0x170
[  495.439501][T18972]  xsk_init_queue+0xb0/0x110
[  495.439527][T18972]  xsk_setsockopt+0x4dc/0x8d0
[  495.439551][T18972]  ? __pfx_xsk_setsockopt+0x10/0x10
[  495.439574][T18972]  ? __pfx_aa_sk_perm+0x10/0x10
[  495.439599][T18972]  ? aa_sock_opt_perm+0xff/0x1b0
[  495.439626][T18972]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  495.439642][T18972]  ? __pfx_xsk_setsockopt+0x10/0x10
[  495.439666][T18972]  do_sock_setsockopt+0x17c/0x1b0
[  495.439690][T18972]  __x64_sys_setsockopt+0x13f/0x1b0
[  495.439716][T18972]  do_syscall_64+0xfa/0xfa0
[  495.439738][T18972]  ? lockdep_hardirqs_on+0x9c/0x150
[  495.439763][T18972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.439784][T18972]  ? clear_bhb_loop+0x60/0xb0
[  495.439807][T18972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.439831][T18972] RIP: 0033:0x7f35dff8f749
[  495.439854][T18972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  495.439871][T18972] RSP: 002b:00007f35e0e3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  495.439890][T18972] RAX: ffffffffffffffda RBX: 00007f35e01e5fa0 RCX: 00007f35dff8f749
[  495.439905][T18972] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  495.439916][T18972] RBP: 00007f35e0013f91 R08: 0000000000000004 R09: 0000000000000000
[  495.439928][T18972] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  495.439940][T18972] R13: 00007f35e01e6038 R14: 00007f35e01e5fa0 R15: 00007fff9f73de68
[  495.439974][T18972]  </TASK>
[  495.440109][T18972] Mem-Info:
[  495.790870][T18972] active_anon:5144 inactive_anon:0 isolated_anon:0
[  495.790870][T18972]  active_file:2761 inactive_file:39995 isolated_file:0
[  495.790870][T18972]  unevictable:768 dirty:41 writeback:0
[  495.790870][T18972]  slab_reclaimable:12716 slab_unreclaimable:146669
[  495.790870][T18972]  mapped:36179 shmem:1361 pagetables:1217
[  495.790870][T18972]  sec_pagetables:0 bounce:0
[  495.790870][T18972]  kernel_misc_reclaimable:0
[  495.790870][T18972]  free:1263569 free_pcp:15290 free_cma:0
[  495.872048][T18972] Node 0 active_anon:20776kB inactive_anon:0kB active_file:11044kB inactive_file:159784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144716kB dirty:160kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16604kB pagetables:4740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  495.940143][T18972] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  495.972866][T18972] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  496.008434][T18972] lowmem_reserve[]: 0 2505 2505 2505 2505
[  496.014387][T18972] Node 0 DMA32 free:1149992kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20732kB inactive_anon:0kB active_file:11044kB inactive_file:159784kB unevictable:1536kB writepending:160kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:41844kB local_pcp:21300kB free_cma:0kB
[  496.049880][T18972] lowmem_reserve[]: 0 0 0 0 0
[  496.054734][T18972] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  496.113003][T18972] lowmem_reserve[]: 0 0 0 0 0
[  496.120482][T18998] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.3649'.
[  496.161498][T18972] Node 1 Normal free:3889620kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19492kB local_pcp:7232kB free_cma:0kB
[  496.281761][T18972] lowmem_reserve[]: 0 0 0 0 0
[  496.296546][T18972] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  496.317160][T18972] Node 0 DMA32: 1237*4kB (UME) 610*8kB (UM) 109*16kB (UME) 425*32kB (UME) 112*64kB (UME) 71*128kB (UM) 23*256kB (UME) 9*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 267*4096kB (UM) = 1151700kB
[  496.339147][T19001] netlink: 'syz.3.3650': attribute type 1 has an invalid length.
[  496.363150][T18972] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  496.431655][T18972] Node 1 Normal: 221*4kB (UME) 60*8kB (UME) 36*16kB (UME) 142*32kB (UME) 60*64kB (UME) 7*128kB (UME) 4*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3889620kB
[  496.460257][T18972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  496.461329][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3650'.
[  496.471644][T18972] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  496.471713][T18972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  496.471731][T18972] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  496.471747][T18972] 44113 total pagecache pages
[  496.471767][T18972] 0 pages in swap cache
[  496.471776][T18972] Free swap  = 124996kB
[  496.471784][T18972] Total swap = 124996kB
[  496.471796][T18972] 2097051 pages RAM
[  496.471804][T18972] 0 pages HighMem/MovableOnly
[  496.471812][T18972] 424124 pages reserved
[  496.471820][T18972] 0 pages cma reserved
[  496.649898][T19027] netlink: 'syz.5.3651': attribute type 32 has an invalid length.
[  496.754729][T19012] bond4: (slave gretap1): making interface the new active one
[  496.764402][T19012] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  496.793147][T19015] bond4 (unregistering): (slave gretap1): Releasing active interface
[  496.825581][T19015] bond4 (unregistering): Released all slaves
[  496.854108][T19031] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3655'.
[  497.013568][ T3503] hsr_slave_0: left promiscuous mode
[  497.055741][ T3503] hsr_slave_1: left promiscuous mode
[  497.100958][T19045] netlink: 'syz.4.3658': attribute type 10 has an invalid length.
[  497.118488][ T3503] veth1_macvtap: left promiscuous mode
[  497.124506][ T3503] veth0_macvtap: left promiscuous mode
[  497.131289][ T3503] veth1_vlan: left promiscuous mode
[  497.484441][T19065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3662'.
[  498.114220][T19045] team0: Device veth1_macvtap failed to register rx_handler
[  498.362558][T19072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3664'.
[  498.367328][T19074] bond1: entered allmulticast mode
[  498.378682][T19074] 8021q: adding VLAN 0 to HW filter on device bond1
[  498.389599][T19074] bridge0: port 3(bond1) entered blocking state
[  498.397162][T19074] bridge0: port 3(bond1) entered disabled state
[  498.408950][T19074] bond1: entered promiscuous mode
[  498.416000][T19074] bridge0: port 3(bond1) entered blocking state
[  498.422412][T19074] bridge0: port 3(bond1) entered forwarding state
[  498.648894][T19094] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3671'.
[  498.858709][T19108] openvswitch: netlink: nsh attribute has 65492 unknown bytes.
[  498.870503][T19108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.880556][T19106] !€ÿ: renamed from bond_slave_0 (while UP)
[  498.890770][T19111] netlink: 308 bytes leftover after parsing attributes in process `syz.4.3675'.
[  498.892179][ T3503] bond4: left promiscuous mode
[  498.912883][ T3503] bridge0: port 3(bond4) entered disabled state
[  498.929299][ T3503] bridge_slave_1: left allmulticast mode
[  498.937020][ T3503] bridge_slave_1: left promiscuous mode
[  498.942860][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.958483][ T3503] bridge_slave_0: left allmulticast mode
[  498.964283][ T3503] bridge_slave_0: left promiscuous mode
[  498.972367][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.230745][ T3503] bond3 (unregistering): (slave ip6gretap1): Releasing active interface
[  499.255184][ T3503] bond6 (unregistering): (slave ip6gretap2): Releasing active interface
[  499.477739][ T3503] dvmrp6 (unregistering): left allmulticast mode
[  499.916071][T19148] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3686'.
[  500.121111][T19155] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3688'.
[  500.141369][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  500.157089][ T3503] bond0 (unregistering): Released all slaves
[  500.272048][ T3503] bond1 (unregistering): Released all slaves
[  500.380642][ T3503] bond2 (unregistering): Released all slaves
[  500.394659][ T3503] bond3 (unregistering): Released all slaves
[  500.513435][ T3503] bond4 (unregistering): Released all slaves
[  500.527458][ T3503] bond5 (unregistering): Released all slaves
[  500.642458][ T3503] bond6 (unregistering): Released all slaves
[  500.655950][ T3503] bond7 (unregistering): Released all slaves
[  500.764499][ T3503] bond8 (unregistering): Released all slaves
[  500.882920][ T3503] bond9 (unregistering): Released all slaves
[  500.993340][ T3503] bond10 (unregistering): Released all slaves
[  501.006541][ T3503] bond11 (unregistering): Released all slaves
[  501.021123][ T3503] bond12 (unregistering): Released all slaves
[  501.055701][   T12] bridge0: port 3(bond1) entered disabled state
[  501.075102][T19156] tipc: Started in network mode
[  501.080002][T19156] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  501.135186][T19156] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000
[  501.195972][T19156] tipc: Enabled bearer <udp:syz2>, priority 10
[  501.356638][ T3503] tipc: Disabling bearer <udp:syz2>
[  501.373527][ T3503] tipc: Left network mode
[  501.512228][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  501.967902][T19199] netlink: 'syz.2.3699': attribute type 1 has an invalid length.
[  502.156661][T19216] x_tables: duplicate underflow at hook 1
[  502.338404][ T5915] tipc: Node number set to 1
[  502.452500][T19233] netlink: 'syz.2.3708': attribute type 29 has an invalid length.
[  502.478154][T19234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3708'.
[  502.568061][T19239] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  502.732917][T19248] netlink: 'syz.2.3712': attribute type 30 has an invalid length.
[  502.741249][T19249] netlink: 'syz.2.3712': attribute type 30 has an invalid length.
[  502.967998][T19252] bond4 (unregistering): Released all slaves
[  503.172838][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3716'.
[  503.536844][T19267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3719'.
[  503.608946][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3719'.
[  503.618106][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3719'.
[  503.770299][T19273] xt_connbytes: Forcing CT accounting to be enabled
[  503.788875][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3717'.
[  505.912904][ T3503] hsr_slave_0: left promiscuous mode
[  505.923743][ T3503] hsr_slave_1: left promiscuous mode
[  505.951173][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  505.981183][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0
[  505.998827][T19316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3728'.
[  506.011938][ T3503] veth0_macvtap: left promiscuous mode
[  506.019463][T19316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3728'.
[  506.029278][ T3503] veth1_vlan: left promiscuous mode
[  506.034641][ T3503] veth0_vlan: left promiscuous mode
[  506.056801][T19315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3729'.
[  506.069294][T19315] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3729'.
[  506.079177][T19315] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3729'.
[  506.087331][T19320] netlink: 'syz.2.3732': attribute type 10 has an invalid length.
[  506.110487][T19315] netlink: 'syz.5.3729': attribute type 2 has an invalid length.
[  506.123945][T19315] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3729'.
[  506.244005][ T3503] pimreg (unregistering): left allmulticast mode
[  506.251441][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3731'.
[  506.333472][T19334] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3731'.
[  506.495279][ T3503] vlan1 (unregistering): left allmulticast mode
[  506.502488][ T3503] veth0_vlan (unregistering): left allmulticast mode
[  506.748202][ T3503] team0 (unregistering): Port device team_slave_1 removed
[  507.110822][   T12] smc: removing ib device s
z1
[  507.143404][T19320] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  507.270624][T19327] batadv_slave_1: entered allmulticast mode
[  507.278812][T19327] batadv_slave_1: left allmulticast mode
[  507.306307][T19328] dvmrp8: entered allmulticast mode
[  507.530805][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3739'.
[  507.576815][T19348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3739'.
[  507.599547][T19348] netlink: 'syz.4.3739': attribute type 14 has an invalid length.
[  507.636717][T19348] netlink: 'syz.4.3739': attribute type 13 has an invalid length.
[  507.798059][T19360] netlink: 'syz.5.3742': attribute type 12 has an invalid length.
[  508.038902][T19360] bond1: option all_slaves_active: invalid value (222)
[  508.277942][T19360] bond1 (unregistering): Released all slaves
[  509.327420][T19421] netem: invalid attributes len -24
[  509.353729][T19421] netem: change failed
[  509.371510][T19418] netlink: 'syz.5.3756': attribute type 1 has an invalid length.
[  509.381381][T19418] netlink: 'syz.5.3756': attribute type 7 has an invalid length.
[  509.410387][T19418] netlink: 'syz.5.3756': attribute type 8 has an invalid length.
[  509.436765][T19418] NCSI netlink: No device for ifindex 65584
[  509.541437][T19425] bridge1: port 1(veth0_to_bond) entered blocking state
[  509.611760][T19425] bridge1: port 1(veth0_to_bond) entered disabled state
[  509.667701][T19425] veth0_to_bond: entered allmulticast mode
[  509.715450][T19425] veth0_to_bond: entered promiscuous mode
[  509.808624][T19449] IPVS: length: 94 != 24
[  509.846529][T19428] bridge1: port 2(veth3) entered blocking state
[  509.853127][T19428] bridge1: port 2(veth3) entered disabled state
[  509.859872][T19428] veth3: entered allmulticast mode
[  509.903821][T19428] veth3: entered promiscuous mode
[  509.927218][T19451] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  509.952106][T19451] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  509.967491][T19451] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  510.194297][T19461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  510.706856][ T3503] IPVS: stop unused estimator thread 0...
[  511.017159][T19506] bridge_slave_0: left allmulticast mode
[  511.022913][T19506] bridge_slave_0: left promiscuous mode
[  511.030548][T19506] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.059018][T19506] bridge_slave_1: left allmulticast mode
[  511.065107][T19506] bridge_slave_1: left promiscuous mode
[  511.074326][T19506] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.099267][T19513] __nla_validate_parse: 17 callbacks suppressed
[  511.099288][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3783'.
[  511.128178][T19506] bond0: (slave bond_slave_0): Releasing backup interface
[  511.181959][T19506] bond0: (slave bond_slave_1): Releasing backup interface
[  511.208333][T19506] team0: Port device team_slave_0 removed
[  511.223076][T19506] team0: Port device team_slave_1 removed
[  511.232366][T19506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  511.266535][T19520] xfrm1: entered allmulticast mode
[  511.429142][T19529] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3788'.
[  511.450112][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3787'.
[  511.846159][T19557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3797'.
[  511.856663][T19555] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3798'.
[  511.859782][T19557] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5
[  512.163100][T19568] Unsupported ieee802154 address type: 0
[  512.203716][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'.
[  512.224995][T19570] netlink: 'syz.2.3801': attribute type 5 has an invalid length.
[  512.232759][T19570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3801'.
[  512.244087][T19577] team_slave_0: mtu less than device minimum
[  512.266391][T19580] netlink: 'syz.4.3800': attribute type 3 has an invalid length.
[  512.274221][T19580] netlink: 'syz.4.3800': attribute type 3 has an invalid length.
[  512.285001][T19580] netlink: 'syz.4.3800': attribute type 3 has an invalid length.
[  512.367523][T19570] geneve2: entered promiscuous mode
[  512.388000][T19589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3805'.
[  512.390141][T19570] geneve2: entered allmulticast mode
[  512.463595][T12744] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  512.484674][T12744] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  512.536610][T12744] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  512.567366][T12744] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  512.610366][T19597] wg1: entered promiscuous mode
[  512.620325][T19597] wg1: entered allmulticast mode
[  513.803983][T19654] validate_nla: 46 callbacks suppressed
[  513.804003][T19654] netlink: 'syz.3.3823': attribute type 4 has an invalid length.
[  513.877521][T19654] netlink: 'syz.3.3823': attribute type 4 has an invalid length.
[  514.421699][T19714] v: renamed from vlan0 (while UP)
[  514.621152][T19720] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3839'.
[  514.813630][T19741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3844'.
[  515.017593][T19752] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  515.601727][T19789] netlink: 'syz.4.3861': attribute type 1 has an invalid length.
[  515.637303][T19800] netlink: 'syz.3.3864': attribute type 3 has an invalid length.
[  515.752701][T19809] bond1: (slave gretap1): making interface the new active one
[  515.761581][T19809] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  515.772701][T19808] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  515.838620][T19814] netlink: 'syz.5.3868': attribute type 1 has an invalid length.
[  515.888483][T19808] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  515.906961][T19808] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.999722][T19808] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  516.032461][T19808] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.079837][T19827] netlink: 'syz.4.3872': attribute type 5 has an invalid length.
[  516.176987][T19808] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  516.201487][T19808] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.314429][T19808] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  516.339414][T19808] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.372767][T19840] sctp: [Deprecated]: syz.4.3876 (pid 19840) Use of int in maxseg socket option.
[  516.372767][T19840] Use struct sctp_assoc_value instead
[  516.409117][T19842] __nla_validate_parse: 8 callbacks suppressed
[  516.409135][T19842] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3878'.
[  516.449700][T19846] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3878'.
[  516.680791][T12748] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  516.703032][T12748] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.752061][T12748] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  516.802771][T12748] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.837527][T12748] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  516.880494][T12748] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.914935][T12748] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  516.943213][T12748] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  517.592342][T19881] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3887'.
[  517.634571][T19881] ip6erspan0: entered promiscuous mode
[  517.659906][T19881] ip6erspan0: entered allmulticast mode
[  517.854460][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880626fa000: rx timeout, send abort
[  517.895348][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880626fa000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  517.923847][T19886] tipc: Started in network mode
[  517.942930][T19886] tipc: Node identity 623448c8184e, cluster identity 4711
[  517.972244][T19886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  518.014433][T19890] syzkaller0: entered promiscuous mode
[  518.043281][T19890] syzkaller0: entered allmulticast mode
[  518.147482][T19886] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  518.245210][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.300248][T19886] tipc: Resetting bearer <eth:syzkaller0>
[  518.330950][T19883] tipc: Resetting bearer <eth:syzkaller0>
[  518.700942][T19883] tipc: Disabling bearer <eth:syzkaller0>
[  518.738882][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3894'.
[  518.774664][T19907] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3895'.
[  518.784690][T19909] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3895'.
[  518.933581][T19918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3898'.
[  519.056744][T19927] netlink: 'syz.2.3902': attribute type 1 has an invalid length.
[  519.065356][T19927] netlink: 'syz.2.3902': attribute type 3 has an invalid length.
[  519.073863][T19927] netlink: 'syz.2.3902': attribute type 7 has an invalid length.
[  519.083741][T19927] netlink: 'syz.2.3902': attribute type 8 has an invalid length.
[  519.093983][T19927] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3902'.
[  519.113520][T19927] NCSI netlink: No device for ifindex 131092
[  519.348054][T19940] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  519.419874][T19946] netlink: 'syz.4.3908': attribute type 1 has an invalid length.
[  519.519846][T19951] netlink: 'syz.5.3909': attribute type 1 has an invalid length.
[  519.526381][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880626f8c00: rx timeout, send abort
[  519.582261][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3909'.
[  519.593442][T19951] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3909'.
[  519.635587][T19953] netlink: 'syz.2.3910': attribute type 1 has an invalid length.
[  519.723563][T19953] 8021q: adding VLAN 0 to HW filter on device bond2
[  519.759713][T19956] bond2: (slave veth5): Enslaving as an active interface with a down link
[  519.800208][T19953] vlan0: entered allmulticast mode
[  519.807843][T19953] bond2: entered allmulticast mode
[  519.830930][T19953] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  519.889582][T19970] syz.4.3913 (19970) used obsolete PPPIOCDETACH ioctl
[  519.982687][T19979] netlink: 'syz.3.3918': attribute type 1 has an invalid length.
[  520.035875][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880626f8c00: abort rx timeout. Force session deactivation
[  520.321998][T20001] x_tables: duplicate underflow at hook 1
[  520.352788][T20013] netlink: 'syz.1.3927': attribute type 1 has an invalid length.
[  520.382811][T20001] pimreg3: entered allmulticast mode
[  520.402083][T20011] syzkaller1: entered promiscuous mode
[  520.415459][T20011] syzkaller1: entered allmulticast mode
[  520.422641][T20009] wlan0 speed is unknown, defaulting to 1000
[  520.908061][T20042] netlink: 'syz.4.3936': attribute type 2 has an invalid length.
[  521.182199][T20062] syzkaller0: entered allmulticast mode
[  521.538701][T20081] __nla_validate_parse: 7 callbacks suppressed
[  521.538729][T20081] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3946'.
[  522.264217][T20119] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3957'.
[  522.285609][ T5837] Bluetooth: hci0: command 0x0419 tx timeout
[  522.333031][T20125] ieee802154 phy0 wpan0: encryption failed: -22
[  522.418810][T20127] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3960'.
[  522.459344][T20127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3960'.
[  522.472568][T20127] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3960'.
[  522.521731][T20136] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  522.563651][T20140] sctp: [Deprecated]: syz.3.3964 (pid 20140) Use of struct sctp_assoc_value in delayed_ack socket option.
[  522.563651][T20140] Use struct sctp_sack_info instead
[  522.775288][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3967'.
[  522.809929][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3966'.
[  522.852982][T20153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3967'.
[  522.860620][T20160] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  523.015825][T20159] syzkaller0: entered promiscuous mode
[  523.035237][T20159] syzkaller0: entered allmulticast mode
[  523.047017][T20159] tipc: Resetting bearer <eth:syzkaller0>
[  523.228071][T20185] netlink: 294 bytes leftover after parsing attributes in process `syz.1.3973'.
[  523.237744][T20185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.274045][ T3503] tipc: Resetting bearer <eth:syzkaller0>
[  523.282786][T20158] tipc: Resetting bearer <eth:syzkaller0>
[  524.047899][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  525.055341][T20158] tipc: Disabling bearer <eth:syzkaller0>
[  525.094818][T15635] tipc: Node number set to 2751743979
[  525.412871][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3987'.
[  525.423080][T20222] validate_nla: 5 callbacks suppressed
[  525.423097][T20222] netlink: 'syz.2.3987': attribute type 5 has an invalid length.
[  525.438346][T20223] netlink: 'syz.2.3987': attribute type 5 has an invalid length.
[  525.469322][T20224] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  525.521425][T20224] wireguard0: entered promiscuous mode
[  525.527760][T20224] wireguard0: entered allmulticast mode
[  525.539744][T20224] team0: Device wireguard0 is of different type
[  525.601062][T20228] sit2: entered promiscuous mode
[  525.606303][T20228] sit2: entered allmulticast mode
[  525.791032][T20244] netlink: 'syz.1.3993': attribute type 11 has an invalid length.
[  525.892169][T20252] netlink: 'syz.4.3995': attribute type 10 has an invalid length.
[  525.903834][T20254] netem: invalid attributes len -24
[  525.909538][T20254] netem: change failed
[  525.924699][T20252] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.953968][T20258] netlink: 'syz.4.3995': attribute type 10 has an invalid length.
[  525.955517][T20252] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  525.994266][T20258] batadv0: entered promiscuous mode
[  526.010569][T20258] batadv0: entered allmulticast mode
[  526.018486][T20258] bond0: (slave batadv0): Releasing backup interface
[  526.029489][T20258] bridge0: port 2(batadv0) entered blocking state
[  526.036483][T20258] bridge0: port 2(batadv0) entered disabled state
[  526.049219][T20262] gretap0: entered promiscuous mode
[  526.274225][T20269] netlink: 'syz.4.4001': attribute type 39 has an invalid length.
[  526.325883][T20274] bond4 (unregistering): Released all slaves
[  526.339301][T20281] netlink: 'syz.1.4004': attribute type 28 has an invalid length.
[  526.348493][T12749] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  526.358286][T12749] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  526.509173][T20287] netlink: 'syz.2.4007': attribute type 1 has an invalid length.
[  526.562504][T20287] bond3: (slave ip6gretap1): making interface the new active one
[  526.573717][T20287] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  526.582491][T20287] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  526.599209][T20287] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  526.639008][T20295] __nla_validate_parse: 9 callbacks suppressed
[  526.639027][T20295] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4009'.
[  526.678132][T20299] netlink: 'syz.2.4012': attribute type 1 has an invalid length.
[  526.768726][T20295] bridge0: port 3(team0) entered disabled state
[  526.776695][T20295] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.817186][T20299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4012'.
[  526.826883][T20299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4012'.
[  526.837448][T20299] 8021q: adding VLAN 0 to HW filter on device bond4
[  527.313200][T20344] netlink: 'syz.3.4024': attribute type 29 has an invalid length.
[  527.323217][T20344] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.4024'.
[  527.547730][T20350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4026'.
[  527.619106][T20357] netlink: 'syz.3.4026': attribute type 1 has an invalid length.
[  527.652799][T20358] syzkaller1: entered promiscuous mode
[  527.677543][T20358] syzkaller1: entered allmulticast mode
[  527.695304][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4026'.
[  527.758979][T20365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4032'.
[  527.836449][T20368] 8021q: VLANs not supported on ip_vti0
[  528.019167][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4035'.
[  528.725302][T20432] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4051'.
[  528.891590][T20442] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4054'.
[  529.044944][T20448] bond3: (slave gretap1): making interface the new active one
[  529.053483][T20448] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  529.166688][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  529.470370][T20481] siw: device registration error -23
[  529.776597][T20505] bridge: RTM_NEWNEIGH with invalid state 0x4
[  530.615928][T20541] tipc: Started in network mode
[  530.624640][T20541] tipc: Node identity ae5355036796, cluster identity 4711
[  530.632582][T20541] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  530.652527][T20542] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  530.693307][T20540] tipc: Resetting bearer <eth:syzkaller0>
[  530.727172][T20538] tipc: Disabling bearer <eth:syzkaller0>
[  530.792449][T20557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  531.234611][T20591] validate_nla: 1 callbacks suppressed
[  531.234629][T20591] netlink: 'syz.3.4100': attribute type 1 has an invalid length.
[  531.355771][T20599] netlink: 'syz.4.4102': attribute type 3 has an invalid length.
[  531.521131][T20609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  531.547659][T20612] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  531.571510][T20612] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.644198][T20612] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  531.659770][T20612] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.733212][T20612] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  531.745795][T20612] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.761446][T20623] netlink: 'syz.3.4107': attribute type 4 has an invalid length.
[  531.798784][T20612] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  531.809410][T20612] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.964683][ T3503] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  531.979251][ T3503] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.009606][ T3503] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  532.035980][ T3503] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.074202][T20632] netlink: 'syz.2.4109': attribute type 11 has an invalid length.
[  532.090184][ T3503] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  532.098868][ T3503] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  532.101072][T20632] __nla_validate_parse: 4 callbacks suppressed
[  532.101087][T20632] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.4109'.
[  532.113878][ T3503] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  532.138319][ T3503] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  532.142830][T20634] netlink: 324 bytes leftover after parsing attributes in process `syz.3.4110'.
[  532.177498][T20632] gtp0: entered promiscuous mode
[  532.182487][T20632] gtp0: entered allmulticast mode
[  532.216501][T20632] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4109'.
[  532.267944][T20634] wlan0 speed is unknown, defaulting to 1000
[  532.579314][T20652] netlink: 1952 bytes leftover after parsing attributes in process `syz.4.4114'.
[  532.623884][T20652] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4114'.
[  532.703657][T20662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4117'.
[  532.714140][T20656] syzkaller0: entered promiscuous mode
[  532.729248][T20659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4118'.
[  532.732554][T20656] syzkaller0: entered allmulticast mode
[  532.977286][T20668] ieee802154 phy0 wpan0: encryption failed: -22
[  533.112984][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4125'.
[  533.542602][T20703] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4131'.
[  533.732822][T20719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4135'.
[  533.773025][T20715] ksmbd: Unknown IPC event: 3, ignore.
[  534.072275][T20746] netlink: 'syz.1.4147': attribute type 11 has an invalid length.
[  534.310205][T20766] netlink: 'syz.4.4150': attribute type 3 has an invalid length.
[  534.320636][T20766] netlink: 'syz.4.4150': attribute type 1 has an invalid length.
[  534.337253][T20766] NCSI netlink: No device for ifindex 813332851
[  534.372316][T20770] syzkaller1: tun_chr_ioctl cmd 1074025677
[  534.382574][T20770] syzkaller1: linktype set to 823
[  534.655265][T20786] netlink: 'syz.2.4157': attribute type 19 has an invalid length.
[  534.905798][T20810] netlink: 'syz.5.4159': attribute type 11 has an invalid length.
[  534.916702][T20810] netlink: 'syz.5.4159': attribute type 11 has an invalid length.
[  535.854239][T20825] bond2: left promiscuous mode
[  535.894286][T12747] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  535.929713][T12747] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  535.959342][T12747] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.013919][T12747] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.120389][T20850] bridge_slave_0: invalid flags given to default FDB implementation
[  536.275150][T20864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  536.307301][T20864] openvswitch: netlink: IP tunnel dst address not specified
[  536.566602][T20887] bond4: entered promiscuous mode
[  536.572449][T20887] 8021q: adding VLAN 0 to HW filter on device bond4
[  536.590496][T20891] 8021q: adding VLAN 0 to HW filter on device bond4
[  536.598714][T20891] bond4: (slave gtp0): The slave device specified does not support setting the MAC address
[  536.612484][T20891] bond4: (slave gtp0): Error -95 calling set_mac_address
[  536.714711][T20898] sctp: [Deprecated]: syz.2.4189 (pid 20898) Use of struct sctp_assoc_value in delayed_ack socket option.
[  536.714711][T20898] Use struct sctp_sack_info instead
[  536.768768][T20900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  536.809711][T20900] netlink: 'syz.3.4190': attribute type 29 has an invalid length.
[  537.108458][T20915] __nla_validate_parse: 27 callbacks suppressed
[  537.108479][T20915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4196'.
[  537.139011][T20915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4196'.
[  537.144410][T20921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4200'.
[  537.153894][T20926] netlink: 'syz.2.4199': attribute type 1 has an invalid length.
[  537.166990][T20926] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4199'.
[  538.239034][T20978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4212'.
[  538.667654][T20999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4218'.
[  538.682931][T21002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4219'.
[  538.889955][T21012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4221'.
[  539.255401][T21043] netlink: 'syz.1.4229': attribute type 18 has an invalid length.
[  539.338202][T21031] 
[  539.340563][T21031] ======================================================
[  539.347583][T21031] WARNING: possible circular locking dependency detected
[  539.354616][T21031] syzkaller #0 Not tainted
[  539.359033][T21031] ------------------------------------------------------
[  539.366055][T21031] syz.4.4226/21031 is trying to acquire lock:
[  539.372123][T21031] ffff8881433f40c8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1e5/0x4c0
[  539.381654][T21031] 
[  539.381654][T21031] but task is already holding lock:
[  539.389017][T21031] ffff8881433f3b88 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0
[  539.399198][T21031] 
[  539.399198][T21031] which lock already depends on the new lock.
[  539.399198][T21031] 
[  539.409612][T21031] 
[  539.409612][T21031] the existing dependency chain (in reverse order) is:
[  539.418606][T21031] 
[  539.418606][T21031] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  539.427200][T21031]        lock_acquire+0x120/0x360
[  539.432213][T21031]        blk_alloc_queue+0x538/0x620
[  539.437488][T21031]        __blk_mq_alloc_disk+0x15c/0x340
[  539.443191][T21031]        nbd_dev_add+0x46c/0xae0
[  539.448207][T21031]        nbd_init+0x1c6/0x240
[  539.452968][T21031]        do_one_initcall+0x236/0x820
[  539.458245][T21031]        do_initcall_level+0x104/0x190
[  539.463699][T21031]        do_initcalls+0x59/0xa0
[  539.468541][T21031]        kernel_init_freeable+0x334/0x4b0
[  539.474251][T21031]        kernel_init+0x1d/0x1d0
[  539.479098][T21031]        ret_from_fork+0x4bc/0x870
[  539.484195][T21031]        ret_from_fork_asm+0x1a/0x30
[  539.489484][T21031] 
[  539.489484][T21031] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  539.496689][T21031]        lock_acquire+0x120/0x360
[  539.501713][T21031]        fs_reclaim_acquire+0x72/0x100
[  539.507169][T21031]        __kmalloc_cache_node_noprof+0x45/0x6f0
[  539.513406][T21031]        create_worker+0x112/0x720
[  539.518514][T21031]        workqueue_prepare_cpu+0xe4/0x170
[  539.524220][T21031]        cpuhp_invoke_callback+0x445/0x860
[  539.530021][T21031]        _cpu_up+0x2c9/0x580
[  539.534660][T21031]        cpu_up+0x1d2/0x220
[  539.539237][T21031]        cpuhp_bringup_mask+0xb2/0x1a0
[  539.544702][T21031]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  539.551045][T21031]        bringup_nonboot_cpus+0x17/0x30
[  539.556586][T21031]        smp_init+0x32/0x110
[  539.561173][T21031]        kernel_init_freeable+0x316/0x4b0
[  539.567485][T21031]        kernel_init+0x1d/0x1d0
[  539.572320][T21031]        ret_from_fork+0x4bc/0x870
[  539.577418][T21031]        ret_from_fork_asm+0x1a/0x30
[  539.582772][T21031] 
[  539.582772][T21031] -> #4 (cpu_hotplug_lock){++++}-{0:0}:
[  539.590489][T21031]        lock_acquire+0x120/0x360
[  539.595502][T21031]        cpus_read_lock+0x42/0x160
[  539.600601][T21031]        static_key_slow_inc+0x12/0x30
[  539.606046][T21031]        nbd_genl_reconfigure+0x10d8/0x1a50
[  539.611925][T21031]        genl_family_rcv_msg_doit+0x215/0x300
[  539.617977][T21031]        genl_rcv_msg+0x60e/0x790
[  539.622984][T21031]        netlink_rcv_skb+0x208/0x470
[  539.628263][T21031]        genl_rcv+0x28/0x40
[  539.632768][T21031]        netlink_unicast+0x82f/0x9e0
[  539.638050][T21031]        netlink_sendmsg+0x805/0xb30
[  539.643320][T21031]        __sock_sendmsg+0x21c/0x270
[  539.648511][T21031]        ____sys_sendmsg+0x505/0x830
[  539.653793][T21031]        ___sys_sendmsg+0x21f/0x2a0
[  539.658983][T21031]        __x64_sys_sendmsg+0x19b/0x260
[  539.664424][T21031]        do_syscall_64+0xfa/0xfa0
[  539.669474][T21031]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.675900][T21031] 
[  539.675900][T21031] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  539.683540][T21031]        lock_acquire+0x120/0x360
[  539.688565][T21031]        __mutex_lock+0x187/0x1350
[  539.693683][T21031]        nbd_queue_rq+0x257/0xf10
[  539.698695][T21031]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  539.704757][T21031]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  539.711683][T21031]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  539.718172][T21031]        blk_mq_run_hw_queue+0x348/0x4f0
[  539.723791][T21031]        blk_mq_dispatch_list+0xd0c/0xe00
[  539.729500][T21031]        blk_mq_flush_plug_list+0x469/0x550
[  539.735379][T21031]        __blk_flush_plug+0x3d3/0x4b0
[  539.740740][T21031]        __submit_bio+0x2d3/0x5a0
[  539.745748][T21031]        submit_bio_noacct_nocheck+0x2fb/0xa50
[  539.751891][T21031]        block_read_full_folio+0x599/0x830
[  539.757685][T21031]        filemap_read_folio+0x117/0x380
[  539.763213][T21031]        do_read_cache_folio+0x350/0x590
[  539.768830][T21031]        read_part_sector+0xb6/0x2b0
[  539.774122][T21031]        adfspart_check_ICS+0xa4/0xa50
[  539.779569][T21031]        bdev_disk_changed+0x75f/0x14b0
[  539.785286][T21031]        blkdev_get_whole+0x380/0x510
[  539.790647][T21031]        bdev_open+0x31e/0xd30
[  539.795425][T21031]        blkdev_open+0x457/0x600
[  539.800354][T21031]        do_dentry_open+0x953/0x13f0
[  539.805623][T21031]        vfs_open+0x3b/0x340
[  539.810198][T21031]        path_openat+0x2ee5/0x3830
[  539.815295][T21031]        do_filp_open+0x1fa/0x410
[  539.820306][T21031]        do_sys_openat2+0x121/0x1c0
[  539.825485][T21031]        __x64_sys_openat+0x138/0x170
[  539.830839][T21031]        do_syscall_64+0xfa/0xfa0
[  539.835853][T21031]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.842272][T21031] 
[  539.842272][T21031] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  539.849484][T21031]        lock_acquire+0x120/0x360
[  539.854500][T21031]        __mutex_lock+0x187/0x1350
[  539.859626][T21031]        nbd_queue_rq+0xc8/0xf10
[  539.864562][T21031]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  539.870636][T21031]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  539.877485][T21031]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  539.883981][T21031]        blk_mq_run_hw_queue+0x348/0x4f0
[  539.889609][T21031]        blk_mq_dispatch_list+0xd0c/0xe00
[  539.895321][T21031]        blk_mq_flush_plug_list+0x469/0x550
[  539.901205][T21031]        __blk_flush_plug+0x3d3/0x4b0
[  539.906566][T21031]        __submit_bio+0x2d3/0x5a0
[  539.911619][T21031]        submit_bio_noacct_nocheck+0x2fb/0xa50
[  539.917762][T21031]        block_read_full_folio+0x599/0x830
[  539.923599][T21031]        filemap_read_folio+0x117/0x380
[  539.929130][T21031]        do_read_cache_folio+0x350/0x590
[  539.934751][T21031]        read_part_sector+0xb6/0x2b0
[  539.940036][T21031]        adfspart_check_ICS+0xa4/0xa50
[  539.945479][T21031]        bdev_disk_changed+0x75f/0x14b0
[  539.951016][T21031]        blkdev_get_whole+0x380/0x510
[  539.956373][T21031]        bdev_open+0x31e/0xd30
[  539.961124][T21031]        blkdev_open+0x457/0x600
[  539.966129][T21031]        do_dentry_open+0x953/0x13f0
[  539.971830][T21031]        vfs_open+0x3b/0x340
[  539.976410][T21031]        path_openat+0x2ee5/0x3830
[  539.981530][T21031]        do_filp_open+0x1fa/0x410
[  539.986547][T21031]        do_sys_openat2+0x121/0x1c0
[  539.991735][T21031]        __x64_sys_openat+0x138/0x170
[  539.997101][T21031]        do_syscall_64+0xfa/0xfa0
[  540.002126][T21031]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.008579][T21031] 
[  540.008579][T21031] -> #1 (set->srcu){.+.+}-{0:0}:
[  540.015692][T21031]        lock_sync+0xba/0x160
[  540.020354][T21031]        __synchronize_srcu+0x96/0x3a0
[  540.025794][T21031]        elevator_switch+0x12b/0x640
[  540.031065][T21031]        elevator_change+0x315/0x4c0
[  540.036336][T21031]        elevator_set_default+0x186/0x260
[  540.042042][T21031]        blk_register_queue+0x34e/0x3f0
[  540.047577][T21031]        __add_disk+0x677/0xd50
[  540.052416][T21031]        add_disk_fwnode+0xfc/0x480
[  540.057679][T21031]        nbd_dev_add+0x717/0xae0
[  540.062600][T21031]        nbd_init+0x1c6/0x240
[  540.067259][T21031]        do_one_initcall+0x236/0x820
[  540.072573][T21031]        do_initcall_level+0x104/0x190
[  540.078022][T21031]        do_initcalls+0x59/0xa0
[  540.082856][T21031]        kernel_init_freeable+0x334/0x4b0
[  540.088562][T21031]        kernel_init+0x1d/0x1d0
[  540.093410][T21031]        ret_from_fork+0x4bc/0x870
[  540.098507][T21031]        ret_from_fork_asm+0x1a/0x30
[  540.103784][T21031] 
[  540.103784][T21031] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  540.111597][T21031]        validate_chain+0xb9b/0x2140
[  540.116867][T21031]        __lock_acquire+0xab9/0xd20
[  540.122133][T21031]        lock_acquire+0x120/0x360
[  540.127208][T21031]        __mutex_lock+0x187/0x1350
[  540.132320][T21031]        elevator_change+0x1e5/0x4c0
[  540.137605][T21031]        elevator_set_none+0x42/0xb0
[  540.142895][T21031]        blk_mq_update_nr_hw_queues+0x598/0x1ab0
[  540.149225][T21031]        nbd_start_device+0x17f/0xb10
[  540.154596][T21031]        nbd_genl_connect+0x135b/0x18f0
[  540.160129][T21031]        genl_family_rcv_msg_doit+0x215/0x300
[  540.166186][T21031]        genl_rcv_msg+0x60e/0x790
[  540.171196][T21031]        netlink_rcv_skb+0x208/0x470
[  540.176467][T21031]        genl_rcv+0x28/0x40
[  540.180954][T21031]        netlink_unicast+0x82f/0x9e0
[  540.186227][T21031]        netlink_sendmsg+0x805/0xb30
[  540.191503][T21031]        __sock_sendmsg+0x21c/0x270
[  540.196704][T21031]        ____sys_sendmsg+0x505/0x830
[  540.201983][T21031]        ___sys_sendmsg+0x21f/0x2a0
[  540.207166][T21031]        __x64_sys_sendmsg+0x19b/0x260
[  540.212647][T21031]        do_syscall_64+0xfa/0xfa0
[  540.217679][T21031]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.224090][T21031] 
[  540.224090][T21031] other info that might help us debug this:
[  540.224090][T21031] 
[  540.234476][T21031] Chain exists of:
[  540.234476][T21031]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52
[  540.234476][T21031] 
[  540.248210][T21031]  Possible unsafe locking scenario:
[  540.248210][T21031] 
[  540.256172][T21031]        CPU0                    CPU1
[  540.261521][T21031]        ----                    ----
[  540.266870][T21031]   lock(&q->q_usage_counter(io)#52);
[  540.272236][T21031]                                lock(fs_reclaim);
[  540.278821][T21031]                                lock(&q->q_usage_counter(io)#52);
[  540.286798][T21031]   lock(&q->elevator_lock);
[  540.291397][T21031] 
[  540.291397][T21031]  *** DEADLOCK ***
[  540.291397][T21031] 
[  540.299615][T21031] 6 locks held by syz.4.4226/21031:
[  540.304802][T21031]  #0: ffffffff8f331e90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  540.313022][T21031]  #1: ffffffff8f331ca8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  540.322074][T21031]  #2: ffff888024cd49c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0
[  540.333475][T21031]  #3: ffff888024cd48d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0
[  540.344521][T21031]  #4: ffff8881433f3b88 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0
[  540.355132][T21031]  #5: ffff8881433f3bc0 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x1ca/0x4c0
[  540.366005][T21031] 
[  540.366005][T21031] stack backtrace:
[  540.371907][T21031] CPU: 1 UID: 0 PID: 21031 Comm: syz.4.4226 Not tainted syzkaller #0 PREEMPT(full) 
[  540.371924][T21031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  540.371933][T21031] Call Trace:
[  540.371941][T21031]  <TASK>
[  540.371948][T21031]  dump_stack_lvl+0x189/0x250
[  540.371970][T21031]  ? __pfx_dump_stack_lvl+0x10/0x10
[  540.371987][T21031]  ? __pfx__printk+0x10/0x10
[  540.372002][T21031]  ? print_lock_name+0xde/0x100
[  540.372016][T21031]  print_circular_bug+0x2ee/0x310
[  540.372034][T21031]  check_noncircular+0x134/0x160
[  540.372053][T21031]  validate_chain+0xb9b/0x2140
[  540.372077][T21031]  __lock_acquire+0xab9/0xd20
[  540.372092][T21031]  ? elevator_change+0x1e5/0x4c0
[  540.372110][T21031]  lock_acquire+0x120/0x360
[  540.372122][T21031]  ? elevator_change+0x1e5/0x4c0
[  540.372145][T21031]  __mutex_lock+0x187/0x1350
[  540.372157][T21031]  ? elevator_change+0x1e5/0x4c0
[  540.372176][T21031]  ? xa_find_after+0xae/0x430
[  540.372192][T21031]  ? xa_find_after+0x402/0x430
[  540.372207][T21031]  ? elevator_change+0x1e5/0x4c0
[  540.372225][T21031]  ? xa_find_after+0xae/0x430
[  540.372238][T21031]  ? __pfx___mutex_lock+0x10/0x10
[  540.372252][T21031]  ? __pfx_blk_mq_cancel_work_sync+0x10/0x10
[  540.372270][T21031]  elevator_change+0x1e5/0x4c0
[  540.372291][T21031]  elevator_set_none+0x42/0xb0
[  540.372311][T21031]  blk_mq_update_nr_hw_queues+0x598/0x1ab0
[  540.372332][T21031]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  540.372354][T21031]  ? sysfs_add_file_mode_ns+0x259/0x300
[  540.372372][T21031]  nbd_start_device+0x17f/0xb10
[  540.372389][T21031]  ? device_create_file+0xf4/0x1c0
[  540.372405][T21031]  nbd_genl_connect+0x135b/0x18f0
[  540.372422][T21031]  ? __pfx_nbd_genl_connect+0x10/0x10
[  540.372438][T21031]  ? rcu_is_watching+0x15/0xb0
[  540.372454][T21031]  ? __nla_parse+0x40/0x60
[  540.372470][T21031]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  540.372491][T21031]  genl_family_rcv_msg_doit+0x215/0x300
[  540.372511][T21031]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  540.372534][T21031]  ? stack_trace_save+0x9c/0xe0
[  540.372553][T21031]  genl_rcv_msg+0x60e/0x790
[  540.372572][T21031]  ? __pfx_genl_rcv_msg+0x10/0x10
[  540.372588][T21031]  ? __pfx_nbd_genl_connect+0x10/0x10
[  540.372605][T21031]  netlink_rcv_skb+0x208/0x470
[  540.372618][T21031]  ? __lock_acquire+0xab9/0xd20
[  540.372630][T21031]  ? __pfx_genl_rcv_msg+0x10/0x10
[  540.372647][T21031]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  540.372666][T21031]  ? down_read+0x1ad/0x2e0
[  540.372680][T21031]  genl_rcv+0x28/0x40
[  540.372695][T21031]  netlink_unicast+0x82f/0x9e0
[  540.372717][T21031]  ? __pfx_netlink_unicast+0x10/0x10
[  540.372736][T21031]  ? netlink_sendmsg+0x642/0xb30
[  540.372748][T21031]  ? skb_put+0x11b/0x210
[  540.372763][T21031]  netlink_sendmsg+0x805/0xb30
[  540.372779][T21031]  ? __pfx_netlink_sendmsg+0x10/0x10
[  540.372794][T21031]  ? aa_sock_msg_perm+0xf1/0x1d0
[  540.372817][T21031]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  540.372830][T21031]  ? __pfx_netlink_sendmsg+0x10/0x10
[  540.372844][T21031]  __sock_sendmsg+0x21c/0x270
[  540.372863][T21031]  ____sys_sendmsg+0x505/0x830
[  540.372879][T21031]  ? __pfx_____sys_sendmsg+0x10/0x10
[  540.372897][T21031]  ? import_iovec+0x74/0xa0
[  540.372914][T21031]  ___sys_sendmsg+0x21f/0x2a0
[  540.372929][T21031]  ? __pfx____sys_sendmsg+0x10/0x10
[  540.372957][T21031]  ? __fget_files+0x2a/0x420
[  540.372969][T21031]  ? __fget_files+0x3a0/0x420
[  540.372985][T21031]  __x64_sys_sendmsg+0x19b/0x260
[  540.373000][T21031]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  540.373020][T21031]  ? do_syscall_64+0xbe/0xfa0
[  540.373040][T21031]  do_syscall_64+0xfa/0xfa0
[  540.373057][T21031]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.373075][T21031]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.373088][T21031]  ? clear_bhb_loop+0x60/0xb0
[  540.373103][T21031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.373116][T21031] RIP: 0033:0x7f1f2d38f749
[  540.373130][T21031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  540.373143][T21031] RSP: 002b:00007f1f2e292038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  540.373157][T21031] RAX: ffffffffffffffda RBX: 00007f1f2d5e5fa0 RCX: 00007f1f2d38f749
[  540.373167][T21031] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000004
[  540.373177][T21031] RBP: 00007f1f2d413f91 R08: 0000000000000000 R09: 0000000000000000
[  540.373186][T21031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  540.373194][T21031] R13: 00007f1f2d5e6038 R14: 00007f1f2d5e5fa0 R15: 00007ffe9fa53c48
[  540.373210][T21031]  </TASK>
[  540.821016][T21056] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  540.909032][   T52] block nbd3: Receive control failed (result -32)
[  540.931140][T20007] block nbd3: Receive control failed (result -32)
[  540.937924][ T5837] block nbd3: Receive control failed (result -32)