last executing test programs:

1m13.631240424s ago: executing program 1 (id=3091):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0x0, 0x8000}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0)

1m13.36089489s ago: executing program 1 (id=3093):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000440), r0) (async)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000c40)={0x20, r1, 0x539, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0xc840)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5c}, 0x48)

1m13.118200993s ago: executing program 1 (id=3096):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a00020057"], 0x48}}, 0x4044004) (async)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x0) (async)
sendmmsg$inet6(r3, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xe6aa0a9f27214269)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

10.993561967s ago: executing program 1 (id=3100):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='nv\x00', 0x3) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='nv\x00', 0x3)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000007080)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000280)="59612fec10d8b457ddf6fbd56bb7e220b79bf3edb740cb21e4ed762e80dab9769abb0a6467248cce32", 0x29}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004900)={0xa, 0x4e20, 0x6, @loopback, 0x7}, 0x1c, 0x0}}], 0x3, 0x48800)
shutdown(r0, 0x1)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
socket$alg(0x26, 0x5, 0x0) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
accept4(r5, 0x0, 0x0, 0x0) (async)
r6 = accept4(r5, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), r6)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x24, 0x4000008, 0x16}, 0x2c)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa}]}, 0x2c}}, 0x2a6da29f03e74a82)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r3)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x74, r8, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x48080)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x28, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x16, 0x12b, 0x0, 0x0, @binary="088732d9112f6c537987a41c89a873673833"}]}, 0x28}], 0x1}, 0x0)

10.971573011s ago: executing program 1 (id=3105):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_buf(r0, 0x1, 0x48, 0x0, &(0x7f00000003c0))
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001800000007000000000000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'pim6reg1\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={r6, 0x1, 0x1, @local}, 0x10) (async)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000780)={r6, 0x1, 0x6, @local}, 0x10) (async)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40004) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
writev(r9, &(0x7f0000000540)=[{&(0x7f0000000000)="144737861017cf5a9b7380c988ca", 0xe}], 0x1) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="01000200000001000000090000007c00038008000100020000000800040002000000060007004e200000080003000100000014000600fe8800000000000000000000000000011400027b480000000000006f5f62726964676500140002"], 0x90}}, 0x0)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000380)=0x5, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r7, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa00}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
bind$netlink(r1, 0x0, 0x0)
write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24)

10.948303988s ago: executing program 1 (id=3107):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x90) (async)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x4e23, 0x6, 0x4e20, 0x9, 0xa, 0x80, 0x20, 0x2f, 0x0, 0xee01}, {0x0, 0xffffffffffffffff, 0x2, 0x10, 0x3, 0x7ff, 0xff, 0x16723589}, {0x1, 0x4, 0x2, 0x4}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in=@loopback, 0x3501, 0x3, 0x2, 0xb, 0x5, 0x8, 0x29ad}}, 0xe8) (async, rerun: 32)
r3 = accept4(r1, 0x0, 0x0, 0x800) (rerun: 32)
sendto$inet6(r3, &(0x7f0000000440)="df6d5f", 0x3, 0x10, 0x0, 0x0) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000200)=0xc) (async, rerun: 64)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1, 0x0, 0x1}, {@in=@dev, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) (async)
socket$inet(0x2, 0x3, 0x7) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x10) (rerun: 64)

2.700857666s ago: executing program 0 (id=3164):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0) (async)
r1 = socket(0x28, 0x5, 0x0) (async)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
listen(r2, 0x4) (async)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmsg$SOCK_DESTROY(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000002680)={0x121c, 0x15, 0x300, 0x70bd29, 0x25dfdbff, {0x21, 0x21}, [@INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "448d4ffe5af7724932cfcf8c9acbcb469e0f151faa61c42d220f8bde6da71ebff4bff23167d3496fa23bae76f659c78ac36cc4f4db83ae713bbe6c8598c0b51557d9ec3d5d11aecf67a21176b38f8ea475b20d02fd21cbfe19a0f73fdcb1e18e57530463b412b4c28f368e2ee98355c38beb3a8cb2f89a"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "401aeae817b13ce8fa649d494b802dfa34d0865ddd0dfa9ed31860e1e04c03daa677c270cad11cd77a0a94fa6fa3ea5af515ff9956781b2568cedaef381ca82c0875becb546e51cc1a2bf2e5d201b7719dbb2b1c130bfc49666ad0c59081039eb2ee8e2ede9262b2c8129ead8599271cf3567ebdb573cf3f24f3dfe49f99cfd69bf0bd126161352788393683c9e5510637ce35ed920176a047a6"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "c545e6af03fc56ee107fb56fb3d156c6054eb37306e7e6d098652d33308d18e9014d33504be6ded7b520adb964cc5dd8761a308f23498498302b122a6684898a2f11acd0f3f051b3f95a43437d30467f4b18c08e20b4035625f03fc1b46e3dab3371ba127c97f8d49bd34e47aa82bc6ea29bb73813ba5a6fc51249099d3c854ab672fd3fbd37c4d02c5aa1927199b5a8000d904e0d7d5dd916da67d825302677e9be8f83650ee0ae07e930426cd82a0245797ed5978b2743bcd7c83b3652603c276e1ca697c10d38b9c408bd8eb21edc340c90af6bee4a43412ca9b699205a19cb"}]}, 0x121c}}, 0x4080)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async)
recvmmsg$unix(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x4060014) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r10=>0x0}) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="3c00508011000100221941ea15b918e90a6327c696000000080007000100"], 0x58}}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x24, r8, 0x801, 0x400, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001680)=""/4086, 0xff6}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}, 0xffffffff}], 0x1, 0x2, 0x0)

2.357889246s ago: executing program 4 (id=3166):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x58}, 0x1, 0x2, 0x0, 0xc081}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\t\x00\x00\x00\n\x00\x00\x00B\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r2}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r2}, 0x38)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x4, <r3=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r3, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000100)}, 0x10)

2.270556848s ago: executing program 4 (id=3168):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68)
r1 = socket$kcm(0x29, 0x7, 0x0)
recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/97, 0x61}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000200)=""/248, 0xf8}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/23, 0x17}, {&(0x7f00000004c0)=""/210, 0xd2}], 0x7, &(0x7f0000000640)=""/64, 0x40}, 0x40000000)
setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000006c0)=0x8, 0x4)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000700)={0x42, 0x1, 0x3}, 0x10)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000740))
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000780))
r2 = accept(r1, 0x0, &(0x7f00000007c0))
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x5, 0x6, 0x501, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40008d0)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000940))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000009c0), &(0x7f0000000a00)=0x4)
close(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000a40)=[@in6={0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8eff}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x9}], 0x38)
sendto$inet6(r2, &(0x7f0000000a80)="9bbf2c01792370165ebfff6145fd4b02a49d8923758347a55f3d0074e235c5f1522c320571b2a44a3318705ae195b7cbab8b68affdfb6edbdb46fea8f73a66d68c44145539b91424ac62e5fd56047ec390ea6d480c7ea9d1b2222570a102580ebade4f52cb57e926e1898223df153563fd74ebc290df052271f8ca797724d8e8caa66bca20866b200c672b9703be831e9654d079abb5f0b0c997792b9d653d9750f6964fc09caf8e286bd7dd7a599939c1c87f3f209039990c086b155582eff7ddca", 0xc2, 0x800, &(0x7f0000000b80)={0xa, 0x4e20, 0x9, @loopback, 0x40}, 0x1c)
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000bc0)=0x3, &(0x7f0000000c00)=0x2)
getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000c40), &(0x7f0000000c80)=0x10)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000d00)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @multicast1}, 0x102, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000cc0)='pim6reg0\x00', 0x40, 0x7, 0x3ff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000dc0), r2)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004091}, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000ec0))
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000f00))
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000f40))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000f80)=0x8, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000fc0)="1e56f268f71dca4f75227360427c701196130e16cd08c375200dcc5c773ef2f47192e076d03fedcc18bbeb0933e64dae4961314b2c93e835b24fb0e3dff8e3baaf9bbd6d0d64a39d9a1b913318a0c0e5a77db4fa708178f01099684b7b745d9a67ca1d", 0x63, 0x1, 0x0, 0x0)

2.121052395s ago: executing program 2 (id=3169):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@local, 0xe, 0x2, 0x0, 0x3}, 0x20) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) (async)
accept4(r1, 0x0, 0x0, 0x0) (async)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg0\x00'}) (async)
sendmsg$inet_sctp(r2, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000008400080f050000003000000000000000"], 0x18, 0x4014}, 0x2c0408d0)
unshare(0x20000400) (async)
r3 = socket$key(0xf, 0x3, 0x2)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001500)={<r4=>0x0, "64f8656dbd07432b88ecea0e905eb6e7"})
close(r2) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000440)={r4, 0x4, 0x6}) (async)
sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000800000a00ffff00000000fe8000000000000000000000000000aa000000000000000008001200000000000000000000000000060000000000000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a00"/160], 0xa0}}, 0x0) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000980)='io.stat\x00', 0x0, 0x0) (async)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @initdev}, &(0x7f0000000100)=0xc)

1.928933755s ago: executing program 4 (id=3171):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0xd, &(0x7f0000000040), 0x4)
setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a00000002100010000000000fc0200000000000000000000000000006401010200000000000000007ae4cb1000000000000000200a00020000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000000000000005000110000000000000000000000ffffac1414bbffffffff000000000000000000000000e0000002000000000000000000000000ac1414aa0000000000000000000000003c040000020000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="140004006e736376663000000000000101000000080005"], 0x50}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000014000000240007800c00040000000000000000000c00"], 0x38}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'sit0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x40006}]}, 0x2c}}, 0x40)
r9 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44)
connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c)
setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000000)=@req3={0xfffffffc, 0x0, 0x0, 0x44d, 0x4cde77dc, 0x1ff, 0x80000000}, 0x1c)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000003c0)="33406e9fcbc4a17e98df779813913cb00efd89e64161621fa9dfd1e4cada6afa4ec22811750c03badf1211459a1984d14340fac6ec4a011f", 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x1ff, 0x0, 0x5}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x4}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0xb}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000891}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0)
connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e23, 0xf4, @loopback, 0x9}, 0x1c)
socket$qrtr(0x2a, 0x2, 0x0)

1.848682804s ago: executing program 2 (id=3172):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={<r2=>0x0, @broadcast, @dev}, &(0x7f0000000040)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="000000e7ff05000014003500626f6e643000000000000000000004000a000100", @ANYBLOB="400000001000030400"/20, @ANYRES32=r2, @ANYRESDEC=r1, @ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x214, 0x30, 0x1, 0x0, 0x0, {}, [{0x200, 0x1, [@m_gact={0xf4, 0x1f, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x6, 0x6, 0x1, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x0, 0x0, 0xfffffffe, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x88f, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x67a, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2557, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x2, 0x0, 0xfffffff4, 0x2}}]}, {0x5b, 0x6, "524816dc5e05f5af7236ef3f5424ca289711656b2ac245973a90fc5feaaefa6c212f1d1da3b6686be1b49ce37a002dd65501c12d49426768020a8cbf4c0b3ae433b71dd30a4e359ef796b6403c20ee5eeca7f9d1a20d52"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x64, 0xf, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xfffff173, 0x10000000, 0xc0000, 0x7fffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xa, 0x3, 0x5, 0x868b}}]}, {0x8, 0x6, "7342741e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0xa4, 0x15, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x6c, 0x6, "857108ac812fd355de5b1c74a0ebc8b90dc9a74d848b94592126f77fffa158cda24ce4e4eaec37b869e312c3bcfd08701ad6fa596c2747df8e85a5898bd05829b245732fcddaa58df66753ad91f86fdcd4ccdd386bab97081625e51639948def4fd344e9e8988559"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x214}}, 0x814)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000008000000001"], 0x48)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=@ipmr_delroute={0x7c, 0x19, 0x400, 0x70bd24, 0x25dfdbfd, {0x80, 0x14, 0x80, 0xe, 0xfe, 0x3, 0xfd, 0xa, 0x200}, [@RTA_NH_ID={0x8, 0x1e, 0x4}, @RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_TABLE={0x8, 0xf, 0x2}, @RTA_UID={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_METRICS={0x35, 0x8, 0x0, 0x1, "fce665c7d3aa848c079f6745e4f5c62cbd318d534eeeb26fb6413ebafbb76b59d34bea9af6b9b2e542c899c898a28a03be"}]}, 0x7c}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'syzkaller0\x00', 0x400})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000007c0)={'gre0\x00', r5, 0x8000, 0x7, 0x1ff, 0x9897, {{0x46, 0x4, 0x2, 0x3e, 0x118, 0x67, 0x0, 0x2d, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @cipso={0x86, 0x42, 0x0, [{0x2, 0xc, "a8cd313feb1c7e95c61e"}, {0x0, 0xd, "e9159a0691be69d92a82cb"}, {0x0, 0xe, "fa9f2dfbc74a3dad195648b3"}, {0x7, 0x6, "bfd7510a"}, {0x0, 0x9, "06241e66a34deb"}, {0x1, 0x6, 'tsp\t'}]}, @end, @generic={0x86, 0x12, "27efa3f9e0992a3306fb07bca3d48fb1"}, @timestamp={0x44, 0x2c, 0xa, 0x0, 0x4, [0xb9a, 0x8, 0x2, 0x38000000, 0x9, 0x4, 0xb79, 0xb, 0x4, 0x7fff]}, @lsrr={0x83, 0x1f, 0x37, [@multicast2, @broadcast, @empty, @remote, @loopback, @broadcast, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0x63, [@remote, @empty, @broadcast]}, @rr={0x7, 0xb, 0x74, [@dev={0xac, 0x14, 0x14, 0x28}, @local]}, @noop, @timestamp_addr={0x44, 0x44, 0xe, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@rand_addr=0x64010101, 0x1}, {@local, 0x80000001}, {@private=0xa010100, 0xfffffe01}, {@loopback, 0x1}, {@rand_addr=0x64010100, 0x2}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x618}]}]}}}}})
sendmsg$inet(r8, 0x0, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x4040000)
close(0x4)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1}, 0x8}], 0x1, 0x2, 0x0)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000240))
ioctl$int_in(r11, 0x5452, &(0x7f0000000000)=0xbe3)
close(r11)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x44, 0x10, &(0x7f0000000040)}, 0x48)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x38}}, 0x20000000)

1.689045047s ago: executing program 0 (id=3173):
r0 = socket(0x1e, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x26}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000"], 0xdc}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
socket$kcm(0x2, 0xa, 0x2)
socket(0x11, 0x800000003, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f00000003c0)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3}, 0x14)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
writev(r5, &(0x7f0000000480)=[{&(0x7f0000000200)="b08a34", 0x3}], 0x1)
splice(r4, 0x0, r6, 0x0, 0x8000000000025a5, 0x0)
shutdown(r2, 0x1)

1.676181352s ago: executing program 3 (id=3174):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300021000000000000000040000000200080008000000540000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000020000200010000000000000005fd80ffffff05000500000000000a"], 0x80}, 0x1, 0x7}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x0, [{}]}]}}, 0x0, 0x32}, 0x20)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f00000001c0))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r3, 0x0, 0x12, 0x0, &(0x7f0000000700))
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x1, 0xfffff038}, {0x6}]}, 0x10)

1.405753855s ago: executing program 3 (id=3175):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x18, r1, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)

1.389370441s ago: executing program 4 (id=3176):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4114)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x188, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xfffffffffffffe44}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x188}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

1.352657243s ago: executing program 0 (id=3177):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x3f2, 0x4, 0x70bd28, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4044}, 0x20000081) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x402c880}, 0x80) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'macvtap0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) (async)
socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e800000000010103000000000000000000000008140005800e0001006674702d32303030300000000800074000000002400001800c0002066f5dd3d8a08a9a000c0002800500010021000000060003400001000006000340000100000c000280050001003a0000000600034000000000100005800a000100512e393331000000080008400000c76060000e800c00028005000100010000002c00018014000300000000000000000000000000000000011400040000000000000000000000000000000000060003400002000006000340000200001400018008000100ac1414bb08000200ac1e0001"], 0xe8}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.307488747s ago: executing program 2 (id=3178):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@setlink={0x30, 0x13, 0xb23, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x35400, 0xa}, [@IFLA_NET_NS_FD={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x67dd0}]}, 0x30}}, 0x0)

1.170579261s ago: executing program 3 (id=3179):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x11, 0x9}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5688, 0xe3a, 0xffff, 0x10000}}]}}]}, 0x48}}, 0x4000)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24008000)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1fd1e640032e5f54c92011148ed08734843c5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000003000000cb090000008359a570533ea07445d6d930dfe1d9d322fe7c9fd68775730d00a4683f52eb4edbb57a5000400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed00000000000000003a00000000000000a13908873fd4ae1335a250c41a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

1.01761933s ago: executing program 0 (id=3180):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r0, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1.000589668s ago: executing program 2 (id=3181):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c0018000cac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04ebde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf2efbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280100000a0601010000000000000000000044000780060004404e220000060005404e230053519197914e8b06000000006c0c00194000000000000000070c001940010000000000007f0c00028008000140ac1414bb0900020073797a3200000000400008800c00078008001c40000000030c00078006001d40000000000c000780060005404e2200000c00078008000940000000084c00078008000a400000aadf0900020073797a320000000008000940000000ba300900000000000000000140ac14144408001c40000000050c001b4000000000000006290c11ac2ffb875467be1e00010800094000000015480009400000040108000640000000030500070032000000060004404e210000"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x40004)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r1], 0x58}}, 0x0)

924.918066ms ago: executing program 4 (id=3182):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket(0x840000000002, 0x3, 0xff)
shutdown(r1, 0x1)
sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}], 0x1, 0x20004086)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x88, 0x1403, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0xfffffffffffffe9a, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8001}, 0x44014)

621.941389ms ago: executing program 3 (id=3183):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
bind$802154_dgram(r2, &(0x7f0000000100)={0x24, @long={0x3, 0xffff}}, 0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f00000002c0)=0x7, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7fffffff, '\x00', 0x0, r4, 0x0, 0x3, 0x2}, 0x50)
r5 = epoll_create1(0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000040)={0x80000017})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESDEC=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x4c8c1}, 0xc000)

564.730641ms ago: executing program 0 (id=3184):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000"], 0x64}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x90100, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'veth1_to_bridge\x00', @link_local})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=r0, @ANYBLOB="a50000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x6c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @random=0xf0, 0x41, @void, @val, @void, @val={0x4, 0x6, {0x5, 0x0, 0x5, 0x1}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @void, @void, @void}}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon]}, 0x6c}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xda4, r4, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4e8, 0x11d, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xef, 0x4, 0x101, 0x4, 0x7, 0x0, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x4}, {0x3, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x6, 0x3}, {0x4, 0x9}, {0x1, 0x4}, {0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x7}, {0x1, 0x5}, {}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x6}, {0x2, 0x9}, {0x2}, {0x5, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x2, 0x6}, {0x3, 0x2}, {0x1, 0x1}, {0x3, 0x6}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0x1, 0x24, 0x5, 0x1b, 0x6, 0x5, 0x30, 0x2a, 0x1, 0x30, 0x5, 0xb, 0x12, 0x3, 0x1, 0x60, 0xb, 0x3, 0x5, 0x0, 0x9, 0x3, 0x9]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x18, 0x37, 0x36, 0x18, 0xa, 0x3, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8d}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x51}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x62}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000001}]}, {0x248, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x234, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9a77, 0x6, 0x6, 0x400, 0x0, 0x9ee, 0x6, 0x7ff]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x67, 0x8, 0xc00, 0x800, 0x4, 0x3, 0x1]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x5}, {0x5, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x30, 0x18, 0x1, 0x23, 0xc, 0xe, 0x30, 0xc, 0x36, 0x4, 0xe7885a152ce46dc4, 0x60, 0x60, 0x78]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x40, 0x8, 0x3ff, 0x8001, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4000, 0xfff, 0xff, 0x2, 0x2, 0x7, 0x0, 0x7]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x21e3, 0x9, 0x8, 0x200, 0x9, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x60, 0x6, 0x9, 0x0, 0x3, 0xc, 0xb, 0x1, 0x5, 0x12, 0x6, 0x6c, 0x30, 0x36, 0x3, 0x24, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xd2d8, 0x9, 0xd, 0x2, 0x0, 0x7, 0x93]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x1, 0x4, 0xd, 0x9, 0x6, 0x8]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x16, 0x30, 0x16, 0x24, 0x3, 0x60, 0x16, 0xb, 0xb, 0x36, 0x36, 0x12, 0x1, 0x18, 0xb, 0x1b, 0xc, 0x4, 0xc, 0x5, 0x36, 0x6c, 0x5, 0xbc7431aa84e33f25, 0x16, 0x5, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x6, 0x0, 0x5, 0x7, 0x9, 0x6, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x800, 0xc492, 0xa, 0xfffb, 0x4, 0x401]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x7, 0x3}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x8}, {0x7, 0xa}, {0x6, 0x4}, {0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0x5}, {0x6, 0x1}, {0x2, 0x3}, {0x6, 0xa}, {0x6, 0x6}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x4, 0x5}, {0x2, 0x8}, {0x1, 0x2}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x2, 0x7}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x8}, {0x7, 0xa}, {0x0, 0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x3}, {0x1, 0x6}, {0x6, 0x6}, {0x0, 0x1}, {}, {0x2, 0x5}, {0x3, 0x7}, {0x3, 0x2}, {0x2, 0x4}, {0x6}, {0x5, 0x9}, {0x6, 0x3}, {0x5, 0x2}, {0x0, 0x1}, {0x5, 0x4}, {0x2}, {0x7, 0xa}, {0x6, 0x6}, {0x2, 0x9}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x5, 0x7}, {0x4, 0x1}, {0x3, 0x7}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x48, 0x0, 0x2, 0xc, 0xb, 0x9, 0xc, 0x2, 0x1b, 0x1, 0x6c, 0x24, 0x60, 0x18, 0xb, 0x18, 0xb, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x3, 0x48, 0x1b, 0x29, 0x7f, 0x24, 0x1b, 0x6c, 0xb, 0x30, 0x60, 0xc, 0x4, 0x1, 0x3, 0x1b, 0x9, 0x6, 0x48, 0x1b, 0x1, 0x12, 0x18, 0x48, 0x4, 0x6, 0x1, 0x48, 0x48, 0x48, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfe}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x140, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x40, 0x2800, 0x1, 0xf2f, 0x8, 0xe79f, 0x9]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0x6c, 0xc, 0x6c, 0x12, 0x3, 0xc, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xa4c2b4b18a896ceb, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe, 0xfffc, 0x8, 0x1, 0xfff9, 0x20, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xb}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x0, 0x3, 0x81, 0x2, 0x401, 0x5e, 0xbe6]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x6}, {0x1, 0x2}, {0x6, 0x8}, {0x1, 0x4}, {0x2, 0x2}, {0x1, 0xa}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x7}, {0x3, 0x1}, {0x5, 0x6}, {0x0, 0x6}, {0x6, 0xa}, {0x3, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x2}, {0x4, 0x1}, {0x4}, {0x6, 0x1}, {0x3, 0x6}, {0x5, 0x4}, {0x3, 0x1}, {0x3, 0x9}, {0x2, 0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x4, 0x6}, {0x6, 0x6}, {0x2, 0x8}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xbff0, 0x7, 0xe7d, 0x7, 0xff, 0x8, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x7}, {0x5, 0x1}, {0x3}, {0x7}, {0x1, 0x2}, {}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {0x3, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x5}, {0x1, 0xa}, {0x7}, {0x4, 0x1}, {0x0, 0x9}, {0x6, 0x1}, {0x0, 0x2}, {0x5, 0x3}, {0x5, 0xa}, {0x4, 0x1}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x2}, {0x2, 0x7}, {0x5, 0x6}, {0x0, 0xa}, {0x0, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x3, 0x6}, {0x2, 0x1}, {0x6, 0x9}, {0x1}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x2}, {0x6, 0x3}, {}, {0x5, 0x9}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x5, 0x2, 0x8, 0x7, 0x7, 0x2dd, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x540, 0x11d, 0x0, 0x1, [{0x29c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7fff, 0x2, 0xffcf, 0x9, 0x8, 0x1000, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x476e, 0xfffe, 0xa, 0x4, 0xff, 0x800, 0x4, 0x195]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x9}, {0x3, 0x8}, {0x0, 0x8}, {0x2, 0x5}, {0x2, 0x8}, {0x5, 0x3}, {0x1, 0xa}, {}, {0x7, 0x9}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0x6}, {0x7, 0x4}, {0x6, 0x4}, {0x1, 0x4}, {0x5}, {0x5}, {0x7}, {0x5, 0x4}, {0x6, 0x9}, {0x3, 0x5}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x1}, {0x5, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0xc, 0x5, 0x1, 0x5, 0x18, 0x24, 0x7, 0x24, 0xc, 0x36, 0x24, 0x1b, 0x24, 0x30, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0xd, 0x6b, 0x6, 0x7, 0x5, 0x7, 0x3ddb]}}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x1, 0x0, 0x5, 0x7, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x4, 0x18, 0xc, 0x48, 0x36, 0xc, 0x30, 0x3, 0x24, 0x36, 0xc, 0x6c, 0x36, 0x3, 0x0, 0x12, 0x3, 0xc, 0xb, 0x30, 0x36, 0x36, 0x30, 0x5]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x60, 0x36, 0x12, 0x60, 0x5, 0x11, 0x5, 0x60, 0x12, 0x3, 0x5, 0x6, 0x5, 0x24, 0xc, 0x2, 0x6c, 0x6c, 0x49, 0x24, 0x30, 0xc, 0x60, 0x36, 0x0, 0x30, 0x2, 0xe]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x3, 0x6c, 0x16, 0x1b, 0x18]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x4, 0x1}, {0x4, 0x4}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x4}, {0x2, 0x2}, {0x2, 0xa}, {0x3, 0x3}, {0x2, 0x8}, {0x1, 0x4}, {0x3}, {0x1, 0x6}, {0x3, 0x4}, {0x0, 0x6}, {0x3, 0x2}, {0x7}, {0x2, 0xa}, {0x2}, {0x6}, {0x7, 0x9}, {0x6, 0x9}, {0x6}, {0x0, 0x4}, {0x3, 0x8}, {0x3, 0x1}, {0x3, 0x4}, {0x4, 0x5}, {0x6, 0x1}, {0x7}, {0x7, 0x2}, {0x4}, {0x7, 0x1}, {0x6, 0x4}, {0x4, 0x7}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x2}, {0x3, 0x5}, {0x7, 0x7}, {0x7, 0x7}, {0x7, 0xa}, {0x3, 0xa}, {0x5, 0x6}, {0x1, 0x8}, {0x4, 0x7}, {0x7, 0x6}, {0x7, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x3, 0x7}, {0x4, 0x7}, {0x0, 0x3}, {0x2, 0x7}, {0x7, 0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x5, 0x1}, {0x2, 0x7}, {0x1}]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x6, 0x2, 0x7, 0x7c1, 0x8, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xc, 0x60, 0xc, 0x6, 0x12, 0x9, 0x6c, 0x1b, 0xbaa5defc9c9b277, 0xc, 0x9, 0xc, 0x12, 0x3, 0x18, 0x1, 0x3, 0x48, 0x3, 0x6, 0x9, 0x3, 0x9, 0xc, 0x48, 0x3, 0x60, 0x9, 0x60]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6a, 0x18, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xa, 0x6de2, 0x3ff, 0x40, 0x7ff, 0xa243]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x9, 0x5e, 0x7, 0x7, 0x6, 0xd5c]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x2f5, 0x4, 0x7561, 0x2, 0x4, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xac}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x43}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x30, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1659, 0x6, 0x101, 0x1, 0x640, 0x1, 0x5, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x3, 0x5, 0xf001, 0x8, 0x9, 0x100]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x1b, 0x60, 0xc, 0x36, 0x6c, 0x6, 0xf, 0x60, 0x5, 0xb, 0x9, 0x5, 0x2, 0x30, 0x1c, 0x18, 0x1, 0x16, 0xc, 0x30, 0x36]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xc361, 0x7, 0x4, 0x2, 0xd5c, 0x5, 0x2]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x5, 0x4, 0x40, 0x9, 0x8, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfff, 0x3, 0x2e4c, 0x7, 0x7f, 0x8, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0xa}, {0x2, 0x9}, {0x3}, {0x5}, {0x4, 0x2}, {0x5}, {0x1, 0x3}, {0x5, 0x7}, {0x1, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x84}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x668d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x85}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x58}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x51}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xec3b, 0x8001, 0x81, 0x2, 0x5, 0xe3, 0x9, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x80, 0x6, 0x100, 0x5, 0x1ff, 0x8001, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x3, 0x6, 0x101, 0x1b1, 0x1800, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0xa, 0x4a, 0x200, 0xd, 0xe, 0x4]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x3}, {0x7, 0xa}, {0x5}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x4, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {0x7, 0x1}, {0x2, 0x7}, {0x0, 0x3}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0x2}, {0x5, 0x5}, {0x7, 0xa}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0x4}, {0x3, 0x3}, {0x6, 0x6}, {0x1}, {0x6, 0x4}, {0x6, 0x8}, {0x6, 0x3}, {0x2, 0x7}, {0x0, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x7}, {0x0, 0x6}, {0x1, 0x1}, {0x7, 0xa}, {0x5, 0x5}, {0x1, 0x1}, {0x0, 0xa}, {0x2, 0xa}, {0x3, 0x9}, {}, {0x2, 0x7}, {0x2}, {0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}]}, @NL80211_ATTR_TID_CONFIG={0x23c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ac, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x2, 0x7}, {0x4, 0x3}, {0x6}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0x4}, {0x7, 0x2}, {0x4}, {0x4, 0x1}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x1}, {0x4, 0x7}, {0x1, 0x7}, {0x5, 0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x6, 0x2}, {0x2, 0x7}, {0x3, 0x6}, {0x2, 0x9}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x16, 0x39, 0x69, 0x1b, 0x60, 0x36, 0x18, 0x3, 0x36, 0xc, 0x9, 0x19, 0x18, 0x18, 0x4, 0xc, 0x9, 0x56, 0x9, 0x0, 0x16, 0x6, 0x51, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0x4}, {0x0, 0x17}, {0x3, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0xaf6845e612b6e7cb}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x9, 0x7, 0x3, 0x7, 0x7a, 0x3]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x16, 0x2, 0x16, 0x1, 0x0, 0x4, 0x30, 0x60, 0x16, 0x2, 0x43, 0xc, 0x3, 0x60, 0x9, 0x7b, 0x3, 0x24, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x9, 0xf3b, 0x7f, 0x200, 0x5, 0x9, 0xfeff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x5, 0x8c9f, 0xab, 0xfff8]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x100, 0xed8, 0x40, 0x3, 0x7, 0x2]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x6, 0x6}, {0x5, 0x2}, {0x3, 0x5}, {0x6, 0xa}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x7}, {0x6}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0x7}, {0x7, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0xa}, {0x4, 0x9}, {0x6, 0x4}, {0x1, 0x3}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x7, 0x9}, {0x3, 0x1}, {0x2}, {0x0, 0xa}, {0x5, 0x1}, {0x6, 0x2}, {0x2, 0x1}, {0x1, 0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x3}, {0x7, 0x6}, {0x6, 0x7}, {0x2, 0x9}, {0x6, 0x9}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x4, 0x8}, {0x1}, {0x7, 0x1}, {0x6, 0x9}, {0x3, 0xa}, {0x2, 0x9}, {0x7, 0x8}, {0x4}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x6, 0x7}, {0x7, 0xa}, {0x5, 0x9}, {0x6, 0x9}, {0x5, 0x7}, {0x1, 0xa}, {0x7, 0x3}, {0x4, 0x3}, {0x3, 0x8}, {0x6, 0x5}, {0x6, 0x3}, {0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0xfffe, 0x7, 0x400, 0x3, 0xda, 0x7, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x7, 0x800, 0xfffc, 0xbe8, 0x1, 0x5]}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x69}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xcc, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x11}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x49}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x99a}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0xda4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8850)

493.09059ms ago: executing program 2 (id=3185):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff080001"], 0x4c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)

260.618882ms ago: executing program 3 (id=3186):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0], 0x7c}}, 0x0)

256.902231ms ago: executing program 0 (id=3187):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r1, &(0x7f0000000d00), 0x0, 0x4000000)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r4 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa8"], 0x57)
setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0xd, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x105}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

184.744792ms ago: executing program 2 (id=3188):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket(0x11, 0xa, 0x0)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x29, 0x8, 0x11}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={<r4=>0x0, 0x7ff, 0x6594, 0x6}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x8)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x3, 'syz0\x00', @bcast, 0xfffffdb8, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]})
r7 = socket$key(0xf, 0x3, 0x2)
r8 = syz_init_net_socket$x25(0x3, 0x5, 0x3)
ioctl$SIOCX25SFACILITIES(r8, 0x891d, 0x0)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090008000000ee00000000000000030006000000000004c219c5e37cbba4214ed01cd3f97f2e0200000000000000000000000000000002000100000004d300000602000000e00300050000000000020000003e7a32"], 0x60}, 0x1, 0x7}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r9 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000540)={r4, @in6={{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}}}, &(0x7f0000000240)=0x84)

93.573909ms ago: executing program 3 (id=3189):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000030303"], 0x20}}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @rand_addr=0x64010101}, {0x2, 0x4e21, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6f8, 0x1ff, 0x9})

0s ago: executing program 4 (id=3190):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18eaffff2300010c00011800000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00), 0x0, 0x40010020, 0x0) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140f, 0x4, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc5}, 0x800)

kernel console output (not intermixed with test programs):

eck.
[  249.928841][T10246] netlink: 'syz.3.1143': attribute type 7 has an invalid length.
[  250.108143][T10255] netlink: 'syz.2.1146': attribute type 12 has an invalid length.
[  250.313574][T10259] macsec1: entered promiscuous mode
[  250.318844][T10259] team0: entered promiscuous mode
[  250.337607][T10259] team_slave_0: entered promiscuous mode
[  250.377138][T10259] team_slave_1: entered promiscuous mode
[  250.397639][T10259] macsec1: entered allmulticast mode
[  250.411297][T10259] team0: entered allmulticast mode
[  250.416741][T10259] team_slave_0: entered allmulticast mode
[  250.459612][T10259] team_slave_1: entered allmulticast mode
[  250.467824][T10259] team0: Device macsec1 is already an upper device of the team interface
[  250.504394][T10259] team0: left allmulticast mode
[  250.510555][T10259] team_slave_0: left allmulticast mode
[  250.522224][T10259] team_slave_1: left allmulticast mode
[  250.533521][T10259] team0: left promiscuous mode
[  250.542108][T10259] team_slave_0: left promiscuous mode
[  250.555690][T10259] team_slave_1: left promiscuous mode
[  250.640881][T10274] ip6gre1: entered allmulticast mode
[  250.741547][T10282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  251.472577][T10296] netlink: 'syz.1.1157': attribute type 12 has an invalid length.
[  251.506474][T10293] vlan1: entered allmulticast mode
[  251.528328][T10293] veth0_vlan: entered allmulticast mode
[  251.770348][T10322] netlink: 'syz.4.1162': attribute type 4 has an invalid length.
[  252.146513][T10341] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  252.296498][T10346] IPVS: length: 157 != 24
[  253.056566][T10389] 
: renamed from bridge_slave_0 (while UP)
[  253.425243][   T93] IPVS: starting estimator thread 0...
[  253.535770][T10402] IPVS: using max 25 ests per chain, 60000 per kthread
[  253.576525][T10404] bridge_slave_0: left allmulticast mode
[  253.612554][T10404] bridge_slave_0: left promiscuous mode
[  253.618569][T10404] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.666409][T10404] bridge_slave_1: left allmulticast mode
[  253.690759][T10404] bridge_slave_1: left promiscuous mode
[  253.696623][T10404] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.777455][T10404] bond0: (slave bond_slave_0): Releasing backup interface
[  253.821042][T10421] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  253.900515][T10404] bond0: (slave bond_slave_1): Releasing backup interface
[  253.935395][T10404] team0: Port device C removed
[  253.970975][T10404] team0: Port device team_slave_1 removed
[  254.000872][T10404] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.023535][T10404] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.073558][T10404] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.086016][T10404] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.111437][T10431] netlink: 'syz.3.1192': attribute type 1 has an invalid length.
[  254.153311][T10404] bond0: (slave geneve1): Releasing backup interface
[  254.194565][T10404] bond0: (slave macvlan3): Releasing backup interface
[  254.204248][T10404] veth1_vlan: left allmulticast mode
[  254.239771][ T8552] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  254.268292][T10414] team0: Mode changed to "activebackup"
[  254.288555][T10421] vlan0: entered promiscuous mode
[  254.311922][T10421] team0: Port device vlan0 added
[  254.418107][T10443] __nla_validate_parse: 15 callbacks suppressed
[  254.418128][T10443] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1196'.
[  254.455072][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1196'.
[  254.472880][ T8552] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  254.565092][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'.
[  255.110487][T10472] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1206'.
[  255.285146][T10480] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  255.312831][T10472] netlink: 'syz.3.1206': attribute type 16 has an invalid length.
[  255.329610][T10472] netlink: 'syz.3.1206': attribute type 17 has an invalid length.
[  255.415091][T10474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1206'.
[  255.429974][T10472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.568891][T10492] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1211'.
[  255.698426][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'.
[  255.729118][T10496] netlink: 'syz.3.1213': attribute type 58 has an invalid length.
[  255.749597][T10496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1213'.
[  255.869546][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  255.875926][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  256.217418][T10520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1218'.
[  256.249542][T10520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1218'.
[  256.426752][T10527] sctp: [Deprecated]: syz.1.1221 (pid 10527) Use of struct sctp_assoc_value in delayed_ack socket option.
[  256.426752][T10527] Use struct sctp_sack_info instead
[  256.489017][T10531] netlink: 'syz.4.1223': attribute type 1 has an invalid length.
[  256.507018][T10531] netlink: 'syz.4.1223': attribute type 1 has an invalid length.
[  256.544745][T10531] bridge3: entered promiscuous mode
[  256.550310][T10531] bridge3: entered allmulticast mode
[  256.904669][T10546] 8021q: adding VLAN 0 to HW filter on device bond3
[  256.914621][T10546] bond0: (slave bond3): Enslaving as an active interface with an up link
[  257.336684][T10570] bridge_slave_0: invalid flags given to default FDB implementation
[  257.779587][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  257.968041][T10597] team0: Device gtp0 is of different type
[  258.386637][T10625] netlink: 'syz.4.1247': attribute type 1 has an invalid length.
[  258.847073][T10636] wg1: entered promiscuous mode
[  258.866761][T10636] wg1: entered allmulticast mode
[  258.886812][T10639] veth1_to_bond: entered allmulticast mode
[  259.000415][T10641] bond0: (slave bond_slave_1): Releasing backup interface
[  259.271295][T10641] veth1_to_bond (unregistering): left allmulticast mode
[  259.295124][T10656] sch_fq: defrate 0 ignored.
[  259.472038][T10661] __nla_validate_parse: 7 callbacks suppressed
[  259.472058][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'.
[  259.541442][T10666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1258'.
[  259.553265][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1257'.
[  259.848442][T10680] netlink: 4228 bytes leftover after parsing attributes in process `syz.2.1262'.
[  260.362700][T10701] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1268'.
[  260.419913][T10705] netlink: 'syz.1.1269': attribute type 2 has an invalid length.
[  260.696978][T10724] ieee802154 phy0 wpan0: encryption failed: -22
[  260.924899][T10730] tun0: tun_chr_ioctl cmd 1074025675
[  260.931076][T10730] tun0: persist disabled
[  260.992978][T10732] netlink: 'syz.2.1279': attribute type 1 has an invalid length.
[  261.007089][T10732] netlink: 'syz.2.1279': attribute type 1 has an invalid length.
[  261.627300][T10756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1289'.
[  261.688595][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1289'.
[  261.696742][T10761] netlink: 'syz.3.1290': attribute type 4 has an invalid length.
[  261.726370][T10762] netlink: 'syz.3.1290': attribute type 4 has an invalid length.
[  261.732602][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'.
[  261.766173][T10756] netlink: 'syz.1.1289': attribute type 3 has an invalid length.
[  262.002126][T10781] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1295'.
[  262.040042][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'.
[  262.134505][T10788] nbd: nbd0 already in use
[  262.909780][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  263.385978][T10852] netlink: 'syz.2.1315': attribute type 7 has an invalid length.
[  263.453470][T10852] netlink: 'syz.2.1315': attribute type 8 has an invalid length.
[  263.746963][T10865] openvswitch: netlink: IPv6 tunnel dst address is zero
[  264.143744][T10890] gretap0: entered promiscuous mode
[  264.292548][T10896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.428823][T10902] netlink: 'syz.4.1329': attribute type 21 has an invalid length.
[  264.525206][T10904] netlink: set zone limit has 8 unknown bytes
[  264.578804][T10910] __nla_validate_parse: 13 callbacks suppressed
[  264.578824][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'.
[  264.642666][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'.
[  264.652982][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'.
[  264.724643][T10916] netlink: 'syz.0.1334': attribute type 1 has an invalid length.
[  264.772763][T10916] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1334'.
[  264.805436][T10917] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1334'.
[  264.834277][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1336'.
[  264.951382][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1336'.
[  265.193887][T10929] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  265.220553][T10929] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  265.298750][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1344'.
[  265.490980][T10962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1346'.
[  265.525471][T10962] validate_nla: 6 callbacks suppressed
[  265.525492][T10962] netlink: 'syz.1.1346': attribute type 7 has an invalid length.
[  265.574623][T10962] netlink: 'syz.1.1346': attribute type 8 has an invalid length.
[  265.619252][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1346'.
[  265.679807][T10967] bond0: (slave bridge0): Releasing backup interface
[  265.703804][T10967] bond0: (slave bond3): Error -95 calling ndo_bpf
[  265.754698][T10967] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  266.107460][T10989] netlink: 'syz.2.1354': attribute type 4 has an invalid length.
[  266.525325][T11007] lo: entered allmulticast mode
[  266.550577][T11007] lo: left allmulticast mode
[  267.575496][T11068] lo: entered promiscuous mode
[  267.584976][T11068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  267.635020][T11068] netlink: 'syz.4.1385': attribute type 1 has an invalid length.
[  267.958906][T11085] netlink: 'syz.4.1392': attribute type 10 has an invalid length.
[  267.994339][T11085] bridge_slave_1: left allmulticast mode
[  268.019871][T11085] bridge_slave_1: left promiscuous mode
[  268.026567][T11085] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.059823][T11085] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  268.217987][T11100] netlink: 'syz.4.1396': attribute type 1 has an invalid length.
[  268.361541][T11105] netlink: 'syz.1.1397': attribute type 39 has an invalid length.
[  268.797850][T11119] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.879957][T11119] bond0: (slave rose0): Enslaving as an active interface with an up link
[  269.710283][T11158] __nla_validate_parse: 13 callbacks suppressed
[  269.710306][T11158] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1411'.
[  269.807409][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1411'.
[  269.837271][T11158] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1411'.
[  269.900856][T11158] netlink: 'syz.2.1411': attribute type 2 has an invalid length.
[  269.945375][T11158] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1411'.
[  270.121408][T11167] syzkaller1: entered promiscuous mode
[  270.127030][T11167] syzkaller1: entered allmulticast mode
[  270.584662][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'.
[  270.812020][T11201] netlink: 'syz.1.1422': attribute type 1 has an invalid length.
[  270.984159][T11201] bond4 (unregistering): Released all slaves
[  271.168655][T11206] ip6tnl4: entered promiscuous mode
[  271.173328][T11224] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1426'.
[  271.197154][T11206] ip6tnl4: entered allmulticast mode
[  271.832393][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'.
[  271.928790][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'.
[  272.481301][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'.
[  272.511981][T11279] syzkaller0: entered promiscuous mode
[  272.517506][T11279] syzkaller0: entered allmulticast mode
[  272.538799][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'.
[  272.567007][T11277] chnl_net:caif_netlink_parms(): no params data found
[  272.813024][T11280] chnl_net:caif_netlink_parms(): no params data found
[  273.295655][T11303] ip6erspan0: entered promiscuous mode
[  274.027311][T11345] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  274.860908][T11376] bond0: (slave bond_slave_1): Releasing backup interface
[  274.922434][T11382] sctp: [Deprecated]: syz.3.1464 (pid 11382) Use of struct sctp_assoc_value in delayed_ack socket option.
[  274.922434][T11382] Use struct sctp_sack_info instead
[  274.965938][T11383] __nla_validate_parse: 2 callbacks suppressed
[  274.965959][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'.
[  275.011017][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'.
[  275.335703][T11400] openvswitch: netlink: IPv4 tun info is not correct
[  275.401153][T11403] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.534543][T11409] sit2: entered promiscuous mode
[  275.586594][T11409] sit2: entered allmulticast mode
[  275.897742][T11426] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1474'.
[  275.976891][T11434] team0: Device vti0 is of different type
[  276.022291][T11426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1474'.
[  276.162071][T11438] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  276.771404][T11465] netlink: 'syz.1.1485': attribute type 21 has an invalid length.
[  276.816527][T11465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1485'.
[  277.077837][T11483] netlink: 'syz.3.1491': attribute type 1 has an invalid length.
[  277.105853][T11483] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1491'.
[  277.134299][T11476] 8021q: adding VLAN 0 to HW filter on device team0
[  277.185200][T11476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  277.290990][T11489] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1492'.
[  277.407294][T11492] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1493'.
[  277.461292][T11492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1493'.
[  277.709866][T11504] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  278.300898][T11534] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1507'.
[  279.013159][T11565] netlink: 'syz.3.1515': attribute type 26 has an invalid length.
[  279.195641][T11570] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  279.581549][T11593] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  279.870664][T11604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.131668][T11604] syzkaller0: entered promiscuous mode
[  280.159738][T11604] syzkaller0: entered allmulticast mode
[  280.178045][T11614] __nla_validate_parse: 3 callbacks suppressed
[  280.178064][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1524'.
[  280.191457][T11604] tipc: Resetting bearer <eth:syzkaller0>
[  280.198265][T11606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  280.220593][T11614] netlink: 'syz.2.1524': attribute type 2 has an invalid length.
[  280.228367][T11614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1524'.
[  280.483049][T11603] tipc: Resetting bearer <eth:syzkaller0>
[  280.494958][T11633] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1529'.
[  282.672979][T11603] tipc: Disabling bearer <eth:syzkaller0>
[  282.905656][T11656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1534'.
[  283.025046][T11664] netlink: 'syz.0.1538': attribute type 2 has an invalid length.
[  283.284256][T11672] geneve2: entered promiscuous mode
[  283.302953][ T8068] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0
[  283.336287][ T8068] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0
[  283.367477][ T8068] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0
[  283.412240][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0
[  283.569210][T11685] netlink: 'syz.1.1543': attribute type 18 has an invalid length.
[  283.617354][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1544'.
[  283.949102][T11707] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  283.988916][T11707] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  284.036632][T11707] netlink: 'syz.0.1549': attribute type 17 has an invalid length.
[  284.111332][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'.
[  284.140083][T11707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1549'.
[  284.385260][T11730] dvmrp0: entered allmulticast mode
[  284.430510][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'.
[  284.457714][T11738] dvmrp0: left allmulticast mode
[  284.769126][T11753] netlink: 'syz.0.1561': attribute type 4 has an invalid length.
[  284.945308][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1564'.
[  285.040114][T11759] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1562'.
[  285.201080][T11780] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  285.766953][T11807] syzkaller1: entered promiscuous mode
[  285.773068][T11807] syzkaller1: entered allmulticast mode
[  285.836269][T11816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1580'.
[  285.845578][T11818] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003
[  286.127984][T11835] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  286.196555][T11845] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1585'.
[  286.758052][T11862] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  287.264354][T11886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1596'.
[  287.408894][T11901] netlink: 'syz.1.1598': attribute type 1 has an invalid length.
[  287.420092][T11901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.654859][T11911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1603'.
[  287.762939][T11919] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1602'.
[  287.780251][T11917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1605'.
[  288.215547][T11942] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1612'.
[  288.429956][T11953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1615'.
[  288.492896][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1617'.
[  288.521723][T11957] netlink: 'syz.2.1616': attribute type 33 has an invalid length.
[  288.556929][T11961] netlink: 'syz.1.1618': attribute type 3 has an invalid length.
[  288.597528][T11961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.610925][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'.
[  288.740239][T11964] vlan2: entered promiscuous mode
[  288.745517][T11964] bridge0: entered promiscuous mode
[  288.847107][T11970] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.854431][T11970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.862219][T11970] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.869544][T11970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.897711][T11970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  289.026786][T11979] 8021q: adding VLAN 0 to HW filter on device bond4
[  289.044996][T11986] macvlan3: entered promiscuous mode
[  289.050510][T11986] macvlan3: entered allmulticast mode
[  289.058463][T11986] bond4: (slave macvlan3): Opening slave failed
[  289.140566][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  289.176173][T11989] netlink: 'syz.3.1624': attribute type 12 has an invalid length.
[  290.066893][T12051] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  290.559861][T12075] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.654322][T12078] batadv0: entered promiscuous mode
[  290.659521][ T5960] page_pool_release_retry() stalled pool shutdown: id 34, 1 inflight 60 sec
[  290.671945][T12078] batadv0: entered allmulticast mode
[  291.283792][T12098] __nla_validate_parse: 6 callbacks suppressed
[  291.283813][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1655'.
[  291.617450][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'.
[  292.655288][T12140] netem: change failed
[  292.672954][T12140] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1669'.
[  293.089931][T12160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1675'.
[  293.155200][T12162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1676'.
[  293.246361][T12171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1676'.
[  293.268434][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1679'.
[  293.295121][T12173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1679'.
[  293.549817][T12183] netlink: 'syz.4.1682': attribute type 12 has an invalid length.
[  293.648850][T12188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1684'.
[  293.793249][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'.
[  293.832253][T12201] netlink: 'syz.0.1686': attribute type 10 has an invalid length.
[  294.078136][T12201] team0: Device veth1_macvtap failed to register rx_handler
[  295.092463][T12270] netlink: 'syz.0.1701': attribute type 11 has an invalid length.
[  295.328152][T12267] netlink: 'syz.0.1701': attribute type 26 has an invalid length.
[  295.850259][T12301] netlink: 'syz.2.1708': attribute type 10 has an invalid length.
[  295.893473][T12301] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  295.955799][T12301] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  296.505265][T12332] __nla_validate_parse: 4 callbacks suppressed
[  296.505287][T12332] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1719'.
[  296.556037][T12330] raw_sendmsg: syz.0.1720 forgot to set AF_INET. Fix it!
[  296.911780][T12349] delete_channel: no stack
[  296.973618][T12354] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1725'.
[  297.017099][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1725'.
[  297.302587][T12365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1728'.
[  298.742589][T12437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1746'.
[  299.176915][T12453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1751'.
[  299.449885][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1753'.
[  299.558843][T12468] 8021q: VLANs not supported on ip6_vti0
[  299.927370][T12488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1761'.
[  299.991995][T12493] Bluetooth: MGMT ver 1.23
[  300.457161][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1768'.
[  300.536524][T12521] delete_channel: no stack
[  300.746184][T12517] 8021q: adding VLAN 0 to HW filter on device bond1
[  300.787910][T12522] bridge4: entered promiscuous mode
[  300.791188][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1771'.
[  300.825702][T12522] bridge4: entered allmulticast mode
[  300.911358][T12524] vlan6: entered allmulticast mode
[  300.917197][T12524] bond1: entered allmulticast mode
[  301.138077][T12555] Bluetooth: hci0: Opcode 0x080f failed: -22
[  301.553135][T12567] __nla_validate_parse: 2 callbacks suppressed
[  301.553156][T12567] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1779'.
[  301.748085][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1783'.
[  301.770177][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1782'.
[  301.831659][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1783'.
[  302.990856][T12642] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1798'.
[  303.031436][T12642] netlink: 'syz.3.1798': attribute type 4 has an invalid length.
[  303.129105][T12650] netlink: 'syz.0.1801': attribute type 23 has an invalid length.
[  303.145268][ T5867] Bluetooth: hci0: command tx timeout
[  303.236043][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'.
[  303.252518][T12655] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1802'.
[  303.267081][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'.
[  303.362410][T12658] syzkaller1: entered promiscuous mode
[  303.367949][T12658] syzkaller1: entered allmulticast mode
[  304.173447][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1810'.
[  304.451808][T12696] hsr_slave_0 (unregistering): left promiscuous mode
[  304.803185][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'.
[  305.241999][T12740] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  305.405428][T12745] netlink: 'syz.4.1822': attribute type 1 has an invalid length.
[  305.429862][T12745] netlink: 'syz.4.1822': attribute type 1 has an invalid length.
[  305.432176][   T93] IPVS: starting estimator thread 0...
[  305.589743][T12754] IPVS: using max 23 ests per chain, 55200 per kthread
[  305.716406][T12766] openvswitch: netlink: Flow key attr not present in new flow.
[  305.772880][T12766] openvswitch: netlink: Flow key attr not present in new flow.
[  306.241807][ T5877] tipc: Node number set to 1556228227
[  306.686873][T12815] tipc: Started in network mode
[  306.695669][T12815] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  306.732700][T12815] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  306.781027][T12823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.271377][T12836] netlink: 'syz.1.1846': attribute type 1 has an invalid length.
[  307.305100][T12836] __nla_validate_parse: 9 callbacks suppressed
[  307.305121][T12836] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1846'.
[  307.364700][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'.
[  307.566285][T12852] syz.0.1847 uses old SIOCAX25GETINFO
[  307.772861][ T8552] tipc: Node number set to 10136234
[  308.075397][T12873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1851'.
[  308.298165][T12885] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1851'.
[  308.919581][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1858'.
[  308.964591][T12907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1860'.
[  308.999094][T12909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1861'.
[  309.043306][T12907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1860'.
[  309.473027][ T8068] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  309.790316][T12953] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  309.812681][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1870'.
[  309.833559][T12959] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1868'.
[  309.952365][T12961] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  311.488334][T13017] pim6reg1: entered promiscuous mode
[  311.506068][T13017] pim6reg1: entered allmulticast mode
[  311.733402][T13028] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  312.195810][T13048] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  312.430576][T13070] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  312.683757][T13080] netlink: 'syz.0.1897': attribute type 1 has an invalid length.
[  312.747795][T13085] __nla_validate_parse: 8 callbacks suppressed
[  312.747815][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'.
[  312.971588][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'.
[  313.057583][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'.
[  313.352376][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'.
[  313.458314][T13109] netlink: 'syz.2.1907': attribute type 1 has an invalid length.
[  313.509813][T13109] netlink: 'syz.2.1907': attribute type 11 has an invalid length.
[  313.526919][T13110] sctp: [Deprecated]: syz.2.1907 (pid 13110) Use of struct sctp_assoc_value in delayed_ack socket option.
[  313.526919][T13110] Use struct sctp_sack_info instead
[  313.553862][T13109] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1907'.
[  313.852420][T13127] bridge_slave_0: entered promiscuous mode
[  314.014225][T13133] bridge8: entered allmulticast mode
[  314.061326][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1916'.
[  314.188498][T13141] netlink: 'syz.3.1917': attribute type 3 has an invalid length.
[  314.201925][T13141] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1917'.
[  314.248798][T13141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1917'.
[  314.482314][T13157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1922'.
[  314.862371][T13174] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  314.907056][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1928'.
[  315.069835][T13188] openvswitch: netlink: Message has 8 unknown bytes.
[  315.099624][T13189] openvswitch: netlink: Message has 8 unknown bytes.
[  315.228300][T13193] netlink: 'syz.1.1933': attribute type 29 has an invalid length.
[  315.283250][T13194] netlink: 'syz.1.1933': attribute type 29 has an invalid length.
[  316.344982][T13238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  316.365817][T13238] syzkaller0: entered promiscuous mode
[  316.366896][T13240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.376631][T13238] syzkaller0: entered allmulticast mode
[  316.392321][T13242] netlink: 'syz.3.1951': attribute type 9 has an invalid length.
[  316.410644][T13240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.424411][T13238] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  316.740049][T13268] IPv6: Can't replace route, no match found
[  316.841117][T13237] tipc: Resetting bearer <eth:syzkaller0>
[  316.903751][T13237] tipc: Disabling bearer <eth:syzkaller0>
[  317.313092][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  317.329511][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  317.500939][T13307] openvswitch: netlink: Missing key (keys=40, expected=100)
[  317.675807][T13321] vlan0: entered promiscuous mode
[  317.742915][T13321] team0: Port device vlan0 added
[  317.803200][T13337] __nla_validate_parse: 8 callbacks suppressed
[  317.803221][T13337] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1969'.
[  317.842152][T13342] netlink: 'syz.2.1970': attribute type 39 has an invalid length.
[  318.293336][T13360] sysfs: cannot create duplicate filename '/class/ieee80211/!忿$���UL
�D���D�w�}�zR3��p(@O�>���P�'
[  318.333269][T13360] CPU: 1 UID: 0 PID: 13360 Comm: syz.3.1976 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) 
[  318.333302][T13360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  318.333315][T13360] Call Trace:
[  318.333323][T13360]  <TASK>
[  318.333333][T13360]  dump_stack_lvl+0x189/0x250
[  318.333368][T13360]  ? __pfx_dump_stack_lvl+0x10/0x10
[  318.333394][T13360]  ? __pfx__printk+0x10/0x10
[  318.333430][T13360]  ? kernfs_path_from_node+0x2f/0x290
[  318.333454][T13360]  ? kernfs_path_from_node+0x250/0x290
[  318.333475][T13360]  ? kernfs_path_from_node+0x2f/0x290
[  318.333502][T13360]  sysfs_warn_dup+0x8e/0xa0
[  318.333524][T13360]  sysfs_do_create_link_sd+0xc0/0x110
[  318.333550][T13360]  device_add_class_symlinks+0x1cf/0x240
[  318.333600][T13360]  device_add+0x475/0xb50
[  318.333637][T13360]  wiphy_register+0x1ba6/0x28d0
[  318.333687][T13360]  ? __pfx_wiphy_register+0x10/0x10
[  318.333711][T13360]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  318.333753][T13360]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  318.333790][T13360]  ieee80211_register_hw+0x3425/0x4080
[  318.333843][T13360]  ? ieee80211_register_hw+0x1451/0x4080
[  318.333886][T13360]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  318.333923][T13360]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  318.333957][T13360]  ? __hrtimer_setup+0x187/0x210
[  318.333976][T13360]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  318.334005][T13360]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  318.334067][T13360]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  318.334089][T13360]  ? trace_kmalloc+0x1f/0xd0
[  318.334123][T13360]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  318.334150][T13360]  ? kstrndup+0xbf/0x160
[  318.334184][T13360]  hwsim_new_radio_nl+0xea4/0x1b10
[  318.334212][T13360]  ? __pfx___nla_validate_parse+0x10/0x10
[  318.334260][T13360]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  318.334301][T13360]  ? __nla_parse+0x40/0x60
[  318.334333][T13360]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  318.334364][T13360]  genl_family_rcv_msg_doit+0x215/0x300
[  318.334394][T13360]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  318.334432][T13360]  ? bpf_lsm_capable+0x9/0x20
[  318.334458][T13360]  ? security_capable+0x7e/0x2e0
[  318.334493][T13360]  genl_rcv_msg+0x60e/0x790
[  318.334521][T13360]  ? __pfx_genl_rcv_msg+0x10/0x10
[  318.334540][T13360]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  318.334582][T13360]  netlink_rcv_skb+0x205/0x470
[  318.334606][T13360]  ? __lock_acquire+0xab9/0xd20
[  318.334636][T13360]  ? __pfx_genl_rcv_msg+0x10/0x10
[  318.334657][T13360]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  318.334705][T13360]  ? down_read+0x1ad/0x2e0
[  318.334737][T13360]  genl_rcv+0x28/0x40
[  318.334764][T13360]  netlink_unicast+0x82c/0x9e0
[  318.334799][T13360]  ? __pfx_netlink_unicast+0x10/0x10
[  318.334826][T13360]  ? netlink_sendmsg+0x642/0xb30
[  318.334850][T13360]  ? skb_put+0x11b/0x210
[  318.334884][T13360]  netlink_sendmsg+0x805/0xb30
[  318.334922][T13360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.334952][T13360]  ? aa_sock_msg_perm+0xf1/0x1d0
[  318.334983][T13360]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  318.335005][T13360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.335033][T13360]  __sock_sendmsg+0x219/0x270
[  318.335060][T13360]  ____sys_sendmsg+0x505/0x830
[  318.335098][T13360]  ? __pfx_____sys_sendmsg+0x10/0x10
[  318.335148][T13360]  ? import_iovec+0x74/0xa0
[  318.335174][T13360]  ___sys_sendmsg+0x21f/0x2a0
[  318.335208][T13360]  ? __pfx____sys_sendmsg+0x10/0x10
[  318.335288][T13360]  ? __fget_files+0x2a/0x420
[  318.335316][T13360]  ? __fget_files+0x3a0/0x420
[  318.335360][T13360]  __x64_sys_sendmsg+0x19b/0x260
[  318.335393][T13360]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  318.335453][T13360]  do_syscall_64+0xfa/0x3b0
[  318.335479][T13360]  ? lockdep_hardirqs_on+0x9c/0x150
[  318.335503][T13360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.335523][T13360]  ? clear_bhb_loop+0x60/0xb0
[  318.335549][T13360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.335568][T13360] RIP: 0033:0x7f5d6e38ebe9
[  318.335588][T13360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.335607][T13360] RSP: 002b:00007f5d6f158038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  318.335631][T13360] RAX: ffffffffffffffda RBX: 00007f5d6e5b5fa0 RCX: 00007f5d6e38ebe9
[  318.335646][T13360] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  318.335659][T13360] RBP: 00007f5d6e411e19 R08: 0000000000000000 R09: 0000000000000000
[  318.335671][T13360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  318.335683][T13360] R13: 00007f5d6e5b6038 R14: 00007f5d6e5b5fa0 R15: 00007ffc75450b58
[  318.335719][T13360]  </TASK>
[  318.803063][T13363] sctp: [Deprecated]: syz.2.1978 (pid 13363) Use of struct sctp_assoc_value in delayed_ack socket option.
[  318.803063][T13363] Use struct sctp_sack_info instead
[  319.086592][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1982'.
[  319.131536][T13379] netlink: 'syz.4.1983': attribute type 1 has an invalid length.
[  319.170087][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'.
[  319.231800][T13386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1986'.
[  319.243055][T13386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1986'.
[  319.301829][T13389] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1982'.
[  319.304678][T13390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1983'.
[  319.396241][T13379] veth7: entered promiscuous mode
[  319.573566][T13402] netlink: 'syz.4.1992': attribute type 29 has an invalid length.
[  319.630555][T13402] netlink: 'syz.4.1992': attribute type 29 has an invalid length.
[  319.653914][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1993'.
[  319.665531][T13402] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1992'.
[  319.706937][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1993'.
[  319.971160][T13421] netlink: 'syz.3.1998': attribute type 1 has an invalid length.
[  320.649086][T13450] netlink: 'syz.2.2007': attribute type 1 has an invalid length.
[  320.661814][T13451] netlink: 'syz.1.2006': attribute type 1 has an invalid length.
[  320.891840][T13462] pim6reg: entered allmulticast mode
[  321.679776][T13472] infiniband syz0: set active
[  321.684802][T13472] infiniband syz0: added ipvlan1
[  321.751077][T13472] RDS/IB: syz0: added
[  321.755979][T13472] smc: adding ib device syz0 with port count 1
[  321.767706][T13472] smc:    ib device syz0 port 1 has pnetid 
[  322.887556][T13546] __nla_validate_parse: 11 callbacks suppressed
[  322.887577][T13546] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2036'.
[  322.929505][T13549] netlink: 'syz.3.2037': attribute type 4 has an invalid length.
[  322.943318][T13549] netlink: 'syz.3.2037': attribute type 4 has an invalid length.
[  323.738242][T13580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2045'.
[  323.769523][T13580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2045'.
[  323.827377][T13587] erspan0: entered allmulticast mode
[  324.045554][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'.
[  324.100616][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'.
[  324.650798][T13616] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2055'.
[  325.179196][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'.
[  325.335401][T13641] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2063'.
[  325.437334][T13641] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2063'.
[  325.456460][T13641] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2063'.
[  326.174384][T13670] 8021q: adding VLAN 0 to HW filter on device bond5
[  326.394444][ T5867] Bluetooth: hci4: link tx timeout
[  326.401063][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  326.690252][T13694] pimreg: entered allmulticast mode
[  327.035126][T13719] sctp: [Deprecated]: syz.2.2086 (pid 13719) Use of struct sctp_assoc_value in delayed_ack socket option.
[  327.035126][T13719] Use struct sctp_sack_info instead
[  327.384359][T13734] tc_dump_action: action bad kind
[  327.540232][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  328.376664][T13775] syz.4.2101 (13775) used obsolete PPPIOCDETACH ioctl
[  328.401052][T13775] netlink: 'syz.4.2101': attribute type 10 has an invalid length.
[  328.408931][T13775] netlink: 'syz.4.2101': attribute type 17 has an invalid length.
[  328.422462][ T5185] Bluetooth: hci4: command 0x0405 tx timeout
[  328.436098][T13775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  328.673922][T13789] sctp: [Deprecated]: syz.1.2107 (pid 13789) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.673922][T13789] Use struct sctp_sack_info instead
[  328.707683][T13791] __nla_validate_parse: 6 callbacks suppressed
[  328.707704][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2104'.
[  328.751746][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2104'.
[  328.973168][T13805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2110'.
[  329.663077][T13834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  329.670478][T13834] IPv6: NLM_F_CREATE should be set when creating new route
[  329.677934][T13834] IPv6: NLM_F_CREATE should be set when creating new route
[  329.685519][T13834] IPv6: NLM_F_CREATE should be set when creating new route
[  329.703429][T13834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  329.891416][T13834] openvswitch: netlink: Missing key (keys=40, expected=80)
[  330.197866][T13854] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2122'.
[  330.261759][T13858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2124'.
[  330.271249][T13854] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2122'.
[  330.329983][T13854] netlink: 'syz.0.2122': attribute type 5 has an invalid length.
[  330.358050][T13854] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2122'.
[  330.723277][T13880] netlink: 'syz.2.2128': attribute type 1 has an invalid length.
[  330.904728][ T7479] udevd[7479]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  330.966758][T13880] 8021q: adding VLAN 0 to HW filter on device bond5
[  330.978659][ T7479] udevd[7479]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  331.308520][T13912] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2136'.
[  331.766505][T13935] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  331.781845][T13940] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2145'.
[  332.165384][T13955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.230318][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2150'.
[  333.198475][T13992] veth1_macvtap: entered allmulticast mode
[  333.285443][T13997] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  333.384657][T14003] netlink: 'syz.2.2163': attribute type 2 has an invalid length.
[  333.600895][T14013] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  333.620348][T14015] netlink: 'syz.1.2166': attribute type 10 has an invalid length.
[  333.977948][T14015] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  334.089079][T14024] __nla_validate_parse: 3 callbacks suppressed
[  334.089099][T14024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2170'.
[  334.143464][T14025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2170'.
[  334.233976][T14031] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2173'.
[  334.509060][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2177'.
[  334.559165][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'.
[  334.586715][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'.
[  334.605141][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'.
[  334.615869][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'.
[  334.632763][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'.
[  334.646095][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'.
[  334.797282][T14052] team0: No ports can be present during mode change
[  335.077207][T14065] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  335.118572][T14064] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  335.310716][T14073] netlink: 'syz.4.2188': attribute type 10 has an invalid length.
[  335.862526][T14106] netlink: 'syz.2.2198': attribute type 10 has an invalid length.
[  336.284992][T14126] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  336.375894][T14126] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  336.898514][T14159] netlink: 'syz.4.2208': attribute type 21 has an invalid length.
[  336.923615][T14159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  336.931059][T14159] IPv6: NLM_F_CREATE should be set when creating new route
[  336.938364][T14159] IPv6: NLM_F_CREATE should be set when creating new route
[  336.945659][T14159] IPv6: NLM_F_CREATE should be set when creating new route
[  337.250139][T14171] netlink: 'syz.4.2211': attribute type 1 has an invalid length.
[  337.280906][T14171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.718681][T14190] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  338.278742][T14214] netlink: 'syz.1.2225': attribute type 21 has an invalid length.
[  338.355994][T14214] netlink: 'syz.1.2225': attribute type 1 has an invalid length.
[  338.656381][T14231] netlink: 'syz.1.2230': attribute type 1 has an invalid length.
[  338.771302][T14234] syzkaller0: create flow: hash 3638420006 index 1
[  338.881400][T13328] syzkaller0: tun_net_xmit 76
[  338.900350][T13328] syzkaller0: tun_net_xmit 48
[  338.909591][ T6028] syzkaller0: tun_net_xmit 76
[  339.004115][T14240] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  339.089610][ T6028] syzkaller0: tun_net_xmit 76
[  339.120775][ T8552] syzkaller0: tun_net_xmit 76
[  339.266071][T14229] syzkaller0: delete flow: hash 3638420006 index 1
[  339.358939][T14253] digital: digital_start_poll: Unknown protocol
[  339.388432][T14255] __nla_validate_parse: 83 callbacks suppressed
[  339.388451][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2239'.
[  340.136646][T14263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2241'.
[  341.302092][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2245'.
[  341.307786][T14272] netlink: 'syz.0.2244': attribute type 3 has an invalid length.
[  341.328343][T14272] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2244'.
[  341.372740][T14274] 8021q: VLANs not supported on ip6_vti0
[  341.814452][T14290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2250'.
[  341.886179][T14292] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2252'.
[  341.913034][T14292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2252'.
[  342.002173][T14294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.287140][T14294] syzkaller0: entered promiscuous mode
[  342.307338][T14294] syzkaller0: entered allmulticast mode
[  342.320591][T14294] tipc: Resetting bearer <eth:syzkaller0>
[  342.448734][T13328] tipc: Resetting bearer <eth:syzkaller0>
[  342.475784][T14293] tipc: Resetting bearer <eth:syzkaller0>
[  345.104774][T14293] tipc: Disabling bearer <eth:syzkaller0>
[  345.137518][T14334] mpoa:mpoad_close: (<unknown>) going down
[  345.333899][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2272'.
[  345.408681][T14374] netlink: 'syz.0.2275': attribute type 33 has an invalid length.
[  345.440950][T14375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.924615][T14388] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2280'.
[  345.958394][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'.
[  345.988405][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'.
[  346.029163][T14391] netlink: 'syz.2.2281': attribute type 1 has an invalid length.
[  346.060202][T14391] netlink: 'syz.2.2281': attribute type 2 has an invalid length.
[  346.189736][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2284'.
[  346.347682][T14400] syzkaller0: entered promiscuous mode
[  346.372031][T14400] syzkaller0: entered allmulticast mode
[  346.408394][T14410] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  348.354768][T14419] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.364118][T14422] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  348.375283][T14425] netlink: 'syz.1.2290': attribute type 1 has an invalid length.
[  348.585006][T14436] netlink: 'syz.4.2293': attribute type 10 has an invalid length.
[  348.687735][T14436] bond0: (slave bridge0): Enslaving as an active interface with a down link
[  349.275871][T14478] netlink: 'syz.0.2303': attribute type 1 has an invalid length.
[  349.473240][T14483] syzkaller1: entered promiscuous mode
[  349.579574][T14483] syzkaller1: entered allmulticast mode
[  349.626219][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'.
[  349.669871][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'.
[  349.751770][T14486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2304'.
[  349.928735][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2307'.
[  349.952636][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'.
[  349.981336][T14498] netlink: 'syz.0.2307': attribute type 1 has an invalid length.
[  350.252145][T14511] openvswitch: netlink: Flow key attr not present in new flow.
[  350.868284][T14537] __nla_validate_parse: 1 callbacks suppressed
[  350.868307][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2319'.
[  351.000751][T14544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2319'.
[  351.367394][T14562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2323'.
[  351.438065][T14566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2324'.
[  351.659164][T14577] bond0: (slave bond_slave_1): Releasing backup interface
[  351.969167][T14591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2332'.
[  352.017882][T14598] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2332'.
[  352.158423][T14604] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2333'.
[  352.402574][T14616] lo: entered promiscuous mode
[  352.423033][T14616] tunl0: entered promiscuous mode
[  352.442044][T14616] gre0: entered promiscuous mode
[  352.482893][T14623] netlink: 'syz.1.2338': attribute type 11 has an invalid length.
[  352.507746][T14616] 0��{X��: entered promiscuous mode
[  352.517553][T14616] 0��{X��: left allmulticast mode
[  352.523833][T14623] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2338'.
[  352.577515][T14616] erspan0: entered promiscuous mode
[  352.600444][T14616] ip_vti0: entered promiscuous mode
[  353.139570][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  353.551302][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2352'.
[  353.896801][T14684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2356'.
[  354.110170][T14695] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  354.118921][T14695] syzkaller0: entered promiscuous mode
[  354.135052][T14695] syzkaller0: entered allmulticast mode
[  354.171647][T14695] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  354.211609][T14698] netlink: 'syz.3.2361': attribute type 1 has an invalid length.
[  354.302403][T14698] 8021q: adding VLAN 0 to HW filter on device bond5
[  354.316080][T14695] syzkaller0: mtu less than device minimum
[  354.416381][T14704] bond5: (slave gretap2): making interface the new active one
[  354.426377][T14704] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  354.523037][T14711] tipc: Resetting bearer <eth:syzkaller0>
[  354.575816][T14711] tipc: Disabling bearer <eth:syzkaller0>
[  354.821412][T14733] pimreg: left allmulticast mode
[  354.826527][T14733] dvmrp1: left allmulticast mode
[  355.196280][T14748] netlink: 'syz.2.2375': attribute type 18 has an invalid length.
[  355.235931][T14750] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222)
[  355.261690][T14748] netlink: 'syz.2.2375': attribute type 18 has an invalid length.
[  355.905193][T14784] bridge0: port 1(vlan3) entered blocking state
[  355.960831][T14784] bridge0: port 1(vlan3) entered disabled state
[  355.983220][T14784] vlan3: entered allmulticast mode
[  355.988482][T14784] bridge0: entered allmulticast mode
[  356.003953][T14784] vlan3: left allmulticast mode
[  356.014333][T14784] bridge0: left allmulticast mode
[  356.040000][T14791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  356.310356][T14810] batman_adv: batadv0: Removing interface: batadv_slave_0
[  356.344873][T14810] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.364569][T14818] openvswitch: netlink: IPv6 tunnel dst address is zero
[  356.889100][T14832] syzkaller0: entered promiscuous mode
[  356.897032][T14832] syzkaller0: entered allmulticast mode
[  357.361052][T14841] pim6reg527: entered allmulticast mode
[  357.545636][T14854] __nla_validate_parse: 7 callbacks suppressed
[  357.545656][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'.
[  357.633660][T14854] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  357.856527][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2407'.
[  358.060818][T14882] netlink: 'syz.1.2412': attribute type 15 has an invalid length.
[  358.073593][T14882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2412'.
[  358.113571][T14869] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  358.150327][T14886] netlink: 'syz.0.2411': attribute type 21 has an invalid length.
[  358.471088][T14897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.565395][T14908] sctp: [Deprecated]: syz.3.2418 (pid 14908) Use of struct sctp_assoc_value in delayed_ack socket option.
[  358.565395][T14908] Use struct sctp_sack_info instead
[  359.292365][T14931] netlink: 'syz.0.2424': attribute type 1 has an invalid length.
[  359.301124][T14931] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2424'.
[  359.317447][T14931] netlink: 'syz.0.2424': attribute type 2 has an invalid length.
[  359.325512][T14931] netlink: 'syz.0.2424': attribute type 1 has an invalid length.
[  359.537522][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2426'.
[  359.560178][T14941] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  359.581489][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2429'.
[  359.756694][T14941] batman_adv: batadv0: Removing interface: batadv_slave_1
[  359.853996][T14955] netlink: 'syz.3.2431': attribute type 5 has an invalid length.
[  359.868299][T14954] netlink: 'syz.1.2430': attribute type 1 has an invalid length.
[  359.900030][T14954] netlink: 'syz.1.2430': attribute type 3 has an invalid length.
[  359.928897][T14954] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2430'.
[  360.160689][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2433'.
[  360.257253][T14967] netlink: 'syz.0.2435': attribute type 9 has an invalid length.
[  360.304007][T14967] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2435'.
[  360.401727][T14983] netlink: 'syz.1.2439': attribute type 3 has an invalid length.
[  360.430178][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2438'.
[  360.564672][T14988] netlink: 'syz.0.2440': attribute type 4 has an invalid length.
[  361.766760][T15047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  361.774135][T15047] IPv6: NLM_F_CREATE should be set when creating new route
[  361.782347][T15047] IPv6: NLM_F_CREATE should be set when creating new route
[  361.795307][T15054] rdma_rxe: rxe_newlink: failed to add lo
[  361.813578][T15047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  361.993745][T15054] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.012747][T15054] 8021q: adding VLAN 0 to HW filter on device team0
[  362.027253][T15054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  362.145356][T15059] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  362.866499][T15093] __nla_validate_parse: 2 callbacks suppressed
[  362.866519][T15093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2473'.
[  362.919016][T15098] gtp1: entered promiscuous mode
[  362.926385][T15096] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2471'.
[  362.954383][T15098] gtp1: entered allmulticast mode
[  363.020052][T15096] gretap0: entered promiscuous mode
[  363.549555][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2481'.
[  363.637720][T15132] netlink: 212384 bytes leftover after parsing attributes in process `syz.1.2484'.
[  363.660549][T15132] netlink: zone id is out of range
[  363.673102][T15132] netlink: zone id is out of range
[  363.693658][T15132] netlink: zone id is out of range
[  363.701287][T15132] netlink: zone id is out of range
[  363.720816][T15132] netlink: zone id is out of range
[  363.728134][T15132] netlink: zone id is out of range
[  363.740394][T15132] netlink: zone id is out of range
[  363.769949][T15132] netlink: zone id is out of range
[  363.775118][T15132] netlink: zone id is out of range
[  363.888835][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2486'.
[  364.223683][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2493'.
[  364.582156][T15169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.676498][T15169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.717540][T15175] netlink: 'syz.4.2497': attribute type 1 has an invalid length.
[  365.089222][T15183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2501'.
[  365.879956][T15216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2510'.
[  366.009600][T15220] netlink: 'syz.1.2511': attribute type 10 has an invalid length.
[  366.059547][T15220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2511'.
[  366.174270][T15233] block nbd4: not configured, cannot reconfigure
[  366.476218][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'.
[  366.650887][T15260] netlink: 'syz.0.2521': attribute type 6 has an invalid length.
[  366.658952][T15258] netlink: 'syz.0.2521': attribute type 6 has an invalid length.
[  366.870167][T15264] can: request_module (can-proto-0) failed.
[  366.994839][T15275] netlink: 'syz.3.2525': attribute type 1 has an invalid length.
[  367.260644][T15282] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.293002][T15282] syzkaller0: entered promiscuous mode
[  367.298525][T15282] syzkaller0: entered allmulticast mode
[  367.360797][T15282] tipc: Resetting bearer <eth:syzkaller0>
[  367.814958][T15314] net_ratelimit: 10 callbacks suppressed
[  367.814980][T15314] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  367.834940][T15314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.958385][T15281] tipc: Resetting bearer <eth:syzkaller0>
[  368.064826][T15281] tipc: Disabling bearer <eth:syzkaller0>
[  368.466700][T15331] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.535583][T15335] 8021q: VLANs not supported on lo
[  368.667368][T15331] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.747908][T15354] __nla_validate_parse: 7 callbacks suppressed
[  368.747927][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2546'.
[  368.833566][T15361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2549'.
[  368.861915][T15331] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.977965][T15354] 8021q: adding VLAN 0 to HW filter on device bond6
[  369.092141][T15331] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.139162][T15371] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2551'.
[  369.523999][T13305] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.643465][T15389] syzkaller0: entered promiscuous mode
[  369.653358][T15389] syzkaller0: entered allmulticast mode
[  369.682295][T15399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2559'.
[  369.693630][T13330] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.813029][T13332] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.851350][T13328] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.152723][T15427] openvswitch: netlink: Actions may not be safe on all matching packets
[  372.296611][T15447] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2570'.
[  372.355181][T15457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2570'.
[  374.041850][T15472] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  374.059795][T15472] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  374.068284][T15472] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  374.127125][T15478] netlink: 'syz.3.2573': attribute type 1 has an invalid length.
[  374.138477][T15478] netlink: 'syz.3.2573': attribute type 1 has an invalid length.
[  374.146633][T15478] netlink: 'syz.3.2573': attribute type 1 has an invalid length.
[  374.154899][T15478] netlink: 'syz.3.2573': attribute type 1 has an invalid length.
[  374.163180][T15478] netlink: 'syz.3.2573': attribute type 1 has an invalid length.
[  374.172816][T15478] netlink: 'syz.3.2573': attribute type 1 has an invalid length.
[  374.181999][T15478] netlink: 'syz.3.2573': attribute type 1 has an invalid length.
[  374.190246][T15478] netlink: 'syz.3.2573': attribute type 1 has an invalid length.
[  374.198402][T15478] netlink: 'syz.3.2573': attribute type 1 has an invalid length.
[  374.206811][T15478] netlink: 'syz.3.2573': attribute type 1 has an invalid length.
[  374.246209][T15482] syzkaller1: entered promiscuous mode
[  374.252334][T15482] syzkaller1: entered allmulticast mode
[  374.354818][T15482] 8021q: adding VLAN 0 to HW filter on device bond6
[  374.700940][T15490] syzkaller1: entered promiscuous mode
[  374.718357][T15490] syzkaller1: entered allmulticast mode
[  374.726586][T15506] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2578'.
[  374.792791][T15509] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2578'.
[  374.826246][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2579'.
[  374.845057][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2580'.
[  374.976842][T15514] macvtap1: entered promiscuous mode
[  374.982821][T15514] vlan0: entered promiscuous mode
[  374.988543][T15514] macvtap1: entered allmulticast mode
[  374.996008][T15514] vlan0: entered allmulticast mode
[  375.001715][T15514] veth0_vlan: entered allmulticast mode
[  375.026450][T15515] team0: Device veth1_macvtap failed to register rx_handler
[  375.235857][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2581'.
[  375.257438][T15534] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  375.278614][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2581'.
[  375.405416][T15540] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2587'.
[  375.723089][T15549] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  375.799048][T15549] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  376.493146][T15581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2599'.
[  376.502622][T15584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2599'.
[  376.547451][T15587] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2601'.
[  376.825930][T15598] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  377.199871][T15615] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  377.636444][T15631] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  377.690195][T15635] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  377.720185][T15635] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  378.081613][T15649] 8021q: VLANs not supported on ip6_vti0
[  378.122645][T15650] 8021q: VLANs not supported on ip6_vti0
[  378.386694][T15658] syzkaller0: entered promiscuous mode
[  378.428534][T15658] syzkaller0: entered allmulticast mode
[  378.751060][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  378.757511][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  379.783269][T15717] __nla_validate_parse: 9 callbacks suppressed
[  379.783289][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2643'.
[  379.820389][T15717] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2643'.
[  379.839887][T15717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2643'.
[  380.432353][T15750] xt_socket: unknown flags 0xe4
[  381.250586][T15792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2663'.
[  381.648430][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'.
[  382.303124][T15833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2672'.
[  382.357884][T15839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  382.365315][T15839] IPv6: NLM_F_CREATE should be set when creating new route
[  382.372853][T15839] IPv6: NLM_F_CREATE should be set when creating new route
[  382.476836][T15837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  382.668884][T13332] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  383.000441][T15867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2678'.
[  383.250347][T15848] tipc: Resetting bearer <eth:syzkaller0>
[  383.418012][T15848] vlan0: left allmulticast mode
[  383.425674][T15848] veth0_vlan: left allmulticast mode
[  383.432330][T15848] vlan0: left promiscuous mode
[  383.875912][T13305] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.906504][T13305] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20003 - 0
[  383.924058][T15892] nbd: socks must be embedded in a SOCK_ITEM attr
[  383.937314][T13305] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.977558][T13305] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0
[  384.105507][T13305] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  384.145125][T13305] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0
[  384.176637][T13305] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  384.202604][T13305] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20003 - 0
[  385.030528][T15921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2694'.
[  385.566339][T15949] x_tables: ip_tables: udp match: only valid for protocol 17
[  385.787497][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2700'.
[  385.886051][T15958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  386.896788][T15995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2709'.
[  387.848337][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'.
[  388.308228][T16045] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2720'.
[  388.421698][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2722'.
[  388.497331][T16043] validate_nla: 29 callbacks suppressed
[  388.497354][T16043] netlink: 'syz.0.2721': attribute type 25 has an invalid length.
[  388.534027][    C1] vcan0: j1939_session_tx_dat: 0xffff88807c86b800: queue data error: -100
[  388.547880][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  388.554385][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.562467][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.570349][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.578276][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.586173][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.594311][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.602489][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.610538][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.618489][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.626616][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.634514][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.642682][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.650655][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.658694][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.666582][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.674556][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.682434][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.690406][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.698307][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.706304][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.714169][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.722136][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.730041][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.738066][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.746050][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.754020][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.762166][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.771535][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.779533][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.787856][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.795929][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.804463][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.812448][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.820421][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.828289][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.836408][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.844282][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.852265][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.860217][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.868162][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  388.876047][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  388.924901][T16057] netlink: 'syz.3.2725': attribute type 10 has an invalid length.
[  388.993877][T16057] bridge0: port 3(team0) entered blocking state
[  389.000950][T16057] bridge0: port 3(team0) entered disabled state
[  389.007573][T16057] team0: entered allmulticast mode
[  389.013624][T16057] team_slave_0: entered allmulticast mode
[  389.019500][T16057] team_slave_1: entered allmulticast mode
[  389.025369][T16057] vlan0: entered allmulticast mode
[  389.030901][T16057] veth0_vlan: entered allmulticast mode
[  389.041561][T16057] team0: left allmulticast mode
[  389.046569][T16057] team_slave_0: left allmulticast mode
[  389.053434][T16057] team_slave_1: left allmulticast mode
[  389.059174][T16057] vlan0: left allmulticast mode
[  389.066100][T16057] veth0_vlan: left allmulticast mode
[  391.085393][T16133] netlink: 'syz.1.2744': attribute type 1 has an invalid length.
[  391.125389][T16136] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$���UL�vy��آ
�D��UD�w�}�z�'
[  391.177577][T16136] CPU: 0 UID: 0 PID: 16136 Comm: syz.3.2745 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) 
[  391.177611][T16136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  391.177624][T16136] Call Trace:
[  391.177634][T16136]  <TASK>
[  391.177643][T16136]  dump_stack_lvl+0x189/0x250
[  391.177679][T16136]  ? __pfx_dump_stack_lvl+0x10/0x10
[  391.177706][T16136]  ? __pfx__printk+0x10/0x10
[  391.177743][T16136]  ? kernfs_path_from_node+0x2f/0x290
[  391.177767][T16136]  ? kernfs_path_from_node+0x250/0x290
[  391.177788][T16136]  ? kernfs_path_from_node+0x2f/0x290
[  391.177817][T16136]  sysfs_warn_dup+0x8e/0xa0
[  391.177839][T16136]  sysfs_do_create_link_sd+0xc0/0x110
[  391.177866][T16136]  device_add_class_symlinks+0x1cf/0x240
[  391.177903][T16136]  device_add+0x475/0xb50
[  391.177939][T16136]  wiphy_register+0x1ba6/0x28d0
[  391.177986][T16136]  ? __pfx_wiphy_register+0x10/0x10
[  391.178009][T16136]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  391.178048][T16136]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  391.178084][T16136]  ieee80211_register_hw+0x3425/0x4080
[  391.178137][T16136]  ? ieee80211_register_hw+0x1451/0x4080
[  391.178189][T16136]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  391.178227][T16136]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  391.178262][T16136]  ? __hrtimer_setup+0x187/0x210
[  391.178280][T16136]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  391.178310][T16136]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  391.178371][T16136]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  391.178392][T16136]  ? trace_kmalloc+0x1f/0xd0
[  391.178415][T16136]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  391.178442][T16136]  ? kstrndup+0xbf/0x160
[  391.178478][T16136]  hwsim_new_radio_nl+0xea4/0x1b10
[  391.178503][T16136]  ? __pfx___nla_validate_parse+0x10/0x10
[  391.178549][T16136]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  391.178589][T16136]  ? __nla_parse+0x40/0x60
[  391.178621][T16136]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  391.178654][T16136]  genl_family_rcv_msg_doit+0x215/0x300
[  391.178684][T16136]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  391.178722][T16136]  ? bpf_lsm_capable+0x9/0x20
[  391.178750][T16136]  ? security_capable+0x7e/0x2e0
[  391.178785][T16136]  genl_rcv_msg+0x60e/0x790
[  391.178815][T16136]  ? __pfx_genl_rcv_msg+0x10/0x10
[  391.178834][T16136]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  391.178875][T16136]  netlink_rcv_skb+0x205/0x470
[  391.178898][T16136]  ? __lock_acquire+0xab9/0xd20
[  391.178927][T16136]  ? __pfx_genl_rcv_msg+0x10/0x10
[  391.178949][T16136]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  391.178998][T16136]  ? down_read+0x1ad/0x2e0
[  391.179029][T16136]  genl_rcv+0x28/0x40
[  391.179056][T16136]  netlink_unicast+0x82c/0x9e0
[  391.179091][T16136]  ? __pfx_netlink_unicast+0x10/0x10
[  391.179118][T16136]  ? netlink_sendmsg+0x642/0xb30
[  391.179140][T16136]  ? skb_put+0x11b/0x210
[  391.179185][T16136]  netlink_sendmsg+0x805/0xb30
[  391.179225][T16136]  ? __pfx_netlink_sendmsg+0x10/0x10
[  391.179254][T16136]  ? aa_sock_msg_perm+0xf1/0x1d0
[  391.179289][T16136]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  391.179311][T16136]  ? __pfx_netlink_sendmsg+0x10/0x10
[  391.179337][T16136]  __sock_sendmsg+0x219/0x270
[  391.179366][T16136]  ____sys_sendmsg+0x505/0x830
[  391.179404][T16136]  ? __pfx_____sys_sendmsg+0x10/0x10
[  391.179447][T16136]  ? import_iovec+0x74/0xa0
[  391.179474][T16136]  ___sys_sendmsg+0x21f/0x2a0
[  391.179507][T16136]  ? __pfx____sys_sendmsg+0x10/0x10
[  391.179589][T16136]  ? __fget_files+0x2a/0x420
[  391.179627][T16136]  ? __fget_files+0x3a0/0x420
[  391.179673][T16136]  __x64_sys_sendmsg+0x19b/0x260
[  391.179707][T16136]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  391.179754][T16136]  ? rcu_is_watching+0x15/0xb0
[  391.179783][T16136]  ? do_syscall_64+0xbe/0x3b0
[  391.179816][T16136]  do_syscall_64+0xfa/0x3b0
[  391.179841][T16136]  ? lockdep_hardirqs_on+0x9c/0x150
[  391.179867][T16136]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.179887][T16136]  ? clear_bhb_loop+0x60/0xb0
[  391.179914][T16136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.179933][T16136] RIP: 0033:0x7f5d6e38ebe9
[  391.179953][T16136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  391.179971][T16136] RSP: 002b:00007f5d6f158038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  391.179995][T16136] RAX: ffffffffffffffda RBX: 00007f5d6e5b5fa0 RCX: 00007f5d6e38ebe9
[  391.180010][T16136] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  391.180023][T16136] RBP: 00007f5d6e411e19 R08: 0000000000000000 R09: 0000000000000000
[  391.180043][T16136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  391.180055][T16136] R13: 00007f5d6e5b6038 R14: 00007f5d6e5b5fa0 R15: 00007ffc75450b58
[  391.180094][T16136]  </TASK>
[  391.735994][T16133] 8021q: adding VLAN 0 to HW filter on device bond7
[  391.817496][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2744'.
[  391.857799][T16133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2744'.
[  391.895390][T16155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2750'.
[  391.951728][T16133] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  392.069117][T16166] 8021q: VLANs not supported on sit0
[  392.166778][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2756'.
[  392.185133][T16172] dummy0: entered promiscuous mode
[  392.192283][T16172] dummy0: left promiscuous mode
[  392.258454][T16174] netlink: 'syz.1.2755': attribute type 1 has an invalid length.
[  392.286463][T16175] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  392.409041][T16174] 8021q: adding VLAN 0 to HW filter on device bond8
[  392.457820][T16177] sysfs: cannot create duplicate filename '/class/ieee80211/!忿$���UL
�D���D�w�}�zR3��p(@O�>���P�'
[  392.471365][T16177] CPU: 0 UID: 0 PID: 16177 Comm: syz.3.2758 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) 
[  392.471397][T16177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  392.471409][T16177] Call Trace:
[  392.471418][T16177]  <TASK>
[  392.471437][T16177]  dump_stack_lvl+0x189/0x250
[  392.471474][T16177]  ? __pfx_dump_stack_lvl+0x10/0x10
[  392.471499][T16177]  ? __pfx__printk+0x10/0x10
[  392.471536][T16177]  ? kernfs_path_from_node+0x2f/0x290
[  392.471559][T16177]  ? kernfs_path_from_node+0x250/0x290
[  392.471579][T16177]  ? kernfs_path_from_node+0x2f/0x290
[  392.471606][T16177]  sysfs_warn_dup+0x8e/0xa0
[  392.471628][T16177]  sysfs_do_create_link_sd+0xc0/0x110
[  392.471654][T16177]  device_add_class_symlinks+0x1cf/0x240
[  392.471690][T16177]  device_add+0x475/0xb50
[  392.471727][T16177]  wiphy_register+0x1ba6/0x28d0
[  392.471773][T16177]  ? __pfx_wiphy_register+0x10/0x10
[  392.471798][T16177]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  392.471839][T16177]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  392.471877][T16177]  ieee80211_register_hw+0x3425/0x4080
[  392.471929][T16177]  ? ieee80211_register_hw+0x1451/0x4080
[  392.471970][T16177]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  392.472008][T16177]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  392.472042][T16177]  ? __hrtimer_setup+0x187/0x210
[  392.472060][T16177]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  392.472086][T16177]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  392.472134][T16177]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  392.472149][T16177]  ? trace_kmalloc+0x1f/0xd0
[  392.472168][T16177]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  392.472190][T16177]  ? kstrndup+0xbf/0x160
[  392.472218][T16177]  hwsim_new_radio_nl+0xea4/0x1b10
[  392.472239][T16177]  ? __pfx___nla_validate_parse+0x10/0x10
[  392.472274][T16177]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  392.472305][T16177]  ? __nla_parse+0x40/0x60
[  392.472329][T16177]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  392.472354][T16177]  genl_family_rcv_msg_doit+0x215/0x300
[  392.472377][T16177]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  392.472406][T16177]  ? bpf_lsm_capable+0x9/0x20
[  392.472427][T16177]  ? security_capable+0x7e/0x2e0
[  392.472462][T16177]  genl_rcv_msg+0x60e/0x790
[  392.472484][T16177]  ? __pfx_genl_rcv_msg+0x10/0x10
[  392.472499][T16177]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  392.472530][T16177]  netlink_rcv_skb+0x205/0x470
[  392.472548][T16177]  ? __lock_acquire+0xab9/0xd20
[  392.472571][T16177]  ? __pfx_genl_rcv_msg+0x10/0x10
[  392.472588][T16177]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  392.472628][T16177]  ? down_read+0x1ad/0x2e0
[  392.472652][T16177]  genl_rcv+0x28/0x40
[  392.472675][T16177]  netlink_unicast+0x82c/0x9e0
[  392.472703][T16177]  ? __pfx_netlink_unicast+0x10/0x10
[  392.472723][T16177]  ? netlink_sendmsg+0x642/0xb30
[  392.472742][T16177]  ? skb_put+0x11b/0x210
[  392.472768][T16177]  netlink_sendmsg+0x805/0xb30
[  392.472799][T16177]  ? __pfx_netlink_sendmsg+0x10/0x10
[  392.472823][T16177]  ? aa_sock_msg_perm+0xf1/0x1d0
[  392.472846][T16177]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  392.472863][T16177]  ? __pfx_netlink_sendmsg+0x10/0x10
[  392.472884][T16177]  __sock_sendmsg+0x219/0x270
[  392.472906][T16177]  ____sys_sendmsg+0x505/0x830
[  392.472935][T16177]  ? __pfx_____sys_sendmsg+0x10/0x10
[  392.472968][T16177]  ? import_iovec+0x74/0xa0
[  392.472988][T16177]  ___sys_sendmsg+0x21f/0x2a0
[  392.473014][T16177]  ? __pfx____sys_sendmsg+0x10/0x10
[  392.473075][T16177]  ? __fget_files+0x2a/0x420
[  392.473098][T16177]  ? __fget_files+0x3a0/0x420
[  392.473133][T16177]  __x64_sys_sendmsg+0x19b/0x260
[  392.473159][T16177]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  392.473194][T16177]  ? rcu_is_watching+0x15/0xb0
[  392.473217][T16177]  ? do_syscall_64+0xbe/0x3b0
[  392.473242][T16177]  do_syscall_64+0xfa/0x3b0
[  392.473260][T16177]  ? lockdep_hardirqs_on+0x9c/0x150
[  392.473278][T16177]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.473294][T16177]  ? clear_bhb_loop+0x60/0xb0
[  392.473314][T16177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.473330][T16177] RIP: 0033:0x7f5d6e38ebe9
[  392.473345][T16177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.473359][T16177] RSP: 002b:00007f5d6f158038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  392.473378][T16177] RAX: ffffffffffffffda RBX: 00007f5d6e5b5fa0 RCX: 00007f5d6e38ebe9
[  392.473390][T16177] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  392.473400][T16177] RBP: 00007f5d6e411e19 R08: 0000000000000000 R09: 0000000000000000
[  392.473410][T16177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  392.473419][T16177] R13: 00007f5d6e5b6038 R14: 00007f5d6e5b5fa0 R15: 00007ffc75450b58
[  392.473455][T16177]  </TASK>
[  393.070924][T16191] netlink: 516 bytes leftover after parsing attributes in process `syz.3.2758'.
[  393.185990][T16187] syzkaller1: entered promiscuous mode
[  393.213851][T16187] syzkaller1: entered allmulticast mode
[  393.356007][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2763'.
[  393.429198][T16222] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2763'.
[  393.504603][T16222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.658538][T16217] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2762'.
[  394.280326][T16251] netlink: 'syz.4.2770': attribute type 1 has an invalid length.
[  394.328100][T16255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2771'.
[  394.375546][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2772'.
[  395.516633][T16289] bond6: entered promiscuous mode
[  395.535375][T16289] bond6: entered allmulticast mode
[  395.553048][T16289] 8021q: adding VLAN 0 to HW filter on device bond6
[  395.939005][T16312] ieee802154 phy0 wpan0: encryption failed: -22
[  396.269016][T16295] team0: Port device vlan0 removed
[  396.329055][T16295] vlan1 (unregistering): left allmulticast mode
[  396.357005][T16295] veth0_vlan (unregistering): left allmulticast mode
[  396.556949][T16325] syz_tun: entered allmulticast mode
[  396.581764][T16319] syz_tun: left allmulticast mode
[  396.684603][T16337] netlink: 'syz.1.2787': attribute type 33 has an invalid length.
[  396.868107][T16346] __nla_validate_parse: 2 callbacks suppressed
[  396.868130][T16346] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2790'.
[  396.984123][T16346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2790'.
[  397.046716][T16346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2790'.
[  397.056057][T16352] veth0_to_bond: entered allmulticast mode
[  397.338274][T16366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2794'.
[  397.475467][T16371] netlink: 'syz.3.2796': attribute type 10 has an invalid length.
[  397.502809][T16371] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.522919][T16378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2798'.
[  397.532678][T16371] bridge_slave_1: left allmulticast mode
[  397.543686][T16371] bridge_slave_1: left promiscuous mode
[  397.556921][T16371] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.683995][T16371] bridge_slave_1: entered allmulticast mode
[  397.708652][T16371] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  398.060635][T16405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2802'.
[  398.524462][T16414] syzkaller0: entered promiscuous mode
[  398.541923][T16414] syzkaller0: entered allmulticast mode
[  400.750487][T16454] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2817'.
[  400.788961][T16454] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2817'.
[  401.459131][ T5185] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  401.470146][ T5185] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  401.481104][ T5185] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  401.500538][ T5185] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  401.510107][ T5185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  401.858760][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2826'.
[  402.459738][T16520] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0
[  402.501302][T16517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2831'.
[  402.661210][T16527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2833'.
[  402.672505][T16529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2832'.
[  402.707041][T16529] openvswitch: netlink: VXLAN extension message has 11 unknown bytes.
[  403.060156][T13328] bond0: (slave netdevsim0): Releasing backup interface
[  403.448697][T16553] netlink: 'syz.4.2839': attribute type 1 has an invalid length.
[  403.475450][T16553] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2839'.
[  403.488356][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2839'.
[  403.629503][ T5867] Bluetooth: hci5: command tx timeout
[  403.757280][T16566] netlink: 'syz.4.2843': attribute type 13 has an invalid length.
[  403.805989][T16566] netlink: 'syz.4.2843': attribute type 58 has an invalid length.
[  403.813243][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2842'.
[  403.864452][T16566] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2843'.
[  404.311814][T13328] gretap1: left allmulticast mode
[  404.336999][T13328] bridge4: port 2(gretap1) entered disabled state
[  404.697111][T13328] bond2 (unregistering): (slave gretap2): Releasing active interface
[  405.408399][T13328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.418499][T13328] bond0 (unregistering): Released all slaves
[  405.533135][T13328] bond1 (unregistering): (slave wireguard0): Releasing backup interface
[  405.542010][T13328] wireguard0: left promiscuous mode
[  405.548909][T13328] bond1 (unregistering): Released all slaves
[  405.666530][T13328] bond2 (unregistering): Released all slaves
[  405.699685][ T5867] Bluetooth: hci5: command tx timeout
[  405.782721][T13328] bond3 (unregistering): Released all slaves
[  405.895502][T13328] bond4 (unregistering): Released all slaves
[  406.005545][T13328] bond5 (unregistering): Released all slaves
[  406.117262][T13328] bond6 (unregistering): Released all slaves
[  406.208488][T16485] chnl_net:caif_netlink_parms(): no params data found
[  406.575971][T13328] tipc: Disabling bearer <eth:syzkaller0>
[  406.602476][T13328] tipc: Left network mode
[  407.297272][T16626] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.2854'.
[  407.703557][T16485] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.718266][T16485] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.756931][T16485] bridge_slave_0: entered allmulticast mode
[  407.771673][T16485] bridge_slave_0: entered promiscuous mode
[  407.782523][ T5867] Bluetooth: hci5: command tx timeout
[  407.975957][T16485] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.006576][T16663] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2858'.
[  408.031680][T16485] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.087657][T16485] bridge_slave_1: entered allmulticast mode
[  408.112682][T16485] bridge_slave_1: entered promiscuous mode
[  408.201762][T16675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2860'.
[  408.211627][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2860'.
[  408.296800][T16645] pim6reg1: entered promiscuous mode
[  408.326241][T16645] pim6reg1: entered allmulticast mode
[  408.467506][T16682] netlink: 'syz.4.2861': attribute type 1 has an invalid length.
[  408.475572][T16682] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2861'.
[  408.497181][T16485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  408.535228][T16682] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  408.737087][T16687] netlink: 'syz.1.2864': attribute type 1 has an invalid length.
[  408.751588][T16485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  408.850885][T16694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2864'.
[  409.115537][T13328] hsr_slave_1: left promiscuous mode
[  409.242565][T16705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2867'.
[  409.869942][ T5867] Bluetooth: hci5: command tx timeout
[  410.225794][T13328] pim6reg (unregistering): left allmulticast mode
[  410.623023][T13328] team0 (unregistering): Port device team_slave_1 removed
[  410.674459][T13328] team0 (unregistering): Port device team_slave_0 removed
[  411.061539][T16485] team0: Port device team_slave_0 added
[  411.133281][T16735] veth11: entered allmulticast mode
[  411.177097][T16485] team0: Port device team_slave_1 added
[  411.350356][T16485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  411.373307][T16485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.497902][T16485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  411.567888][T16485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  411.588228][T16485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.675984][T16485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.968404][T16485] hsr_slave_0: entered promiscuous mode
[  412.007891][T16485] hsr_slave_1: entered promiscuous mode
[  412.040028][T16778] team0: Device ip6gre1 is of different type
[  412.133118][T13328] IPVS: stop unused estimator thread 0...
[  412.514365][T16800] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2890'.
[  412.810401][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2894'.
[  413.323818][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2898'.
[  413.921059][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'.
[  413.936147][T16858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2891'.
[  414.026777][T16856] netlink: 'syz.3.2902': attribute type 21 has an invalid length.
[  414.043363][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2902'.
[  414.068654][T16856] netlink: 'syz.3.2902': attribute type 21 has an invalid length.
[  414.076956][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2902'.
[  414.616285][T16485] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  414.680175][T16485] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  414.851535][T16889] bond3: entered promiscuous mode
[  414.880467][T16889] bond3: entered allmulticast mode
[  414.908093][T16889] 8021q: adding VLAN 0 to HW filter on device bond3
[  414.972609][T16485] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  415.065740][T16485] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  415.205012][T16915] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2913'.
[  415.276313][T16915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2913'.
[  415.650365][T16918] team0: Device wireguard0 is of different type
[  415.958867][T16926] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2915'.
[  415.978938][T16485] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.031148][T16926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  416.038457][T16926] IPv6: NLM_F_CREATE should be set when creating new route
[  416.187639][T16485] 8021q: adding VLAN 0 to HW filter on device team0
[  416.260132][T13332] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.267558][T13332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  416.338773][T13330] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.346081][T13330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  417.042528][T16970] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2926'.
[  417.057794][T16965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2925'.
[  417.401178][T16983] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  417.467107][T16983] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  417.535961][T16983] gretap3: entered promiscuous mode
[  417.549522][T16983] gretap3: entered allmulticast mode
[  417.802602][T16485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.079223][T16485] veth0_vlan: entered promiscuous mode
[  418.131328][T16485] veth1_vlan: entered promiscuous mode
[  418.267259][T16485] veth0_macvtap: entered promiscuous mode
[  418.296103][T16485] veth1_macvtap: entered promiscuous mode
[  418.356664][T16485] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.387712][T16485] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.455180][T13331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.486789][T13331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.513090][T13331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.584154][T13331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.885732][T13328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.907982][T17053] netlink: 'syz.4.2947': attribute type 4 has an invalid length.
[  418.954999][T13328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.959649][T17056] netlink: 'syz.4.2947': attribute type 4 has an invalid length.
[  419.038068][T17064] __nla_validate_parse: 2 callbacks suppressed
[  419.038096][T17064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2949'.
[  419.092793][T13332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.123095][T13332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.961818][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2956'.
[  420.083936][T17099] netlink: 'syz.1.2957': attribute type 1 has an invalid length.
[  420.900650][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'.
[  420.951106][ T5185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  420.965115][ T5185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  420.974556][ T5185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  420.985138][ T5185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  420.994083][ T5185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  421.234877][T17132] netlink: 'syz.3.2963': attribute type 12 has an invalid length.
[  421.453008][T17159] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2966'.
[  421.499991][T17159] gretap0: entered promiscuous mode
[  421.528113][T17158] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2966'.
[  421.580606][T17158] 0��{X��: renamed from gretap0
[  421.665411][T17158] 0��{X��: left promiscuous mode
[  421.674579][T17158] 0��{X��: entered allmulticast mode
[  421.718526][T17158] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  421.769501][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2969'.
[  421.769882][T17158] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2966'.
[  421.825940][T17158] 1��{X��: renamed from 
30��{X�� (while UP)
[  421.911756][T17158] A link change request failed with some changes committed already. Interface 
31��{X�� may have been left with an inconsistent configuration, please check.
[  421.974816][T17158] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2966'.
[  422.027323][T17158] 0��{X��: renamed from 
31��{X�� (while UP)
[  422.087359][T17158] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  422.124091][T17177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.137205][T17158] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2966'.
[  422.208737][T17158] 1��{X��: renamed from 
30��{X�� (while UP)
[  422.238933][T17158] A link change request failed with some changes committed already. Interface 
31��{X�� may have been left with an inconsistent configuration, please check.
[  422.456459][T17187] v: renamed from dummy0
[  422.883653][T17136] chnl_net:caif_netlink_parms(): no params data found
[  423.013505][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2979'.
[  423.063331][ T5867] Bluetooth: hci1: command tx timeout
[  423.662849][T17136] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.689567][T17136] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.729564][T17136] bridge_slave_0: entered allmulticast mode
[  423.753496][T17136] bridge_slave_0: entered promiscuous mode
[  423.786781][T17136] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.799756][T17136] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.807205][T17136] bridge_slave_1: entered allmulticast mode
[  423.809382][T17238] netlink: 'syz.3.2986': attribute type 2 has an invalid length.
[  423.815963][T17136] bridge_slave_1: entered promiscuous mode
[  423.913854][T17238] netlink: 'syz.3.2986': attribute type 1 has an invalid length.
[  423.964513][T17136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.072790][T17248] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2988'.
[  424.115378][T17238] 8021q: adding VLAN 0 to HW filter on device bond6
[  424.131435][T17136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.401867][T17136] team0: Port device team_slave_0 added
[  424.434639][T17136] team0: Port device team_slave_1 added
[  424.675408][T17267] netlink: 'syz.4.2994': attribute type 1 has an invalid length.
[  424.687698][T17273] team0: Port device vlan0 removed
[  424.693576][T17267] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2994'.
[  424.710185][T17136] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.728158][T17136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.785553][T17136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.924785][T17136] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.954255][T17136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.998448][T17286] openvswitch: netlink: Message has 4 unknown bytes.
[  425.048951][T17291] openvswitch: netlink: Message has 4 unknown bytes.
[  425.060240][T17136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.070608][T17286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.093756][T17291] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.140108][ T5867] Bluetooth: hci1: command tx timeout
[  425.269978][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3001'.
[  425.411914][T17136] hsr_slave_0: entered promiscuous mode
[  425.440713][T17136] hsr_slave_1: entered promiscuous mode
[  425.447232][T17136] debugfs: 'hsr0' already exists in 'hsr'
[  425.472417][T17312] netlink: 'syz.3.3002': attribute type 75 has an invalid length.
[  425.483541][T17136] Cannot create hsr debugfs directory
[  425.543006][T17314] netlink: 'syz.3.3002': attribute type 75 has an invalid length.
[  425.579566][T17317] netlink: 'syz.2.3004': attribute type 12 has an invalid length.
[  425.858878][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3007'.
[  426.445378][T17136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  426.475793][T17136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.816632][T17136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  426.874422][T17136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.065617][T17371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3015'.
[  427.115680][T17371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3015'.
[  427.219413][ T5867] Bluetooth: hci1: command tx timeout
[  427.244158][T17136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  427.294731][T17136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.364337][T17375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3015'.
[  427.373986][T17375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3015'.
[  427.410469][T17381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3018'.
[  427.498536][T17136] netdevsim netdevsim0 ������ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  427.526097][T17136] netdevsim netdevsim0 ������ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.668945][T17398] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3023'.
[  428.132007][T17136] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  428.164075][T17136] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  428.224199][T17136] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  428.261515][T17136] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  428.693000][T17136] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.822878][T17136] 8021q: adding VLAN 0 to HW filter on device team0
[  428.847978][T13331] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.855259][T13331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  428.949032][T13331] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.956262][T13331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.215255][T17455] Unsupported ieee802154 address type: 0
[  429.302391][ T5867] Bluetooth: hci1: command tx timeout
[  429.324260][T17458] __nla_validate_parse: 1 callbacks suppressed
[  429.324282][T17458] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3036'.
[  429.712034][T17476] lo: entered allmulticast mode
[  429.814842][T17481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.874214][T17136] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.891071][T17481] tipc: Disabling bearer <eth:syzkaller0>
[  430.048504][T17136] veth0_vlan: entered promiscuous mode
[  430.086589][T17136] veth1_vlan: entered promiscuous mode
[  430.177125][T17136] veth0_macvtap: entered promiscuous mode
[  430.213560][T17136] veth1_macvtap: entered promiscuous mode
[  430.252286][T17136] batman_adv: batadv0: Interface activated: batadv_slave_0
[  430.295515][T17136] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.336421][T13328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.355224][T13328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.368097][T17488] netdevsim netdevsim4: Direct firmware load for /.� failed with error -2
[  430.383856][T13328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.407330][T17488] netdevsim netdevsim4: Falling back to sysfs fallback for: /.�
[  430.417155][T13328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.435173][T17467] lo: left allmulticast mode
[  430.795633][T13330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.826927][T13330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.914276][T13331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.951002][T13331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.173549][T17508] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3048'.
[  431.184433][T17512] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3048'.
[  431.828438][T17523] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) !
[  431.842632][T17529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3055'.
[  431.868575][T17530] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3054'.
[  432.387623][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3056'.
[  432.645335][ T5185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  432.655573][ T5185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  432.665907][ T5185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  432.715094][ T5185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  432.726679][ T5185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  432.892776][T17552] veth9: entered promiscuous mode
[  432.909093][T17552] veth9: entered allmulticast mode
[  432.929718][T17549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3059'.
[  432.970484][T17549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  433.016394][T17558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3061'.
[  433.060686][T17558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3061'.
[  433.180327][T17563] delete_channel: no stack
[  433.187522][T17549] batman_adv: batadv0: Removing interface: batadv_slave_1
[  434.830375][ T5867] Bluetooth: hci3: command tx timeout
[  434.832638][T17600] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3073'.
[  434.918457][T17600] hsr_slave_0: left promiscuous mode
[  434.977932][T17600] hsr_slave_1: left promiscuous mode
[  435.471466][T17633] IPVS: length: 157 != 24
[  435.802209][T17545] chnl_net:caif_netlink_parms(): no params data found
[  436.103985][T17663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3084'.
[  436.515912][T17545] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.534847][T17545] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.537160][T17693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3089'.
[  436.550822][T17545] bridge_slave_0: entered allmulticast mode
[  436.597807][T17545] bridge_slave_0: entered promiscuous mode
[  436.604993][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3089'.
[  436.618111][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3090'.
[  436.633377][T17545] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.649565][T17545] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.664725][T17545] bridge_slave_1: entered allmulticast mode
[  436.692035][T17545] bridge_slave_1: entered promiscuous mode
[  436.753231][T17695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3090'.
[  436.773185][T17696] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3089'.
[  436.810286][T17693] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3089'.
[  436.900774][ T5867] Bluetooth: hci3: command tx timeout
[  436.997880][T17545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  437.017599][T17545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  437.022501][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3094'.
[  437.201913][T17710] dvmrp1: entered allmulticast mode
[  437.209078][T17717] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3096'.
[  437.234356][T17545] team0: Port device team_slave_0 added
[  437.271389][T17545] team0: Port device team_slave_1 added
[  437.447174][T17732] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  437.593647][T17545] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.612170][T17545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.650574][T17545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.685240][T17545] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.703055][T17545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.758144][T17545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  438.076493][T17545] hsr_slave_0: entered promiscuous mode
[  438.086346][T17545] hsr_slave_1: entered promiscuous mode
[  438.113881][T17545] debugfs: 'hsr0' already exists in 'hsr'
[  438.129685][T17545] Cannot create hsr debugfs directory
[  438.256060][T17761] netlink: 'syz.1.3107': attribute type 32 has an invalid length.
[  438.528521][T17545] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.607934][T17545] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.647735][T17545] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.694353][T17545] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.828390][T17545] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  438.838475][T17545] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  438.848774][T17545] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  438.863063][T17545] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  438.952951][T17545] 8021q: adding VLAN 0 to HW filter on device bond0
[  438.979064][T17545] 8021q: adding VLAN 0 to HW filter on device team0
[  438.990561][ T5867] Bluetooth: hci3: command tx timeout
[  439.002290][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.009498][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  439.027765][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.034962][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.274889][T17545] 8021q: adding VLAN 0 to HW filter on device batadv0
[  439.327762][T17545] veth0_vlan: entered promiscuous mode
[  439.340216][T17545] veth1_vlan: entered promiscuous mode
[  439.376296][T17545] veth0_macvtap: entered promiscuous mode
[  439.389205][T17545] veth1_macvtap: entered promiscuous mode
[  439.411957][T17545] batman_adv: batadv0: Interface activated: batadv_slave_0
[  439.433314][T17545] batman_adv: batadv0: Interface activated: batadv_slave_1
[  439.447731][T13331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  439.467822][T13331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  439.476968][T13331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  439.496016][T13331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  439.571436][T13318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.592494][T13318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.632237][T13303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.642307][T13303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.698266][T17776] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  440.186014][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  441.059804][ T5867] Bluetooth: hci3: command tx timeout
[  460.661323][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  481.139903][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  499.886331][T17814] netlink: 'syz.2.3113': attribute type 10 has an invalid length.
[  499.956928][T17814] veth0_macvtap: left promiscuous mode
[  500.058893][T13330] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.096592][T13330] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.125980][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  500.135330][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  500.143624][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  500.153398][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  500.161249][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  500.286555][T17823] __nla_validate_parse: 4 callbacks suppressed
[  500.286576][T17823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3116'.
[  500.380958][T17826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3118'.
[  500.423806][T13330] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.480156][T13330] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.524641][T17839] netlink: 'syz.0.3120': attribute type 83 has an invalid length.
[  500.642301][T13330] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.667342][T13330] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.758436][T13330] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.803855][T13330] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.823780][T17847] nbd: must specify a device to reconfigure
[  501.307857][T17859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3126'.
[  501.427892][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'.
[  501.636336][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  501.784377][T17873] netlink: 'syz.0.3130': attribute type 4 has an invalid length.
[  501.794349][T17874] netlink: 'syz.0.3130': attribute type 4 has an invalid length.
[  501.817307][T13330] dvmrp0 (unregistering): left allmulticast mode
[  502.180175][T13330] bond0 (unregistering): Released all slaves
[  502.263948][ T5867] Bluetooth: hci0: command tx timeout
[  502.327430][T13330] bond1 (unregistering): Released all slaves
[  502.345980][T13330] bond2 (unregistering): Released all slaves
[  502.361528][T13330] bond3 (unregistering): Released all slaves
[  502.380112][T13330] bond4 (unregistering): Released all slaves
[  502.518188][T13330] bond5 (unregistering): Released all slaves
[  502.647807][T13330] bond6 (unregistering): Released all slaves
[  502.767568][T13330] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface
[  502.778629][T13330] bond7 (unregistering): Released all slaves
[  502.897598][T13330] bond8 (unregistering): Released all slaves
[  503.175399][T17865] dummy0: entered promiscuous mode
[  503.184021][T17865] batadv_slave_0: entered promiscuous mode
[  503.290001][T13330] tipc: Left network mode
[  503.471902][T17887] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3134'.
[  503.796918][T17893] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3136'.
[  503.810802][T17893] IPv4: Oversized IP packet from 172.20.20.24
[  503.819147][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  503.825828][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  504.342856][ T5867] Bluetooth: hci0: command tx timeout
[  504.433093][T17940] ieee802154 phy0 wpan0: encryption failed: -22
[  504.589850][T17915] syzkaller1: entered promiscuous mode
[  504.617914][T17915] syzkaller1: entered allmulticast mode
[  505.107664][T17962] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  505.171369][T17817] chnl_net:caif_netlink_parms(): no params data found
[  505.422939][T17982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3156'.
[  505.434408][T17982] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3156'.
[  505.457797][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3156'.
[  506.259098][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3158'.
[  506.314528][T17999] tc_dump_action: action bad kind
[  506.412097][T13330] hsr_slave_0: left promiscuous mode
[  506.420243][ T5867] Bluetooth: hci0: command tx timeout
[  506.453537][T13330] hsr_slave_1: left promiscuous mode
[  506.490474][T13330] veth0_macvtap: left promiscuous mode
[  506.637710][T13330] pim6reg527 (unregistering): left allmulticast mode
[  507.409691][T17817] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.441816][T17817] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.466856][T17817] bridge_slave_0: entered allmulticast mode
[  507.479181][T17817] bridge_slave_0: entered promiscuous mode
[  507.502577][T17817] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.538944][T17817] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.540808][T18028] openvswitch: netlink: Flow key attr not present in new flow.
[  507.558756][T17817] bridge_slave_1: entered allmulticast mode
[  507.589168][T17817] bridge_slave_1: entered promiscuous mode
[  507.808789][T18031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3164'.
[  507.856552][T17817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.009954][T17817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  508.028182][T18044] nbd: must specify at least one socket
[  508.043317][T13330] IPVS: stop unused estimator thread 0...
[  508.328604][T17817] team0: Port device team_slave_0 added
[  508.347178][T18057] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  508.350701][ T5866] IPVS: starting estimator thread 0...
[  508.368952][T17817] team0: Port device team_slave_1 added
[  508.485693][T18068] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3171'.
[  508.507688][ T5867] Bluetooth: hci0: command tx timeout
[  508.514328][T18060] IPVS: using max 25 ests per chain, 60000 per kthread
[  508.646049][T18074] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3173'.
[  508.729797][T17817] batman_adv: batadv0: Adding interface: batadv_slave_0
[  508.749070][T17817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  508.823434][T17817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  508.867628][T18081] nbd: must specify a size in bytes for the device
[  508.899995][T17817] batman_adv: batadv0: Adding interface: batadv_slave_1
[  508.908138][T17817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  508.965764][T18086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3177'.
[  509.005672][T17817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.200698][T18103] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3179'.
[  509.372261][T18108] netlink: 'syz.2.3181': attribute type 11 has an invalid length.
[  509.427843][T17817] hsr_slave_0: entered promiscuous mode
[  509.435866][T18108] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3181'.
[  509.483029][T17817] hsr_slave_1: entered promiscuous mode
[  509.542777][T17817] debugfs: 'hsr0' already exists in 'hsr'
[  509.556828][T17817] Cannot create hsr debugfs directory
[  509.806245][T18119] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  510.028602][T18132] netlink: 'syz.0.3187': attribute type 4 has an invalid length.
[  510.106070][   T93] IPVS: starting estimator thread 0...
[  510.166915][T18135] 
[  510.169287][T18135] ======================================================
[  510.176320][T18135] WARNING: possible circular locking dependency detected
[  510.183358][T18135] 6.16.0-syzkaller-12084-g33caa208dba6 #0 Not tainted
[  510.190164][T18135] ------------------------------------------------------
[  510.197203][T18135] syz.2.3188/18135 is trying to acquire lock:
[  510.200411][T18138] IPVS: using max 43 ests per chain, 103200 per kthread
[  510.203287][T18135] ffffffff8f689ed8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[  510.219660][T18135] 
[  510.219660][T18135] but task is already holding lock:
[  510.227065][T18135] ffff888142784770 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  510.236502][T18135] 
[  510.236502][T18135] which lock already depends on the new lock.
[  510.236502][T18135] 
[  510.246996][T18135] 
[  510.246996][T18135] the existing dependency chain (in reverse order) is:
[  510.256104][T18135] 
[  510.256104][T18135] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  510.264106][T18135]        lock_acquire+0x120/0x360
[  510.269139][T18135]        _raw_spin_lock_bh+0x36/0x50
[  510.274428][T18135]        nr_rt_device_down+0x12a/0x720
[  510.279890][T18135]        nr_device_event+0x137/0x150
[  510.285264][T18135]        notifier_call_chain+0x1b6/0x3e0
[  510.290894][T18135]        __dev_notify_flags+0x18d/0x2e0
[  510.296554][T18135]        netif_change_flags+0xe8/0x1a0
[  510.302040][T18135]        dev_change_flags+0x130/0x260
[  510.307420][T18135]        dev_ioctl+0x7b4/0x1150
[  510.312281][T18135]        sock_do_ioctl+0x22c/0x300
[  510.317397][T18135]        sock_ioctl+0x576/0x790
[  510.322262][T18135]        __se_sys_ioctl+0xfc/0x170
[  510.327379][T18135]        do_syscall_64+0xfa/0x3b0
[  510.332511][T18135]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.338921][T18135] 
[  510.338921][T18135] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  510.346849][T18135]        lock_acquire+0x120/0x360
[  510.351892][T18135]        _raw_spin_lock_bh+0x36/0x50
[  510.357190][T18135]        nr_rt_device_down+0xa9/0x720
[  510.362584][T18135]        nr_device_event+0x137/0x150
[  510.367887][T18135]        notifier_call_chain+0x1b6/0x3e0
[  510.373623][T18135]        __dev_notify_flags+0x18d/0x2e0
[  510.379186][T18135]        netif_change_flags+0xe8/0x1a0
[  510.384653][T18135]        dev_change_flags+0x130/0x260
[  510.390027][T18135]        dev_ioctl+0x7b4/0x1150
[  510.394959][T18135]        sock_do_ioctl+0x22c/0x300
[  510.400075][T18135]        sock_ioctl+0x576/0x790
[  510.404926][T18135]        __se_sys_ioctl+0xfc/0x170
[  510.410043][T18135]        do_syscall_64+0xfa/0x3b0
[  510.415070][T18135]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.421499][T18135] 
[  510.421499][T18135] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  510.429433][T18135]        validate_chain+0xb9b/0x2140
[  510.434750][T18135]        __lock_acquire+0xab9/0xd20
[  510.439967][T18135]        lock_acquire+0x120/0x360
[  510.445012][T18135]        _raw_spin_lock_bh+0x36/0x50
[  510.450490][T18135]        nr_remove_neigh+0x25/0xe0
[  510.455604][T18135]        nr_add_node+0x1d9f/0x2570
[  510.461068][T18135]        nr_rt_ioctl+0xc12/0xd50
[  510.466006][T18135]        sock_do_ioctl+0xd9/0x300
[  510.471122][T18135]        sock_ioctl+0x576/0x790
[  510.475975][T18135]        __se_sys_ioctl+0xfc/0x170
[  510.481189][T18135]        do_syscall_64+0xfa/0x3b0
[  510.486219][T18135]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.492843][T18135] 
[  510.492843][T18135] other info that might help us debug this:
[  510.492843][T18135] 
[  510.503325][T18135] Chain exists of:
[  510.503325][T18135]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  510.503325][T18135] 
[  510.517173][T18135]  Possible unsafe locking scenario:
[  510.517173][T18135] 
[  510.524621][T18135]        CPU0                    CPU1
[  510.530073][T18135]        ----                    ----
[  510.535610][T18135]   lock(&nr_node->node_lock);
[  510.540386][T18135]                                lock(nr_node_list_lock);
[  510.547497][T18135]                                lock(&nr_node->node_lock);
[  510.554792][T18135]   lock(nr_neigh_list_lock);
[  510.559474][T18135] 
[  510.559474][T18135]  *** DEADLOCK ***
[  510.559474][T18135] 
[  510.567617][T18135] 1 lock held by syz.2.3188/18135:
[  510.572724][T18135]  #0: ffff888142784770 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  510.582506][T18135] 
[  510.582506][T18135] stack backtrace:
[  510.588411][T18135] CPU: 1 UID: 0 PID: 18135 Comm: syz.2.3188 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) 
[  510.588432][T18135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  510.588442][T18135] Call Trace:
[  510.588449][T18135]  <TASK>
[  510.588456][T18135]  dump_stack_lvl+0x189/0x250
[  510.588479][T18135]  ? __pfx_dump_stack_lvl+0x10/0x10
[  510.588497][T18135]  ? __pfx__printk+0x10/0x10
[  510.588518][T18135]  ? stack_trace_save+0x9c/0xe0
[  510.588540][T18135]  print_circular_bug+0x2ee/0x310
[  510.588559][T18135]  check_noncircular+0x134/0x160
[  510.588578][T18135]  validate_chain+0xb9b/0x2140
[  510.588594][T18135]  ? do_syscall_64+0xfa/0x3b0
[  510.588622][T18135]  __lock_acquire+0xab9/0xd20
[  510.588647][T18135]  ? nr_remove_neigh+0x25/0xe0
[  510.588664][T18135]  lock_acquire+0x120/0x360
[  510.588686][T18135]  ? nr_remove_neigh+0x25/0xe0
[  510.588705][T18135]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  510.588725][T18135]  ? nr_remove_neigh+0x25/0xe0
[  510.588742][T18135]  _raw_spin_lock_bh+0x36/0x50
[  510.588758][T18135]  ? nr_remove_neigh+0x25/0xe0
[  510.588775][T18135]  nr_remove_neigh+0x25/0xe0
[  510.588792][T18135]  nr_add_node+0x1d9f/0x2570
[  510.588809][T18135]  ? dev_get_by_name+0x21/0x200
[  510.588824][T18135]  ? dev_get_by_name+0x21/0x200
[  510.588838][T18135]  ? dev_get_by_name+0x21/0x200
[  510.588851][T18135]  ? nr_call_to_digi+0x136/0x1b0
[  510.588868][T18135]  nr_rt_ioctl+0xc12/0xd50
[  510.588887][T18135]  ? kasan_quarantine_put+0xdd/0x220
[  510.588906][T18135]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  510.588925][T18135]  ? apparmor_capable+0x137/0x1b0
[  510.588944][T18135]  ? capable+0x89/0xe0
[  510.588959][T18135]  ? nr_ioctl+0x1b1/0x3b0
[  510.588990][T18135]  sock_do_ioctl+0xd9/0x300
[  510.589008][T18135]  ? __pfx_sock_do_ioctl+0x10/0x10
[  510.589023][T18135]  ? __lock_acquire+0xab9/0xd20
[  510.589050][T18135]  sock_ioctl+0x576/0x790
[  510.589065][T18135]  ? __pfx_sock_ioctl+0x10/0x10
[  510.589081][T18135]  ? __fget_files+0x2a/0x420
[  510.589103][T18135]  ? __fget_files+0x3a0/0x420
[  510.589126][T18135]  ? __fget_files+0x2a/0x420
[  510.589149][T18135]  ? bpf_lsm_file_ioctl+0x9/0x20
[  510.589169][T18135]  ? __pfx_sock_ioctl+0x10/0x10
[  510.589183][T18135]  __se_sys_ioctl+0xfc/0x170
[  510.589202][T18135]  do_syscall_64+0xfa/0x3b0
[  510.589224][T18135]  ? lockdep_hardirqs_on+0x9c/0x150
[  510.589246][T18135]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.589262][T18135]  ? clear_bhb_loop+0x60/0xb0
[  510.589279][T18135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.589295][T18135] RIP: 0033:0x7f902938ebe9
[  510.589309][T18135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  510.589324][T18135] RSP: 002b:00007f902a1ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  510.589341][T18135] RAX: ffffffffffffffda RBX: 00007f90295b5fa0 RCX: 00007f902938ebe9
[  510.589353][T18135] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004
[  510.589364][T18135] RBP: 00007f9029411e19 R08: 0000000000000000 R09: 0000000000000000
[  510.589374][T18135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  510.589384][T18135] R13: 00007f90295b6038 R14: 00007f90295b5fa0 R15: 00007ffcb82b9f58
[  510.589402][T18135]  </TASK>
[  511.168355][T17817] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  511.179945][T17817] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  511.202538][T17817] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  511.220611][T17817] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  511.303527][T17817] 8021q: adding VLAN 0 to HW filter on device bond0
[  511.326324][T17817] 8021q: adding VLAN 0 to HW filter on device team0
[  511.346359][T13312] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.353630][T13312] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.367733][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.374851][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.595228][T17817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  511.646616][T17817] veth0_vlan: entered promiscuous mode
[  511.658098][T17817] veth1_vlan: entered promiscuous mode
[  511.684903][T17817] veth0_macvtap: entered promiscuous mode
[  511.696134][T17817] veth1_macvtap: entered promiscuous mode
[  511.716898][T17817] batman_adv: batadv0: Interface activated: batadv_slave_0
[  511.732668][T17817] batman_adv: batadv0: Interface activated: batadv_slave_1
[  511.752422][T13318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  511.765162][T13318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  511.788904][T13318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  511.798119][T13318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  511.828901][T17817] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht'
[  511.865720][T13312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.871322][T17817] ieee80211 phy47: Selected rate control algorithm 'minstrel_ht'
[  511.877309][T13312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.922144][T13312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.934583][T13312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50