last executing test programs:

3m31.893838373s ago: executing program 4 (id=595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffec9, 0x0}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0)

3m19.50750827s ago: executing program 3 (id=680):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) (async)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5, 0x0, 0xfffffffffffffebc}, 0x4}], 0x2, 0x60, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
socket(0x840000000002, 0x3, 0xfa) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
sendmmsg$inet(r4, &(0x7f0000000340), 0x62, 0x80) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r6=>0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r9=>0x0})
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000))
ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (async)
ioctl$sock_ax25_SIOCDELRT(r8, 0x890c, &(0x7f0000000540)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @bcast]}) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="0800b70000000000080026008f0900"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r9}, 0x10)

3m19.460585948s ago: executing program 0 (id=520):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30)
preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x364, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x40090)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001880)={&(0x7f0000001200)={0x658, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1e}}}}, [@NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x5, 0x2720, 0x8, 0x0, 0xe50, 0xa6, 0xffe1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x8, 0x3, 0x3, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1c, 0x4, 0x1, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0xc, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6f28, 0x4, 0x3, 0x612f, 0x2, 0x8, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7fff, 0xc, 0x67, 0xb7, 0x4, 0x3, 0x1e1]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x3, 0x3, 0x6c, 0x16, 0x24, 0xb, 0x48, 0x1, 0x9, 0x3, 0x6, 0x4, 0x30, 0x16, 0x1, 0x18, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x1b, 0x48, 0x9, 0x16, 0x44, 0x30, 0x30, 0x0, 0x12, 0x5, 0x16, 0x3, 0x12, 0x6c, 0x30, 0x6, 0x4, 0x24, 0x6c, 0x12, 0x6, 0x6, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xaf17, 0x9, 0x8, 0xf96, 0x800, 0xff, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x979, 0x2, 0x8000, 0x101, 0x6, 0x35, 0xad03]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x60, 0x30, 0x5, 0x6c, 0x30, 0x48, 0x6c, 0x12, 0xc, 0x60, 0x6, 0x3]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x30, 0x30, 0x9, 0x36, 0x36, 0xc, 0x30, 0xa55ee9962dcfbfb1, 0xc, 0x9, 0xc, 0x48, 0x4, 0x9, 0x2, 0x48, 0x6c, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x8000, 0x0, 0x2, 0x7, 0x8, 0x8]}}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x2, 0x6, 0x7f, 0x2, 0xd, 0xfff5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xf, 0x1, 0x80c1, 0xe29, 0x2, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8e}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x6, 0x4, 0x16, 0x18, 0x4, 0x24, 0x50, 0x1b, 0x9, 0x0, 0x6c, 0xc, 0x56, 0x60, 0x7e, 0x16, 0xc, 0x4, 0x4, 0x36, 0x5, 0x4, 0x0, 0x4, 0x1b, 0x9, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4}, {0x6}, {0x1, 0x3}, {0x6}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x2}, {0x1}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x6}, {0x1, 0x3}, {0x6, 0x4}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x2}, {0x0, 0x9}, {0x0, 0x7}, {0x5, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0x2}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x7}, {0x6}, {0x4, 0x3}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x9}]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x44, 0x401, 0xc7e, 0x3c, 0xf32, 0xe8e4, 0xfff8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0xa}, {0x1, 0x6}, {0x7, 0x3}, {0x3}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x7, 0x1}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x3, 0x5}, {0x5, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x7}, {0x3, 0x8}, {0x5, 0x7}, {0x5, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x1}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0xf, 0x7fff, 0x2, 0x3, 0x35d, 0x1]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x4}, {0x5, 0xa}, {0x3, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x3, 0x3}, {0x6, 0x2}, {0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x9}, {0x3, 0x8}, {0x2, 0x3}, {0x6, 0xa}, {0x3, 0x1}, {0x5, 0x6}, {0x7, 0x8}, {0x1}, {0x3, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x4}, {0x2, 0x4}, {0x2, 0x6}, {0x5, 0x4}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x5}, {0x7, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x9}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0xa}]}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x328, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x2}, {0x5, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x7, 0x3}, {0x7, 0xa}, {0x0, 0xa}, {0x2}, {0x2, 0xa}, {0x6, 0x2}, {0x7, 0x6}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x4, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x5, 0x2}, {0x2}, {0x6, 0x2}, {0x2, 0xa}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x3}, {}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x8}, {0x2}, {0x4, 0xa}, {0x2}, {0x2, 0x4}, {0x3}, {0x7, 0x1}, {0x2}, {0x1, 0xa}, {0x6}, {0x6, 0x2}, {0x6, 0x8}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fff, 0x1, 0xc, 0x5, 0x2ee, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x6}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x9}, {0x7, 0x8}, {0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x6, 0x8}, {}, {0x5, 0x4}, {0x3, 0x1}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x2}, {0x4, 0x4}, {0x3, 0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x2}, {0x1, 0x1}, {0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x3, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x6}, {0x5, 0x5}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x1}, {0x2, 0x2}, {0x5, 0x9}, {0x7, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x2}, {0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x3, 0x5}, {0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x2}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x4}, {0x3, 0xa}, {0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x3, 0x3}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x2}, {0x4, 0x2}, {0x7, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x60, 0xbb36, 0xffff, 0x8, 0x1, 0xf800]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x6, 0x0, 0x9, 0x24]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5}, {0x1, 0x2}, {0x2, 0x9}, {0x4, 0x4}, {0x3, 0x2}, {0x4, 0x5}, {0x4, 0x9}, {}, {0x7, 0xa}, {0x4, 0x5}, {0x4, 0x8}, {0x0, 0x2}, {0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x5}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x6}, {0x5}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x2}, {}, {0x1, 0x3}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x12, 0x6c, 0x60, 0x30]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x5, 0x24, 0x4, 0x5, 0x5, 0x2, 0x60, 0x30, 0x18, 0xc, 0xc, 0x24, 0x0, 0x60, 0x9, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x5833, 0x7fff, 0x9, 0x6, 0x6, 0xc]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x5, 0x12, 0x6c, 0x6, 0x6, 0x6, 0x16, 0x60, 0x6c, 0x60, 0x60, 0x16, 0x6, 0x9, 0x24, 0x30, 0x24, 0x6, 0x16, 0x3]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0xb, 0xc, 0x60, 0x1b, 0x16, 0x1, 0x6, 0x60, 0x48, 0x5, 0x30, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfae, 0x0, 0x0, 0x8, 0x6, 0x1, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x40, 0x0, 0x1, 0x7ff, 0x1, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x60, 0x60, 0x2, 0x60, 0x45, 0x6, 0x4, 0x30, 0x1, 0x4, 0x5, 0x2, 0x6c, 0x16, 0x1, 0x24, 0xb, 0x60, 0x3, 0x2, 0x18, 0x2, 0x16, 0x1, 0x36, 0x4, 0x1b, 0x64, 0x1b, 0x18, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x2c, 0x8004, 0xb, 0xa5, 0x9a7f, 0x2]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x6}, {0x7, 0xa}, {0x5, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x3}, {0x6}, {0x3, 0xa}, {0x4, 0x3}, {0x3, 0x8}, {0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x7}, {0x1}, {0x4, 0x6}, {0x2, 0x6}, {0x3, 0x9}, {0x6, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x3}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0xa}, {0x3, 0x9}, {0x5, 0x9}, {0x2, 0x3}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x6}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x2}, {0x3, 0x1}, {0x5, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0xb}, {0x4, 0x3}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0x6}, {0x5, 0x7}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0x3}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x9, 0x5746, 0x10, 0x7, 0x9, 0xa953, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0xc, 0x30, 0x0]}]}]}]}, 0x658}, 0x1, 0x0, 0x0, 0x880}, 0x4040851)

3m17.961199101s ago: executing program 4 (id=595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffec9, 0x0}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0)

3m5.46917646s ago: executing program 3 (id=680):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) (async)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5, 0x0, 0xfffffffffffffebc}, 0x4}], 0x2, 0x60, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
socket(0x840000000002, 0x3, 0xfa) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
sendmmsg$inet(r4, &(0x7f0000000340), 0x62, 0x80) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r6=>0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r9=>0x0})
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000))
ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (async)
ioctl$sock_ax25_SIOCDELRT(r8, 0x890c, &(0x7f0000000540)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @bcast]}) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="0800b70000000000080026008f0900"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r9}, 0x10)

3m3.6907527s ago: executing program 0 (id=520):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30)
preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x364, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x40090)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001880)={&(0x7f0000001200)={0x658, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1e}}}}, [@NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x5, 0x2720, 0x8, 0x0, 0xe50, 0xa6, 0xffe1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x8, 0x3, 0x3, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1c, 0x4, 0x1, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0xc, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6f28, 0x4, 0x3, 0x612f, 0x2, 0x8, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7fff, 0xc, 0x67, 0xb7, 0x4, 0x3, 0x1e1]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x3, 0x3, 0x6c, 0x16, 0x24, 0xb, 0x48, 0x1, 0x9, 0x3, 0x6, 0x4, 0x30, 0x16, 0x1, 0x18, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x1b, 0x48, 0x9, 0x16, 0x44, 0x30, 0x30, 0x0, 0x12, 0x5, 0x16, 0x3, 0x12, 0x6c, 0x30, 0x6, 0x4, 0x24, 0x6c, 0x12, 0x6, 0x6, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xaf17, 0x9, 0x8, 0xf96, 0x800, 0xff, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x979, 0x2, 0x8000, 0x101, 0x6, 0x35, 0xad03]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x60, 0x30, 0x5, 0x6c, 0x30, 0x48, 0x6c, 0x12, 0xc, 0x60, 0x6, 0x3]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x30, 0x30, 0x9, 0x36, 0x36, 0xc, 0x30, 0xa55ee9962dcfbfb1, 0xc, 0x9, 0xc, 0x48, 0x4, 0x9, 0x2, 0x48, 0x6c, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x8000, 0x0, 0x2, 0x7, 0x8, 0x8]}}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x2, 0x6, 0x7f, 0x2, 0xd, 0xfff5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xf, 0x1, 0x80c1, 0xe29, 0x2, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8e}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x6, 0x4, 0x16, 0x18, 0x4, 0x24, 0x50, 0x1b, 0x9, 0x0, 0x6c, 0xc, 0x56, 0x60, 0x7e, 0x16, 0xc, 0x4, 0x4, 0x36, 0x5, 0x4, 0x0, 0x4, 0x1b, 0x9, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4}, {0x6}, {0x1, 0x3}, {0x6}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x2}, {0x1}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x6}, {0x1, 0x3}, {0x6, 0x4}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x2}, {0x0, 0x9}, {0x0, 0x7}, {0x5, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0x2}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x7}, {0x6}, {0x4, 0x3}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x9}]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x44, 0x401, 0xc7e, 0x3c, 0xf32, 0xe8e4, 0xfff8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0xa}, {0x1, 0x6}, {0x7, 0x3}, {0x3}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x7, 0x1}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x3, 0x5}, {0x5, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x7}, {0x3, 0x8}, {0x5, 0x7}, {0x5, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x1}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0xf, 0x7fff, 0x2, 0x3, 0x35d, 0x1]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x4}, {0x5, 0xa}, {0x3, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x3, 0x3}, {0x6, 0x2}, {0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x9}, {0x3, 0x8}, {0x2, 0x3}, {0x6, 0xa}, {0x3, 0x1}, {0x5, 0x6}, {0x7, 0x8}, {0x1}, {0x3, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x4}, {0x2, 0x4}, {0x2, 0x6}, {0x5, 0x4}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x5}, {0x7, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x9}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0xa}]}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x328, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x2}, {0x5, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x7, 0x3}, {0x7, 0xa}, {0x0, 0xa}, {0x2}, {0x2, 0xa}, {0x6, 0x2}, {0x7, 0x6}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x4, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x5, 0x2}, {0x2}, {0x6, 0x2}, {0x2, 0xa}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x3}, {}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x8}, {0x2}, {0x4, 0xa}, {0x2}, {0x2, 0x4}, {0x3}, {0x7, 0x1}, {0x2}, {0x1, 0xa}, {0x6}, {0x6, 0x2}, {0x6, 0x8}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fff, 0x1, 0xc, 0x5, 0x2ee, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x6}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x9}, {0x7, 0x8}, {0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x6, 0x8}, {}, {0x5, 0x4}, {0x3, 0x1}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x2}, {0x4, 0x4}, {0x3, 0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x2}, {0x1, 0x1}, {0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x3, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x6}, {0x5, 0x5}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x1}, {0x2, 0x2}, {0x5, 0x9}, {0x7, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x2}, {0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x3, 0x5}, {0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x2}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x4}, {0x3, 0xa}, {0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x3, 0x3}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x2}, {0x4, 0x2}, {0x7, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x60, 0xbb36, 0xffff, 0x8, 0x1, 0xf800]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x6, 0x0, 0x9, 0x24]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5}, {0x1, 0x2}, {0x2, 0x9}, {0x4, 0x4}, {0x3, 0x2}, {0x4, 0x5}, {0x4, 0x9}, {}, {0x7, 0xa}, {0x4, 0x5}, {0x4, 0x8}, {0x0, 0x2}, {0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x5}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x6}, {0x5}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x2}, {}, {0x1, 0x3}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x12, 0x6c, 0x60, 0x30]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x5, 0x24, 0x4, 0x5, 0x5, 0x2, 0x60, 0x30, 0x18, 0xc, 0xc, 0x24, 0x0, 0x60, 0x9, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x5833, 0x7fff, 0x9, 0x6, 0x6, 0xc]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x5, 0x12, 0x6c, 0x6, 0x6, 0x6, 0x16, 0x60, 0x6c, 0x60, 0x60, 0x16, 0x6, 0x9, 0x24, 0x30, 0x24, 0x6, 0x16, 0x3]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0xb, 0xc, 0x60, 0x1b, 0x16, 0x1, 0x6, 0x60, 0x48, 0x5, 0x30, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfae, 0x0, 0x0, 0x8, 0x6, 0x1, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x40, 0x0, 0x1, 0x7ff, 0x1, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x60, 0x60, 0x2, 0x60, 0x45, 0x6, 0x4, 0x30, 0x1, 0x4, 0x5, 0x2, 0x6c, 0x16, 0x1, 0x24, 0xb, 0x60, 0x3, 0x2, 0x18, 0x2, 0x16, 0x1, 0x36, 0x4, 0x1b, 0x64, 0x1b, 0x18, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x2c, 0x8004, 0xb, 0xa5, 0x9a7f, 0x2]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x6}, {0x7, 0xa}, {0x5, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x3}, {0x6}, {0x3, 0xa}, {0x4, 0x3}, {0x3, 0x8}, {0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x7}, {0x1}, {0x4, 0x6}, {0x2, 0x6}, {0x3, 0x9}, {0x6, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x3}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0xa}, {0x3, 0x9}, {0x5, 0x9}, {0x2, 0x3}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x6}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x2}, {0x3, 0x1}, {0x5, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0xb}, {0x4, 0x3}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0x6}, {0x5, 0x7}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0x3}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x9, 0x5746, 0x10, 0x7, 0x9, 0xa953, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0xc, 0x30, 0x0]}]}]}]}, 0x658}, 0x1, 0x0, 0x0, 0x880}, 0x4040851)

3m1.364389044s ago: executing program 4 (id=595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffec9, 0x0}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0)

2m51.123846618s ago: executing program 3 (id=680):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) (async)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5, 0x0, 0xfffffffffffffebc}, 0x4}], 0x2, 0x60, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
socket(0x840000000002, 0x3, 0xfa) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
sendmmsg$inet(r4, &(0x7f0000000340), 0x62, 0x80) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r6=>0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r9=>0x0})
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000))
ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (async)
ioctl$sock_ax25_SIOCDELRT(r8, 0x890c, &(0x7f0000000540)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @bcast]}) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="0800b70000000000080026008f0900"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r9}, 0x10)

2m47.312175367s ago: executing program 0 (id=520):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30)
preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x364, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x40090)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001880)={&(0x7f0000001200)={0x658, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1e}}}}, [@NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x5, 0x2720, 0x8, 0x0, 0xe50, 0xa6, 0xffe1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x8, 0x3, 0x3, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1c, 0x4, 0x1, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0xc, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6f28, 0x4, 0x3, 0x612f, 0x2, 0x8, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7fff, 0xc, 0x67, 0xb7, 0x4, 0x3, 0x1e1]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x3, 0x3, 0x6c, 0x16, 0x24, 0xb, 0x48, 0x1, 0x9, 0x3, 0x6, 0x4, 0x30, 0x16, 0x1, 0x18, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x1b, 0x48, 0x9, 0x16, 0x44, 0x30, 0x30, 0x0, 0x12, 0x5, 0x16, 0x3, 0x12, 0x6c, 0x30, 0x6, 0x4, 0x24, 0x6c, 0x12, 0x6, 0x6, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xaf17, 0x9, 0x8, 0xf96, 0x800, 0xff, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x979, 0x2, 0x8000, 0x101, 0x6, 0x35, 0xad03]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x60, 0x30, 0x5, 0x6c, 0x30, 0x48, 0x6c, 0x12, 0xc, 0x60, 0x6, 0x3]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x30, 0x30, 0x9, 0x36, 0x36, 0xc, 0x30, 0xa55ee9962dcfbfb1, 0xc, 0x9, 0xc, 0x48, 0x4, 0x9, 0x2, 0x48, 0x6c, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x8000, 0x0, 0x2, 0x7, 0x8, 0x8]}}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x2, 0x6, 0x7f, 0x2, 0xd, 0xfff5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xf, 0x1, 0x80c1, 0xe29, 0x2, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8e}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x6, 0x4, 0x16, 0x18, 0x4, 0x24, 0x50, 0x1b, 0x9, 0x0, 0x6c, 0xc, 0x56, 0x60, 0x7e, 0x16, 0xc, 0x4, 0x4, 0x36, 0x5, 0x4, 0x0, 0x4, 0x1b, 0x9, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4}, {0x6}, {0x1, 0x3}, {0x6}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x2}, {0x1}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x6}, {0x1, 0x3}, {0x6, 0x4}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x2}, {0x0, 0x9}, {0x0, 0x7}, {0x5, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0x2}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x7}, {0x6}, {0x4, 0x3}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x9}]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x44, 0x401, 0xc7e, 0x3c, 0xf32, 0xe8e4, 0xfff8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0xa}, {0x1, 0x6}, {0x7, 0x3}, {0x3}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x7, 0x1}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x3, 0x5}, {0x5, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x7}, {0x3, 0x8}, {0x5, 0x7}, {0x5, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x1}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0xf, 0x7fff, 0x2, 0x3, 0x35d, 0x1]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x4}, {0x5, 0xa}, {0x3, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x3, 0x3}, {0x6, 0x2}, {0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x9}, {0x3, 0x8}, {0x2, 0x3}, {0x6, 0xa}, {0x3, 0x1}, {0x5, 0x6}, {0x7, 0x8}, {0x1}, {0x3, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x4}, {0x2, 0x4}, {0x2, 0x6}, {0x5, 0x4}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x5}, {0x7, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x9}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0xa}]}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x328, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x2}, {0x5, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x7, 0x3}, {0x7, 0xa}, {0x0, 0xa}, {0x2}, {0x2, 0xa}, {0x6, 0x2}, {0x7, 0x6}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x4, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x5, 0x2}, {0x2}, {0x6, 0x2}, {0x2, 0xa}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x3}, {}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x8}, {0x2}, {0x4, 0xa}, {0x2}, {0x2, 0x4}, {0x3}, {0x7, 0x1}, {0x2}, {0x1, 0xa}, {0x6}, {0x6, 0x2}, {0x6, 0x8}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fff, 0x1, 0xc, 0x5, 0x2ee, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x6}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x9}, {0x7, 0x8}, {0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x6, 0x8}, {}, {0x5, 0x4}, {0x3, 0x1}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x2}, {0x4, 0x4}, {0x3, 0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x2}, {0x1, 0x1}, {0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x3, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x6}, {0x5, 0x5}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x1}, {0x2, 0x2}, {0x5, 0x9}, {0x7, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x2}, {0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x3, 0x5}, {0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x2}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x4}, {0x3, 0xa}, {0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x3, 0x3}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x2}, {0x4, 0x2}, {0x7, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x60, 0xbb36, 0xffff, 0x8, 0x1, 0xf800]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x6, 0x0, 0x9, 0x24]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5}, {0x1, 0x2}, {0x2, 0x9}, {0x4, 0x4}, {0x3, 0x2}, {0x4, 0x5}, {0x4, 0x9}, {}, {0x7, 0xa}, {0x4, 0x5}, {0x4, 0x8}, {0x0, 0x2}, {0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x5}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x6}, {0x5}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x2}, {}, {0x1, 0x3}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x12, 0x6c, 0x60, 0x30]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x5, 0x24, 0x4, 0x5, 0x5, 0x2, 0x60, 0x30, 0x18, 0xc, 0xc, 0x24, 0x0, 0x60, 0x9, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x5833, 0x7fff, 0x9, 0x6, 0x6, 0xc]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x5, 0x12, 0x6c, 0x6, 0x6, 0x6, 0x16, 0x60, 0x6c, 0x60, 0x60, 0x16, 0x6, 0x9, 0x24, 0x30, 0x24, 0x6, 0x16, 0x3]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0xb, 0xc, 0x60, 0x1b, 0x16, 0x1, 0x6, 0x60, 0x48, 0x5, 0x30, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfae, 0x0, 0x0, 0x8, 0x6, 0x1, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x40, 0x0, 0x1, 0x7ff, 0x1, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x60, 0x60, 0x2, 0x60, 0x45, 0x6, 0x4, 0x30, 0x1, 0x4, 0x5, 0x2, 0x6c, 0x16, 0x1, 0x24, 0xb, 0x60, 0x3, 0x2, 0x18, 0x2, 0x16, 0x1, 0x36, 0x4, 0x1b, 0x64, 0x1b, 0x18, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x2c, 0x8004, 0xb, 0xa5, 0x9a7f, 0x2]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x6}, {0x7, 0xa}, {0x5, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x3}, {0x6}, {0x3, 0xa}, {0x4, 0x3}, {0x3, 0x8}, {0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x7}, {0x1}, {0x4, 0x6}, {0x2, 0x6}, {0x3, 0x9}, {0x6, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x3}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0xa}, {0x3, 0x9}, {0x5, 0x9}, {0x2, 0x3}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x6}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x2}, {0x3, 0x1}, {0x5, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0xb}, {0x4, 0x3}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0x6}, {0x5, 0x7}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0x3}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x9, 0x5746, 0x10, 0x7, 0x9, 0xa953, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0xc, 0x30, 0x0]}]}]}]}, 0x658}, 0x1, 0x0, 0x0, 0x880}, 0x4040851)

2m46.502169904s ago: executing program 4 (id=595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffec9, 0x0}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a01040000000000000000020000002800848024000180726d0000000014000280050003000100000008000240000000000900010073797a30000000000900020073797a32000000001400000010e9010000000000000000000000000a1fef2992bb58686cd76dcb7e5f97f45038c515fb2b46ca09085abc77a23196a0d958ccb733cfde5cd2c427bebebe4cd327af46a7251b9a154b36991e0229c8a91865e161f9e0d61a92814834cbf59ec8fd02578baca58618d54b4452093a791fc678b07d99d9ce002c023314c5a8d88aceb1998fcbecda2c54a4673c3b7621474175fcfe06a2842789060000000408e6fdc942b1679640bc65f0768aa188bb1a69a0a2e610cdf887b4799b609719d18525ba7ce079f1589abc56fa334cb37b760823b5d5f83f4dbc625629439e9a73ccc8ca6fddff1a61a3290f1c90a6f3b3b14e24f8627f31939aff0f00000000000007c2b37620305e000000000000"], 0x7c}}, 0x0)

2m36.437354544s ago: executing program 3 (id=680):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) (async)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5, 0x0, 0xfffffffffffffebc}, 0x4}], 0x2, 0x60, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
socket(0x840000000002, 0x3, 0xfa) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
sendmmsg$inet(r4, &(0x7f0000000340), 0x62, 0x80) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r6=>0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r9=>0x0})
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000))
ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (async)
ioctl$sock_ax25_SIOCDELRT(r8, 0x890c, &(0x7f0000000540)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @bcast]}) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="0800b70000000000080026008f0900"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r9}, 0x10)

2m34.796561282s ago: executing program 0 (id=520):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30)
preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x364, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x40090)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001880)={&(0x7f0000001200)={0x658, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1e}}}}, [@NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x5, 0x2720, 0x8, 0x0, 0xe50, 0xa6, 0xffe1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x8, 0x3, 0x3, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1c, 0x4, 0x1, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0xc, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6f28, 0x4, 0x3, 0x612f, 0x2, 0x8, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7fff, 0xc, 0x67, 0xb7, 0x4, 0x3, 0x1e1]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x3, 0x3, 0x6c, 0x16, 0x24, 0xb, 0x48, 0x1, 0x9, 0x3, 0x6, 0x4, 0x30, 0x16, 0x1, 0x18, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x1b, 0x48, 0x9, 0x16, 0x44, 0x30, 0x30, 0x0, 0x12, 0x5, 0x16, 0x3, 0x12, 0x6c, 0x30, 0x6, 0x4, 0x24, 0x6c, 0x12, 0x6, 0x6, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xaf17, 0x9, 0x8, 0xf96, 0x800, 0xff, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x979, 0x2, 0x8000, 0x101, 0x6, 0x35, 0xad03]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x60, 0x30, 0x5, 0x6c, 0x30, 0x48, 0x6c, 0x12, 0xc, 0x60, 0x6, 0x3]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x30, 0x30, 0x9, 0x36, 0x36, 0xc, 0x30, 0xa55ee9962dcfbfb1, 0xc, 0x9, 0xc, 0x48, 0x4, 0x9, 0x2, 0x48, 0x6c, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x8000, 0x0, 0x2, 0x7, 0x8, 0x8]}}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x2, 0x6, 0x7f, 0x2, 0xd, 0xfff5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xf, 0x1, 0x80c1, 0xe29, 0x2, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8e}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x6, 0x4, 0x16, 0x18, 0x4, 0x24, 0x50, 0x1b, 0x9, 0x0, 0x6c, 0xc, 0x56, 0x60, 0x7e, 0x16, 0xc, 0x4, 0x4, 0x36, 0x5, 0x4, 0x0, 0x4, 0x1b, 0x9, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4}, {0x6}, {0x1, 0x3}, {0x6}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x2}, {0x1}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x6}, {0x1, 0x3}, {0x6, 0x4}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x2}, {0x0, 0x9}, {0x0, 0x7}, {0x5, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0x2}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x7}, {0x6}, {0x4, 0x3}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x9}]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x44, 0x401, 0xc7e, 0x3c, 0xf32, 0xe8e4, 0xfff8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0xa}, {0x1, 0x6}, {0x7, 0x3}, {0x3}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x7, 0x1}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x3, 0x5}, {0x5, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x7}, {0x3, 0x8}, {0x5, 0x7}, {0x5, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x1}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0xf, 0x7fff, 0x2, 0x3, 0x35d, 0x1]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x4}, {0x5, 0xa}, {0x3, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x3, 0x3}, {0x6, 0x2}, {0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x9}, {0x3, 0x8}, {0x2, 0x3}, {0x6, 0xa}, {0x3, 0x1}, {0x5, 0x6}, {0x7, 0x8}, {0x1}, {0x3, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x4}, {0x2, 0x4}, {0x2, 0x6}, {0x5, 0x4}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x5}, {0x7, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x9}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0xa}]}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x328, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x2}, {0x5, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x7, 0x3}, {0x7, 0xa}, {0x0, 0xa}, {0x2}, {0x2, 0xa}, {0x6, 0x2}, {0x7, 0x6}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x4, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x5, 0x2}, {0x2}, {0x6, 0x2}, {0x2, 0xa}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x3}, {}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x8}, {0x2}, {0x4, 0xa}, {0x2}, {0x2, 0x4}, {0x3}, {0x7, 0x1}, {0x2}, {0x1, 0xa}, {0x6}, {0x6, 0x2}, {0x6, 0x8}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fff, 0x1, 0xc, 0x5, 0x2ee, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x6}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x9}, {0x7, 0x8}, {0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x6, 0x8}, {}, {0x5, 0x4}, {0x3, 0x1}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x2}, {0x4, 0x4}, {0x3, 0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x2}, {0x1, 0x1}, {0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x3, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x6}, {0x5, 0x5}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x1}, {0x2, 0x2}, {0x5, 0x9}, {0x7, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x2}, {0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x3, 0x5}, {0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x2}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x4}, {0x3, 0xa}, {0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x3, 0x3}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x2}, {0x4, 0x2}, {0x7, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x60, 0xbb36, 0xffff, 0x8, 0x1, 0xf800]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x6, 0x0, 0x9, 0x24]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5}, {0x1, 0x2}, {0x2, 0x9}, {0x4, 0x4}, {0x3, 0x2}, {0x4, 0x5}, {0x4, 0x9}, {}, {0x7, 0xa}, {0x4, 0x5}, {0x4, 0x8}, {0x0, 0x2}, {0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x5}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x6}, {0x5}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x2}, {}, {0x1, 0x3}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x12, 0x6c, 0x60, 0x30]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x5, 0x24, 0x4, 0x5, 0x5, 0x2, 0x60, 0x30, 0x18, 0xc, 0xc, 0x24, 0x0, 0x60, 0x9, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x5833, 0x7fff, 0x9, 0x6, 0x6, 0xc]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x5, 0x12, 0x6c, 0x6, 0x6, 0x6, 0x16, 0x60, 0x6c, 0x60, 0x60, 0x16, 0x6, 0x9, 0x24, 0x30, 0x24, 0x6, 0x16, 0x3]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0xb, 0xc, 0x60, 0x1b, 0x16, 0x1, 0x6, 0x60, 0x48, 0x5, 0x30, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfae, 0x0, 0x0, 0x8, 0x6, 0x1, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x40, 0x0, 0x1, 0x7ff, 0x1, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x60, 0x60, 0x2, 0x60, 0x45, 0x6, 0x4, 0x30, 0x1, 0x4, 0x5, 0x2, 0x6c, 0x16, 0x1, 0x24, 0xb, 0x60, 0x3, 0x2, 0x18, 0x2, 0x16, 0x1, 0x36, 0x4, 0x1b, 0x64, 0x1b, 0x18, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x2c, 0x8004, 0xb, 0xa5, 0x9a7f, 0x2]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x6}, {0x7, 0xa}, {0x5, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x3}, {0x6}, {0x3, 0xa}, {0x4, 0x3}, {0x3, 0x8}, {0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x7}, {0x1}, {0x4, 0x6}, {0x2, 0x6}, {0x3, 0x9}, {0x6, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x3}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0xa}, {0x3, 0x9}, {0x5, 0x9}, {0x2, 0x3}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x6}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x2}, {0x3, 0x1}, {0x5, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0xb}, {0x4, 0x3}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0x6}, {0x5, 0x7}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0x3}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x9, 0x5746, 0x10, 0x7, 0x9, 0xa953, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0xc, 0x30, 0x0]}]}]}]}, 0x658}, 0x1, 0x0, 0x0, 0x880}, 0x4040851)

2m33.4768799s ago: executing program 4 (id=595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffec9, 0x0}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0)

2m21.329851154s ago: executing program 3 (id=680):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) (async)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5, 0x0, 0xfffffffffffffebc}, 0x4}], 0x2, 0x60, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
socket(0x840000000002, 0x3, 0xfa) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
sendmmsg$inet(r4, &(0x7f0000000340), 0x62, 0x80) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r6=>0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r9=>0x0})
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000))
ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (async)
ioctl$sock_ax25_SIOCDELRT(r8, 0x890c, &(0x7f0000000540)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @bcast]}) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="0800b70000000000080026008f0900"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r9}, 0x10)

2m19.71470412s ago: executing program 0 (id=520):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30)
preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x364, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x40090)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001880)={&(0x7f0000001200)={0x658, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1e}}}}, [@NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x5, 0x2720, 0x8, 0x0, 0xe50, 0xa6, 0xffe1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x8, 0x3, 0x3, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1c, 0x4, 0x1, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0xc, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6f28, 0x4, 0x3, 0x612f, 0x2, 0x8, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7fff, 0xc, 0x67, 0xb7, 0x4, 0x3, 0x1e1]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x3, 0x3, 0x6c, 0x16, 0x24, 0xb, 0x48, 0x1, 0x9, 0x3, 0x6, 0x4, 0x30, 0x16, 0x1, 0x18, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x1b, 0x48, 0x9, 0x16, 0x44, 0x30, 0x30, 0x0, 0x12, 0x5, 0x16, 0x3, 0x12, 0x6c, 0x30, 0x6, 0x4, 0x24, 0x6c, 0x12, 0x6, 0x6, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xaf17, 0x9, 0x8, 0xf96, 0x800, 0xff, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x979, 0x2, 0x8000, 0x101, 0x6, 0x35, 0xad03]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x60, 0x30, 0x5, 0x6c, 0x30, 0x48, 0x6c, 0x12, 0xc, 0x60, 0x6, 0x3]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x30, 0x30, 0x9, 0x36, 0x36, 0xc, 0x30, 0xa55ee9962dcfbfb1, 0xc, 0x9, 0xc, 0x48, 0x4, 0x9, 0x2, 0x48, 0x6c, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x8000, 0x0, 0x2, 0x7, 0x8, 0x8]}}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x2, 0x6, 0x7f, 0x2, 0xd, 0xfff5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xf, 0x1, 0x80c1, 0xe29, 0x2, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8e}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x6, 0x4, 0x16, 0x18, 0x4, 0x24, 0x50, 0x1b, 0x9, 0x0, 0x6c, 0xc, 0x56, 0x60, 0x7e, 0x16, 0xc, 0x4, 0x4, 0x36, 0x5, 0x4, 0x0, 0x4, 0x1b, 0x9, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4}, {0x6}, {0x1, 0x3}, {0x6}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x2}, {0x1}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x6}, {0x1, 0x3}, {0x6, 0x4}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x2}, {0x0, 0x9}, {0x0, 0x7}, {0x5, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0x2}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x7}, {0x6}, {0x4, 0x3}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x9}]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x44, 0x401, 0xc7e, 0x3c, 0xf32, 0xe8e4, 0xfff8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0xa}, {0x1, 0x6}, {0x7, 0x3}, {0x3}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x7, 0x1}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x3, 0x5}, {0x5, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x7}, {0x3, 0x8}, {0x5, 0x7}, {0x5, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x1}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0xf, 0x7fff, 0x2, 0x3, 0x35d, 0x1]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x4}, {0x5, 0xa}, {0x3, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x3, 0x3}, {0x6, 0x2}, {0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x9}, {0x3, 0x8}, {0x2, 0x3}, {0x6, 0xa}, {0x3, 0x1}, {0x5, 0x6}, {0x7, 0x8}, {0x1}, {0x3, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x4}, {0x2, 0x4}, {0x2, 0x6}, {0x5, 0x4}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x5}, {0x7, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x9}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0xa}]}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x328, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x2}, {0x5, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x7, 0x3}, {0x7, 0xa}, {0x0, 0xa}, {0x2}, {0x2, 0xa}, {0x6, 0x2}, {0x7, 0x6}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x4, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x5, 0x2}, {0x2}, {0x6, 0x2}, {0x2, 0xa}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x3}, {}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x8}, {0x2}, {0x4, 0xa}, {0x2}, {0x2, 0x4}, {0x3}, {0x7, 0x1}, {0x2}, {0x1, 0xa}, {0x6}, {0x6, 0x2}, {0x6, 0x8}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fff, 0x1, 0xc, 0x5, 0x2ee, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x6}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x9}, {0x7, 0x8}, {0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x6, 0x8}, {}, {0x5, 0x4}, {0x3, 0x1}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x2}, {0x4, 0x4}, {0x3, 0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x2}, {0x1, 0x1}, {0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x3, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x6}, {0x5, 0x5}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x1}, {0x2, 0x2}, {0x5, 0x9}, {0x7, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x2}, {0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x3, 0x5}, {0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x2}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x4}, {0x3, 0xa}, {0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x3, 0x3}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x2}, {0x4, 0x2}, {0x7, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x60, 0xbb36, 0xffff, 0x8, 0x1, 0xf800]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x6, 0x0, 0x9, 0x24]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5}, {0x1, 0x2}, {0x2, 0x9}, {0x4, 0x4}, {0x3, 0x2}, {0x4, 0x5}, {0x4, 0x9}, {}, {0x7, 0xa}, {0x4, 0x5}, {0x4, 0x8}, {0x0, 0x2}, {0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x5}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x6}, {0x5}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x2}, {}, {0x1, 0x3}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x12, 0x6c, 0x60, 0x30]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x5, 0x24, 0x4, 0x5, 0x5, 0x2, 0x60, 0x30, 0x18, 0xc, 0xc, 0x24, 0x0, 0x60, 0x9, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x5833, 0x7fff, 0x9, 0x6, 0x6, 0xc]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x5, 0x12, 0x6c, 0x6, 0x6, 0x6, 0x16, 0x60, 0x6c, 0x60, 0x60, 0x16, 0x6, 0x9, 0x24, 0x30, 0x24, 0x6, 0x16, 0x3]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0xb, 0xc, 0x60, 0x1b, 0x16, 0x1, 0x6, 0x60, 0x48, 0x5, 0x30, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfae, 0x0, 0x0, 0x8, 0x6, 0x1, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x40, 0x0, 0x1, 0x7ff, 0x1, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x60, 0x60, 0x2, 0x60, 0x45, 0x6, 0x4, 0x30, 0x1, 0x4, 0x5, 0x2, 0x6c, 0x16, 0x1, 0x24, 0xb, 0x60, 0x3, 0x2, 0x18, 0x2, 0x16, 0x1, 0x36, 0x4, 0x1b, 0x64, 0x1b, 0x18, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x2c, 0x8004, 0xb, 0xa5, 0x9a7f, 0x2]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x6}, {0x7, 0xa}, {0x5, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x3}, {0x6}, {0x3, 0xa}, {0x4, 0x3}, {0x3, 0x8}, {0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x7}, {0x1}, {0x4, 0x6}, {0x2, 0x6}, {0x3, 0x9}, {0x6, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x3}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0xa}, {0x3, 0x9}, {0x5, 0x9}, {0x2, 0x3}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x6}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x2}, {0x3, 0x1}, {0x5, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0xb}, {0x4, 0x3}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0x6}, {0x5, 0x7}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0x3}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x9, 0x5746, 0x10, 0x7, 0x9, 0xa953, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0xc, 0x30, 0x0]}]}]}]}, 0x658}, 0x1, 0x0, 0x0, 0x880}, 0x4040851)

2m7.859173181s ago: executing program 0 (id=520):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30)
preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x364, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x40090)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001880)={&(0x7f0000001200)={0x658, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1e}}}}, [@NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x5, 0x2720, 0x8, 0x0, 0xe50, 0xa6, 0xffe1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x8, 0x3, 0x3, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1c, 0x4, 0x1, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0xc, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6f28, 0x4, 0x3, 0x612f, 0x2, 0x8, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7fff, 0xc, 0x67, 0xb7, 0x4, 0x3, 0x1e1]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x3, 0x3, 0x6c, 0x16, 0x24, 0xb, 0x48, 0x1, 0x9, 0x3, 0x6, 0x4, 0x30, 0x16, 0x1, 0x18, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x1b, 0x48, 0x9, 0x16, 0x44, 0x30, 0x30, 0x0, 0x12, 0x5, 0x16, 0x3, 0x12, 0x6c, 0x30, 0x6, 0x4, 0x24, 0x6c, 0x12, 0x6, 0x6, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xaf17, 0x9, 0x8, 0xf96, 0x800, 0xff, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x979, 0x2, 0x8000, 0x101, 0x6, 0x35, 0xad03]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x60, 0x30, 0x5, 0x6c, 0x30, 0x48, 0x6c, 0x12, 0xc, 0x60, 0x6, 0x3]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x30, 0x30, 0x9, 0x36, 0x36, 0xc, 0x30, 0xa55ee9962dcfbfb1, 0xc, 0x9, 0xc, 0x48, 0x4, 0x9, 0x2, 0x48, 0x6c, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x8000, 0x0, 0x2, 0x7, 0x8, 0x8]}}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x2, 0x6, 0x7f, 0x2, 0xd, 0xfff5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xf, 0x1, 0x80c1, 0xe29, 0x2, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8e}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x6, 0x4, 0x16, 0x18, 0x4, 0x24, 0x50, 0x1b, 0x9, 0x0, 0x6c, 0xc, 0x56, 0x60, 0x7e, 0x16, 0xc, 0x4, 0x4, 0x36, 0x5, 0x4, 0x0, 0x4, 0x1b, 0x9, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4}, {0x6}, {0x1, 0x3}, {0x6}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x2}, {0x1}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x6}, {0x1, 0x3}, {0x6, 0x4}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x2}, {0x0, 0x9}, {0x0, 0x7}, {0x5, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0x2}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x7}, {0x6}, {0x4, 0x3}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x9}]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x44, 0x401, 0xc7e, 0x3c, 0xf32, 0xe8e4, 0xfff8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0xa}, {0x1, 0x6}, {0x7, 0x3}, {0x3}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x7, 0x1}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x3, 0x5}, {0x5, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x7}, {0x3, 0x8}, {0x5, 0x7}, {0x5, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x1}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0xf, 0x7fff, 0x2, 0x3, 0x35d, 0x1]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x4}, {0x5, 0xa}, {0x3, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x3, 0x3}, {0x6, 0x2}, {0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x9}, {0x3, 0x8}, {0x2, 0x3}, {0x6, 0xa}, {0x3, 0x1}, {0x5, 0x6}, {0x7, 0x8}, {0x1}, {0x3, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x4}, {0x2, 0x4}, {0x2, 0x6}, {0x5, 0x4}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x5}, {0x7, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x9}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0xa}]}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x328, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x2}, {0x5, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x7, 0x3}, {0x7, 0xa}, {0x0, 0xa}, {0x2}, {0x2, 0xa}, {0x6, 0x2}, {0x7, 0x6}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x4, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x5, 0x2}, {0x2}, {0x6, 0x2}, {0x2, 0xa}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x3}, {}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x8}, {0x2}, {0x4, 0xa}, {0x2}, {0x2, 0x4}, {0x3}, {0x7, 0x1}, {0x2}, {0x1, 0xa}, {0x6}, {0x6, 0x2}, {0x6, 0x8}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fff, 0x1, 0xc, 0x5, 0x2ee, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x6}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x9}, {0x7, 0x8}, {0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x6, 0x8}, {}, {0x5, 0x4}, {0x3, 0x1}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x2}, {0x4, 0x4}, {0x3, 0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x2}, {0x1, 0x1}, {0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x3, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x6}, {0x5, 0x5}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x1}, {0x2, 0x2}, {0x5, 0x9}, {0x7, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x2}, {0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x3, 0x5}, {0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x2}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x4}, {0x3, 0xa}, {0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x3, 0x3}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x2}, {0x4, 0x2}, {0x7, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x60, 0xbb36, 0xffff, 0x8, 0x1, 0xf800]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x6, 0x0, 0x9, 0x24]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5}, {0x1, 0x2}, {0x2, 0x9}, {0x4, 0x4}, {0x3, 0x2}, {0x4, 0x5}, {0x4, 0x9}, {}, {0x7, 0xa}, {0x4, 0x5}, {0x4, 0x8}, {0x0, 0x2}, {0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x5}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x6}, {0x5}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x2}, {}, {0x1, 0x3}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x12, 0x6c, 0x60, 0x30]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x5, 0x24, 0x4, 0x5, 0x5, 0x2, 0x60, 0x30, 0x18, 0xc, 0xc, 0x24, 0x0, 0x60, 0x9, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x5833, 0x7fff, 0x9, 0x6, 0x6, 0xc]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x5, 0x12, 0x6c, 0x6, 0x6, 0x6, 0x16, 0x60, 0x6c, 0x60, 0x60, 0x16, 0x6, 0x9, 0x24, 0x30, 0x24, 0x6, 0x16, 0x3]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0xb, 0xc, 0x60, 0x1b, 0x16, 0x1, 0x6, 0x60, 0x48, 0x5, 0x30, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfae, 0x0, 0x0, 0x8, 0x6, 0x1, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x40, 0x0, 0x1, 0x7ff, 0x1, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x60, 0x60, 0x2, 0x60, 0x45, 0x6, 0x4, 0x30, 0x1, 0x4, 0x5, 0x2, 0x6c, 0x16, 0x1, 0x24, 0xb, 0x60, 0x3, 0x2, 0x18, 0x2, 0x16, 0x1, 0x36, 0x4, 0x1b, 0x64, 0x1b, 0x18, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x2c, 0x8004, 0xb, 0xa5, 0x9a7f, 0x2]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x6}, {0x7, 0xa}, {0x5, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x3}, {0x6}, {0x3, 0xa}, {0x4, 0x3}, {0x3, 0x8}, {0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x7}, {0x1}, {0x4, 0x6}, {0x2, 0x6}, {0x3, 0x9}, {0x6, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x3}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0xa}, {0x3, 0x9}, {0x5, 0x9}, {0x2, 0x3}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x6}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x2}, {0x3, 0x1}, {0x5, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0xb}, {0x4, 0x3}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0x6}, {0x5, 0x7}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0x3}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x9, 0x5746, 0x10, 0x7, 0x9, 0xa953, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0xc, 0x30, 0x0]}]}]}]}, 0x658}, 0x1, 0x0, 0x0, 0x880}, 0x4040851)

2m7.380416635s ago: executing program 32 (id=520):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30)
preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x364, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x40090)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001880)={&(0x7f0000001200)={0x658, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1e}}}}, [@NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x5, 0x2720, 0x8, 0x0, 0xe50, 0xa6, 0xffe1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x8, 0x3, 0x3, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1c, 0x4, 0x1, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0xc, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6f28, 0x4, 0x3, 0x612f, 0x2, 0x8, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7fff, 0xc, 0x67, 0xb7, 0x4, 0x3, 0x1e1]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x3, 0x3, 0x6c, 0x16, 0x24, 0xb, 0x48, 0x1, 0x9, 0x3, 0x6, 0x4, 0x30, 0x16, 0x1, 0x18, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x1b, 0x48, 0x9, 0x16, 0x44, 0x30, 0x30, 0x0, 0x12, 0x5, 0x16, 0x3, 0x12, 0x6c, 0x30, 0x6, 0x4, 0x24, 0x6c, 0x12, 0x6, 0x6, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xaf17, 0x9, 0x8, 0xf96, 0x800, 0xff, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x979, 0x2, 0x8000, 0x101, 0x6, 0x35, 0xad03]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x60, 0x30, 0x5, 0x6c, 0x30, 0x48, 0x6c, 0x12, 0xc, 0x60, 0x6, 0x3]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x30, 0x30, 0x9, 0x36, 0x36, 0xc, 0x30, 0xa55ee9962dcfbfb1, 0xc, 0x9, 0xc, 0x48, 0x4, 0x9, 0x2, 0x48, 0x6c, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x8000, 0x0, 0x2, 0x7, 0x8, 0x8]}}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x2, 0x6, 0x7f, 0x2, 0xd, 0xfff5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xf, 0x1, 0x80c1, 0xe29, 0x2, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8e}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x6, 0x4, 0x16, 0x18, 0x4, 0x24, 0x50, 0x1b, 0x9, 0x0, 0x6c, 0xc, 0x56, 0x60, 0x7e, 0x16, 0xc, 0x4, 0x4, 0x36, 0x5, 0x4, 0x0, 0x4, 0x1b, 0x9, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4}, {0x6}, {0x1, 0x3}, {0x6}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x2}, {0x1}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x6}, {0x1, 0x3}, {0x6, 0x4}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x2}, {0x0, 0x9}, {0x0, 0x7}, {0x5, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0x2}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x7}, {0x6}, {0x4, 0x3}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x9}]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x44, 0x401, 0xc7e, 0x3c, 0xf32, 0xe8e4, 0xfff8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0xa}, {0x1, 0x6}, {0x7, 0x3}, {0x3}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x7, 0x1}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x3, 0x5}, {0x5, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x7}, {0x3, 0x8}, {0x5, 0x7}, {0x5, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x1}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0xf, 0x7fff, 0x2, 0x3, 0x35d, 0x1]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x4}, {0x5, 0xa}, {0x3, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x3, 0x3}, {0x6, 0x2}, {0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x9}, {0x3, 0x8}, {0x2, 0x3}, {0x6, 0xa}, {0x3, 0x1}, {0x5, 0x6}, {0x7, 0x8}, {0x1}, {0x3, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x4}, {0x2, 0x4}, {0x2, 0x6}, {0x5, 0x4}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x5}, {0x7, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x9}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0xa}]}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x328, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x2}, {0x5, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x7, 0x3}, {0x7, 0xa}, {0x0, 0xa}, {0x2}, {0x2, 0xa}, {0x6, 0x2}, {0x7, 0x6}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x4, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x5, 0x2}, {0x2}, {0x6, 0x2}, {0x2, 0xa}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x3}, {}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x8}, {0x2}, {0x4, 0xa}, {0x2}, {0x2, 0x4}, {0x3}, {0x7, 0x1}, {0x2}, {0x1, 0xa}, {0x6}, {0x6, 0x2}, {0x6, 0x8}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fff, 0x1, 0xc, 0x5, 0x2ee, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x6}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x9}, {0x7, 0x8}, {0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x6, 0x8}, {}, {0x5, 0x4}, {0x3, 0x1}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x2}, {0x4, 0x4}, {0x3, 0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x2}, {0x1, 0x1}, {0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x3, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x6}, {0x5, 0x5}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x1}, {0x2, 0x2}, {0x5, 0x9}, {0x7, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x2}, {0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x3, 0x5}, {0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x2}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x4}, {0x3, 0xa}, {0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x3, 0x3}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x2}, {0x4, 0x2}, {0x7, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x60, 0xbb36, 0xffff, 0x8, 0x1, 0xf800]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x6, 0x0, 0x9, 0x24]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5}, {0x1, 0x2}, {0x2, 0x9}, {0x4, 0x4}, {0x3, 0x2}, {0x4, 0x5}, {0x4, 0x9}, {}, {0x7, 0xa}, {0x4, 0x5}, {0x4, 0x8}, {0x0, 0x2}, {0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x5}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x6}, {0x5}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x2}, {}, {0x1, 0x3}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x12, 0x6c, 0x60, 0x30]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x5, 0x24, 0x4, 0x5, 0x5, 0x2, 0x60, 0x30, 0x18, 0xc, 0xc, 0x24, 0x0, 0x60, 0x9, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x5833, 0x7fff, 0x9, 0x6, 0x6, 0xc]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x5, 0x12, 0x6c, 0x6, 0x6, 0x6, 0x16, 0x60, 0x6c, 0x60, 0x60, 0x16, 0x6, 0x9, 0x24, 0x30, 0x24, 0x6, 0x16, 0x3]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0xb, 0xc, 0x60, 0x1b, 0x16, 0x1, 0x6, 0x60, 0x48, 0x5, 0x30, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfae, 0x0, 0x0, 0x8, 0x6, 0x1, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x40, 0x0, 0x1, 0x7ff, 0x1, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x60, 0x60, 0x2, 0x60, 0x45, 0x6, 0x4, 0x30, 0x1, 0x4, 0x5, 0x2, 0x6c, 0x16, 0x1, 0x24, 0xb, 0x60, 0x3, 0x2, 0x18, 0x2, 0x16, 0x1, 0x36, 0x4, 0x1b, 0x64, 0x1b, 0x18, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x2c, 0x8004, 0xb, 0xa5, 0x9a7f, 0x2]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x6}, {0x7, 0xa}, {0x5, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x3}, {0x6}, {0x3, 0xa}, {0x4, 0x3}, {0x3, 0x8}, {0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x7}, {0x1}, {0x4, 0x6}, {0x2, 0x6}, {0x3, 0x9}, {0x6, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x3}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0xa}, {0x3, 0x9}, {0x5, 0x9}, {0x2, 0x3}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x6}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x2}, {0x3, 0x1}, {0x5, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0xb}, {0x4, 0x3}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0x6}, {0x5, 0x7}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0x3}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x9, 0x5746, 0x10, 0x7, 0x9, 0xa953, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0xc, 0x30, 0x0]}]}]}]}, 0x658}, 0x1, 0x0, 0x0, 0x880}, 0x4040851)

2m7.362905532s ago: executing program 3 (id=680):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) (async)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5, 0x0, 0xfffffffffffffebc}, 0x4}], 0x2, 0x60, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
socket(0x840000000002, 0x3, 0xfa) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
sendmmsg$inet(r4, &(0x7f0000000340), 0x62, 0x80) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r6=>0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r9=>0x0})
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000))
ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (async)
ioctl$sock_ax25_SIOCDELRT(r8, 0x890c, &(0x7f0000000540)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @bcast]}) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="0800b70000000000080026008f0900"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r9}, 0x10)

2m7.362656691s ago: executing program 33 (id=680):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) (async)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5, 0x0, 0xfffffffffffffebc}, 0x4}], 0x2, 0x60, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
socket(0x840000000002, 0x3, 0xfa) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
sendmmsg$inet(r4, &(0x7f0000000340), 0x62, 0x80) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r6=>0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r9=>0x0})
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000))
ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (async)
ioctl$sock_ax25_SIOCDELRT(r8, 0x890c, &(0x7f0000000540)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @bcast]}) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="0800b70000000000080026008f0900"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r9}, 0x10)

2m7.354602344s ago: executing program 4 (id=595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffec9, 0x0}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0)

2m6.831848318s ago: executing program 34 (id=595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffec9, 0x0}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0)

4.342048668s ago: executing program 7 (id=2823):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003c00)=@newae={0x5c, 0x1e, 0x401, 0x70bd29, 0x25dfdbff, {{@in6=@loopback, 0x4d4, 0x2, 0xff}, @in6=@mcast2, 0xb5, 0x3507}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b, 0x70bd2c, 0x70bd2c, 0x70bd2a, 0xfffffffe}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.08598671s ago: executing program 7 (id=2827):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240), 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x14000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x40800)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x3, 0x0, 0x3, 0x2}]}]}, 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0xfffffffc, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@private2={0xfc, 0x2, '\x00', 0x2}, 0x3c, 0x0, 0x0, 0x3, 0x8, 0x2}]}]}, 0xa0}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x6}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x50}}, 0x40)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r12, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0)

3.051066257s ago: executing program 5 (id=2835):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0, 0x0, 0x3}, 0x18)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffec7, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008941900ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4080)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008100)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400})
socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r3, 0x7ca8e000)
writev(r4, &(0x7f0000000080)=[{0x0}], 0x1)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000280)=0x1, 0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0)
bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0x4, 0x1}, 0x6)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2.843073414s ago: executing program 7 (id=2838):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x50, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="dd44f6463f7bc1ea6b0b9a5c7c8b074ea1b4e625336c0d7415ec606178a6d308"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "63eb6c0274bcc570"}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc5149aae0af4b1cf}, 0x40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b00400000010000000300000000ff000008"], 0x20}}, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
r10 = socket$unix(0x1, 0x1, 0x0)
epoll_create1(0x80000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x24044094)

2.135090926s ago: executing program 5 (id=2845):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x7c, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r3, 0x4, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x1f}})

2.115412149s ago: executing program 2 (id=2846):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000000)=0x8, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x400300, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10}, @TCA_FQ_FLOW_MAX_RATE={0x2}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010f90304000000003a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000080001001c00128008000100677265001000028006000e000000000004001200"], 0x3c}}, 0x0)

2.115171709s ago: executing program 7 (id=2847):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000000000e3bc40c7f8fd73d61164fc7d15648a9e0070949687000000000000000000000000000000000000000000000000000000227bf23d3ba4560ebd7000"/171], 0x34c}}, 0x44)

2.003183252s ago: executing program 5 (id=2849):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd23, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x47}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x4004000) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r4, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x9}]}, 0x34}}, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="611834000000000061134c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf37000000000000350607000fff0720dc06000020000000260300000ee60060bf050000000000000f630000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f3fa039a196ee920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f625480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000008e69cc5c1e7319d39fa6f96c23c8ffd591ef011294c50a0a705549134c4aa3544a99edc9535105d3aeba9ec9441f912bdc65695e731c872278b64167aa46a07c68a9eace7fa485108f9d8cb4304c4b65d61d88aacea85b53893ee96edc310c23b1fc83b4b0f3d28c3861480840b7fe39a2bc2f6a558a20ae4d30b41f32e275faf92af8456141fde716d8d10a6b30981563db05312c39e8074fd5bb8bf95c24ccdb04e40e595927181d1138510fc6162da1a5898534fc2460b957e7b77bc5e192cc36ad2949c85e15142da926fbf6f830e1aaaa5dd9538e259e7f107e49b194c537ed4a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000040)={'wg0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r7, 0x2f, 0x2, 0x4, 0x6, 0x21, @private1, @mcast1, 0x7, 0x20, 0x39, 0x8}})

1.986953834s ago: executing program 7 (id=2851):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan3\x00'})
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x100, 0x70bd28, 0x25dfdbf7, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r7 = socket$kcm(0x10, 0x2, 0x4)
r8 = socket$kcm(0x25, 0xf, 0x0)
r9 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r9, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0)
recvmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x100)
recvmsg$kcm(r9, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x40000000)
recvmsg(r8, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40010040)
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
close(r10)
sendmsg$inet(r11, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r11, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0xc03e)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000f40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}]}, @func={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000d40)={0xf8, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66a6ab9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc226}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33dc9ae}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3973af9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}]}]}]}, 0xf8}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000680)=""/195, 0xc3}, {&(0x7f0000000780)=""/133, 0x85}, {&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000840)=""/196, 0xc4}, {&(0x7f0000000940)=""/9, 0x9}, {&(0x7f0000000980)=""/165, 0xa5}], 0x7, &(0x7f0000000ac0)=""/136, 0x88}, 0x20000001)

1.883103155s ago: executing program 6 (id=2852):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44085}, 0x10)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44085}, 0x10) (async)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) (async)

1.79526384s ago: executing program 1 (id=2853):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xe4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
write(r0, &(0x7f00000000c0)="4e9a408e5d85a6eac593122241dac53e8e0e53be34dcc576fbdc5545557a9fcf4ced2e58e2a378a3f9a894f0294f7fe9cc244a8ea7ba856bf14ac2ac1a6df9d93260e5382a266e47d19ff751cdb4c192fa87d294b7622191e5630fdebcae7aa71a5d4721c4805feefdd4a7b15e9534eb6be238ed289833dc4c9ed90e34f47f12aea38e95f7e72a455c16b4a1b231d9976c8f66354b89f1f1f06dd1459d06453bd29eb876e8", 0xa5)

1.794959014s ago: executing program 5 (id=2854):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYRES8], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffffb, 0x12)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010)
socket$packet(0x11, 0x3, 0x300)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3e, 0x3e, 0x4, [@datasec={0x2, 0x4, 0x0, 0xf, 0x2, [{0x5, 0x0, 0x7fffffff}, {0x4, 0x9, 0x7}, {0x3, 0x5, 0xf}, {0x1, 0xfffffffa, 0x3}], "37ee"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000001c0)=""/51, 0x5c, 0x33, 0x1, 0x8, 0x10000, @value}, 0x28)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r6, 0x2, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x668e, 0xfff, 0x1, 0xa020, r7, 0x6, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0xb, @value, @void, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r8, &(0x7f00000001c0), 0x0}, 0x20)
socket$igmp(0x2, 0x3, 0x2)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'vcan0\x00', 0x10})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {}]}]}, {0x0, [0x2e]}}, &(0x7f0000000080)=""/233, 0x3f, 0xf, 0x1, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0xfffffdd8, &(0x7f0000000cc0)={&(0x7f00000003c0)=ANY=[], 0x21c}, 0x1, 0x0, 0x0, 0x800}, 0x8005)

1.767984098s ago: executing program 2 (id=2855):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@ieee802154, &(0x7f00000000c0)=0x80) (async)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=<r1=>0x0)
sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x13, 0x300, 0x70bd2c, 0x25dfdbfd, {0x8}, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0xff, 0x0, 0x0, @pid=r1}, @typed={0x8, 0xf3, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) (async)
clock_gettime(0x0, &(0x7f00000014c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r0, &(0x7f00000013c0)=[{{&(0x7f00000003c0)=@tipc=@id, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)=""/23, 0x17}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f00000005c0)=""/98, 0x62}, {&(0x7f0000000640)=""/229, 0xe5}, {&(0x7f0000000740)=""/106, 0x6a}, {&(0x7f00000007c0)=""/83, 0x53}, {&(0x7f0000000840)=""/60, 0x3c}], 0x8, &(0x7f0000000900)=""/55, 0x37}, 0x800}, {{&(0x7f0000000940)=@tipc=@name, 0x80, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/188, 0xbc}], 0x1, &(0x7f0000000ac0)=""/8, 0x8}, 0x8}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000b00)=""/83, 0x53}, {&(0x7f0000000b80)=""/94, 0x5e}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/82, 0x52}, {&(0x7f0000000cc0)=""/160, 0xa0}, {&(0x7f0000000d80)=""/202, 0xca}, {&(0x7f0000000e80)=""/138, 0x8a}, {&(0x7f0000000f40)=""/53, 0x35}], 0x8, &(0x7f0000001000)=""/76, 0x4c}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f0000001280)=[{&(0x7f0000001100)=""/140, 0x8c}, {&(0x7f00000011c0)=""/14, 0xe}, {&(0x7f0000001200)=""/126, 0x7e}], 0x3, &(0x7f00000012c0)=""/250, 0xfa}, 0x9}], 0x4, 0x40, &(0x7f0000001500)={r2, r3+60000000})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) (async)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async)
sendmsg$tipc(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$alg(0x26, 0x5, 0x0) (async)
connect$inet(r0, &(0x7f0000000c00)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r8 = accept$alg(r7, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async)
sendmsg$alg(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="9e", 0x1}], 0x1, 0x0, 0x0, 0x4}, 0xc5b203a398fd81c) (async)
r9 = accept4(r8, 0x0, 0x0, 0x800)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r11 = accept$alg(r9, 0x0, 0x0)
sendmmsg$alg(r11, &(0x7f0000002300)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0x24004080) (async)
syz_emit_ethernet(0x9a, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv4={0x800, @dccp={{0x11, 0x4, 0x0, 0xe, 0x8c, 0x66, 0x0, 0x2, 0x21, 0x0, @private=0xa010102, @remote, {[@lsrr={0x83, 0x13, 0x3e, [@broadcast, @loopback, @multicast1, @private=0xa010100]}, @ssrr={0x89, 0x1b, 0x22, [@empty, @multicast1, @local, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x13}]}]}}, {{0x4e21, 0x4e24, 0x4, 0x1, 0x0, 0x0, 0x0, 0xa, 0x4, "630ff5", 0xa, "9d92b2"}, "2bece653453622775489d25b9c60a8c8aeaede9abbe4de87334d9d0279b905750a0ddbc0ebf92213d72a93be9f843666209133590f544a74"}}}}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x13, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc000) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

1.695219543s ago: executing program 1 (id=2856):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'veth0_vlan\x00', 0xffff8000}) (async)
ioctl(r0, 0x80, &(0x7f0000000040))

1.623237909s ago: executing program 6 (id=2857):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000000000079107a00000000000700000000000000950000000000004000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a03000000000000000000000a"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

1.596545149s ago: executing program 2 (id=2858):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040)

1.549165287s ago: executing program 1 (id=2859):
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000280), 0x4) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000704fcff", 0x58}], 0x1)

1.495164986s ago: executing program 6 (id=2860):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x28) (async, rerun: 32)
r2 = accept4(r1, 0x0, 0x0, 0x0) (rerun: 32)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000015c0)=@int=0x4, 0x4) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYRES16=<r3=>r1], 0x6c}}, 0x24008804) (async, rerun: 32)
syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYRESHEX=r3], 0x30}}, 0x0) (async, rerun: 64)
socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000010000000000000000000014000200fe8000000000000000000400000000aa1400069b184a1219508107c1825eacaf9f1e9a9dd62a6d606195d2e1a99547489cfaef593e114e55bcae8977483e78a50436dbb891bb52093ba01475446d42acc9a9ca49c1392cb42f4bca78f621edf5a7aa49a2ea3948b96d9bad907e158f6bf1a575d84f1c4c94fc1435162fb685b051794e3f00d6cd0e948a98f87ce213c75ecf72a3de59500b35ea6e2224e585a6ce274f1f3dd6b17d4fa01519af826646018284a3ddb0"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
socketpair(0x10, 0x2, 0x2e7, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x418}, 0x80) (async)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async, rerun: 64)
r7 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)) (async)
ioctl$PPPIOCSACTIVE(r8, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async, rerun: 64)
readv(r8, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1) (async, rerun: 64)
setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f00000001c0)={0xd6, 0x582, 0xfffffff7}, 0xc)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async)
r9 = socket(0x10, 0x803, 0x0) (async)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) (async)
getsockname$packet(r9, &(0x7f0000000740)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400000000000000f7f209a52aa05513f10a965e2b0000000000", @ANYRES32=r11, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r11, @ANYRES32=r7], 0x48}}, 0x0)
setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0xbf2, @vifc_lcl_ifindex=r11, @multicast1}, 0x10)

1.45385131s ago: executing program 2 (id=2861):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000700000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020008"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.432917853s ago: executing program 1 (id=2862):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1dc, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x41}}}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="96278f6dda0e5c3ab051d51d65ef98db4d198c219c520c5d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="29f44b7acd8a1359c767615e3765f744"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="446865cd00176b3d4fe2fa704934d83a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c820348081ee12b67a94ed06227299fb4ee856ba1ac00742"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xde}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2c18ac6b7dc85d82b5195a7f6b9cac17"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffff8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="072a369c864ee95d7f0aa5d29ef0bc3e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ca3c0fc19146890e1ffa40b654eee7c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9c0}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6013c3302ba11b10"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x400}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="27ea174351c3d46a9c9cb48673c6fe635baa756d1285ba87"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="965bb5f24d2f66dc343e47c524597216fe1e2ef90d0b6522"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5073f90fef7ca1ac"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c0d4905a790158de8adc4630fbd45780"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="855ce72d5f3105d6c91861e74b5db650792fc091b05b467f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "56a161f78f1c700d"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x39736744}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f872ef41e2fcc555"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bf12c6360a5c672d13321f8adfb50e4dd789452e6e86adef"}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4000}, 0x8010)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.339079829s ago: executing program 2 (id=2863):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac141400000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000e3bc40c7f8fd73d61164fc7d15648a9e0070949687000000000000000000000000000000000000000000000000000000227bf23d3ba4560ebd7000"/171], 0x34c}}, 0x44)

1.338755366s ago: executing program 6 (id=2864):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="001400060000000000000000000000000008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007e000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000080))
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x4, 0xe5ce}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10000800)
socket$inet(0x2, 0x3, 0x8)

1.175546677s ago: executing program 1 (id=2865):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @multicast})
writev(r1, &(0x7f0000000480)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef232", 0x28}, {&(0x7f00000023c0)="05000000080000655858f0702076b0965312d24db245", 0x16}], 0x2)
setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)="f2", 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006feffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.175208245s ago: executing program 6 (id=2866):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000801, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000c80)=@assoc_value={<r3=>0x0}, &(0x7f0000000080)=0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = epoll_create(0x3ff)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000280)={0x20002000})
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x300, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x20008001)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={r3, 0x7}, 0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x24000}, &(0x7f0000000140)=0x8)

1.174650349s ago: executing program 2 (id=2867):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'nicvf0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'nicvf0\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000140)="474d15221515d13a6da17e949366c8e056600100cf1f34d5", 0x18}], 0x2)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$tun(0xffffffffffffff9c, 0x0, 0x44480, 0x0)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r7, &(0x7f0000000080)={0x1f, @any, 0x3b}, 0xa) (async)
connect$bt_rfcomm(r7, &(0x7f0000000080)={0x1f, @any, 0x3b}, 0xa)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, 0x0) (async)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r8, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0)
r11 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe)
socket$kcm(0x21, 0x2, 0xa) (async)
r12 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) (async)
sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r10}, 0x4)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x11, &(0x7f0000000480)=ANY=[@ANYRES32=r6, @ANYRES32=r10, @ANYBLOB="0000010000001f0a0000b70500000800000085002000a50000ff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9b30e07600380000100ffef86dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9b30e07600380000100ffef86dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

1.174507345s ago: executing program 5 (id=2868):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x200007ff, 0x4)
setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080)=0x2, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x34, r3, 0xf1aad47e89fb43b5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)

1.079783944s ago: executing program 5 (id=2869):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
writev(r5, &(0x7f0000000240)=[{0x0}], 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback}]}, 0x28}}, 0x84)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, 0x1, 0x4, [@broadcast, @local, @multicast1, @private=0xa010100]}, 0x20)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xfffffffffffffe4a, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xffff}, {0x9, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10)
listen(r8, 0x1ff)
sendto$inet(r8, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x20040054)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000940e0c223d818c7b00f90000000000008e7b8b83adaf97f3c82e120f66ae72499fd8a715d89205"], 0x48)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="2bb9dcab5337445510b21fd603c6426c3a5133a1cba744bfb07af657f90f537972be4d2e9e03a790d94fa0edf46624e52d5995312958b9dc45b88a7ff6c7a8149c5197bdc50d9bca637829a527f466b229a812ded82910d3ac311f85181992db3e05d276da5ae36ae26973a6266ff710c7465ee699f42ce052c731a786003f906a241239281d445c5e9410a2a6a40849b68e3fc2d9bc1494f67a551df213cdd39d6bc1e4dc10b6c725320350c34b09fcc5e6aac7d82292", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20)
sendmsg$inet(r9, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)

1.019055134s ago: executing program 7 (id=2870):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x8000, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x34, r5, 0x8de13c6b70ae92c3, 0x70bd28, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_NOACK]}]}]}, 0x17}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000b89e73497fa9000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c)

229.932076ms ago: executing program 6 (id=2871):
unshare(0x62040200)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa4000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14a45700", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000002d00010026bd050106b6437ba549d4ab90a09a00dbd90504f40000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1e0000000600000004000000682eb26d40000000", @ANYRES32=r1, @ANYBLOB="0400080000000000000000000000000000000000f382e77c58f13b0e1e5a64a94903d90a5b59e307a4984b53fbfaadd350f56d5d452b8b13d94fe0b58791d06af56cdb63ef7b52b20ec8d2aaa1bf80d4ac22489a363865bf1981d7c8f908edad67791219d92f8221799797c7f0ddb4a713065d2b680bc6a841d7573ed8dc42cd6c29f713734dbdd02278097b0000000000000dcfa3c71284723507d2a3186a0d0c2f764de126e571c0112bb51ff4958ecb6542c074f4e7fdcf5f889ee0cbc892dc6069e7cec10adc753ef65309342376193a95e5dca1757a090000002fc02ba714019e02e8547e6e0382e4", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0200000003000000050000000c00"/28], 0x50)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x12, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x5, 0x5, 0x0, 0x40, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x8, 0xb, 0x8, 0x100, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0xa7a, 0xcf, &(0x7f0000000280)=""/207, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x7, 0xc, 0x3ff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f0000000200)=[{0x4, 0x1, 0x9, 0xa}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x4, @void, @value}, 0x94)
r11 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8)
setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000000)=0x101, 0x4)
sendmmsg$inet6(r11, &(0x7f0000000980)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x4004000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='snd_soc_dapm_connected\x00', r10}, 0x18)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32, @ANYBLOB="14000200776731"], 0x34}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)

0s ago: executing program 1 (id=2872):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

kernel console output (not intermixed with test programs):

[  441.031293][T11905] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.064922][T11905] batman_adv: batadv0: Interface activated: virt_wifi0
[  441.127522][T11791] 8021q: adding VLAN 0 to HW filter on device team0
[  441.138357][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.145563][ T8273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  441.155503][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.162635][ T8273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  441.258008][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.265220][ T8273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  441.315503][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.322689][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  441.508861][T11789] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.553655][T11920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'.
[  441.574946][T11789] 8021q: adding VLAN 0 to HW filter on device team0
[  441.599162][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.606398][ T8273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  441.645314][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.652483][ T8273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  441.736676][T11780] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.884921][T11791] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.078653][T11789] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.389713][T11780] veth0_vlan: entered promiscuous mode
[  442.462436][T11780] veth1_vlan: entered promiscuous mode
[  442.621700][T11780] veth0_macvtap: entered promiscuous mode
[  442.677150][T11780] veth1_macvtap: entered promiscuous mode
[  442.766928][T11780] batman_adv: batadv0: Interface activated: batadv_slave_0
[  442.834492][T11780] batman_adv: batadv0: Interface activated: batadv_slave_1
[  442.877687][T11780] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.909054][T11780] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.921824][T11780] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.937692][T11780] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.992126][T11963] IPVS: Error connecting to the multicast addr
[  443.021674][T11791] veth0_vlan: entered promiscuous mode
[  443.071640][T11789] veth0_vlan: entered promiscuous mode
[  443.100241][T11791] veth1_vlan: entered promiscuous mode
[  443.127590][T11789] veth1_vlan: entered promiscuous mode
[  443.207531][ T8270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.217294][ T8270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.228529][T11791] veth0_macvtap: entered promiscuous mode
[  443.309714][T11791] veth1_macvtap: entered promiscuous mode
[  443.327138][T11789] veth0_macvtap: entered promiscuous mode
[  443.366500][T11973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1655'.
[  443.390411][T11973] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1655'.
[  443.399972][T11973] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1655'.
[  443.451462][T11789] veth1_macvtap: entered promiscuous mode
[  443.471029][ T8272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.487801][ T8272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.572309][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.603900][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.616003][T11789] batman_adv: batadv0: Interface activated: batadv_slave_0
[  443.626277][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.638652][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.656340][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.666946][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.679382][T11791] batman_adv: batadv0: Interface activated: batadv_slave_0
[  443.706883][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.718095][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.730848][T11789] batman_adv: batadv0: Interface activated: batadv_slave_1
[  443.751862][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.762504][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.773686][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.784567][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.796018][T11791] batman_adv: batadv0: Interface activated: batadv_slave_1
[  443.817109][T11789] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.826891][T11789] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.836707][T11789] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.846277][T11789] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  443.887602][T11791] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.901992][T11791] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.912084][T11791] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.924492][T11791] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.301396][T11996] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1658'.
[  444.315094][T11996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1658'.
[  444.376093][  T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.414340][  T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.429607][ T8270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.466444][ T8270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.492865][T11999] raw_sendmsg: syz.2.1660 forgot to set AF_INET. Fix it!
[  444.521374][ T8270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.556410][ T8270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.601165][ T8272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.612889][ T8272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.666241][T12006] lo: entered promiscuous mode
[  444.671235][T12006] tunl0: entered promiscuous mode
[  444.694097][T12006] gre0: entered promiscuous mode
[  444.699301][T12006] erspan0: entered promiscuous mode
[  444.706618][T12006] ip_vti0: entered promiscuous mode
[  444.711991][T12006] ip6_vti0: entered promiscuous mode
[  444.725647][T12006] sit0: entered promiscuous mode
[  444.730751][T12006] ip6tnl0: entered promiscuous mode
[  444.751073][T12006] ip6gre0: entered promiscuous mode
[  444.756749][T12006] syz_tun: entered promiscuous mode
[  444.762292][T12006] ip6gretap0: entered promiscuous mode
[  444.775001][T12006] bridge0: entered promiscuous mode
[  444.784771][T12006] team0: entered promiscuous mode
[  444.794302][T12006] nlmon0: entered promiscuous mode
[  444.804061][T12006] caif0: entered promiscuous mode
[  444.811431][T12006] batadv0: left allmulticast mode
[  444.834335][T12006] vxcan0: entered promiscuous mode
[  444.847677][T12006] vxcan1: entered promiscuous mode
[  444.868124][T12006] veth0: entered promiscuous mode
[  444.873501][T12006] veth1: entered promiscuous mode
[  444.882371][T12006] wg0: entered promiscuous mode
[  444.891912][T12006] wg1: entered promiscuous mode
[  444.899534][T12006] wg2: entered promiscuous mode
[  444.908688][T12018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1664'.
[  444.918459][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1664'.
[  444.928329][T12006] veth0_to_bridge: entered promiscuous mode
[  444.935436][T12006] veth1_to_bridge: entered promiscuous mode
[  444.941515][T12006] bridge_slave_1: entered promiscuous mode
[  444.947731][T12006] veth0_to_bond: entered promiscuous mode
[  444.957417][T12006] bond_slave_0: entered promiscuous mode
[  444.963228][T12006] veth1_to_bond: entered promiscuous mode
[  444.969672][T12006] bond_slave_1: entered promiscuous mode
[  444.976083][T12006] veth1_to_team: entered promiscuous mode
[  444.981989][T12006] team_slave_1: entered promiscuous mode
[  444.988086][T12006] veth0_to_batadv: entered promiscuous mode
[  444.994512][T12006] batadv_slave_0: entered promiscuous mode
[  445.000484][T12006] veth1_to_batadv: entered promiscuous mode
[  445.006707][T12006] batadv_slave_1: entered promiscuous mode
[  445.013113][T12006] veth0_to_hsr: entered promiscuous mode
[  445.020459][T12006] veth1_to_hsr: entered promiscuous mode
[  445.026610][T12006] hsr0: entered promiscuous mode
[  445.031750][T12006] veth1_virt_wifi: entered promiscuous mode
[  445.037859][T12006] veth0_virt_wifi: entered promiscuous mode
[  445.043982][T12006] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  445.051588][T12006] vlan0: entered promiscuous mode
[  445.057129][T12006] vlan1: entered promiscuous mode
[  445.062447][T12006] macvlan0: entered promiscuous mode
[  445.067987][T12006] macvlan1: entered promiscuous mode
[  445.073409][T12006] ipvlan0: entered promiscuous mode
[  445.079574][T12006] ipvlan1: entered promiscuous mode
[  445.085353][T12006] macvtap0: entered promiscuous mode
[  445.090929][T12006] macsec0: entered promiscuous mode
[  445.098393][T12006] geneve0: entered promiscuous mode
[  445.103821][T12006] geneve1: entered promiscuous mode
[  445.109190][T12006] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  445.116796][T12006] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  445.124018][T12006] bridge1: entered promiscuous mode
[  445.129490][T12006] tipc: Resetting bearer <eth:syzkaller0>
[  445.143489][T12006] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  445.151595][T12006] bridge2: entered promiscuous mode
[  445.157012][T12006] bridge3: entered promiscuous mode
[  445.162345][T12006] bridge4: entered promiscuous mode
[  445.168527][T12006] ip6tnl1: entered promiscuous mode
[  445.177042][T12006] gtp0: entered promiscuous mode
[  445.182445][T12006] bond1: entered promiscuous mode
[  445.190097][T12006] ip6gre1: entered promiscuous mode
[  445.195440][T12006] ip6gre1: left allmulticast mode
[  445.200637][T12006] geneve2: entered promiscuous mode
[  445.206380][T12006] ip6gretap1: left allmulticast mode
[  445.211885][T12006] bridge5: entered promiscuous mode
[  445.217775][T12006] bridge6: entered promiscuous mode
[  445.223594][T12006] bridge7: entered promiscuous mode
[  445.230668][T12006] 1: entered promiscuous mode
[  445.235807][T12006] vxlan0: entered promiscuous mode
[  445.241112][T12006] bond0: entered promiscuous mode
[  445.246470][T12006] syztnl2: entered promiscuous mode
[  445.251868][T12006] bond2: entered promiscuous mode
[  445.257755][T12006] netdevsim netdevsim2 eth0: entered promiscuous mode
[  445.264986][T12006] netdevsim netdevsim2 eth1: entered promiscuous mode
[  445.272001][T12006] netdevsim netdevsim2 eth2: entered promiscuous mode
[  445.279035][T12006] netdevsim netdevsim2 eth3: entered promiscuous mode
[  445.488349][T12025] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1667'.
[  445.612248][T12032] netlink: 'syz.6.1669': attribute type 1 has an invalid length.
[  445.639719][T12032] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1669'.
[  445.654615][T12036] gretap2: entered promiscuous mode
[  445.690536][T12028] IPVS: Error connecting to the multicast addr
[  446.117696][T12049] netlink: 'syz.6.1675': attribute type 10 has an invalid length.
[  446.135537][T12050] veth0_to_bond: entered promiscuous mode
[  446.241072][T12049] team0: Port device syz_tun added
[  446.283598][T12050] veth0_to_bond: left promiscuous mode
[  446.571896][ T5841] syz_tun (unregistering): left promiscuous mode
[  446.661566][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  446.671179][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  446.679947][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  446.688283][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  446.697834][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  446.798718][T12072] lo speed is unknown, defaulting to 1000
[  446.827187][T12072] lo speed is unknown, defaulting to 1000
[  447.380047][T12111] sit0: entered promiscuous mode
[  447.401572][T12111] netlink: 'syz.7.1694': attribute type 1 has an invalid length.
[  447.421800][T12111] __nla_validate_parse: 1 callbacks suppressed
[  447.421822][T12111] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1694'.
[  447.501691][T12072] chnl_net:caif_netlink_parms(): no params data found
[  447.570103][T12121] netlink: 'syz.2.1698': attribute type 10 has an invalid length.
[  447.591700][T12126] ksmbd: Unknown IPC event: 3, ignore.
[  447.597440][T12125] ksmbd: Unknown IPC event: 3, ignore.
[  447.648180][T12121] bridge0: left promiscuous mode
[  447.861289][T12072] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.879002][T12072] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.894726][T12072] bridge_slave_0: entered allmulticast mode
[  447.905458][T12072] bridge_slave_0: entered promiscuous mode
[  447.942160][T12144] FAULT_INJECTION: forcing a failure.
[  447.942160][T12144] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.968467][T12144] CPU: 0 UID: 0 PID: 12144 Comm: syz.7.1703 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) 
[  447.968498][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  447.968512][T12144] Call Trace:
[  447.968520][T12144]  <TASK>
[  447.968529][T12144]  dump_stack_lvl+0x189/0x250
[  447.968561][T12144]  ? __lock_acquire+0xaac/0xd20
[  447.968592][T12144]  ? __pfx_dump_stack_lvl+0x10/0x10
[  447.968620][T12144]  ? __pfx__printk+0x10/0x10
[  447.968641][T12144]  ? __might_fault+0xb0/0x130
[  447.968684][T12144]  should_fail_ex+0x414/0x560
[  447.968720][T12144]  _copy_from_iter+0x1db/0x15a0
[  447.968751][T12144]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  447.968774][T12144]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  447.968799][T12144]  ? __pfx__copy_from_iter+0x10/0x10
[  447.968824][T12144]  ? __build_skb_around+0x257/0x3e0
[  447.968847][T12144]  ? netlink_sendmsg+0x642/0xb30
[  447.968865][T12144]  ? skb_put+0x11b/0x210
[  447.968888][T12144]  netlink_sendmsg+0x6b2/0xb30
[  447.968917][T12144]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.968940][T12144]  ? aa_sock_msg_perm+0x94/0x160
[  447.968961][T12144]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  447.968983][T12144]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.969003][T12144]  __sock_sendmsg+0x219/0x270
[  447.969034][T12144]  ____sys_sendmsg+0x505/0x830
[  447.969062][T12144]  ? __pfx_____sys_sendmsg+0x10/0x10
[  447.969094][T12144]  ? import_iovec+0x74/0xa0
[  447.969122][T12144]  ___sys_sendmsg+0x21f/0x2a0
[  447.969148][T12144]  ? __pfx____sys_sendmsg+0x10/0x10
[  447.969207][T12144]  ? __fget_files+0x2a/0x420
[  447.969232][T12144]  ? __fget_files+0x3a0/0x420
[  447.969267][T12144]  __x64_sys_sendmsg+0x19b/0x260
[  447.969292][T12144]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  447.969332][T12144]  ? do_syscall_64+0xba/0x210
[  447.969363][T12144]  do_syscall_64+0xf6/0x210
[  447.969389][T12144]  ? clear_bhb_loop+0x45/0xa0
[  447.969413][T12144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.969432][T12144] RIP: 0033:0x7f6c3a98e969
[  447.969451][T12144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  447.969472][T12144] RSP: 002b:00007f6c3b7a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  447.969493][T12144] RAX: ffffffffffffffda RBX: 00007f6c3abb5fa0 RCX: 00007f6c3a98e969
[  447.969508][T12144] RDX: 0000000000000810 RSI: 0000200000000200 RDI: 0000000000000004
[  447.969521][T12144] RBP: 00007f6c3b7a7090 R08: 0000000000000000 R09: 0000000000000000
[  447.969533][T12144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.969545][T12144] R13: 0000000000000000 R14: 00007f6c3abb5fa0 R15: 00007ffdbf093a58
[  447.969575][T12144]  </TASK>
[  448.204660][T12072] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.319810][T12072] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.371661][T12072] bridge_slave_1: entered allmulticast mode
[  448.387004][T12072] bridge_slave_1: entered promiscuous mode
[  448.453333][T12072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.458342][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1706'.
[  448.475911][T12072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.515440][T12153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.529300][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1706'.
[  448.539197][T12154] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.1705'.
[  448.544329][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1706'.
[  448.561971][T12072] team0: Port device team_slave_0 added
[  448.573958][T12072] team0: Port device team_slave_1 added
[  448.733689][T12072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.748022][T12072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.789504][T12072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.790187][ T5141] Bluetooth: hci3: command tx timeout
[  448.807299][T12072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.814704][T12072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.840798][T12072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.947323][T12072] hsr_slave_0: entered promiscuous mode
[  448.957408][T12072] hsr_slave_1: entered promiscuous mode
[  448.984877][T12072] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  448.999943][T12072] Cannot create hsr debugfs directory
[  449.392727][T12183] FAULT_INJECTION: forcing a failure.
[  449.392727][T12183] name failslab, interval 1, probability 0, space 0, times 0
[  449.409307][T12072] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.412349][T12183] CPU: 0 UID: 0 PID: 12183 Comm: syz.2.1715 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) 
[  449.412378][T12183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  449.412391][T12183] Call Trace:
[  449.412400][T12183]  <TASK>
[  449.412409][T12183]  dump_stack_lvl+0x189/0x250
[  449.412453][T12183]  ? __pfx_dump_stack_lvl+0x10/0x10
[  449.412482][T12183]  ? __pfx__printk+0x10/0x10
[  449.412505][T12183]  ? __pfx___might_resched+0x10/0x10
[  449.412524][T12183]  ? fs_reclaim_acquire+0x7d/0x100
[  449.412560][T12183]  should_fail_ex+0x414/0x560
[  449.412596][T12183]  should_failslab+0xa8/0x100
[  449.412625][T12183]  __kmalloc_noprof+0xcb/0x4f0
[  449.412649][T12183]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  449.412682][T12183]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  449.412716][T12183]  genl_family_rcv_msg_doit+0xb8/0x300
[  449.412749][T12183]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  449.412777][T12183]  ? rcu_is_watching+0x15/0xb0
[  449.412809][T12183]  ? apparmor_capable+0x137/0x1b0
[  449.412838][T12183]  ? bpf_lsm_capable+0x9/0x20
[  449.412868][T12183]  ? security_capable+0x7e/0x2e0
[  449.412901][T12183]  genl_rcv_msg+0x60e/0x790
[  449.412933][T12183]  ? __pfx_genl_rcv_msg+0x10/0x10
[  449.412956][T12183]  ? __pfx_netlbl_cipsov4_add+0x10/0x10
[  449.413003][T12183]  netlink_rcv_skb+0x219/0x490
[  449.413035][T12183]  ? __pfx_genl_rcv_msg+0x10/0x10
[  449.413061][T12183]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  449.413118][T12183]  ? down_read+0x1ad/0x2e0
[  449.413167][T12183]  genl_rcv+0x28/0x40
[  449.413190][T12183]  netlink_unicast+0x758/0x8d0
[  449.413233][T12183]  netlink_sendmsg+0x805/0xb30
[  449.413265][T12183]  ? __pfx_netlink_sendmsg+0x10/0x10
[  449.413290][T12183]  ? aa_sock_msg_perm+0x94/0x160
[  449.413324][T12183]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  449.413347][T12183]  ? __pfx_netlink_sendmsg+0x10/0x10
[  449.413369][T12183]  __sock_sendmsg+0x219/0x270
[  449.413403][T12183]  ____sys_sendmsg+0x505/0x830
[  449.413438][T12183]  ? __pfx_____sys_sendmsg+0x10/0x10
[  449.413475][T12183]  ? import_iovec+0x74/0xa0
[  449.413507][T12183]  ___sys_sendmsg+0x21f/0x2a0
[  449.413534][T12183]  ? __pfx____sys_sendmsg+0x10/0x10
[  449.413600][T12183]  ? __fget_files+0x2a/0x420
[  449.413627][T12183]  ? __fget_files+0x3a0/0x420
[  449.413667][T12183]  __x64_sys_sendmsg+0x19b/0x260
[  449.413695][T12183]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  449.413740][T12183]  ? do_syscall_64+0xba/0x210
[  449.413773][T12183]  do_syscall_64+0xf6/0x210
[  449.413801][T12183]  ? clear_bhb_loop+0x45/0xa0
[  449.413829][T12183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.413850][T12183] RIP: 0033:0x7f9c51d8e969
[  449.413869][T12183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  449.413888][T12183] RSP: 002b:00007f9c52bab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  449.413910][T12183] RAX: ffffffffffffffda RBX: 00007f9c51fb5fa0 RCX: 00007f9c51d8e969
[  449.413926][T12183] RDX: 0000000000000810 RSI: 0000200000000200 RDI: 0000000000000004
[  449.413940][T12183] RBP: 00007f9c52bab090 R08: 0000000000000000 R09: 0000000000000000
[  449.413953][T12183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.413967][T12183] R13: 0000000000000000 R14: 00007f9c51fb5fa0 R15: 00007fff11920688
[  449.414001][T12183]  </TASK>
[  449.639914][T12185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1717'.
[  449.834400][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1720'.
[  449.899903][T12188] syzkaller0: entered promiscuous mode
[  449.914603][T12188] syzkaller0: entered allmulticast mode
[  449.931774][T12072] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.007049][T12201] netlink: 'syz.2.1723': attribute type 23 has an invalid length.
[  450.026045][T12072] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.053208][T12195] lo speed is unknown, defaulting to 1000
[  450.071600][T12195] lo speed is unknown, defaulting to 1000
[  450.109243][T12072] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.857409][ T5141] Bluetooth: hci3: command tx timeout
[  452.067597][T12228] lo speed is unknown, defaulting to 1000
[  452.089536][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1735'.
[  452.160709][T12244] vlan2: entered allmulticast mode
[  452.166034][T12244] mac80211_hwsim hwsim100 wlan0: entered allmulticast mode
[  452.212967][T12228] lo speed is unknown, defaulting to 1000
[  452.278460][T12072] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  452.337502][T12072] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  452.361160][T12258] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1739'.
[  452.415057][T12072] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  452.427643][T12262] netlink: 'syz.5.1742': attribute type 1 has an invalid length.
[  452.511599][T12072] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  452.656169][T12271] tipc: Started in network mode
[  452.661215][T12271] tipc: Node identity ac14140f, cluster identity 4711
[  452.676494][T12271] tipc: New replicast peer: 255.255.255.255
[  452.683134][T12271] tipc: Enabled bearer <udp:syz2>, priority 10
[  452.800031][T12072] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.862532][T12072] 8021q: adding VLAN 0 to HW filter on device team0
[  452.885656][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.892873][ T8268] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.936644][ T5141] Bluetooth: hci3: command tx timeout
[  452.947401][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.954590][ T8270] bridge0: port 2(bridge_slave_1) entered forwarding state
[  452.980928][T12279] lo speed is unknown, defaulting to 1000
[  453.011752][T12279] lo speed is unknown, defaulting to 1000
[  453.231605][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1748'.
[  453.277622][T12287] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1748'.
[  453.465204][T12308] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1755'.
[  453.683295][T12322] syzkaller0: entered promiscuous mode
[  453.692526][T12322] syzkaller0: entered allmulticast mode
[  453.748540][T12072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.804211][   T52] tipc: Node number set to 2886997007
[  453.968152][T12337] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1760'.
[  454.026156][T12339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1763'.
[  454.079488][T12340] netlink: 'syz.2.1763': attribute type 1 has an invalid length.
[  455.024078][ T5141] Bluetooth: hci3: command tx timeout
[  455.682435][T12340] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  455.786692][T12072] veth0_vlan: entered promiscuous mode
[  455.883813][T12072] veth1_vlan: entered promiscuous mode
[  455.948392][T12072] veth0_macvtap: entered promiscuous mode
[  455.978014][T12358] netlink: 'syz.7.1768': attribute type 2 has an invalid length.
[  456.002342][T12072] veth1_macvtap: entered promiscuous mode
[  456.032832][T12072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.058893][T12072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.088044][T12072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.113546][T12072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.139354][T12072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.150843][T12072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.171628][T12072] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.217050][T12369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1773'.
[  456.239571][T12369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1773'.
[  456.285157][T12369] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1773'.
[  456.299593][T12072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.329044][T12072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.348812][T12072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.366758][T12072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.389175][T12072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.413565][T12072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.441050][T12072] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.486089][T12072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.501953][T12072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.521601][T12072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.531202][T12072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.716529][T12392] Cannot find set identified by id 0 to match
[  456.747892][T12388] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.755904][T12388] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.902095][T12399] netlink: 'syz.7.1784': attribute type 2 has an invalid length.
[  456.919559][T12388] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  456.936950][T12388] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.031883][T12388] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.041049][T12388] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.051293][T12388] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.060246][T12388] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.126460][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1780'.
[  457.165615][T12394] pim6reg: entered allmulticast mode
[  457.182440][T12399] lave_0: entered promiscuous mode
[  457.207546][T12387] pim6reg: left allmulticast mode
[  457.359634][ T8270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.389077][ T8270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.450860][T12407] netlink: 'syz.7.1789': attribute type 10 has an invalid length.
[  457.469645][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.477937][T12407] team0: Device ipvlan1 failed to register rx_handler
[  457.485548][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.530508][T12411] netlink: 'syz.5.1788': attribute type 1 has an invalid length.
[  457.591973][T12411] 8021q: adding VLAN 0 to HW filter on device bond1
[  457.739859][T12423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1791'.
[  458.255686][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1798'.
[  458.266499][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1798'.
[  458.352573][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1801'.
[  458.408584][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1801'.
[  458.455955][T12450] macvlan2: entered promiscuous mode
[  458.461317][T12450] macvlan2: entered allmulticast mode
[  458.493689][T12450] dummy0: entered allmulticast mode
[  458.714656][T12462] openvswitch: netlink: Flow key attribute not present in set flow.
[  458.833463][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  458.843680][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  458.852272][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  458.862289][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  458.870759][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  459.026473][T12455] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.079977][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1806'.
[  459.176269][T12464] lo speed is unknown, defaulting to 1000
[  459.194758][T12464] lo speed is unknown, defaulting to 1000
[  459.430469][T12455] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.493658][T12484] netlink: 'syz.5.1811': attribute type 10 has an invalid length.
[  459.518378][T12484] ªªªªªª†³?ÂHºm: renamed from lo
[  459.643091][T12455] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.742791][T12455] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.854852][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1820'.
[  459.883998][T12510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1820'.
[  460.059847][T12464] chnl_net:caif_netlink_parms(): no params data found
[  460.148384][T12455] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.170954][T12523] netlink: 'syz.5.1823': attribute type 6 has an invalid length.
[  460.188130][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1823'.
[  460.189305][T12455] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.217662][T12523] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1823'.
[  460.328028][T12455] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.386773][T12455] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.560177][T12464] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.579194][T12464] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.587117][T12464] bridge_slave_0: entered allmulticast mode
[  460.595719][T12464] bridge_slave_0: entered promiscuous mode
[  460.632840][T12545] smc: net device bond0 applied user defined pnetid SYZ0
[  460.640459][T12464] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.654180][T12464] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.664504][T12551] smc: net device bond0 erased user defined pnetid SYZ0
[  460.681299][T12464] bridge_slave_1: entered allmulticast mode
[  460.692103][T12464] bridge_slave_1: entered promiscuous mode
[  460.945635][ T5141] Bluetooth: hci5: command tx timeout
[  461.164911][T12565] netlink: 5752 bytes leftover after parsing attributes in process `syz.5.1832'.
[  463.025146][ T5141] Bluetooth: hci5: command tx timeout
[  464.268633][ T8268] batman_adv: batadv0: Removing interface: vxlan0
[  464.753187][ T8268] bond1 (unregistering): Released all slaves
[  464.851102][ T8268] bond0 (unregistering): Released all slaves
[  464.865486][ T8268] bond2 (unregistering): Released all slaves
[  464.880572][T12544] lo speed is unknown, defaulting to 1000
[  464.958112][T12544] lo speed is unknown, defaulting to 1000
[  465.046715][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1834'.
[  465.053524][T12464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.068360][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1834'.
[  465.076551][T12464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.089666][T12572] nbd: socks must be embedded in a SOCK_ITEM attr
[  465.097235][ T5141] Bluetooth: hci5: command tx timeout
[  465.113695][ T8268] tipc: Disabling bearer <eth:syzkaller0>
[  465.127484][ T8268] tipc: Disabling bearer <udp:syz2>
[  465.133445][T12574] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1834'.
[  465.167055][ T8268] tipc: Left network mode
[  465.319716][T12464] team0: Port device team_slave_0 added
[  465.332440][T12464] team0: Port device team_slave_1 added
[  465.750431][T12581] lo speed is unknown, defaulting to 1000
[  465.766059][T12464] batman_adv: batadv0: Adding interface: batadv_slave_0
[  465.773227][T12464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.804352][T12464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  465.829726][T12464] batman_adv: batadv0: Adding interface: batadv_slave_1
[  465.836988][T12464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.878264][T12464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.913386][T12581] lo speed is unknown, defaulting to 1000
[  466.019027][T12583] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1837'.
[  466.409790][T12605] FAULT_INJECTION: forcing a failure.
[  466.409790][T12605] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.430358][T12605] CPU: 1 UID: 0 PID: 12605 Comm: syz.5.1842 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) 
[  466.430404][T12605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  466.430425][T12605] Call Trace:
[  466.430434][T12605]  <TASK>
[  466.430444][T12605]  dump_stack_lvl+0x189/0x250
[  466.430481][T12605]  ? __pfx_dump_stack_lvl+0x10/0x10
[  466.430510][T12605]  ? __pfx__printk+0x10/0x10
[  466.430543][T12605]  should_fail_ex+0x414/0x560
[  466.430578][T12605]  _copy_to_user+0x31/0xb0
[  466.430603][T12605]  simple_read_from_buffer+0xe1/0x170
[  466.430630][T12605]  proc_fail_nth_read+0x1df/0x250
[  466.430661][T12605]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  466.430693][T12605]  ? rw_verify_area+0x258/0x650
[  466.430709][T12605]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  466.430730][T12605]  vfs_read+0x1fd/0x980
[  466.430749][T12605]  ? __pfx___mutex_lock+0x10/0x10
[  466.430769][T12605]  ? __pfx_vfs_read+0x10/0x10
[  466.430786][T12605]  ? __fget_files+0x2a/0x420
[  466.430810][T12605]  ? __fget_files+0x3a0/0x420
[  466.430827][T12605]  ? __fget_files+0x2a/0x420
[  466.430871][T12605]  ksys_read+0x145/0x250
[  466.430889][T12605]  ? __pfx_ksys_read+0x10/0x10
[  466.430909][T12605]  ? do_syscall_64+0xba/0x210
[  466.430931][T12605]  do_syscall_64+0xf6/0x210
[  466.430952][T12605]  ? clear_bhb_loop+0x45/0xa0
[  466.430970][T12605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.430985][T12605] RIP: 0033:0x7efe2858d37c
[  466.430999][T12605] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  466.431012][T12605] RSP: 002b:00007efe294d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  466.431028][T12605] RAX: ffffffffffffffda RBX: 00007efe287b5fa0 RCX: 00007efe2858d37c
[  466.431039][T12605] RDX: 000000000000000f RSI: 00007efe294d60a0 RDI: 0000000000000003
[  466.431049][T12605] RBP: 00007efe294d6090 R08: 0000000000000000 R09: 0000000000000000
[  466.431058][T12605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.431067][T12605] R13: 0000000000000000 R14: 00007efe287b5fa0 R15: 00007fff791d7038
[  466.431090][T12605]  </TASK>
[  467.173092][T12464] hsr_slave_0: entered promiscuous mode
[  467.178890][ T5141] Bluetooth: hci5: command tx timeout
[  467.187867][T12464] hsr_slave_1: entered promiscuous mode
[  467.195909][T12464] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  467.203612][T12464] Cannot create hsr debugfs directory
[  467.583032][ T8268] IPVS: stop unused estimator thread 0...
[  467.710486][T12627] netlink: 'syz.6.1848': attribute type 39 has an invalid length.
[  468.118283][T12637] netlink: 1092 bytes leftover after parsing attributes in process `syz.5.1853'.
[  468.121233][T12642] netlink: zone id is out of range
[  468.132880][T12642] netlink: zone id is out of range
[  468.143879][T12642] netlink: zone id is out of range
[  468.149097][T12642] netlink: zone id is out of range
[  468.167443][T12637] netlink: 1092 bytes leftover after parsing attributes in process `syz.5.1853'.
[  468.176094][ T5890] IPVS: starting estimator thread 0...
[  468.184313][T12642] netlink: zone id is out of range
[  468.189471][T12642] netlink: zone id is out of range
[  468.194767][T12642] netlink: zone id is out of range
[  468.199901][T12642] netlink: zone id is out of range
[  468.208362][T12642] netlink: zone id is out of range
[  468.213584][T12642] netlink: zone id is out of range
[  468.220634][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1854'.
[  468.273881][T12648] IPVS: using max 28 ests per chain, 67200 per kthread
[  468.289682][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1853'.
[  468.324614][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1857'.
[  468.537161][T12464] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  469.385556][T12464] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  469.440825][T12668] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1863'.
[  469.452358][T12668] netlink: 'syz.5.1863': attribute type 1 has an invalid length.
[  469.461800][T12464] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  469.551116][T12672] 8021q: adding VLAN 0 to HW filter on device bond2
[  469.604354][T12464] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  469.972491][T12464] 8021q: adding VLAN 0 to HW filter on device bond0
[  470.010904][T12689] netlink: 'syz.6.1867': attribute type 1 has an invalid length.
[  470.027818][T12689] netlink: 'syz.6.1867': attribute type 2 has an invalid length.
[  470.076914][T12689] __nla_validate_parse: 7 callbacks suppressed
[  470.076934][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1867'.
[  470.079434][T12464] 8021q: adding VLAN 0 to HW filter on device team0
[  470.153263][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.160478][ T8268] bridge0: port 1(bridge_slave_0) entered forwarding state
[  470.175634][T12692] syzkaller0: entered allmulticast mode
[  470.190872][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.198193][ T8272] bridge0: port 2(bridge_slave_1) entered forwarding state
[  470.234338][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'.
[  470.350471][T12691] syzkaller0: left allmulticast mode
[  470.450924][T12702] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.458559][T12702] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.522830][    T9] IPVS: starting estimator thread 0...
[  470.644873][T12703] IPVS: using max 29 ests per chain, 69600 per kthread
[  470.697648][T12702] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  470.739549][T12702] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  470.890846][T12702] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  470.901251][T12702] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  470.910865][T12702] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  470.921918][T12702] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  471.038677][T12702] macvlan2: left promiscuous mode
[  471.044667][T12702] macvlan2: left allmulticast mode
[  471.381665][T12725] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551550)
[  471.391273][T12723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1878'.
[  471.455341][T12725] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  471.494806][T12728] netlink: 'syz.7.1880': attribute type 4 has an invalid length.
[  471.663749][T12464] 8021q: adding VLAN 0 to HW filter on device batadv0
[  471.836371][T12464] veth0_vlan: entered promiscuous mode
[  471.851231][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1881'.
[  471.916169][T12464] veth1_vlan: entered promiscuous mode
[  472.033708][T12464] veth0_macvtap: entered promiscuous mode
[  472.100101][T12464] veth1_macvtap: entered promiscuous mode
[  472.109167][T12757] lo speed is unknown, defaulting to 1000
[  472.148557][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  472.182326][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.204142][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  472.226123][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.246706][T12464] batman_adv: batadv0: Interface activated: batadv_slave_0
[  472.266775][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.318967][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.348245][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.361937][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.375766][T12464] batman_adv: batadv0: Interface activated: batadv_slave_1
[  472.395597][T12757] lo speed is unknown, defaulting to 1000
[  472.414052][T12464] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.423087][T12464] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.439917][T12464] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.459752][T12464] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.496903][T12757] lo speed is unknown, defaulting to 1000
[  472.534118][T12769] IPVS: length: 24 != 16106127384
[  472.547427][T12757] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  472.655412][  T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.658668][T12757] lo speed is unknown, defaulting to 1000
[  472.669284][  T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.717327][T12757] lo speed is unknown, defaulting to 1000
[  472.723259][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.732330][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.748229][T12757] lo speed is unknown, defaulting to 1000
[  472.760478][T12757] lo speed is unknown, defaulting to 1000
[  472.791111][T12757] lo speed is unknown, defaulting to 1000
[  472.805400][T12757] lo speed is unknown, defaulting to 1000
[  472.965483][T12791] syzkaller0: entered promiscuous mode
[  473.001801][T12794] lo speed is unknown, defaulting to 1000
[  473.019697][T12794] lo speed is unknown, defaulting to 1000
[  473.207549][T12801] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.215348][T12801] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.342462][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1899'.
[  473.403289][T12801] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  473.418501][T12801] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  473.489541][T12801] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  473.499730][T12801] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  473.510219][T12801] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  473.519206][T12801] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  473.629644][T12803] 8021q: adding VLAN 0 to HW filter on device team1
[  473.697300][T12812] netlink: 'syz.5.1901': attribute type 10 has an invalid length.
[  473.715550][T12812] veth0_vlan: left promiscuous mode
[  473.744510][T12812] veth0_vlan: entered promiscuous mode
[  473.752818][T12812] team0: Device veth0_vlan failed to register rx_handler
[  473.851126][T12817] netlink: 'syz.6.1903': attribute type 1 has an invalid length.
[  473.861475][T12817] netlink: 'syz.6.1903': attribute type 10 has an invalid length.
[  473.872950][T12817] netlink: 'syz.6.1903': attribute type 4 has an invalid length.
[  473.887039][T12817] netlink: 'syz.6.1903': attribute type 1 has an invalid length.
[  473.899910][T12817] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1903'.
[  473.923090][T12821] netlink: 'syz.5.1905': attribute type 1 has an invalid length.
[  474.053998][T12823] 8021q: adding VLAN 0 to HW filter on device bond4
[  474.076324][T12823] bond3: (slave bond4): making interface the new active one
[  474.099997][T12823] bond3: (slave bond4): Enslaving as an active interface with an up link
[  474.117293][T12821] macsec1: entered promiscuous mode
[  474.122713][T12821] bond3: entered promiscuous mode
[  474.128121][T12821] bond4: entered promiscuous mode
[  474.133656][T12821] macsec1: entered allmulticast mode
[  474.139522][T12821] bond3: entered allmulticast mode
[  474.145245][T12821] bond4: entered allmulticast mode
[  474.507735][T12845] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1910'.
[  474.921668][T12864] IPVS: Error connecting to the multicast addr
[  475.080233][T12870] lo speed is unknown, defaulting to 1000
[  475.092303][T12870] lo speed is unknown, defaulting to 1000
[  475.647610][T12870] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1919'.
[  475.673717][T12882] lo speed is unknown, defaulting to 1000
[  475.702778][T12882] lo speed is unknown, defaulting to 1000
[  476.118811][T12905] sit0: left promiscuous mode
[  476.182194][T12905] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.189922][T12905] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.356919][T12933] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1929'.
[  476.361088][T12905] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  476.379866][T12933] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1929'.
[  476.387889][T12905] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  476.486807][T12905] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  476.496474][T12905] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  476.505971][T12905] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  476.514999][T12905] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  476.559341][T12916] IPVS: Error connecting to the multicast addr
[  476.583007][T12924] nr0: entered allmulticast mode
[  476.823916][T12932] lo speed is unknown, defaulting to 1000
[  476.860913][T12932] lo speed is unknown, defaulting to 1000
[  476.864088][T12943] tipc: Started in network mode
[  476.871713][T12943] tipc: Node identity 00000000004000000000000000000001, cluster identity 4711
[  476.914493][T12943] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  477.071097][T12928] lo speed is unknown, defaulting to 1000
[  477.124405][T12928] lo speed is unknown, defaulting to 1000
[  477.194404][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1939'.
[  477.494487][ T5831] Bluetooth: hci5: command 0x0405 tx timeout
[  477.754095][T12981] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  477.782436][T12981] net_ratelimit: 664 callbacks suppressed
[  477.782455][T12981] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  477.837104][T12988] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1948'.
[  477.912870][T12990] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1948'.
[  477.984763][T12988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1948'.
[  478.012998][T12993] netlink: 'syz.5.1950': attribute type 29 has an invalid length.
[  478.024412][T12994] netlink: 'syz.5.1950': attribute type 29 has an invalid length.
[  478.040258][T12993] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1950'.
[  478.229044][T12998] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1952'.
[  478.640487][T13016] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1956'.
[  478.801946][T13017] netlink: 'syz.7.1956': attribute type 21 has an invalid length.
[  479.130272][T13034] netlink: 'syz.6.1961': attribute type 1 has an invalid length.
[  479.140556][T13032] geneve2: entered promiscuous mode
[  479.144400][T13033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  479.162143][T13032] geneve2: entered allmulticast mode
[  479.558727][T13052] netlink: 'syz.7.1966': attribute type 1 has an invalid length.
[  479.873547][T13066] ip6gretap1: entered allmulticast mode
[  480.458018][T13033] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  480.466696][T13033] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  480.707083][T13085] vlan2: entered promiscuous mode
[  480.712278][T13085] erspan0: entered promiscuous mode
[  480.759792][T13087] netlink: 'syz.2.1977': attribute type 10 has an invalid length.
[  480.763935][T13088] netlink: 'syz.2.1977': attribute type 10 has an invalid length.
[  480.777900][T13087] team0: Device ipvlan1 failed to register rx_handler
[  480.804958][T13088] team0: Device ipvlan1 failed to register rx_handler
[  480.881451][T13087] ieee802154 phy1 wpan1: encryption failed: -22
[  481.033591][T13095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  481.178107][T13105] netlink: 'syz.1.1984': attribute type 1 has an invalid length.
[  481.234656][T13105] bond1: entered promiscuous mode
[  481.239864][T13105] bond1: entered allmulticast mode
[  481.292622][T13110] bond1: (slave ip6gretap1): making interface the new active one
[  481.314020][T13110] ip6gretap1: entered promiscuous mode
[  481.319861][T13110] ip6gretap1: entered allmulticast mode
[  481.327145][T13110] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  481.336584][T13103] lo speed is unknown, defaulting to 1000
[  481.351590][T13103] lo speed is unknown, defaulting to 1000
[  481.863277][T13125] netlink: 'syz.1.1990': attribute type 1 has an invalid length.
[  482.006231][T13136] netlink: 'syz.7.1994': attribute type 10 has an invalid length.
[  482.011954][T13134] netlink: 'syz.5.1993': attribute type 2 has an invalid length.
[  482.064481][T13136] 8021q: adding VLAN 0 to HW filter on device batadv0
[  482.104760][T13136] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  482.172048][T13136] syz.7.1994 (13136) used greatest stack depth: 19240 bytes left
[  482.323943][T13151] netlink: 'syz.7.1997': attribute type 1 has an invalid length.
[  482.424106][T13151] 8021q: adding VLAN 0 to HW filter on device bond1
[  482.605206][T13158] __nla_validate_parse: 8 callbacks suppressed
[  482.605224][T13158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1999'.
[  482.889857][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2002'.
[  482.949510][T13178] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2003'.
[  482.961701][T13172] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2002'.
[  483.163274][T13192] veth1_vlan: mtu less than device minimum
[  483.408703][T13201] syz.2.2009: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  483.463441][T13207] xt_bpf: check failed: parse error
[  483.463942][T13201] CPU: 1 UID: 0 PID: 13201 Comm: syz.2.2009 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) 
[  483.463970][T13201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  483.463992][T13201] Call Trace:
[  483.464001][T13201]  <TASK>
[  483.464012][T13201]  dump_stack_lvl+0x189/0x250
[  483.464052][T13201]  ? __pfx_dump_stack_lvl+0x10/0x10
[  483.464083][T13201]  ? __pfx__printk+0x10/0x10
[  483.464105][T13201]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  483.464139][T13201]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  483.464173][T13201]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  483.464209][T13201]  warn_alloc+0x214/0x310
[  483.464239][T13201]  ? __pfx___schedule+0x10/0x10
[  483.464267][T13201]  ? __pfx_warn_alloc+0x10/0x10
[  483.464295][T13201]  ? kasan_save_track+0x4f/0x80
[  483.464318][T13201]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  483.464344][T13201]  ? xskq_create+0x56/0x170
[  483.464369][T13201]  ? __x64_sys_setsockopt+0x18b/0x220
[  483.464390][T13201]  ? do_syscall_64+0xf6/0x210
[  483.464416][T13201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.464449][T13201]  __vmalloc_node_range_noprof+0x125/0x12c0
[  483.464511][T13201]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  483.464544][T13201]  ? __kasan_kmalloc+0x93/0xb0
[  483.464574][T13201]  vmalloc_user_noprof+0x74/0x80
[  483.464603][T13201]  ? xskq_create+0xbf/0x170
[  483.464626][T13201]  xskq_create+0xbf/0x170
[  483.464654][T13201]  xsk_init_queue+0xb0/0x110
[  483.464681][T13201]  xsk_setsockopt+0x43f/0x710
[  483.464708][T13201]  ? __pfx_xsk_setsockopt+0x10/0x10
[  483.464744][T13201]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  483.464766][T13201]  ? __pfx_xsk_setsockopt+0x10/0x10
[  483.464790][T13201]  do_sock_setsockopt+0x257/0x3e0
[  483.464815][T13201]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  483.464833][T13201]  ? __fget_files+0x2a/0x420
[  483.464864][T13201]  ? __fget_files+0x3a0/0x420
[  483.464890][T13201]  ? __fget_files+0x2a/0x420
[  483.464925][T13201]  __x64_sys_setsockopt+0x18b/0x220
[  483.464955][T13201]  do_syscall_64+0xf6/0x210
[  483.464991][T13201]  ? clear_bhb_loop+0x45/0xa0
[  483.465017][T13201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.465037][T13201] RIP: 0033:0x7f95d498e969
[  483.465066][T13201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  483.465083][T13201] RSP: 002b:00007f95d58b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  483.465104][T13201] RAX: ffffffffffffffda RBX: 00007f95d4bb5fa0 RCX: 00007f95d498e969
[  483.465118][T13201] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  483.465131][T13201] RBP: 00007f95d4a10ab1 R08: 0000000000000004 R09: 0000000000000000
[  483.465143][T13201] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  483.465156][T13201] R13: 0000000000000000 R14: 00007f95d4bb5fa0 R15: 00007fff44087da8
[  483.465187][T13201]  </TASK>
[  483.465195][T13201] Mem-Info:
[  483.770104][T13201] active_anon:5606 inactive_anon:0 isolated_anon:0
[  483.770104][T13201]  active_file:1576 inactive_file:38551 isolated_file:0
[  483.770104][T13201]  unevictable:768 dirty:284 writeback:0
[  483.770104][T13201]  slab_reclaimable:11315 slab_unreclaimable:125855
[  483.770104][T13201]  mapped:28628 shmem:1444 pagetables:802
[  483.770104][T13201]  sec_pagetables:0 bounce:0
[  483.770104][T13201]  kernel_misc_reclaimable:0
[  483.770104][T13201]  free:1322258 free_pcp:743 free_cma:0
[  483.853871][T13201] Node 0 active_anon:22916kB inactive_anon:0kB active_file:6304kB inactive_file:154132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114432kB dirty:1160kB writeback:0kB shmem:4240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11752kB pagetables:2988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  483.937991][T13201] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  484.026517][T13201] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  484.068552][T13218] IPVS: Error connecting to the multicast addr
[  484.104024][T13201] lowmem_reserve[]: 0 2504 2504 2504 2504
[  484.109984][T13201] Node 0 DMA32 free:1362584kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:23208kB inactive_anon:0kB active_file:6304kB inactive_file:154040kB unevictable:1536kB writepending:1156kB present:3129332kB managed:2564124kB mlocked:0kB bounce:0kB free_pcp:4536kB local_pcp:1260kB free_cma:0kB
[  484.145205][T13220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2016'.
[  484.211721][T13201] lowmem_reserve[]: 0 0 0 0 0
[  484.217738][T13224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2018'.
[  484.228308][T13201] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  484.310606][T13201] lowmem_reserve[]: 0 0 0 0 0
[  484.319570][T13201] Node 1 Normal free:3910080kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  484.376159][T13201] lowmem_reserve[]: 0 0 0 0 0
[  484.380954][T13201] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  484.445519][T13201] Node 0 DMA32: 117*4kB (U) 3*8kB (UME) 22*16kB (UME) 50*32kB (UME) 103*64kB (UME) 96*128kB (UME) 43*256kB (UME) 16*512kB (UM) 32*1024kB (UM) 12*2048kB (UME) 309*4096kB (UM) = 1363532kB
[  484.491071][T13201] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  484.493043][T13234] syzkaller1: entered promiscuous mode
[  484.533190][T13201] Node 1 Normal: 200*4kB (UME) 54*8kB (UME) 41*16kB 
[  484.533349][T13234] syzkaller1: entered allmulticast mode
[  484.560756][T13234] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  484.573934][T13237] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2021'.
[  484.577948][T13201] (UME) 209*32kB (UME) 95*64kB (UME) 31*128kB (UME) 17*256kB (UME) 10*512kB (UME) 3*1024kB (UM) 2*2048kB (U) 946*4096kB (UM) = 3910080kB
[  484.637120][T13237] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2021'.
[  484.653848][T13201] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  484.673027][T13201] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=2 hugepages_size=2048kB
[  484.703869][T13201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  484.727159][T13201] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  484.753828][T13201] 41571 total pagecache pages
[  484.758610][T13201] 0 pages in swap cache
[  484.768720][T13201] Free swap  = 124996kB
[  484.772927][T13201] Total swap = 124996kB
[  484.809772][T13201] 2097051 pages RAM
[  484.813643][T13201] 0 pages HighMem/MovableOnly
[  484.835363][T13201] 424362 pages reserved
[  484.839567][T13201] 0 pages cma reserved
[  485.051341][T13257] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 0, id = 0
[  485.067259][T13258] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2027'.
[  485.144414][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2027'.
[  485.452263][T13283] validate_nla: 1 callbacks suppressed
[  485.452282][T13283] netlink: 'syz.2.2036': attribute type 29 has an invalid length.
[  485.495011][T13283] netlink: 'syz.2.2036': attribute type 29 has an invalid length.
[  485.695818][T13290] IPVS: Error connecting to the multicast addr
[  486.004492][T13302] lo speed is unknown, defaulting to 1000
[  486.012341][T13302] lo speed is unknown, defaulting to 1000
[  486.354680][T13320] dvmrp0: entered allmulticast mode
[  486.407087][T13318] lo speed is unknown, defaulting to 1000
[  486.461334][T13318] lo speed is unknown, defaulting to 1000
[  486.475570][T13316] dvmrp0: left allmulticast mode
[  486.729491][T13328] netlink: 'syz.1.2050': attribute type 29 has an invalid length.
[  486.755818][T13335] netlink: 'syz.1.2050': attribute type 29 has an invalid length.
[  486.817985][T13333] IPVS: Error connecting to the multicast addr
[  487.111783][T13308] 8021q: adding VLAN 0 to HW filter on device bond5
[  487.200956][T13339] 8021q: adding VLAN 0 to HW filter on device bond5
[  487.208494][T13339] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[  487.220660][T13339] bond5: (slave wireguard0): Error -95 calling set_mac_address
[  487.363683][T13345] lo speed is unknown, defaulting to 1000
[  487.691462][T13345] lo speed is unknown, defaulting to 1000
[  487.784534][T13374] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.793327][T13374] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.499179][T13389] __nla_validate_parse: 10 callbacks suppressed
[  488.499198][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2062'.
[  488.608636][T13357] lo speed is unknown, defaulting to 1000
[  488.806474][T13357] lo speed is unknown, defaulting to 1000
[  488.916143][T13406] lo speed is unknown, defaulting to 1000
[  488.956320][T13406] lo speed is unknown, defaulting to 1000
[  488.993166][T13418] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2069'.
[  489.017088][T13413] syzkaller0: entered promiscuous mode
[  489.326377][T13430] openvswitch: netlink: Message has 24 unknown bytes.
[  489.359386][T13430] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.513020][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2076'.
[  489.605943][T13436] vlan0: entered promiscuous mode
[  489.608657][T13444] netlink: 'syz.1.2077': attribute type 2 has an invalid length.
[  489.719421][T13440] bridge_slave_1: left allmulticast mode
[  489.739588][T13440] bridge_slave_1: left promiscuous mode
[  489.762818][T13440] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.801250][T13440] bridge_slave_0: left allmulticast mode
[  489.823474][T13440] bridge_slave_0: left promiscuous mode
[  489.830021][T13440] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.938537][T13442] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2076'.
[  489.950837][T13442] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2076'.
[  489.980444][T13444] : entered promiscuous mode
[  490.012914][T13448] bridge_slave_0: left allmulticast mode
[  490.022992][T13448] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.048841][T13448] bridge_slave_1: left allmulticast mode
[  490.057603][T13448] bridge_slave_1: left promiscuous mode
[  490.063366][T13448] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.082233][T13448] bond0: (slave bond_slave_0): Releasing backup interface
[  490.119319][T13448] bond0: (slave bond_slave_1): Releasing backup interface
[  490.183591][T13448] team0: Port device team_slave_0 removed
[  490.212481][T13448] team0: Port device team_slave_1 removed
[  490.223216][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  490.235932][T13448] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.247650][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  490.258955][T13448] batman_adv: batadv0: Removing interface: batadv_slave_1
[  490.284803][T13448] bond1: (slave ip6gretap1): Releasing active interface
[  490.291779][T13448] ip6gretap1: left promiscuous mode
[  490.297735][T13448] ip6gretap1: left allmulticast mode
[  490.326065][T13470] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  490.347265][T13455] IPVS: Error connecting to the multicast addr
[  490.460831][T13464] syzkaller0: entered promiscuous mode
[  490.592920][T13476] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2087'.
[  490.901925][T13495] lo speed is unknown, defaulting to 1000
[  490.951153][T13495] lo speed is unknown, defaulting to 1000
[  491.090242][T13507] netlink: 'syz.7.2096': attribute type 29 has an invalid length.
[  491.142063][T13510] netlink: 'syz.7.2096': attribute type 29 has an invalid length.
[  491.297073][T13507] netlink: 500 bytes leftover after parsing attributes in process `syz.7.2096'.
[  491.889809][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2098'.
[  492.028075][T13525] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  492.184965][T13531] vxcan3: entered allmulticast mode
[  492.582996][T13544] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2107'.
[  492.641778][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2109'.
[  492.657288][T13548] netlink: 'syz.7.2108': attribute type 29 has an invalid length.
[  492.695833][T13548] netlink: 'syz.7.2108': attribute type 29 has an invalid length.
[  492.870844][T13555] IPVS: Error connecting to the multicast addr
[  493.153490][T13580] nbd: socks must be embedded in a SOCK_ITEM attr
[  493.223232][T13583] lo speed is unknown, defaulting to 1000
[  493.244946][T13583] lo speed is unknown, defaulting to 1000
[  493.372621][T13595] netlink: 'syz.2.2123': attribute type 29 has an invalid length.
[  493.396787][T13599] netlink: 'syz.2.2123': attribute type 29 has an invalid length.
[  493.506780][T13606] IPVS: Error connecting to the multicast addr
[  493.588560][T13611] netlink: 'syz.7.2129': attribute type 1 has an invalid length.
[  493.597986][T13611] __nla_validate_parse: 6 callbacks suppressed
[  493.598004][T13611] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2129'.
[  493.744617][T13621] lo speed is unknown, defaulting to 1000
[  493.752287][T13621] lo speed is unknown, defaulting to 1000
[  494.475011][T13646] lo speed is unknown, defaulting to 1000
[  494.503095][T13646] lo speed is unknown, defaulting to 1000
[  494.651746][T13659] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2146'.
[  494.798079][T13662] lo speed is unknown, defaulting to 1000
[  494.808714][T13664] netlink: 'syz.7.2147': attribute type 9 has an invalid length.
[  494.823237][T13662] lo speed is unknown, defaulting to 1000
[  494.877759][T13668] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2149'.
[  495.160986][T13675] lo speed is unknown, defaulting to 1000
[  495.176087][T13675] lo speed is unknown, defaulting to 1000
[  495.207529][T13680] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2151'.
[  495.220735][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2151'.
[  495.422441][T13697] tipc: Enabled bearer <udp:syz2>, priority 10
[  495.511934][T13700] lo speed is unknown, defaulting to 1000
[  495.551301][T13700] lo speed is unknown, defaulting to 1000
[  495.924413][T13722] netlink: 'syz.1.2163': attribute type 1 has an invalid length.
[  495.988773][T13713] syzkaller0: entered promiscuous mode
[  496.417979][T13739] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  496.444393][T13742] netlink: 'syz.7.2165': attribute type 1 has an invalid length.
[  496.534319][   T52] tipc: Node number set to 4194305
[  496.538204][T13741] lo speed is unknown, defaulting to 1000
[  496.581012][T13741] lo speed is unknown, defaulting to 1000
[  496.813108][T13764] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  496.965236][T13771] netlink: 'syz.1.2176': attribute type 1 has an invalid length.
[  497.314819][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2178'.
[  497.326727][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2178'.
[  497.877760][T13793] lo speed is unknown, defaulting to 1000
[  497.893341][T13793] lo speed is unknown, defaulting to 1000
[  497.915045][T13797] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2182'.
[  497.930022][T13797] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2182'.
[  498.405873][T13805] syzkaller1: entered promiscuous mode
[  498.411391][T13805] syzkaller1: entered allmulticast mode
[  498.496925][T13809] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2186'.
[  498.629253][T13810] netlink: 'syz.2.2187': attribute type 1 has an invalid length.
[  498.685706][T13813] xt_CT: You must specify a L4 protocol and not use inversions on it
[  498.745397][T13819] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2189'.
[  499.089869][T13833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2193'.
[  499.437713][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2196'.
[  499.480084][T13846] netlink: 'syz.2.2199': attribute type 11 has an invalid length.
[  499.488405][T13846] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2199'.
[  499.488622][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2196'.
[  499.576154][T13858] netlink: 'syz.6.2201': attribute type 1 has an invalid length.
[  499.835273][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2207'.
[  499.848616][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2205'.
[  499.858613][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2205'.
[  500.007167][T13893] netlink: 'syz.5.2211': attribute type 29 has an invalid length.
[  500.021194][T13893] netlink: 'syz.5.2211': attribute type 29 has an invalid length.
[  500.032510][T13893] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2211'.
[  500.232686][T13902] bridge_slave_0: left allmulticast mode
[  500.239705][T13902] bridge_slave_0: left promiscuous mode
[  500.264183][T13902] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.266569][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2217'.
[  500.288348][T13902] bridge_slave_1: left allmulticast mode
[  500.300480][T13902] bridge_slave_1: left promiscuous mode
[  500.312937][T13902] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.330082][T13902] bond0: (slave bond_slave_0): Releasing backup interface
[  500.346020][T13902] bond0: (slave bond_slave_1): Releasing backup interface
[  500.364766][T13902] team0: Port device team_slave_0 removed
[  500.376249][T13902] team0: Port device team_slave_1 removed
[  500.382505][T13902] batman_adv: batadv0: Removing interface: batadv_slave_0
[  500.397700][T13902] batman_adv: batadv0: Removing interface: batadv_slave_1
[  500.420371][T13902] bond3: (slave bond4): Releasing backup interface
[  500.431999][T13902] bond4: left promiscuous mode
[  500.439593][T13902] bond4: left allmulticast mode
[  500.450802][T13906] netlink: 'syz.2.2216': attribute type 1 has an invalid length.
[  500.599593][T13928] netlink: 'syz.6.2221': attribute type 16 has an invalid length.
[  500.851791][T13943] netlink: 'syz.5.2229': attribute type 1 has an invalid length.
[  500.885926][T13948] netlink: 'syz.7.2230': attribute type 29 has an invalid length.
[  501.123169][T13966] x_tables: duplicate underflow at hook 1
[  501.337528][T13982] lo speed is unknown, defaulting to 1000
[  501.411980][T13982] lo speed is unknown, defaulting to 1000
[  501.429235][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  501.833999][T13996] lo speed is unknown, defaulting to 1000
[  501.870391][T13996] lo speed is unknown, defaulting to 1000
[  502.276930][T14022] lo speed is unknown, defaulting to 1000
[  502.312017][T14032] validate_nla: 2 callbacks suppressed
[  502.312036][T14032] netlink: 'syz.2.2251': attribute type 10 has an invalid length.
[  502.334921][T14022] lo speed is unknown, defaulting to 1000
[  502.349909][T14032] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.376312][T14032] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.409654][T14032] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.432164][T14032] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  502.447529][T14032] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  502.456855][T14032] team0: Failed to send options change via netlink (err -105)
[  502.464773][T14032] team0: Port device geneve0 added
[  502.828384][T14053] ¾x9ÿ: renamed from bridge_slave_0
[  503.767934][T14074] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.800513][T14091] macvlan2: entered promiscuous mode
[  503.819735][T14091] bridge0: entered promiscuous mode
[  503.850340][T14091] bridge0: port 1(macvlan2) entered blocking state
[  503.888203][T14091] bridge0: port 1(macvlan2) entered disabled state
[  503.918359][T14091] macvlan2: entered allmulticast mode
[  503.933149][T14091] bridge0: entered allmulticast mode
[  503.979066][T14091] macvlan2: left allmulticast mode
[  503.996438][T14091] bridge0: left allmulticast mode
[  504.023171][T14091] bridge0: left promiscuous mode
[  504.080817][T14101] netlink: 'syz.2.2265': attribute type 10 has an invalid length.
[  504.121756][T14074] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.176237][T14101] macvlan0: entered promiscuous mode
[  504.182115][T14111] __nla_validate_parse: 11 callbacks suppressed
[  504.182136][T14111] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2267'.
[  504.228792][T14101] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  504.318818][T14074] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.400698][T14074] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.428505][T14113] pim6reg1: entered promiscuous mode
[  504.436102][T14113] pim6reg1: entered allmulticast mode
[  504.636630][T14074] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.681921][T14129] veth3: entered allmulticast mode
[  504.693579][T14129] bridge0: port 1(veth3) entered blocking state
[  504.702046][T14129] bridge0: port 1(veth3) entered disabled state
[  504.715653][T14133] netlink: 'syz.5.2275': attribute type 1 has an invalid length.
[  504.717552][T14129] veth3: entered promiscuous mode
[  504.746295][T14074] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.785363][T14133] 8021q: adding VLAN 0 to HW filter on device bond6
[  504.800061][T14074] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.818925][T14074] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.863206][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2275'.
[  504.881929][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2275'.
[  504.922499][T14145] netlink: 'syz.2.2280': attribute type 23 has an invalid length.
[  504.924868][T14129] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  504.990782][T14129] vlan2: entered allmulticast mode
[  505.011233][T14129] bond6: entered allmulticast mode
[  505.020197][T14129] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  505.038975][T14150] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  505.108428][T14155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2282'.
[  505.426548][T14170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2287'.
[  505.497707][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'.
[  505.542362][T14172] lo speed is unknown, defaulting to 1000
[  505.561944][T14172] lo speed is unknown, defaulting to 1000
[  505.597856][T14179] Cannot find del_set index 1 as target
[  505.746146][T14188] netlink: 'syz.2.2295': attribute type 1 has an invalid length.
[  505.754126][T14188] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2295'.
[  505.916304][T14195] syzkaller0: entered promiscuous mode
[  506.047460][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2301'.
[  506.128941][T14206] netlink: 'syz.1.2301': attribute type 3 has an invalid length.
[  506.708006][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'.
[  506.717948][T14251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2315'.
[  506.762962][T14258] netlink: 'syz.6.2316': attribute type 29 has an invalid length.
[  506.773291][T14258] netlink: 'syz.6.2316': attribute type 29 has an invalid length.
[  506.967395][T14261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.126325][T14261] syzkaller0: entered promiscuous mode
[  507.136662][T14261] syzkaller0: entered allmulticast mode
[  507.144726][T14261] tipc: Resetting bearer <eth:syzkaller0>
[  507.160455][T14272] batman_adv: batadv0: Adding interface: ip6gretap1
[  507.167438][T14272] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  507.194797][T14272] batman_adv: batadv0: Interface activated: ip6gretap1
[  507.241346][T14278] vlan0: left promiscuous mode
[  507.276701][T14278] macvlan0: left promiscuous mode
[  507.292341][T14278] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  507.331443][T14278] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  507.354646][T14278] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  507.376258][T14278] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  507.423386][T14260] tipc: Resetting bearer <eth:syzkaller0>
[  508.836970][T14260] tipc: Disabling bearer <eth:syzkaller0>
[  508.846596][T14283] bridge0: port 3(gretap0) entered blocking state
[  508.853133][T14283] bridge0: port 3(gretap0) entered disabled state
[  508.860313][T14283] gretap0: entered allmulticast mode
[  508.867379][T14283] gretap0: entered promiscuous mode
[  509.047675][T14285] gretap0: left allmulticast mode
[  509.052880][T14285] gretap0: left promiscuous mode
[  509.071980][T14285] bridge0: port 3(gretap0) entered disabled state
[  509.108320][T14305] xt_bpf: check failed: parse error
[  509.116399][T14303] netlink: 'syz.7.2330': attribute type 29 has an invalid length.
[  509.134351][T14306] netlink: 'syz.7.2330': attribute type 29 has an invalid length.
[  509.214671][T14310] netlink: 'syz.1.2333': attribute type 1 has an invalid length.
[  509.250222][T14312] __nla_validate_parse: 5 callbacks suppressed
[  509.250242][T14312] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2334'.
[  509.289985][T14316] x_tables: duplicate underflow at hook 2
[  509.310340][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2336'.
[  509.332740][ T5141] Bluetooth: hci5: link tx timeout
[  509.338604][ T5141] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  509.552948][T14326] lo speed is unknown, defaulting to 1000
[  509.563235][T14326] lo speed is unknown, defaulting to 1000
[  509.909264][T14347] netlink: 252 bytes leftover after parsing attributes in process `syz.7.2337'.
[  509.938781][T14347] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2337'.
[  510.169767][T14330] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.190242][T14330] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.197498][T14353] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2341'.
[  510.198741][T14330] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.216138][T14330] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.233565][T14353] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2341'.
[  510.308229][T14328] veth3: entered allmulticast mode
[  510.314894][T14328] bridge0: port 1(veth3) entered blocking state
[  510.321503][T14328] bridge0: port 1(veth3) entered disabled state
[  510.331027][T14328] veth3: entered promiscuous mode
[  510.385677][T14334] bridge0: port 1(veth3) entered blocking state
[  510.392190][T14334] bridge0: port 1(veth3) entered forwarding state
[  510.401077][T14334] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.412644][T14334] 8021q: adding VLAN 0 to HW filter on device team0
[  510.424952][T14334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  510.466497][ T8271] bridge0: port 1(veth3) entered disabled state
[  510.511943][T14353] batadv0: entered promiscuous mode
[  510.525605][T14353] team0: entered promiscuous mode
[  510.534914][T14353] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  510.542519][T14353] Cannot create hsr debugfs directory
[  510.559666][T14353] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  510.570314][T14353] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  510.581968][T14353] 8021q: adding VLAN 0 to HW filter on device hsr1
[  510.637209][T14357] bond2: entered allmulticast mode
[  510.790472][T14362] bond0: (slave batadv0): Releasing backup interface
[  510.809347][T14362] bond0: (slave bond_slave_0): Releasing backup interface
[  510.817425][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2346'.
[  510.827321][T14362] bond0: (slave bond_slave_1): Releasing backup interface
[  510.844546][T14362] team0: Port device team_slave_0 removed
[  510.872370][T14362] team0: Port device team_slave_1 removed
[  510.884875][T14362] batman_adv: batadv0: Removing interface: batadv_slave_0
[  510.906410][T14362] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.907963][T14361] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2344'.
[  510.936386][T14371] netlink: 'syz.2.2347': attribute type 29 has an invalid length.
[  510.978401][T14376] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2347'.
[  511.012334][T14373] netlink: 'syz.2.2347': attribute type 29 has an invalid length.
[  511.415809][ T5831] Bluetooth: hci5: command 0x0405 tx timeout
[  513.910795][T14381] netlink: 'syz.6.2349': attribute type 1 has an invalid length.
[  513.938587][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2352'.
[  513.945317][T14386] bridge0: port 2(erspan0) entered blocking state
[  513.954417][T14386] bridge0: port 2(erspan0) entered disabled state
[  513.962640][T14386] erspan0: entered allmulticast mode
[  513.970384][T14386] erspan0: entered promiscuous mode
[  513.977363][T14386] bridge0: port 2(erspan0) entered blocking state
[  513.984856][T14386] bridge0: port 2(erspan0) entered forwarding state
[  514.043102][T14386] xt_CT: No such helper "snmp"
[  514.126675][T14388] bridge: RTM_NEWNEIGH with invalid ether address
[  514.256169][T14400] lo speed is unknown, defaulting to 1000
[  514.263157][T14400] lo speed is unknown, defaulting to 1000
[  514.558053][T14415] netlink: 'syz.2.2360': attribute type 29 has an invalid length.
[  514.566989][T14415] netlink: 'syz.2.2360': attribute type 29 has an invalid length.
[  514.578323][T14415] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2360'.
[  514.584014][T14406] lo speed is unknown, defaulting to 1000
[  514.665969][T14406] lo speed is unknown, defaulting to 1000
[  514.683069][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2361'.
[  514.932207][T14427] IPVS: Error connecting to the multicast addr
[  514.938998][T14433] netlink: 'syz.7.2365': attribute type 1 has an invalid length.
[  515.137202][T14441] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2366'.
[  515.146758][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2366'.
[  515.428580][T14451] batadv_slave_0: entered promiscuous mode
[  515.454999][T14460] FAULT_INJECTION: forcing a failure.
[  515.454999][T14460] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  515.471528][T14460] CPU: 0 UID: 0 PID: 14460 Comm: syz.6.2372 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) 
[  515.471559][T14460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  515.471573][T14460] Call Trace:
[  515.471582][T14460]  <TASK>
[  515.471592][T14460]  dump_stack_lvl+0x189/0x250
[  515.471636][T14460]  ? __lock_acquire+0xaac/0xd20
[  515.471667][T14460]  ? __pfx_dump_stack_lvl+0x10/0x10
[  515.471704][T14460]  ? __pfx__printk+0x10/0x10
[  515.471725][T14460]  ? __might_fault+0xb0/0x130
[  515.471765][T14460]  should_fail_ex+0x414/0x560
[  515.471802][T14460]  _copy_from_user+0x2d/0xb0
[  515.471830][T14460]  kstrtouint_from_user+0xc4/0x170
[  515.471855][T14460]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  515.471896][T14460]  proc_fail_nth_write+0x88/0x240
[  515.471924][T14460]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  515.471958][T14460]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  515.471989][T14460]  vfs_write+0x27b/0xa90
[  515.472034][T14460]  ? __pfx_vfs_write+0x10/0x10
[  515.472058][T14460]  ? __fget_files+0x2a/0x420
[  515.472087][T14460]  ? __fget_files+0x3a0/0x420
[  515.472110][T14460]  ? __fget_files+0x2a/0x420
[  515.472144][T14460]  ksys_write+0x145/0x250
[  515.472164][T14460]  ? rcu_is_watching+0x15/0xb0
[  515.472193][T14460]  ? __pfx_ksys_write+0x10/0x10
[  515.472219][T14460]  ? do_syscall_64+0xba/0x210
[  515.472248][T14460]  do_syscall_64+0xf6/0x210
[  515.472273][T14460]  ? clear_bhb_loop+0x45/0xa0
[  515.472297][T14460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.472315][T14460] RIP: 0033:0x7ff5c478d41f
[  515.472333][T14460] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  515.472349][T14460] RSP: 002b:00007ff5c563f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  515.472369][T14460] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff5c478d41f
[  515.472382][T14460] RDX: 0000000000000001 RSI: 00007ff5c563f0a0 RDI: 0000000000000003
[  515.472394][T14460] RBP: 00007ff5c563f090 R08: 0000000000000000 R09: 0000000000000000
[  515.472406][T14460] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  515.472421][T14460] R13: 0000000000000000 R14: 00007ff5c49b5fa0 R15: 00007fff8af6b0e8
[  515.472452][T14460]  </TASK>
[  515.735679][T14450] batadv_slave_0: left promiscuous mode
[  515.865544][T14459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2371'.
[  516.105492][T14479] lo speed is unknown, defaulting to 1000
[  516.127249][T14479] lo speed is unknown, defaulting to 1000
[  516.285287][T14487] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2379'.
[  516.344641][T14487] vti0: entered promiscuous mode
[  516.346463][T14489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2380'.
[  516.376944][T14483] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  516.453031][T14487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2379'.
[  516.707914][T14505] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2385'.
[  516.726802][T14492] infiniband syz!: set down
[  516.731627][T14492] infiniband syz!: added team_slave_0
[  516.732244][T14505] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2385'.
[  516.802288][T14492] RDS/IB: syz!: added
[  516.807144][T14492] smc: adding ib device syz! with port count 1
[  516.813561][T14492] smc:    ib device syz! port 1 has pnetid 
[  517.690287][T14545] veth0: entered promiscuous mode
[  517.840778][T14545] veth0 (unregistering): left promiscuous mode
[  518.369118][T14539] xt_hashlimit: size too large, truncated to 1048576
[  518.765284][T14584] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8
[  519.643108][T14603] __nla_validate_parse: 7 callbacks suppressed
[  519.643128][T14603] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2411'.
[  519.902911][T14607] netlink: 'syz.7.2413': attribute type 1 has an invalid length.
[  520.006916][T14607] 8021q: adding VLAN 0 to HW filter on device bond2
[  520.033110][T14607] bond0: entered promiscuous mode
[  520.047311][T14607] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  520.066709][T14607] bond2: (slave macvlan3): Enslaving as a backup interface with a down link
[  520.092026][T14607] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2413'.
[  520.131328][T14616] netlink: 'syz.1.2417': attribute type 1 has an invalid length.
[  520.187159][T14618] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2416'.
[  520.317022][T14624] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 2, id = 0
[  520.740571][T14562] lo speed is unknown, defaulting to 1000
[  520.753429][T14562] lo speed is unknown, defaulting to 1000
[  520.898837][T14640] IPVS: Error connecting to the multicast addr
[  521.068496][T14643] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2426'.
[  521.088976][T14646] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2426'.
[  521.101849][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2426'.
[  521.173072][T14643] xt_NFQUEUE: number of total queues is 0
[  521.348118][T14652] netlink: 'syz.1.2427': attribute type 1 has an invalid length.
[  521.422818][T14652] 8021q: adding VLAN 0 to HW filter on device bond2
[  521.489468][T14652] IPv6: Can't replace route, no match found
[  521.537867][T14654] bond2: (slave veth5): Enslaving as an active interface with a down link
[  521.570199][T14652] bond2: (slave dummy0): making interface the new active one
[  521.580514][T14652] dummy0: entered promiscuous mode
[  521.586478][T14652] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  521.617919][T14658] syzkaller0: entered promiscuous mode
[  521.835896][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'.
[  521.937931][T14675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2432'.
[  522.112670][T14675] nbd: socks must be embedded in a SOCK_ITEM attr
[  522.143995][ T8272] bond2: Warning: Found an uninitialized port
[  522.152793][T14687] bond2: (slave macvlan3): Releasing backup interface
[  522.220037][T14687] bond0: left promiscuous mode
[  522.243039][T14684] lo speed is unknown, defaulting to 1000
[  522.286443][T14690] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  522.307236][T14684] lo speed is unknown, defaulting to 1000
[  522.307516][T14694] IPVS: Error connecting to the multicast addr
[  522.566952][T14696] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2437'.
[  522.714251][T14700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2439'.
[  522.838531][T14710] xt_nat: multiple ranges no longer supported
[  522.850037][T14712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  522.868948][T14712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  522.882023][T14712] hsr0: entered promiscuous mode
[  522.888075][T14712] hsr0: entered allmulticast mode
[  522.903580][T14712] hsr_slave_0: entered allmulticast mode
[  522.921518][T14712] hsr_slave_1: entered allmulticast mode
[  523.013276][T14719] IPVS: Error connecting to the multicast addr
[  523.137982][T14725] tipc: Enabling of bearer <dth:t> rejected, media not registered
[  523.166032][T14725] tipc: Enabling of bearer <dth:t> rejected, media not registered
[  523.256771][T14731] netlink: 'syz.7.2449': attribute type 1 has an invalid length.
[  523.372745][T14734] bond3: (slave gretap1): making interface the new active one
[  523.391930][T14734] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  523.775955][T14755] No such timeout policy "syz0"
[  524.401520][T14786] netlink: 'syz.5.2460': attribute type 1 has an invalid length.
[  524.689432][T14793] caif0: entered promiscuous mode
[  524.789176][T14799] __nla_validate_parse: 9 callbacks suppressed
[  524.789195][T14799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2462'.
[  524.943396][T14804] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2464'.
[  525.452470][T14832] netlink: 'syz.7.2473': attribute type 21 has an invalid length.
[  525.472408][T14832] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2473'.
[  525.489133][T14832] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2473'.
[  525.809953][T14836] gretap2: entered promiscuous mode
[  525.830980][T14836] gretap2: entered allmulticast mode
[  526.602799][T14861] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2482'.
[  526.651390][T14855] lo speed is unknown, defaulting to 1000
[  526.868783][T14855] lo speed is unknown, defaulting to 1000
[  526.959615][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2485'.
[  527.092946][T14867] lo speed is unknown, defaulting to 1000
[  527.118732][T14867] lo speed is unknown, defaulting to 1000
[  527.422704][T14875] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2486'.
[  527.763969][T14879] netlink: 'syz.2.2488': attribute type 4 has an invalid length.
[  527.991388][T14888] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2490'.
[  528.367579][T14886] netlink: 'syz.1.2490': attribute type 29 has an invalid length.
[  528.496568][T14887] netlink: 'syz.1.2490': attribute type 29 has an invalid length.
[  529.108540][T14911] netlink: 'syz.1.2497': attribute type 39 has an invalid length.
[  529.418376][T14919] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2500'.
[  529.464981][T14919] smc: net device bond0 applied user defined pnetid SYZ
[  529.693256][T14927] lo speed is unknown, defaulting to 1000
[  529.748329][T14927] lo speed is unknown, defaulting to 1000
[  530.179793][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2509'.
[  530.598086][T14964] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2512'.
[  531.472896][T14998] IPVS: Error connecting to the multicast addr
[  531.890674][T15019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2530'.
[  531.935352][T15019] netlink: 'syz.2.2530': attribute type 12 has an invalid length.
[  532.042268][T15023] netlink: 'syz.5.2529': attribute type 7 has an invalid length.
[  532.859516][ T8274] dummy0: left promiscuous mode
[  533.042982][T15071] Bluetooth: MGMT ver 1.23
[  533.069647][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2538'.
[  533.085995][T15073] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  533.200653][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2541'.
[  533.229085][T15077] nbd: illegal input index -381222912
[  533.259031][T15077] x_tables: duplicate entry at hook 3
[  533.432603][T15086] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2544'.
[  533.507439][T15091] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2545'.
[  533.568536][T15096] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2545'.
[  533.937792][T15106] netlink: 'syz.7.2549': attribute type 2 has an invalid length.
[  533.950180][T15106] netlink: 'syz.7.2549': attribute type 1 has an invalid length.
[  533.953090][T15103] IPVS: Error connecting to the multicast addr
[  533.974857][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2549'.
[  534.016583][T15106] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  534.031575][T15106] batadv_slave_1: entered promiscuous mode
[  534.358780][T15123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2552'.
[  535.466368][T15104] batadv_slave_1: left promiscuous mode
[  535.472358][T15123] bridge_slave_1: left allmulticast mode
[  535.493410][T15123] bridge_slave_1: left promiscuous mode
[  535.499322][T15123] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.516193][T15123] ¾x9ÿ: left allmulticast mode
[  535.520985][T15123] ¾x9ÿ: left promiscuous mode
[  535.531739][T15123] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  536.194979][T15152] IPVS: stopping backup sync thread 14624 ...
[  536.271378][T15151] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  536.280121][T15151] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  536.288400][T15151] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  536.298816][T15151] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  536.361059][T15151] team0: Port device vxlan0 added
[  536.440227][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2561'.
[  536.489173][T15165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2561'.
[  536.634688][T15176] netlink: 'syz.2.2564': attribute type 21 has an invalid length.
[  536.650823][T15177] netlink: 'syz.7.2565': attribute type 2 has an invalid length.
[  537.075462][T15185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2567'.
[  537.100179][T15185] netlink: 'syz.5.2567': attribute type 21 has an invalid length.
[  537.212147][T15191] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2569'.
[  537.341369][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2572'.
[  537.453235][T15203] sctp: [Deprecated]: syz.5.2574 (pid 15203) Use of int in max_burst socket option.
[  537.453235][T15203] Use struct sctp_assoc_value instead
[  537.563471][T15210] No such timeout policy "syz0"
[  537.615302][T15206] xt_CT: No such helper "pptp"
[  537.665855][T15217] siw: device registration error -23
[  538.186532][T15251] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2585'.
[  538.240602][T15248] xt_CT: No such helper "pptp"
[  538.634272][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2596'.
[  538.643189][T15279] netlink: 200 bytes leftover after parsing attributes in process `syz.7.2596'.
[  538.721644][T15283] bridge0: port 3(vxlan0) entered blocking state
[  538.746828][T15282] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2596'.
[  538.748965][T15283] bridge0: port 3(vxlan0) entered disabled state
[  538.783257][T15283] vxlan0: entered allmulticast mode
[  538.783977][T15290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2598'.
[  538.791683][T15283] vxlan0: entered promiscuous mode
[  539.101247][T15305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  539.207483][T15317] wg2: entered promiscuous mode
[  539.212494][T15317] wg2: entered allmulticast mode
[  539.286636][T15319] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20001
[  539.322107][T15321] batadv1: entered promiscuous mode
[  539.539201][T15331] xt_CT: No such helper "pptp"
[  539.710510][T15339] netlink: 'syz.7.2613': attribute type 1 has an invalid length.
[  540.440804][T15387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  540.544516][T15390] caif0: entered promiscuous mode
[  540.681319][T15401] vlan2: entered allmulticast mode
[  540.696913][T15401] dummy0: entered allmulticast mode
[  541.042910][T15421] gretap2: entered promiscuous mode
[  541.183456][T15428] netlink: 'syz.1.2641': attribute type 10 has an invalid length.
[  541.198691][T15428] bond2: (slave dummy0): Releasing active interface
[  541.224550][T15428] team0: Port device dummy0 added
[  541.566239][T15445] delete_channel: no stack
[  541.920407][T15482] mac80211_hwsim hwsim101 
: renamed from wlan1
[  542.092734][T15493] __nla_validate_parse: 13 callbacks suppressed
[  542.092754][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2660'.
[  542.142585][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2660'.
[  542.148774][T15495] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2661'.
[  542.162729][T15493] netlink: 'syz.6.2660': attribute type 18 has an invalid length.
[  542.178899][T15495] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2661'.
[  542.200197][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2661'.
[  542.220610][T15495] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  542.239766][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2661'.
[  542.327716][T15503] xt_l2tp: v2 sid > 0xffff: 262144
[  542.344722][T15505] netlink: 'syz.6.2664': attribute type 1 has an invalid length.
[  542.352770][T15505] netlink: 'syz.6.2664': attribute type 2 has an invalid length.
[  542.392870][T15507] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20002
[  542.400138][T15507] IPVS: set_ctl: invalid protocol: 135 172.20.20.30:20004
[  542.407616][T15507] IPVS: set_ctl: invalid protocol: 135 172.20.20.30:20004
[  542.416532][T15507] IPVS: set_ctl: invalid protocol: 135 172.20.20.30:20004
[  542.424071][T15507] IPVS: set_ctl: invalid protocol: 135 172.20.20.30:20004
[  542.431337][T15507] IPVS: set_ctl: invalid protocol: 135 172.20.20.30:20004
[  542.438845][T15507] IPVS: set_ctl: invalid protocol: 135 172.20.20.30:20004
[  542.448060][T15507] IPVS: set_ctl: invalid protocol: 135 172.20.20.30:20004
[  542.482020][T15511] lo speed is unknown, defaulting to 1000
[  542.489959][T15511] lo speed is unknown, defaulting to 1000
[  542.559435][T15515] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2667'.
[  542.577011][T15515] 0ªX¹¦D: renamed from gretap0
[  542.598860][T15515] 0ªX¹¦D: entered allmulticast mode
[  542.612838][T15515] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  543.221959][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'.
[  543.571759][T15557] lo speed is unknown, defaulting to 1000
[  543.631777][T15557] lo speed is unknown, defaulting to 1000
[  543.800701][T15569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2676'.
[  544.130475][T15582] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  544.154326][T15582] syzkaller0: left promiscuous mode
[  544.178991][T15582] bond3: left allmulticast mode
[  544.217537][T15582] bond3: left promiscuous mode
[  544.222542][T15582] macsec1: left promiscuous mode
[  544.240395][T14338] IPVS: starting estimator thread 0...
[  544.246242][T15582] macsec1: left allmulticast mode
[  544.309887][T15582] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  544.334197][T15589] IPVS: using max 28 ests per chain, 67200 per kthread
[  544.376273][T15582] gretap2: left promiscuous mode
[  544.414709][T15592] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2681'.
[  544.417863][T15581] pim6reg1: entered promiscuous mode
[  544.459045][T15581] pim6reg1: entered allmulticast mode
[  544.725291][T15581] 8021q: adding VLAN 0 to HW filter on device bond4
[  544.766741][T15581] team0: Port device bond4 added
[  544.918844][T15607] xt_hashlimit: size too large, truncated to 1048576
[  544.945910][T15606] xt_hashlimit: size too large, truncated to 1048576
[  544.969229][T15605] xt_hashlimit: size too large, truncated to 1048576
[  544.987944][T15606] syz.2.2685: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  545.024343][T15606] CPU: 1 UID: 0 PID: 15606 Comm: syz.2.2685 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) 
[  545.024373][T15606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  545.024386][T15606] Call Trace:
[  545.024395][T15606]  <TASK>
[  545.024403][T15606]  dump_stack_lvl+0x189/0x250
[  545.024439][T15606]  ? __pfx_dump_stack_lvl+0x10/0x10
[  545.024466][T15606]  ? __pfx__printk+0x10/0x10
[  545.024486][T15606]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  545.024516][T15606]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  545.024548][T15606]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  545.024581][T15606]  warn_alloc+0x214/0x310
[  545.024623][T15606]  ? __pfx_warn_alloc+0x10/0x10
[  545.024677][T15606]  ? __get_vm_area_node+0x1c5/0x2d0
[  545.024701][T15606]  ? __get_vm_area_node+0x25a/0x2d0
[  545.024735][T15606]  __vmalloc_node_range_noprof+0x5f2/0x12c0
[  545.024788][T15606]  ? __lock_acquire+0xaac/0xd20
[  545.024829][T15606]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  545.024856][T15606]  ? __kasan_kmalloc_large+0x1a/0xa0
[  545.024881][T15606]  ? rcu_is_watching+0x15/0xb0
[  545.024911][T15606]  ? htable_create+0xfc/0x7a0
[  545.024930][T15606]  ? htable_create+0xfc/0x7a0
[  545.024948][T15606]  __kvmalloc_node_noprof+0x3a0/0x5e0
[  545.024973][T15606]  ? htable_create+0xfc/0x7a0
[  545.024991][T15606]  ? hashlimit_pernet+0x23/0x240
[  545.025019][T15606]  htable_create+0xfc/0x7a0
[  545.025047][T15606]  hashlimit_mt_check_common+0x719/0xa10
[  545.025079][T15606]  hashlimit_mt_check_v1+0x221/0x360
[  545.025103][T15606]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[  545.025131][T15606]  ? xt_find_match+0x1f7/0x250
[  545.025156][T15606]  xt_check_match+0x3ce/0xab0
[  545.025175][T15606]  ? __pfx___mutex_lock+0x10/0x10
[  545.025203][T15606]  ? __pfx_xt_check_match+0x10/0x10
[  545.025225][T15606]  ? pcpu_alloc_noprof+0xfdb/0x16b0
[  545.025261][T15606]  ? xt_find_match+0x1f7/0x250
[  545.025286][T15606]  translate_table+0x1553/0x2040
[  545.025330][T15606]  ? __pfx_translate_table+0x10/0x10
[  545.025351][T15606]  ? __might_fault+0xb0/0x130
[  545.025415][T15606]  ? _copy_from_user+0x94/0xb0
[  545.025446][T15606]  do_ip6t_set_ctl+0x970/0xce0
[  545.025470][T15606]  ? futex_unqueue+0xcb/0xf0
[  545.025495][T15606]  ? rcu_is_watching+0x15/0xb0
[  545.025524][T15606]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  545.025566][T15606]  ? __pfx___mutex_lock+0x10/0x10
[  545.025593][T15606]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  545.025632][T15606]  ? futex_wait+0x285/0x360
[  545.025660][T15606]  ? __pfx_futex_wait+0x10/0x10
[  545.025691][T15606]  nf_setsockopt+0x26c/0x290
[  545.025719][T15606]  rawv6_setsockopt+0x23b/0x5b0
[  545.025747][T15606]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  545.025771][T15606]  ? aa_sock_opt_perm+0x74/0x110
[  545.025792][T15606]  ? sock_common_setsockopt+0x36/0xc0
[  545.025821][T15606]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  545.025853][T15606]  do_sock_setsockopt+0x257/0x3e0
[  545.025878][T15606]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  545.025896][T15606]  ? __fget_files+0x2a/0x420
[  545.025927][T15606]  ? __fget_files+0x3a0/0x420
[  545.025951][T15606]  ? __fget_files+0x2a/0x420
[  545.025985][T15606]  __x64_sys_setsockopt+0x18b/0x220
[  545.026013][T15606]  do_syscall_64+0xf6/0x210
[  545.026040][T15606]  ? clear_bhb_loop+0x45/0xa0
[  545.026065][T15606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.026085][T15606] RIP: 0033:0x7f95d498e969
[  545.026103][T15606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  545.026122][T15606] RSP: 002b:00007f95d5896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  545.026143][T15606] RAX: ffffffffffffffda RBX: 00007f95d4bb6080 RCX: 00007f95d498e969
[  545.026158][T15606] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000c
[  545.026171][T15606] RBP: 00007f95d4a10ab1 R08: 00000000000004c0 R09: 0000000000000000
[  545.026184][T15606] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[  545.026197][T15606] R13: 0000000000000000 R14: 00007f95d4bb6080 R15: 00007fff44087da8
[  545.026230][T15606]  </TASK>
[  545.028851][T15606] Mem-Info:
[  545.231124][T15615] netlink: 'syz.5.2688': attribute type 29 has an invalid length.
[  545.253251][T15606] active_anon:7550 inactive_anon:0 isolated_anon:0
[  545.253251][T15606]  active_file:1576 inactive_file:38575 isolated_file:0
[  545.253251][T15606]  unevictable:768 dirty:266 writeback:0
[  545.253251][T15606]  slab_reclaimable:11295 slab_unreclaimable:131310
[  545.253251][T15606]  mapped:34633 shmem:4314 pagetables:815
[  545.253251][T15606]  sec_pagetables:0 bounce:0
[  545.253251][T15606]  kernel_misc_reclaimable:0
[  545.253251][T15606]  free:1312075 free_pcp:333 free_cma:0
[  545.298552][T15615] netlink: 'syz.5.2688': attribute type 29 has an invalid length.
[  545.495865][T15606] Node 0 active_anon:30300kB inactive_anon:0kB active_file:6304kB inactive_file:154228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138532kB dirty:1064kB writeback:0kB shmem:15720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11844kB pagetables:3260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  545.530028][T15606] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  545.561792][T15606] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  545.589568][T15606] lowmem_reserve[]: 0 2504 2504 2504 2504
[  545.599459][T15606] Node 0 DMA32 free:1324040kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:30192kB inactive_anon:0kB active_file:6304kB inactive_file:154136kB unevictable:1536kB writepending:1064kB present:3129332kB managed:2564124kB mlocked:0kB bounce:0kB free_pcp:1112kB local_pcp:188kB free_cma:0kB
[  545.652283][T15606] lowmem_reserve[]: 0 0 0 0 0
[  545.657692][T15606] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  545.693855][T15606] lowmem_reserve[]: 0 0 0 0 0
[  545.698618][T15606] Node 1 Normal free:3910156kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  545.772408][T15606] lowmem_reserve[]: 0 0 0 0 0
[  545.783191][T15606] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  545.796482][T15606] Node 0 DMA32: 1*4kB (M) 27*8kB (UME) 27*16kB (UE) 1137*32kB (UE) 696*64kB (UE) 126*128kB (UME) 46*256kB (UM) 21*512kB (UME) 12*1024kB (UME) 4*2048kB (UM) 289*4096kB (UM) = 1324460kB
[  545.815167][T15606] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  545.833564][T15606] Node 1 Normal: 203*4kB (UME) 54*8kB (UME) 41*16kB (UME) 209*32kB (UME) 94*64kB (UME) 32*128kB (UME) 17*256kB (UME) 10*512kB (UME) 3*1024kB (UM) 2*2048kB (U) 946*4096kB (UM) = 3910156kB
[  545.852678][T15606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  545.862385][T15606] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  545.871990][T15606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  545.910721][T15606] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  545.920138][T15606] 44465 total pagecache pages
[  545.948429][T15606] 0 pages in swap cache
[  545.958574][T15606] Free swap  = 124996kB
[  545.962759][T15606] Total swap = 124996kB
[  545.975554][T15606] 2097051 pages RAM
[  545.982366][T15606] 0 pages HighMem/MovableOnly
[  545.995857][T15606] 424362 pages reserved
[  546.004376][T15606] 0 pages cma reserved
[  546.162419][T15633] 8021q: adding VLAN 0 to HW filter on device bond0
[  546.171205][T15633] 8021q: adding VLAN 0 to HW filter on device team0
[  546.190269][T15633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  546.375681][T15642] xt_TCPMSS: Only works on TCP SYN packets
[  546.514777][T15646] netlink: 'syz.5.2698': attribute type 1 has an invalid length.
[  546.597518][T15646] bond7: entered promiscuous mode
[  546.603424][T15646] 8021q: adding VLAN 0 to HW filter on device bond7
[  546.642329][T15653] batadv1: entered promiscuous mode
[  546.701468][T15653] batadv1: entered allmulticast mode
[  546.709059][T15653] 8021q: adding VLAN 0 to HW filter on device batadv1
[  546.718495][T15653] bond7: (slave batadv1): making interface the new active one
[  546.727702][T15653] bond7: (slave batadv1): Enslaving as an active interface with an up link
[  547.105863][T15686] tipc: Enabled bearer <eth:vlan0>, priority 10
[  547.268885][T15690] netlink: 'syz.5.2711': attribute type 19 has an invalid length.
[  547.348680][T15698] netlink: 'syz.2.2716': attribute type 2 has an invalid length.
[  547.366875][T15698] __nla_validate_parse: 11 callbacks suppressed
[  547.366895][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'.
[  547.447096][T15703] netlink: 'syz.5.2718': attribute type 1 has an invalid length.
[  547.466606][T15703] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2718'.
[  547.492094][T15694] netlink: 'syz.1.2714': attribute type 12 has an invalid length.
[  547.676657][T15711] lo speed is unknown, defaulting to 1000
[  547.690705][T15711] lo speed is unknown, defaulting to 1000
[  547.753017][T15722] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  547.766747][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'.
[  547.830413][T15724] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2725'.
[  547.839815][T15724] erspan0: entered promiscuous mode
[  547.854021][T15724] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2725'.
[  548.080261][T15736] netlink: 'syz.1.2730': attribute type 2 has an invalid length.
[  548.233949][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2732'.
[  548.506532][T15755] lo speed is unknown, defaulting to 1000
[  548.514804][T15755] lo speed is unknown, defaulting to 1000
[  548.722498][T15771] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2742'.
[  549.062527][T15781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2746'.
[  549.074319][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2747'.
[  549.471865][T15791] team0 (unregistering): Port device dummy0 removed
[  549.752052][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2751'.
[  550.101136][T15822] netlink: 'syz.5.2758': attribute type 1 has an invalid length.
[  550.300298][T15834] bridge0: port 2(vlan2) entered blocking state
[  550.307205][T15834] bridge0: port 2(vlan2) entered disabled state
[  550.313658][T15834] vlan2: entered allmulticast mode
[  550.339173][T15834] bond0: entered allmulticast mode
[  550.351598][T15834] vlan2: entered promiscuous mode
[  550.362781][T15834] bond0: entered promiscuous mode
[  550.401075][T15839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  550.440168][T15841] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  550.531820][T15841] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  550.556697][T15853] netlink: 'syz.5.2767': attribute type 29 has an invalid length.
[  550.584643][T15853] netlink: 'syz.5.2767': attribute type 29 has an invalid length.
[  550.617750][T15841] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  550.711154][T15841] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  550.909650][T15841] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  550.938744][T15841] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  550.959546][T15841] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  550.984248][T15841] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  551.043805][   T30] audit: type=1800 audit(1745970210.736:9): pid=15881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2773" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1233 res=0 errno=0
[  551.082156][   T30] audit: type=1800 audit(1745970210.736:10): pid=15881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2773" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1233 res=0 errno=0
[  551.483278][T15897] bond3: entered promiscuous mode
[  551.493265][T15897] bond3: entered allmulticast mode
[  551.531586][T15910] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  551.647000][T15918] netem: change failed
[  551.701506][T15920] openvswitch: netlink: Missing valid actions attribute.
[  551.713595][T15920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  551.858918][T15925] lo speed is unknown, defaulting to 1000
[  551.866666][T15925] lo speed is unknown, defaulting to 1000
[  552.377823][T15938] __nla_validate_parse: 9 callbacks suppressed
[  552.377845][T15938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2794'.
[  552.543400][T15952] netlink: 'syz.7.2798': attribute type 33 has an invalid length.
[  552.545214][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2789'.
[  552.646013][T15956] netlink: 'syz.7.2798': attribute type 1 has an invalid length.
[  552.771187][T15966] macvtap1: entered promiscuous mode
[  552.794264][T15966] vlan0: entered promiscuous mode
[  552.809910][T15966] macvtap1: entered allmulticast mode
[  552.819682][T15966] vlan0: entered allmulticast mode
[  552.837199][T15966] veth0_vlan: entered allmulticast mode
[  552.852266][T15966] vlan0: left allmulticast mode
[  552.859264][T15966] veth0_vlan: left allmulticast mode
[  552.865115][T15966] vlan0: left promiscuous mode
[  552.964957][T15922] bond1 (unregistering): Released all slaves
[  552.998476][T15962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2800'.
[  553.052472][T15952] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  553.073881][T15952] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  553.083199][T15952] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  553.092004][T15952] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  553.109278][T15952] bond5: (slave geneve2): making interface the new active one
[  553.122916][T15952] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  553.142151][T15972] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2803'.
[  553.330681][T15984] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2806'.
[  553.358613][T15982] netlink: 'syz.5.2807': attribute type 11 has an invalid length.
[  553.366976][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2808'.
[  553.472652][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2806'.
[  553.522167][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2806'.
[  553.591089][T15990] netlink: 'syz.2.2809': attribute type 29 has an invalid length.
[  553.675374][T15993] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2809'.
[  553.703339][T15984] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2806'.
[  553.721249][T15990] netlink: 'syz.2.2809': attribute type 29 has an invalid length.
[  553.798665][T15996] sit0: entered promiscuous mode
[  553.842396][T15996] netlink: 'syz.5.2811': attribute type 1 has an invalid length.
[  554.219792][T16023] netlink: 'syz.2.2818': attribute type 4 has an invalid length.
[  554.240968][T16023] netlink: 'syz.2.2818': attribute type 4 has an invalid length.
[  554.442460][T16033] netlink: 'syz.1.2822': attribute type 29 has an invalid length.
[  554.451682][T16033] netlink: 'syz.1.2822': attribute type 29 has an invalid length.
[  554.512751][T16037] lo speed is unknown, defaulting to 1000
[  554.523595][T16037] lo speed is unknown, defaulting to 1000
[  554.696474][T15957] Bluetooth: hci0: command 0x0406 tx timeout
[  554.702546][T15957] Bluetooth: hci2: command 0x0406 tx timeout
[  554.896799][T16053] netlink: 'syz.7.2827': attribute type 1 has an invalid length.
[  555.036375][T16055] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  556.568956][T16114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  557.035292][T16147] netlink: zone id is out of range
[  557.043841][T16147] netlink: zone id is out of range
[  557.055722][T16147] netlink: zone id is out of range
[  557.060955][T16147] netlink: zone id is out of range
[  557.075461][T16147] netlink: zone id is out of range
[  557.087315][T16147] netlink: zone id is out of range
[  557.094387][T16150] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  557.195099][T16147] netlink: set zone limit has 4 unknown bytes
[  557.457907][T16175] __nla_validate_parse: 14 callbacks suppressed
[  557.457927][T16175] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2864'.
[  557.463226][T16174] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2863'.
[  557.691558][T16177] syzkaller1: entered promiscuous mode
[  557.720287][T16177] syzkaller1: entered allmulticast mode
[  557.746988][T16184] tipc: Started in network mode
[  557.761945][T16184] tipc: Node identity b6c79231a191, cluster identity 4711
[  557.791282][T16184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  557.894252][T16185] syzkaller0: entered promiscuous mode
[  557.899860][T16185] syzkaller0: entered allmulticast mode
[  557.910739][T16185] tipc: Resetting bearer <eth:syzkaller0>
[  557.985997][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2870'.
[  558.011293][T16197] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2870'.
[  558.099067][ T8271] tipc: Resetting bearer <eth:syzkaller0>
[  558.449673][T16185] tipc: Resetting bearer <eth:syzkaller0>
[  558.745987][T16206] validate_nla: 7 callbacks suppressed
[  558.746007][T16206] netlink: 'syz.6.2871': attribute type 1 has an invalid length.
[  558.772368][T16202] netlink: 'syz.5.2869': attribute type 10 has an invalid length.
[  558.876410][T14337] tipc: Node number set to 391549489
[  558.907044][T16212] ------------[ cut here ]------------
[  558.912583][T16212] UBSAN: array-index-out-of-bounds in net/ipv6/route.c:1095:9
[  558.920113][T16212] index 14 is out of range for type 'const int[12]'
[  558.926780][T16212] CPU: 0 UID: 0 PID: 16212 Comm: syz.6.2871 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) 
[  558.926809][T16212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  558.926823][T16212] Call Trace:
[  558.926832][T16212]  <TASK>
[  558.926842][T16212]  dump_stack_lvl+0x189/0x250
[  558.926894][T16212]  ? __pfx_dump_stack_lvl+0x10/0x10
[  558.926931][T16212]  ? __pfx__printk+0x10/0x10
[  558.926948][T16212]  ? ip6_dst_lookup_tail+0x299/0x1510
[  558.926971][T16212]  ? ____sys_sendmsg+0x52d/0x830
[  558.926992][T16212]  ? __sys_sendmmsg+0x227/0x430
[  558.927012][T16212]  ? __x64_sys_sendmmsg+0xa0/0xc0
[  558.927032][T16212]  ? do_syscall_64+0xf6/0x210
[  558.927068][T16212]  ubsan_epilogue+0xa/0x40
[  558.927089][T16212]  __ubsan_handle_out_of_bounds+0xe9/0xf0
[  558.927122][T16212]  ip6_rt_copy_init+0x8e7/0x970
[  558.927155][T16212]  ip6_pol_route+0xbac/0x1180
[  558.927184][T16212]  ? ip6_pol_route+0x162/0x1180
[  558.927219][T16212]  ? __pfx_ip6_pol_route+0x10/0x10
[  558.927255][T16212]  ? fib6_get_table+0x39/0x270
[  558.927286][T16212]  ? fib6_get_table+0x39/0x270
[  558.927315][T16212]  ? fib6_get_table+0x251/0x270
[  558.927346][T16212]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  558.927375][T16212]  fib6_rule_action+0x206/0x7d0
[  558.927408][T16212]  ? __pfx_fib6_rule_action+0x10/0x10
[  558.927440][T16212]  fib_rules_lookup+0x767/0xe90
[  558.927471][T16212]  ? fib_rules_lookup+0x96/0xe90
[  558.927491][T16212]  ? __pfx_fib_rules_lookup+0x10/0x10
[  558.927510][T16212]  ? l3mdev_update_flow+0x29/0x640
[  558.927541][T16212]  ? l3mdev_update_flow+0x4d1/0x640
[  558.927576][T16212]  fib6_rule_lookup+0x18e/0x6f0
[  558.927607][T16212]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  558.927638][T16212]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  558.927674][T16212]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  558.927722][T16212]  ip6_route_output_flags+0x364/0x5d0
[  558.927753][T16212]  ? ip6_route_output_flags+0x2e/0x5d0
[  558.927787][T16212]  ip6_dst_lookup_tail+0x299/0x1510
[  558.927812][T16212]  ? ip6_dst_lookup_tail+0x211/0x1510
[  558.927841][T16212]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  558.927871][T16212]  ? sk_dst_check+0x25/0x480
[  558.927905][T16212]  ? sk_dst_check+0x25/0x480
[  558.927939][T16212]  ? sk_dst_check+0x30e/0x480
[  558.927972][T16212]  ip6_sk_dst_lookup_flow+0x730/0x980
[  558.927996][T16212]  ? udpv6_sendmsg+0x16e6/0x2700
[  558.928022][T16212]  udpv6_sendmsg+0x18db/0x2700
[  558.928041][T16212]  ? lockdep_hardirqs_on+0x9c/0x150
[  558.928078][T16212]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  558.928108][T16212]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  558.928158][T16212]  ? __local_bh_enable_ip+0x12d/0x1c0
[  558.928191][T16212]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  558.928231][T16212]  ? inet_send_prepare+0x1b9/0x270
[  558.928261][T16212]  ? inet_send_prepare+0x1b9/0x270
[  558.928291][T16212]  ? inet6_sendmsg+0xe4/0x120
[  558.928321][T16212]  __sock_sendmsg+0xe5/0x270
[  558.928354][T16212]  ____sys_sendmsg+0x52d/0x830
[  558.928383][T16212]  ? __pfx_____sys_sendmsg+0x10/0x10
[  558.928416][T16212]  ? import_iovec+0x74/0xa0
[  558.928449][T16212]  ___sys_sendmsg+0x21f/0x2a0
[  558.928475][T16212]  ? __pfx____sys_sendmsg+0x10/0x10
[  558.928541][T16212]  ? __fget_files+0x2a/0x420
[  558.928568][T16212]  ? __fget_files+0x3a0/0x420
[  558.928606][T16212]  __sys_sendmmsg+0x227/0x430
[  558.928637][T16212]  ? __pfx___sys_sendmmsg+0x10/0x10
[  558.928671][T16212]  ? __pfx_do_futex+0x10/0x10
[  558.928714][T16212]  ? rcu_is_watching+0x15/0xb0
[  558.928758][T16212]  __x64_sys_sendmmsg+0xa0/0xc0
[  558.928783][T16212]  do_syscall_64+0xf6/0x210
[  558.928811][T16212]  ? clear_bhb_loop+0x45/0xa0
[  558.928836][T16212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.928857][T16212] RIP: 0033:0x7ff5c478e969
[  558.928876][T16212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  558.928895][T16212] RSP: 002b:00007ff5c55dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  558.928924][T16212] RAX: ffffffffffffffda RBX: 00007ff5c49b6240 RCX: 00007ff5c478e969
[  558.928940][T16212] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000009
[  558.928954][T16212] RBP: 00007ff5c4810ab1 R08: 0000000000000000 R09: 0000000000000000
[  558.928966][T16212] R10: 0000000004004000 R11: 0000000000000246 R12: 0000000000000000
[  558.928978][T16212] R13: 0000000000000000 R14: 00007ff5c49b6240 R15: 00007fff8af6b0e8
[  558.929013][T16212]  </TASK>
[  558.929021][T16212] ---[ end trace ]---
[  559.359720][T16212] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  559.366914][T16212] CPU: 0 UID: 0 PID: 16212 Comm: syz.6.2871 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) 
[  559.378985][T16212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  559.389075][T16212] Call Trace:
[  559.392387][T16212]  <TASK>
[  559.395360][T16212]  dump_stack_lvl+0x99/0x250
[  559.399981][T16212]  ? __asan_memcpy+0x40/0x70
[  559.404609][T16212]  ? __pfx_dump_stack_lvl+0x10/0x10
[  559.409893][T16212]  ? __pfx__printk+0x10/0x10
[  559.414534][T16212]  panic+0x2db/0x790
[  559.418474][T16212]  ? __pfx_panic+0x10/0x10
[  559.423023][T16212]  ? _printk+0xcf/0x120
[  559.427221][T16212]  ? __pfx__printk+0x10/0x10
[  559.431837][T16212]  ? ip6_dst_lookup_tail+0x299/0x1510
[  559.437241][T16212]  ? ____sys_sendmsg+0x52d/0x830
[  559.442195][T16212]  ? __sys_sendmmsg+0x227/0x430
[  559.447056][T16212]  ? __x64_sys_sendmmsg+0xa0/0xc0
[  559.452093][T16212]  ? do_syscall_64+0xf6/0x210
[  559.456785][T16212]  check_panic_on_warn+0x89/0xb0
[  559.461737][T16212]  __ubsan_handle_out_of_bounds+0xe9/0xf0
[  559.467470][T16212]  ip6_rt_copy_init+0x8e7/0x970
[  559.472336][T16212]  ip6_pol_route+0xbac/0x1180
[  559.477039][T16212]  ? ip6_pol_route+0x162/0x1180
[  559.481911][T16212]  ? __pfx_ip6_pol_route+0x10/0x10
[  559.487042][T16212]  ? fib6_get_table+0x39/0x270
[  559.491822][T16212]  ? fib6_get_table+0x39/0x270
[  559.496605][T16212]  ? fib6_get_table+0x251/0x270
[  559.501479][T16212]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  559.507224][T16212]  fib6_rule_action+0x206/0x7d0
[  559.512092][T16212]  ? __pfx_fib6_rule_action+0x10/0x10
[  559.517480][T16212]  fib_rules_lookup+0x767/0xe90
[  559.522345][T16212]  ? fib_rules_lookup+0x96/0xe90
[  559.527289][T16212]  ? __pfx_fib_rules_lookup+0x10/0x10
[  559.532660][T16212]  ? l3mdev_update_flow+0x29/0x640
[  559.537787][T16212]  ? l3mdev_update_flow+0x4d1/0x640
[  559.543015][T16212]  fib6_rule_lookup+0x18e/0x6f0
[  559.547886][T16212]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  559.553626][T16212]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  559.559060][T16212]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  559.564838][T16212]  ip6_route_output_flags+0x364/0x5d0
[  559.570233][T16212]  ? ip6_route_output_flags+0x2e/0x5d0
[  559.575711][T16212]  ip6_dst_lookup_tail+0x299/0x1510
[  559.580937][T16212]  ? ip6_dst_lookup_tail+0x211/0x1510
[  559.586321][T16212]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  559.591977][T16212]  ? sk_dst_check+0x25/0x480
[  559.596580][T16212]  ? sk_dst_check+0x25/0x480
[  559.601182][T16212]  ? sk_dst_check+0x30e/0x480
[  559.605885][T16212]  ip6_sk_dst_lookup_flow+0x730/0x980
[  559.611263][T16212]  ? udpv6_sendmsg+0x16e6/0x2700
[  559.616208][T16212]  udpv6_sendmsg+0x18db/0x2700
[  559.620974][T16212]  ? lockdep_hardirqs_on+0x9c/0x150
[  559.626193][T16212]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  559.631762][T16212]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  559.636906][T16212]  ? __local_bh_enable_ip+0x12d/0x1c0
[  559.642286][T16212]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  559.648040][T16212]  ? inet_send_prepare+0x1b9/0x270
[  559.653171][T16212]  ? inet_send_prepare+0x1b9/0x270
[  559.658318][T16212]  ? inet6_sendmsg+0xe4/0x120
[  559.663019][T16212]  __sock_sendmsg+0xe5/0x270
[  559.667633][T16212]  ____sys_sendmsg+0x52d/0x830
[  559.672413][T16212]  ? __pfx_____sys_sendmsg+0x10/0x10
[  559.677727][T16212]  ? import_iovec+0x74/0xa0
[  559.682248][T16212]  ___sys_sendmsg+0x21f/0x2a0
[  559.686940][T16212]  ? __pfx____sys_sendmsg+0x10/0x10
[  559.692183][T16212]  ? __fget_files+0x2a/0x420
[  559.696820][T16212]  ? __fget_files+0x3a0/0x420
[  559.701522][T16212]  __sys_sendmmsg+0x227/0x430
[  559.706221][T16212]  ? __pfx___sys_sendmmsg+0x10/0x10
[  559.711437][T16212]  ? __pfx_do_futex+0x10/0x10
[  559.716139][T16212]  ? rcu_is_watching+0x15/0xb0
[  559.720925][T16212]  __x64_sys_sendmmsg+0xa0/0xc0
[  559.725786][T16212]  do_syscall_64+0xf6/0x210
[  559.730303][T16212]  ? clear_bhb_loop+0x45/0xa0
[  559.735001][T16212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.740916][T16212] RIP: 0033:0x7ff5c478e969
[  559.745343][T16212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  559.764956][T16212] RSP: 002b:00007ff5c55dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  559.773375][T16212] RAX: ffffffffffffffda RBX: 00007ff5c49b6240 RCX: 00007ff5c478e969
[  559.781351][T16212] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000009
[  559.789332][T16212] RBP: 00007ff5c4810ab1 R08: 0000000000000000 R09: 0000000000000000
[  559.797313][T16212] R10: 0000000004004000 R11: 0000000000000246 R12: 0000000000000000
[  559.805287][T16212] R13: 0000000000000000 R14: 00007ff5c49b6240 R15: 00007fff8af6b0e8
[  559.813281][T16212]  </TASK>
[  559.816437][T16212] Kernel Offset: disabled
[  559.820766][T16212] Rebooting in 86400 seconds..