last executing test programs:

2.036876567s ago: executing program 1 (id=4118):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0)
close(r0) (async)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb7a6d62a15aea8ce9392c8812d54f13b7e36699fa3b90ca253008843eac3a3aa004e90bdb", 0x25}, {&(0x7f0000000080)="32374e3e89ab96", 0x7}, {&(0x7f00000000c0)="d9460a2d2be46795260bf413631271d3950c6a11b7cb98196fc16afc6f7fde5b8088a55de6f1aae93541bd297375c5d0c7396af4a243b245634ac99f5e29a6e2e086c52ae4e824a346a3958090d2ec20db2dfaad026a7bb95b105924f68598cf46bee9f207eba5cba34e463707b7b39dc4a89ed9e9c60f45fbe5ff7e8d7ffbde267f44d3c1e871b7ca2e91074487ab362cf0859a70900337fde6c16d23675b36f534b9a592fa096d58ad2e843d1b4925fba4ba61ab09d400158069b40aa79b8cd64c7526d5", 0xc5}], 0x3)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) (async, rerun: 32)
r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 32)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) (async, rerun: 32)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x6, 0x0, 0x3}, 0x1c) (rerun: 32)

1.428917556s ago: executing program 1 (id=4126):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000fc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000340)={0xc18, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x18}}}}, [@NL80211_ATTR_TX_RATES={0x248, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0x30, 0x4, 0x6, 0x9, 0x4, 0x30, 0x6c, 0x9, 0x1b, 0x1, 0x0, 0x1b, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x1, 0x1, 0x6, 0x4, 0x5, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x3ff, 0xeb7d, 0x9, 0x200, 0x6, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x8001, 0x7, 0x8, 0x4, 0x5, 0x805]}}]}, @NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7f, 0xda, 0x5, 0x5, 0x40, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x6}, {0x1, 0x7}, {0x5}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x2}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x8}, {0x4, 0x6}, {0x6, 0xa}, {0x4, 0x2}, {0x4, 0x5}, {0x5, 0x2}, {0x7, 0xa}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x7}, {0x3, 0x7}, {0x6, 0x6}, {0x1, 0x2}, {0x6}, {0x1, 0xa}, {0x5, 0x5}, {0x3, 0x2}, {0x4, 0x2}, {0x3, 0xa}, {0x1, 0x9}, {0x3, 0x4}, {0x4, 0x3}, {0x6, 0x4}, {0x6, 0x9}, {0x7, 0x9}, {0x5, 0xa}, {0x7, 0xa}, {0x1, 0x9}, {0x7, 0x8}, {0x3, 0x4}, {0x7, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x3, 0xa, 0x5, 0x10, 0x2, 0x8000, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb723, 0x1, 0xd53, 0x3, 0x9, 0xee1, 0x9]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{}, {0x0, 0x4}, {0x4, 0x9}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x2, 0x9}, {0x6, 0x2}, {0x5, 0x1}, {0x5, 0xa}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0x7}, {0x4, 0x2}, {0x7, 0x1}, {0x2, 0x4}, {0x6, 0x5}, {0x2, 0x1}, {0x4, 0x7}, {0x6, 0x5}, {0x5, 0x9}, {0x5, 0xa}, {0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0xa}, {0x4}, {0x3}, {0x0, 0x6}, {0x3, 0x7}, {0x3, 0x9}, {0x1, 0x7}, {0x2, 0x2}, {0x6}, {0x3}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0xa}, {0x0, 0x6}, {0x4, 0x5}, {0x0, 0x4}, {0x3, 0x4}, {0x5}, {0x5, 0x4}, {0x3, 0x5}, {0x5, 0x2}, {0x5, 0x2}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x4, 0x7}, {0x1, 0x1}, {0x3, 0x7}, {0x0, 0x5}, {0x5, 0x8}, {}, {0x4, 0x7}, {0x3, 0x2}, {0x6, 0x3}, {0x0, 0x4}, {0x1, 0x6}, {0x7, 0x6}, {0x3}, {0x7, 0x7}, {0x3}, {0x2, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x2}, {0x4, 0x1}, {0x0, 0x7}, {0x5, 0x8}, {0x0, 0x3}, {0x7}, {0x3, 0x5}]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x9}, {0x3, 0x6}, {0x1, 0x3}, {0x7, 0x4}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x7, 0x1}, {0x6, 0x6}, {0x3, 0x1}, {0x0, 0x3}, {0x5, 0x8}, {0x0, 0x2}, {0x6, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x5}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x9}, {0x7, 0x5}, {0x6, 0x8}, {0x7, 0x9}, {0x1, 0x5}, {0x3, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x9}, {0x7, 0x3}, {0x7, 0x8}, {0x2, 0x7}, {0x1, 0x1}, {0x0, 0x9}, {0x5, 0xa}, {0x0, 0x3}, {0x7, 0x9}, {0x7, 0x6}, {0x2, 0xa}, {0x3, 0x1}, {0x7}, {0x3, 0xa}, {0x3, 0xa}, {0x0, 0x5}, {0x2, 0x1}, {0x2, 0x7}, {0x2}, {0x1, 0x2}, {0x6, 0x6}, {0x5, 0x3}, {0x1, 0x9}, {0x4, 0x5}, {0x6, 0x7}, {0x5, 0xa}, {0x3}, {0x7, 0x3}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x4, 0x7, 0x103, 0x28ba, 0x0, 0x8000, 0x6]}}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x1}, {0x3, 0xa}, {0x7, 0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0x4}, {0x5}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x2, 0x4}, {0x1, 0xa}, {0x4}, {0x6, 0x1}, {0x2}, {0x3, 0x9}, {0x7, 0x4}, {0x6, 0xa}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0x2}, {0x2, 0x8}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0x4}, {0x2, 0x4}, {0x2}, {}, {0x1, 0x6}, {0x2, 0x5}, {0x2, 0x9}, {0x3, 0x1}, {0x5, 0x2}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x5}, {0x6, 0x3}, {0x5, 0x1}, {0x2, 0x7}, {0x2, 0x3}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x3}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0x2}, {}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x4}, {0x3, 0xa}, {0x5, 0x2}, {0x6, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x3}, {0x6, 0x6}, {0x1, 0x6}, {0x1, 0x7}, {0x2, 0x8}, {0x5, 0x1}, {0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x899, 0x0, 0x5, 0xa3a8, 0x1, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x2, 0x3}, {0x4, 0xa}, {0x6, 0xa}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0x4}, {0x3, 0x3}, {0x1, 0x1f}, {0x6, 0x4}, {0x5, 0x4}, {0x0, 0x4}, {0x3, 0x5}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0xa}, {0x6, 0x7}, {0x6, 0x5}, {0x4, 0x5}, {0x3, 0x8}, {0x5, 0x9}, {0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x1, 0x9}, {0x6, 0xa}, {0x1, 0xa}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x5, 0x3}, {0x6}, {0x6, 0x2}, {0x0, 0x3}, {0x2, 0x9}, {0x4, 0x6}, {0x5, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {0x1, 0x5}, {0x4, 0x2}, {0x6, 0x7}, {0x0, 0x6}, {0x7}, {0x6, 0x2}, {0x3, 0x4}, {0x7, 0x4}, {0x2, 0x1}, {0x7, 0x7}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x5}, {0x2}, {0x4, 0x2}, {0x1, 0xa}, {0x5, 0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x9, 0x4, 0xc, 0xc4f, 0x0, 0xd, 0x9]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0xc, 0x1, 0x28, 0x5, 0x24, 0x60, 0x12, 0x0, 0x9, 0x1b, 0x9, 0x30, 0x9, 0x0, 0x9, 0x5, 0xb, 0x18, 0xc, 0x9, 0x6, 0xc, 0x6c, 0x6c, 0x9]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5, 0x8}, {0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x8}, {0x5, 0x3}, {0x2}, {0x2, 0x6}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0xa}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x8}, {0x3, 0x4}, {0x6, 0x3}, {0x5, 0x4}, {0x3, 0x1}, {0x2}, {0x4, 0x9}, {0x4, 0x9}, {0x3, 0x4}, {0x5, 0x4}, {0x1}, {0x2, 0xa}, {0x4, 0xa}, {0x2}, {0x3, 0x2}, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x4}, {0x0, 0x1}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x2}, {0x2, 0x9}, {0x2, 0x1}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x4}, {0x0, 0x2}, {0x0, 0x8}, {0x5}, {0x0, 0x5}, {0x7, 0x3}, {0x0, 0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x5}, {0x3, 0x2}, {0x7, 0x1}, {0x4, 0x2}, {0x3, 0x3}, {0x6, 0x7}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0x4}, {0x3, 0x9}, {0x2, 0x2}, {0x6, 0x8}, {0x5, 0x1}, {0x5, 0x6}, {0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x1, 0x3}, {0x3, 0x5}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0xa}, {0x3, 0xa}, {0x5, 0x6}, {0x0, 0x4}, {0x1, 0xa}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x238, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x1, 0x8, 0x9, 0x7, 0x3, 0x2, 0x3]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0xa}, {0x3, 0x2}, {0x4}, {0x5, 0x3}, {0x6, 0x7}, {0x7, 0x1}, {0x0, 0x6}, {0x3, 0x5}, {0x3, 0xa}, {0x1, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0xa}, {0x3}, {0x7, 0x3}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0x8}, {0x6, 0x1}, {0x5}, {0x5, 0x4}, {0x5, 0x9}, {0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x6}, {0x6, 0x5}, {0x4, 0x8}, {0x2, 0x2}, {0x3, 0x8}, {0x0, 0x2}, {0x6, 0x9}, {0x7, 0x9}, {0x2, 0x4}, {0x2, 0x5}, {0x4, 0x2}, {0x3, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x1}, {0x1, 0x7}, {0x7, 0x4}, {0x4, 0x2}, {0x4, 0x6}, {0x4, 0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x5, 0x9}, {0x7}, {0x5, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x7, 0x2}, {0x7, 0x8}, {0x5, 0x7}, {0x7, 0x8}, {0x3, 0x6}, {0x3, 0x9}, {0x5, 0x8}, {0x6, 0x5}, {0x0, 0x4}, {0x7, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x21, 0x2, 0xf, 0x4, 0x7, 0x10, 0xdf6c, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x6c, 0x4, 0x24, 0x1, 0x30, 0xb, 0x30, 0x3, 0x12, 0x0, 0x2, 0x16, 0x6c, 0x0, 0x36, 0x6c, 0x60, 0x2, 0x4, 0x5]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x6}, {0x5, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x7, 0x7}, {0x7, 0x3}, {0x7, 0x4}, {0x6, 0x3}, {0x0, 0x2}, {0x7, 0x7}, {0x6, 0x1}, {0x3, 0x5}, {0x6, 0x7}, {0x7, 0x2}, {0x5, 0x2}, {0x3, 0xa}, {0x4, 0x3}, {0x4, 0x3}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0x2}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x7}, {0x6, 0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0x3}, {0x7, 0x1}, {0x2, 0xa}, {0x6, 0xa}, {0x2, 0xa}, {0x6}, {0x5, 0x7}, {0x7, 0x5}, {0x6, 0x8}, {0x2, 0x1}, {0x5}, {0x4, 0x2}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x2}, {0x2, 0x6}, {0x5, 0xa}, {0x6}, {0x2, 0x2}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0x1}, {0x5, 0xa}, {0x4, 0x5}, {0x3, 0x5}, {0x7, 0x9}, {0x2, 0x9}, {0x3, 0x5}, {0x2, 0x4}, {0x6, 0x5}, {0x7, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0xa}, {0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x8, 0x7, 0x1, 0xd5b, 0x3, 0xfffa]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x20d, 0x1000, 0xfe, 0xfff7, 0xff, 0x6, 0xf396]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x2, 0x4, 0xc894, 0x7ff, 0x7, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x60, 0x120, 0x401, 0x25a, 0x7, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x455a, 0x2, 0x3, 0x4, 0x80, 0x6, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x24, 0x1, 0x36, 0xc, 0x48, 0x5, 0x12, 0x9, 0x0, 0x30, 0x60, 0x30, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x3, 0x3, 0xda, 0x3, 0x8, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x60, 0x2, 0x12, 0x12, 0x16, 0x1, 0xb, 0x5, 0x4, 0x3, 0x30, 0x2e, 0x6c, 0x5, 0x18, 0xc]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x3, 0x7ff, 0x3ff, 0x14, 0xf1c, 0xdb, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x3ff, 0x5, 0x7f, 0x4, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0xb, 0x32, 0x2, 0x5ce20d7caada2520, 0x9, 0x30, 0x12, 0x60, 0x5, 0x16, 0x16, 0xb, 0x1, 0x12, 0x16, 0x24, 0x3, 0x24, 0x0, 0x6c, 0x3]}]}]}, @NL80211_ATTR_TX_RATES={0x1ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x9, 0x3, 0x400, 0xbfd4, 0x8, 0x0, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x16, 0x1, 0x6c, 0x12, 0x9, 0x1b, 0x9, 0x1b, 0x1b, 0x1b, 0x12, 0xc, 0x30, 0x5b, 0xb, 0x1, 0x48, 0xb]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x6c, 0x5, 0x5, 0x2f, 0x6c, 0x5, 0x3, 0x36, 0x18, 0x3, 0x52, 0x30, 0x2, 0x60, 0x60, 0xb, 0x12, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0xb081, 0xc, 0xfff4, 0x7, 0x3, 0x7f]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x6}, {0x5, 0x4}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x3, 0x2}, {0x0, 0x2}, {0x1, 0x7}, {0x4, 0x7}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0x1}, {0x4, 0x8}, {0x0, 0x9}, {0x2}, {0x1}, {0x5, 0x9}, {0x0, 0x7}, {0x6, 0x3}, {0x3}, {0x6, 0x7}, {0x1, 0xa}, {0x2, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x3}, {0x5, 0x4}, {0x3, 0x5}, {0x3, 0x2}, {0x7, 0x3}, {0x2, 0x8}, {0x3}, {0x5, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfff3, 0xfff7, 0x8, 0x81, 0x7ff, 0xb300, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x6, 0x6, 0x36, 0x1, 0x9, 0x6, 0x12, 0x16, 0x4, 0x60, 0x22, 0x1, 0x3, 0x6c, 0xc, 0x36, 0x2]}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x4, 0x12, 0x6, 0x12, 0x48, 0x36, 0x0]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x18, 0x9, 0x24, 0x1, 0x12, 0x30, 0x31, 0xc, 0x6c, 0x48, 0x60, 0x12, 0x1, 0x24, 0xb, 0x1b, 0x5, 0x1b, 0xd, 0x16, 0x18]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x5}, {0x3, 0x6}, {0x5, 0x4}, {0x1, 0x5}, {0x1, 0xa}, {0x6, 0x1}, {0x5, 0x9}, {0x6, 0x4}, {0x2}, {0x7, 0x5}, {0x7, 0x4}, {0x4, 0xa}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x6}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xc5, 0xfff9, 0x7, 0x5, 0x80, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xe, 0x5, 0x40da, 0x0, 0x0, 0xfffc, 0x3a25]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe8, 0x1ff, 0x101, 0x4, 0xa17, 0x3ff, 0x7, 0x100]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0x4}, {0x4, 0x1}, {0x4, 0x6}, {0x0, 0x5}, {0x5, 0x5}, {0x0, 0xa}, {0x6, 0x8}, {0x2, 0x1}, {0x1, 0x3}, {0x6, 0x2}, {0x3, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x2, 0x9}, {0x7, 0x2}, {0x3, 0xa}, {0x1, 0x1}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x2, 0x0, 0xe321, 0xff, 0xc7, 0x1, 0x1]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xed81, 0x3, 0x200, 0x4, 0x2df6, 0x100, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x1b, 0x6, 0x6, 0x1b, 0x30, 0x9, 0x24, 0x30, 0x24, 0x9, 0x1b, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x6}, {0x0, 0x5}, {0x7, 0x3}, {0x5, 0x9}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {}, {}, {0x0, 0x4}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x4}, {0x7, 0x9}, {0x1, 0x2}, {0x0, 0x7}, {0x2, 0x1}, {0x4, 0x3}, {0x4, 0x6}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0x2}, {0x7, 0x9}, {0x1, 0x9}, {0x6, 0x7}, {0x3, 0x7}, {0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x4, 0x5}, {0x4, 0x9}, {0x4, 0x5}, {0x7, 0x4}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x4, 0x3}, {0x5, 0xa}, {0x2}, {0x0, 0xa}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x7, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0x8}, {0x7}, {0x7, 0x3}, {0x5, 0x3}, {0x7}, {0x1, 0x4}, {0x5, 0x8}, {0x1, 0x3}, {0x5, 0x3}, {0x4, 0x4}, {0x6, 0x9}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x2, 0x6c, 0x2, 0x16, 0x5, 0x18]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x1}, {0x2, 0x9}, {0x0, 0x3}, {0x7}, {0x3, 0x1}, {0x5, 0x9}, {}, {0x0, 0xa}, {0x7, 0x5}, {0x2, 0x7}, {0x2, 0x6}, {0x3, 0x3}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x7}, {0x2, 0x2}, {0x1, 0x4}, {0x6, 0x7}, {0x1, 0x8}, {0x7, 0x6}, {0x1, 0x7}, {0x6}, {0x2, 0x8}, {0x1}, {0x6, 0x9}, {0x2, 0x4}, {0x4, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x7, 0x9}, {0x2, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x5, 0x3}, {0x7, 0x1}, {0x6, 0x7}, {0x5, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x8}, {0x5, 0x7}, {0x2, 0x6}, {0x4, 0x3}, {0x1, 0x9}, {0x6, 0x8}, {0x5, 0x7}, {0x1, 0x2}, {0x5, 0x3}, {0x7, 0x5}, {0x6, 0x8}, {0x5, 0x6}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x9}, {0x6}, {0x1, 0x6}, {0x6, 0x7}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0x5}, {0x6, 0x2}, {0x1, 0x9}, {0x5}, {0x1}, {0x6, 0x7}, {0x0, 0x6}, {0x4}, {0x6, 0x7}, {}, {0x3, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x3, 0x1, 0x60, 0x9, 0x6, 0x48, 0x3, 0x5, 0x24, 0x12, 0x24, 0x76, 0x3, 0x6c, 0x60, 0x3, 0x30, 0x6, 0x24, 0x5, 0x30, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3cc, 0x5, 0x3, 0x4ae, 0x3ff, 0x2c, 0xfff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfb5a, 0x2, 0x3, 0x3, 0x1, 0x7, 0x6, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2eb7, 0x101, 0x401, 0x6, 0xe, 0x6, 0x73]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x1, 0x9, 0x6, 0x51b, 0x2, 0xfffa, 0x3]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x7, 0xf000, 0x6bc, 0x0, 0x2, 0x7ff, 0xd61d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x6c, 0x4, 0x1, 0xc, 0x5, 0x30, 0x12, 0x24, 0x6, 0x5, 0x9, 0x60, 0x48, 0x2f, 0x9, 0x4, 0x12, 0x6c, 0x4, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb55, 0x595, 0x4, 0x5, 0x0, 0xffff, 0x4, 0x12cb]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x9, 0xb, 0x6c, 0x12, 0x48, 0x18, 0x12]}]}]}, @NL80211_ATTR_TX_RATES={0x230, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd2d2, 0x7f, 0x4, 0x5, 0x5, 0x3, 0x7, 0x8d1e]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0xa}, {0x1, 0x1}, {0x7, 0x2}, {0x7, 0x3}, {0x7, 0x6}, {0x4, 0x9}, {0x6}, {0x5, 0x9}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x6}, {}, {0x6, 0x9}, {0x2, 0xa}, {0x6, 0x8}, {0x5, 0x9}, {0x3, 0x2}, {0x6, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xcd, 0x11, 0xd, 0x3, 0x0, 0x40, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x1b, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x5, 0x5c, 0xb, 0x60, 0x6, 0x4, 0x6, 0x5, 0x4, 0x9, 0x24, 0x5, 0x12, 0x9, 0x16, 0x48, 0x3, 0x60, 0x2, 0x3, 0x6c, 0x24, 0x5, 0x60, 0x9, 0xc, 0x18, 0x30, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x1, 0x3, 0x7, 0x4, 0x8, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x2, 0x8, 0x6, 0x1, 0x8, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x9, 0x7, 0x4, 0xfffe, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6, 0x24, 0x61, 0x1b, 0xb, 0x2, 0x24, 0x48, 0x36, 0x5, 0x2, 0xc, 0x24, 0x3, 0x48, 0x4, 0x16, 0x24, 0x16]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x4c, 0x2, 0x2, 0x16, 0xb]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x24, 0xb, 0xc, 0x4, 0x6, 0x18, 0x24, 0x5, 0x9, 0x2, 0xb, 0x18, 0x0, 0x18, 0xb, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x609a, 0x7, 0x4, 0x4, 0x101, 0x9, 0x4a88, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xf72, 0xa, 0x8, 0x2, 0xff99, 0x2, 0x1]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x12, 0x6c, 0x48, 0x3, 0x5, 0x36, 0x30, 0x30, 0x6c, 0x36, 0x2, 0x18, 0xb, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0xf, 0x7, 0x800, 0x6a, 0x2, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x1b, 0x16, 0x36, 0x24, 0x60, 0x24, 0x4, 0x0, 0x48, 0x31, 0x1b, 0x6c, 0x6c, 0x1, 0xb, 0x2, 0xb, 0x24, 0x48, 0x12, 0x9, 0x6, 0x24]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0xa}, {0x1, 0x5}, {0x1, 0xa}, {0x0, 0x7}, {0x3, 0x5}, {0x2, 0x5}, {0x4, 0x5}, {0x7, 0x6}, {0x3, 0x8}, {0x4}, {0x5, 0x6}, {0x3, 0x8}, {0x6, 0x7}, {0x4, 0x7}, {0x3}, {0x6, 0x6}, {0x4, 0x7}, {0x1, 0x9}, {0x3, 0x1}, {0x3, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x3, 0x8}, {0x7, 0x1}, {0x4, 0x1}, {0x6, 0x4}, {0x1}, {0x1, 0x4}, {0x2, 0x8}, {0x2, 0x6}, {0x2, 0x5}, {0x2, 0x9}, {0x2, 0x5}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0x9}, {0x5, 0x1}, {0x2, 0xa}, {0x0, 0x4}, {0x7, 0xa}, {0x3, 0x1}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x7}, {0x2, 0x9}, {0x4, 0x8}, {0x1, 0x7}, {}, {0x3}, {0x7, 0x3}, {0x2}, {0x0, 0x7}, {0x5, 0x1}, {0x5, 0x4}, {0x6, 0x5}, {0x7, 0x1}, {0x1, 0x4}, {0x2, 0x2}, {0x3, 0x2}, {0x2, 0x6}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xd, 0x3, 0x6, 0x0, 0xec7, 0x1, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x100, 0x8, 0x7, 0x8b, 0x1, 0x3]}}]}]}]}, 0xc18}, 0x1, 0x0, 0x0, 0x40000}, 0x41)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084004}, 0x40000)

1.428484223s ago: executing program 4 (id=4127):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xa}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0xfd, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffd, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}}]}}]}, 0x8c}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414"], 0x24}}, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x1000, 0x101, 0x88da, 0x9, 0x9f, 0xa, 0x8}, 0x9c)

1.356671401s ago: executing program 1 (id=4132):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000)
syz_genetlink_get_family_id$nl802154(0x0, r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001fc0)={<r5=>0x0}, &(0x7f0000002000)=0xc)
sendmmsg$unix(r3, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}}], 0x2, 0x801)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc)
setsockopt$inet6_buf(r6, 0x29, 0x2f, &(0x7f0000001240)="432997c4f818dd26399e12cf2c6f3b8dfbb623b237b9a33e082cd95eac141f73d458c9cedb8345fb80c2cc8b156b2e445513e0e4a67088e76cf049455a3c728bf28cec32f84d52a6922e142cb7b7dc494d3a858adde7570e9109dfb6d8b85bb1190c1a2c8fdd9465268852f4c3acf41fcc21cf3546f3f24f3b269d025ec3ee302b6a888f80f3333d0a6ccffd1784c4b6ed7f5491b32bf8c5dad0adf4dec6bc27bc1f7819779aded59b87e004e3d5697b2f655e7683701586014e31c4378cf877e8f0e9395199a09080b56e08092ee9939dae58c953ec49d94fb2a5957c53e6cdd384a35a3f962e96a7225fa723e8542a4d29c7089fe079609dac364b83e97f9945ff1960f9a1798c", 0x108)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000500)={<r10=>0x0, 0x100, 0x0, [0x7, 0x8, 0x4, 0xd8, 0xff], [0x1d, 0x9, 0x0, 0x1, 0xffffffffffffff01, 0x100, 0x6, 0x6, 0x6, 0xffffffffffffff15, 0xfdc, 0x2, 0x144f, 0x80000000, 0x8e2, 0x800, 0x6, 0x2, 0x2, 0x9, 0x800, 0x80000008, 0x8, 0x40, 0xf, 0x0, 0x5, 0x7fffffff, 0x8, 0x2, 0x2, 0x10, 0x3, 0x0, 0x8, 0x1000, 0x100000000, 0xc6, 0x2, 0x3, 0x6, 0x6db, 0x7fffffffffffffff, 0xbb, 0x5f, 0x3, 0x80, 0xfffffffffffffffa, 0xfffffffffffffffc, 0xab6c, 0x5, 0x7, 0x4, 0x4, 0x0, 0x1, 0x3ff, 0xd, 0x823, 0x4, 0x33, 0x2, 0x4, 0x5, 0x1, 0x9, 0x4d5, 0x4, 0x3, 0x4, 0x7, 0x8, 0x9, 0x400, 0x9, 0xff, 0x2, 0x4, 0x8000000000000001, 0x6, 0x0, 0x1, 0x7, 0x0, 0xe0000000, 0x5, 0x4, 0x100000000, 0x1c47, 0x2, 0x1b8, 0x9, 0x99, 0x91, 0x5b, 0x7ff, 0x1, 0x0, 0x2312a200, 0xf, 0x0, 0x6, 0x7, 0x8000, 0xfe9, 0x8, 0xb9, 0x10, 0x3, 0x0, 0x4, 0xfffffffffffffffd, 0x8, 0x5, 0x0, 0xd75a, 0x1000000000000, 0x7, 0x100000001, 0x7, 0xd5]})
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x400000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000007}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x2}}}}]}]}, 0x70}}, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, &(0x7f0000001500)={r10, 0xf5fa, 0x8})
r12 = socket(0x28, 0x1, 0x0)
getsockopt$nfc_llcp(r12, 0x28, 0x3, 0xfffffffffffffffe, 0x41584fc00e997fc4)
sendmsg$TIPC_NL_BEARER_DISABLE(r12, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x24c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x60fe2404}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9585}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdc, 0x3, "1681fc5cece2c7147aa0f2f39c5e8fc129fb6e6f7a2bf43408878c8ba960cedf0fa1b7e8cd6c2960a391b888091d8ccffae95d1ed86d281f03618912f4714e4e6d0485e9355c1255ece188d283b5cb4da882e8d5ad651337bf8101d4097012e5ae6b6b383a2318b92f0ee4b08b0d1915309117b4aa647bc52ac6571a3fe8adab6c478b1c6fd0e64bd663238c4b6cbb4698e997fd472cbd3832e63ad2c05d1ee4cd0c9b227af54ee3a43f8afccf9020f5ccaf6e120de65667d7256a521f595a1ddecf2be4719813c0c3ec736b5224612571398f689563dfa1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "efb426ed06967655b447acc8c7d7c1f1df4c2d658f6f63c9c9"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2e5faa351ec3aeddd3b6c7796b4136e0df4c1a062c264ebd4de6"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x800}, 0x804)
r13 = epoll_create1(0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x2c, r15, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r9, &(0x7f00000000c0)={0x90000005})
epoll_pwait(r13, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000)
connect$unix(r8, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, r2, 0x519, 0xfffffffd, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xfffffffb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040044}, 0x2040000)

1.188666396s ago: executing program 3 (id=4135):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001e40)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, r1, 0x11, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4040842)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080c5}, 0x20008010)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0)

1.119367018s ago: executing program 2 (id=4139):
r0 = socket(0x18, 0xa, 0x8)
sendto$inet(r0, &(0x7f0000000000)="3e51b24e9f96ad08350ef408844c142ec0def733f5c8a1cbf3781a32d1faebcb847b1dba2fde3a3b6ea42750c363b2bab5b1e6d03c7e71ab1125eeba8cd107ee392cae57c5c4b979941d81e84a6e6ae5c88ee31af6349379bd013a8bef125f2e899ff7e5357bf25ad7c1a5ae9a2c10a781f6e2c9f5b2b75cea951a55b326c99b321ef5d82e0a27f1bbb5e66c5ce7226ceecb0e77c7453cdf59da96eb101c84c138d529", 0xa3, 0x20040810, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
bind$inet6(r1, 0x0, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0x1, 0xa})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)
getsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f0000000340))

1.016741745s ago: executing program 3 (id=4140):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0)
pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8})
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff)
r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_freezer_state(r2, &(0x7f00000001c0)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(r2, &(0x7f0000000140)='THAWED\x00', 0x7)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x7ff, 0x4)

1.014292552s ago: executing program 2 (id=4141):
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x20004844)
socket$kcm(0x11, 0x3, 0x0) (async)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) (async)
sendmsg$nl_generic(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148020000140ac1414bb0c000280"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r5=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x3, 0x400, 0x4, {}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "8556ef1a0e91bf5b522636433dc49b8f42f45d6bb3d84c121d2902a2d7cb66084d3fc8abe91dbf05a17aaf24e0319a0026694cbe75d1a9e787a95ff266a76853"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

932.912729ms ago: executing program 0 (id=4143):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015000500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a769b4d4ccd40dd6e4ed01ddceb5a2b5ac3290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab628", 0xd8}], 0x1}, 0x0)
close(r2)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000440)=@ethtool_eeprom={0xb, 0xff, 0xaa2}})
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e23}]}}]}, 0x4c}}, 0x24004000)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r7, 0xf13, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x49}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x49857cf4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x582}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x50}}, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4)

792.636381ms ago: executing program 2 (id=4144):
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x4802, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r3=>0x0})
sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@can={{0x0, 0x1, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "96ccd9f4c7b21421"}, 0x10}}, 0x44101)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x503, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004, 0x4c20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x4c}}, 0x24048020)

788.614299ms ago: executing program 4 (id=4145):
r0 = gettid()
ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x3c}, 0x1, 0x20, 0x0, 0x4004852}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

766.115444ms ago: executing program 0 (id=4146):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]})

674.43562ms ago: executing program 0 (id=4147):
r0 = socket$caif_stream(0x25, 0x1, 0x5)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x25}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000000700)=""/99, 0x63}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000004740)=""/4080, 0xff0}], 0x4}, 0x8}], 0x3, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0)
r3 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "000000000000000000000500"}}}]}, 0x48}}, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
bind$qrtr(r6, 0x0, 0x0)

568.642521ms ago: executing program 3 (id=4148):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x3000)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}]})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r2, 0x80000000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})

566.607933ms ago: executing program 2 (id=4149):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r0) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) (async, rerun: 32)
socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="f4ffcd"], 0x9) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000700)={'veth1_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe, 0x80003}]}}) (async)
sendto$inet6(r0, &(0x7f0000000080)="1793011ef1a1eeb7bd18bb5ac6d01fd33779b2d77959e2434041ea31dba283c5718a2a084995ff96d8360cc68d422494a30beb5891064a8c1ff5330a684315adb47204b57a154c91", 0x48, 0x8800, &(0x7f0000000100)={0xa, 0x4e22, 0x28, @dev={0xfe, 0x80, '\x00', 0x15}, 0x9}, 0x1c)

502.671289ms ago: executing program 2 (id=4150):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xda}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x50, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="418cb04d5101"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)

499.183762ms ago: executing program 0 (id=4151):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048050}, 0x20000800) (async)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c)
r2 = socket$inet6(0xa, 0x5, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) (async)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14)
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff00080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x4000) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$inet_tcp_int(r8, 0x6, 0x22, &(0x7f0000000180)=0x5, 0x4)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000289c62833e5e259c44c9913ad9"], 0x134}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xfffffffffffffd38}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0)

487.540561ms ago: executing program 4 (id=4152):
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x0) (async)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_void(r2, 0x29, 0x0, 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={<r3=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x2}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x0, @private2, 0x7}, @in={0x2, 0x4e22, @multicast1}], 0x2c)

404.469722ms ago: executing program 3 (id=4153):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060ae904000000000000000002000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd0900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x143, 0x80, 0x88a8}}, {0x28, 0x1, {0x3912, 0xf31, 0x7f, 0x8100}}]}]}]}]}, 0x68}}, 0x24040800)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1400, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000100)=0xc)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r7=>0x0})
setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, {0x2, 0x4e24, @remote}, 0x30, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)='veth0_to_batadv\x00', 0xfa4f, 0x4, 0x7})
sendmsg$can_raw(r6, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r7}, 0x10, &(0x7f0000000200)={&(0x7f0000000fc0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "b171164680a4bf03"}, 0x48}}, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x80)
ioctl$TUNSETGROUP(r2, 0x400454ce, r3)

401.027053ms ago: executing program 1 (id=4154):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x13f6, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x13c0, 0x6, 0x0, @local, @local, {[@routing={0x8, 0x14, 0x2, 0x4c, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast1, @mcast1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0x2f, 0xd, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0xfb, 0x8, [0xc470, 0xd7, 0x8000, 0x7, 0xfffffffffffffffa]}}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0x8000, [0x7, 0x3, 0x8]}}, @jumbo={0xc2, 0x4, 0xffff2a58}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0xb, 0x5, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x5}]}, @dstopts={0xe6, 0x231, '\x00', [@generic={0x5, 0x1000, "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"}, @generic={0x91, 0xa7, "88b36d5fd5f283790ec0923d906e3b47b9b2ac71becf813764b0fe4638b66d651ffb1792957d986260ba3c5361bfcfc1befabe2e2f639418af5d4c381f3d8555f86a8d3cbc0db72aa012ad6bf1be6ab0b37447051e0b73f2f2070e2651ce2c341cc2a760e4ff9b44d64081eeedc22342bc17f866a4c61135b3309957a647b51c1c0952fcbb0210da2e3b40b9a88098142586be0a3aced2633ac85b9cf7870939fd50eed51e85ca"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x84, 0xc1, "d0bac5f209a6d914b196f8a04ccbde57ee84e13cbe70103ce907169fe1f51a8c6e9f9ef5f22ad8cfec3b218e5e09e1f1e35f856308eb174b33d388536609e7ad1b3ea714f6b66822d83d5462e49b2a668b216bf69002d6561289ce36e9a826a728f45660f23e8b56a833fd57cfdda486cd9c0abbd4506f09c065662b9e73eb28980a2874d66a22453b4a54763d13df7071e3b65cf869d961ce94c94cf087559b534e1f144e66a95ba1c308a3db0747ce58dd7c2315176b8ccc6439add2bcaec2e4"}]}, @dstopts={0x88, 0x15, '\x00', [@generic={0x2c, 0x72, "01b97d0fe4a391ac95a91f324c961f9e90a4e07dd8a2f751a6c7c0b1dce7708e486d2a9c07727daa938636b14c5d9bc81237240468dd10b347376583da329e7fec7f08cb6cd17a83b445c8be07d43a76f27762e4edc300cadca11aef9ba1e8d6578ffe22b542899699bb7458445d31e63b8d"}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x9, 0xf, "8838b0ada5eb13c4d25d362d2d6045"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}]}, @fragment={0x16, 0x0, 0x81, 0x0, 0x0, 0x0, 0x68}], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x31, 0xe, 0xffffffff}})
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001a00)={0xf0, 0xb, 0x6, 0x2443f9155bad699f, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'wg2\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="9fda63ea581b"}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7f}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_ETHER={0xa, 0x11, @local}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xbc9}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xc}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
close(0x3)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)

375.206856ms ago: executing program 0 (id=4155):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000340)={0x7, 'veth1_to_bond\x00', {0x50b}, 0x7f2f})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000008c0)={0x54, r4, 0x509, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x8, 0x7}, @broadcast}, @a_msdu}}, @NL80211_ATTR_MAC={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x80)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0)

362.672057ms ago: executing program 4 (id=4156):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_EXPRESSIONS={0x34, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x104, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22000092}, 0x10)

288.647467ms ago: executing program 1 (id=4157):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)
listen(r2, 0x0)
syz_emit_ethernet(0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100100086dd6000a8bc006d0600fc000000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009088ea8d83d25ff34d780000fe04f989c6ad29fffa6369166d6cdfac9c10818150039937e482f87f4aebc3780622dfa976d798eea3727ce98e56a4d032561dfd4c2b1c15b2fbc6d6edfdb1"], 0x0)

287.602322ms ago: executing program 3 (id=4158):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
shutdown(r0, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0xe04, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24008085)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=<r3=>0x0)
r4 = syz_open_procfs$namespace(r3, &(0x7f0000000200)='ns/user\x00')
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x82024080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000010)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000340), &(0x7f0000000380)=0x8)
syz_emit_ethernet(0x11b4, &(0x7f00000003c0)={@random="1c8862303b25", @empty, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "076eb9", 0x117e, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x33, 0x6, 0x0, 0x2, 0x0, [@empty, @private0={0xfc, 0x0, '\x00', 0x7}, @local]}, @fragment={0x88, 0x0, 0x4, 0x0, 0x0, 0x17, 0x67}, @dstopts={0x27, 0x211, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xa}, @ra={0x5, 0x2, 0x6}, @generic={0xe, 0x43, "e7eb59bcd8409e842cbca809d6280852af03e63dad80148dcff2e002096721af77196c476ba086bca12b87625adcdca01da6d2354dff5a7a57c3dd1e50da92edf00bc7"}, @generic={0xfa, 0x1000, "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"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x1, 0xfffe, [0xfffffffffffffff0, 0x40]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}]}, @srh={0xa1, 0x8, 0x4, 0x4, 0x1, 0x38, 0xfff9, [@private2, @local, @loopback, @mcast2]}, @fragment={0x2f, 0x0, 0x6, 0x0, 0x0, 0x9, 0x67}], "95f2d6a5e9cbe0f400babb4a051f4d75d20f56e2a55860cfc0e942b308e1471f43bb257364a0f6683579d087abb16a964529b42a892e5f020ae5641b00cbd4e0d8736486a3cd0bfe5e271c3a37fa790bf368283cc801"}}}}}, &(0x7f0000001580)={0x1, 0x2, [0xb93, 0xad5, 0x3b, 0xc12]})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001680)={'ip6gre0\x00', &(0x7f0000001600)={'ip6gre0\x00', <r5=>0x0, 0x2f, 0x6d, 0x5, 0xa4, 0x7b, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x40, 0x10, 0x6, 0x7ff}})
sendmsg$nl_route(r0, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)=@ipv4_getaddr={0x20, 0x16, 0x800, 0x70bd2d, 0x25dfdbfd, {0x2, 0x18, 0x29, 0xc8, r5}, [@IFA_FLAGS={0x8, 0x8, 0x80}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x68050)
pwrite64(r4, &(0x7f0000001780)="45c6df66c0b74f8a31c404637d0f0f6df4989f3505c11bb1ee88a5e1dd3045f3e8b2ab8d1d5c89b1082cd7072de920d11bf06f4ed954380456d52d7e27e4e1c2b178c596f4a543aafd64410247e47228980282387b83eab551d6e58ec1944f7d04fa2921fa3964317de7885af673ed98d39a760414f43fbe63124cdf85e8b4ec12aa1af45edd402b674106754d09e4036e43398d00bb3df0451dd45605cbbc351850515dd1bfea5d6b51c0e5e904f9534b94a80f70ede4fbfb828d7699cf28f77cf466d9ecef46f8a6b86f85ed", 0xcd, 0xffff)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r6, 0x0, 0x15, &(0x7f0000001880), 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001900)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001940)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001980)=<r9=>0x0)
sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x12000811}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xdcb22aacbb13367d}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000004}, 0x8804)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f0000001ac0)=0x5ce6caf9b775de35, 0x4)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001b80)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x200080c}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x28, r11, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x5, 0x44}}}}, ["", ""]}, 0x28}}, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001cc0)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x1c, r11, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000890}, 0x80)
accept$alg(0xffffffffffffffff, 0x0, 0x0)

257.552986ms ago: executing program 1 (id=4159):
r0 = socket(0x25, 0x1, 0x0)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x12041)
close(r0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x80000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x80000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016801800018014000a00ff03acb172310000000008e7ffffffff08001b"], 0x44}}, 0x0)

219.01888ms ago: executing program 3 (id=4160):
r0 = socket(0x10, 0x3, 0x0)
unshare(0x4000400) (async)
unshare(0x4000400)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r1)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r2, 0x409, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x4028044) (async)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r2, 0x409, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x4028044)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000180)={0x0, 'batadv_slave_1\x00', {0x1}, 0x6}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000180)={0x0, 'batadv_slave_1\x00', {0x1}, 0x6})
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x100)
socket$rds(0x15, 0x5, 0x0) (async)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x7, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24)

164.807191ms ago: executing program 4 (id=4161):
mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000, 0x800, 0x3d, 0x2}, 0x20)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/61, 0x32a000, 0x800, 0x200, 0x3}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

164.027105ms ago: executing program 2 (id=4162):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x8000)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f00000000c0)={'pimreg1\x00', 0xff})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x791000, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x791000, 0x0)

163.069559ms ago: executing program 0 (id=4163):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x43, 0x10, 0x0, 0xd, 0xffffffffffffffff}, 0x94) (async)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x43, 0x10, 0x0, 0xd, 0xffffffffffffffff}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0)
preadv(r4, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)

0s ago: executing program 4 (id=4164):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4}, &(0x7f0000000200)=0x90)
r3 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x4e24, 0x657f, @empty, 0x1}, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @empty}], 0xa4)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001f40)=@newtfilter={0x9e8, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x9b8, 0x2, [@TCA_CGROUP_EMATCHES={0x16c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x80, 0x1, 0x4}, {0xfffffff8, 0x1, 0x24, 0x3, 0x7, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xa00, 0x2, 0xb715}, {0x401, 0x2, 0x0, "9c4a"}}}, @TCF_EM_CONTAINER={0xb0, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x5f}, "43697ead2eecc268156d3e403f72313aa482021d2a60afe8d844ac43c2417d2dbdb64fe1a1530e0a66548e0652808b698db2555352aa46d41b93e1a026ca08250b122dcd9cefbfebe05f2e6d504cfcd2faefccf10f75bc2316046da990dc532e742bc23c8f796127893a70c23267661c958d31f6cc70a1bc1f587d1c3ffb91a97d0def0824a1c946ded43c8bf60b9da9a077d2bb4f08011ed50869c16bb1eb1d3841"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x7ae}, {0x0, 0x1, 0x5, 0x9, 0xe, 0x2, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x9}, {{0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x80}, {0x7, 0x2, 0x3723, 0x6, 0x5, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x4}, {0x3, 0xdc3, 0x5f, 0x2, 0x8}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7ff, 0x7, 0x5}, {{0x6, 0x1, 0x1}, {0x2, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1c0}}]}, @TCA_CGROUP_ACT={0x640, 0x1, [@m_simple={0x108, 0x14, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfffffff9, 0xa, 0x5, 0x1, 0x67}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10000, 0x8, 0x20000000, 0x7, 0x7f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xc, 0x0, 0x8, 0x1}}, @TCA_DEF_DATA={0xb, 0x3, 'flower\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'drr\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'drr\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'd\x02\x95\x8ar\x00'}]}, {0x64, 0x6, "4203aa4be3dc8e2d7b221fd3454abaacc96001181aec0c46e6ebb45b988f571a7771fd4d88be54dc444da40288460d4c4ee6f21dae5bebe9f9c9bf13c01aad43e18f4e313b1efb4c7bf8a267c5eccaf1f339c116799c008993e52d6e734e8dc1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xe8, 0xa, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0xaa, 0x6, "eb2cf56838ce0fd7d480426ac94f753c6b3f18c30b67934f02d5ee62d23aa9fe127017b0a1736f2be4eba3d0d542caf159b48aabbb0ed8c770da63d52d326dc0c052e7bf3c1de154e5c39b8687d7eedad32b99504cb0aebb7f5c7b04ff8f97f6f2793e1a931ba865ab3305d23708811089f8b31b22f749b4a42eb4020236a9fa3cb38cac69c08d099c1538d0604fc203313c2e44e16145d7dce42a971d3f8ff884f1842a2643"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x118, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x8, 0x5, 0x400, 0x8}, 0x60}}]}, {0xca, 0x6, "311e3e72a7466c9f98dba56dc53db7036db11cfc613e95c7c3070f15159ef4b5e9adf19e674dec09fa2855a06e061593aefe24c3e6d4f331e212cde61227af324c8e2ee36131f2ffa9104043793270f762634ddb388a409ae58da347019a9b0a8a910e38ed8ef73549ec8d44c968e704c81ca353f2cc9d204469225f7f8c1ef18d501ab357b2916dd628191205646e8f20022c8c8256ad25dc3007293d71b70dce1934ed93744ed52ee2556c73107c4700fe7b64ba93ec54eaa95b0754b6148920d95ff2a980"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0xb4, 0xa, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x8, 0x2, 0x1, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2f6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x34, 0x6, "274b677a8aede9645f65609a325db30c0a8304afdc19836ddab4ce95f9a287ef63e5981c273643dcd9ffb5698f127ed7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x128, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7ff8000, 0x5, 0x3, 0x10001}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x8, 0x0, 0x4, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3f2, 0x80000000, 0x5, 0x10001, 0x1}}]}, {0xab, 0x6, "c1a9fd1cf04992f28b053522a7f6a89a4dcb3d9990fe0576944e6d8878fc69060124d1a10c6a549eceecbc6cba95e7fbf83ab70fd0c0260ce74f2aa068cc167c97949b48d3ce8a14c4f1b77722c461c03460f073f85e0eedbc953d586f88fdd92d76e771089953be00bd14000b8d37cb2dc1256dc836058346d3b842bd19b99c3857982101ffd64faa08919f1b27e36c53b6719f4919b667723b564a6a51d705e70df067870b5a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_ctinfo={0xcc, 0x18, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}]}, {0x96, 0x6, "06dabf186045d6fbdac3b7d5d157c9248727b46803025524ef49601732624d83626400de2f38d47f8b9242bbdb55740462366682509a1f984f71cafd19dc6d0da0f3f92df8903c60aca964d4b32a06b1c28bc1ccf91cb32117fffe2752799feba25370a0ad22ae1a9dd2b90bf3e17a0eb178c9c814ca3dd0f24db92fb18f70303818a81db4ebf9eb63a3a506aeb3682e756b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x38, 0x0, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x54, 0x14, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000000, 0x7, 0x10000000, 0x0, 0x2}, 0xc}}]}, {0xc, 0x6, "39101c5c91e331e0"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_CGROUP_ACT={0x208, 0x1, [@m_simple={0x150, 0xa, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0x8, 0x7, 0x7}}, @TCA_DEF_DATA={0xb, 0x3, 'flower\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0xffffffffffffffff, 0x2, 0x100}}]}, {0xd7, 0x6, "15371639b33ad8deb9203282d13a84fc780b74a63bf48cbd26b4595cf7e4667845a08025c7c9f8258bbcd52de481cb1b0b41decdf09c4c7df9711e4c3ddf80e1e068ff89fe76be067132daf60d693fa834b98e06dd1f61a6e03cdbd4cfafddb939ec54d4e52b7631fe34877047d312e5a77113a79d5eac0b8a37997a3643a77344cf84173b54b076625ce47452879db3c2850bb3c03a2f7acda8584b23239b2260c37a6baab414fd3473c34e9063b76488d2856cbc6bd73a1cbf3065eb6a2a7174f97f127b2ed312fd6518631ec6306ce2ee5e"}, {0xc}, {0xc, 0x8, {0x5}}}}, @m_nat={0xb4, 0x1, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x6, 0x20000000, 0x6, 0x2}, @remote, @private=0xa010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x6, 0x8, 0x8}, @multicast2, @private=0xa010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2, 0xffffffffffffffff, 0x5}, @rand_addr=0x64010100, @remote, 0xff, 0x1}}]}, {0x12, 0x6, "d8d27a0a0a5c44148359799400b1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x9e8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newneigh={0x4c, 0x1c, 0x100, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x0, r7, 0x0, 0x5, 0x7}, [@NDA_FLAGS_EXT={0x8}, @NDA_VNI={0x8}, @NDA_VNI={0x8, 0x7, 0x3ff}, @NDA_SRC_VNI={0x8}, @NDA_DST_IPV4={0x8, 0x1, @private=0xa010101}, @NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004004)

kernel console output (not intermixed with test programs):

.643618][T12710] netlink: 'syz.0.2051': attribute type 4 has an invalid length.
[  172.653529][T12708] netlink: 'syz.2.2050': attribute type 2 has an invalid length.
[  172.662026][T12708] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2050'.
[  172.825760][T12729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.897142][T12735] openvswitch: netlink: Duplicate or invalid key (type 0).
[  172.928938][T12724] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2055'.
[  172.948355][T12735] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.022944][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'.
[  173.093928][T12751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.122208][T12755] veth0_to_bridge: entered promiscuous mode
[  173.136234][T12755] veth0_to_bridge: left promiscuous mode
[  173.169359][T12761] openvswitch: netlink: IP tunnel dst address not specified
[  173.307641][T12770] netlink: 'syz.2.2067': attribute type 1 has an invalid length.
[  173.765046][   T30] audit: type=1800 audit(1756284021.698:6): pid=12811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2077" name="memory.events" dev="tmpfs" ino=1969 res=0 errno=0
[  174.420643][T12831] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.463165][T12831] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.492800][T12831] batadv_slave_1 (unregistering): left promiscuous mode
[  174.625369][T12850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.646248][T12850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.728121][T12850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.744141][T12850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.835522][T12850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.846929][T12850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.882708][T10626] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  174.921725][T12850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.934184][T12850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.041361][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.066041][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.083714][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.094040][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.104014][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.116875][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.129635][T12875] : entered promiscuous mode
[  175.141740][T12872] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  175.142935][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.179719][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.226475][T12889] netlink: 'syz.1.2100': attribute type 1 has an invalid length.
[  175.384179][T12903] hsr_slave_1 (unregistering): left promiscuous mode
[  175.478443][T12923] netlink: 'syz.4.2110': attribute type 21 has an invalid length.
[  175.632260][T12932] netlink: 'syz.2.2111': attribute type 1 has an invalid length.
[  175.654128][T12932] 8021q: adding VLAN 0 to HW filter on device bond6
[  175.669700][T12932] bond6: (slave ip6gretap1): making interface the new active one
[  175.678596][T12932] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link
[  175.736962][T12932] ipvlan1: left promiscuous mode
[  175.742267][T12932] ipvlan1: left allmulticast mode
[  175.747462][T12932] veth0_vlan: left allmulticast mode
[  176.122624][T12941] vlan1: entered allmulticast mode
[  176.137146][T12941] veth0_vlan: entered allmulticast mode
[  176.289205][T12951] __nla_validate_parse: 17 callbacks suppressed
[  176.289226][T12951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2118'.
[  176.645396][T12988] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0
[  176.964641][T13019] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.074032][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2138'.
[  177.115683][T13034] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2140'.
[  177.154009][T13034] openvswitch: netlink: Flow key attr not present in new flow.
[  177.404034][T13058] openvswitch: netlink: Key type 29 is not supported
[  177.452666][T13058] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.460092][T13058] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.474439][T13067] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2151'.
[  177.488891][T13058] batman_adv: batadv0: Interface deactivated: dummy0
[  177.506579][T13058] batman_adv: batadv0: Removing interface: dummy0
[  177.525369][T13070] netlink: 'syz.3.2152': attribute type 83 has an invalid length.
[  177.626507][T13067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.646380][T13067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.675354][T13067] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  177.689684][T13067] bond0 (unregistering): (slave bond2): Releasing backup interface
[  177.705998][T13067] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  177.718652][T13067] bond0 (unregistering): Released all slaves
[  177.762525][T13086] netlink: 'syz.3.2157': attribute type 23 has an invalid length.
[  177.949677][T13100] netlink: 'syz.3.2165': attribute type 1 has an invalid length.
[  177.957962][T13100] netlink: 'syz.3.2165': attribute type 1 has an invalid length.
[  178.027190][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2168'.
[  178.317867][T13131] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2173'.
[  178.329262][T13131] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2173'.
[  178.338903][T13131] netlink: 'syz.2.2173': attribute type 6 has an invalid length.
[  178.346753][T13131] netlink: 'syz.2.2173': attribute type 5 has an invalid length.
[  178.354993][T13131] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2173'.
[  178.447129][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2175'.
[  178.484785][T13146] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  178.651777][T13162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.905164][T13173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.913427][T13177] syzkaller1: entered promiscuous mode
[  178.919075][T13177] syzkaller1: entered allmulticast mode
[  178.929960][T13173] syzkaller0: entered promiscuous mode
[  178.936641][T13173] syzkaller0: entered allmulticast mode
[  178.974430][T13182] Set syz1 is full, maxelem 1038 reached
[  178.984146][T13173] tipc: Resetting bearer <eth:syzkaller0>
[  178.997383][T13171] tipc: Resetting bearer <eth:syzkaller0>
[  179.003334][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  179.003609][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  179.032483][T13171] tipc: Disabling bearer <eth:syzkaller0>
[  179.233602][T13200] lo: entered promiscuous mode
[  179.247427][T13200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.265592][T13204] (unnamed net_device) (uninitialized): option mode: invalid value (7)
[  179.356866][T13214] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2198'.
[  179.607104][T13220] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  179.625732][T13227] netlink: 'syz.4.2203': attribute type 1 has an invalid length.
[  179.770031][T13237] lo speed is unknown, defaulting to 1000
[  179.782267][T13240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.803386][T13240] syzkaller0: entered promiscuous mode
[  179.808994][T13240] syzkaller0: entered allmulticast mode
[  179.827159][T13240] tipc: Resetting bearer <eth:syzkaller0>
[  180.072491][T13268] (unnamed net_device) (uninitialized): option mode: invalid value (133)
[  180.184998][T13276] syzkaller0: entered promiscuous mode
[  180.194147][T13276] syzkaller0: entered allmulticast mode
[  180.574343][T13236] tipc: Resetting bearer <eth:syzkaller0>
[  180.608972][T13236] tipc: Disabling bearer <eth:syzkaller0>
[  180.959230][T13332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.308526][T13364] pim6reg1: entered promiscuous mode
[  181.320487][T13364] pim6reg1: entered allmulticast mode
[  181.417736][T13374] openvswitch: netlink: Message has 4 unknown bytes.
[  181.560051][T13383] __nla_validate_parse: 5 callbacks suppressed
[  181.560073][T13383] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2249'.
[  181.815386][T13417] validate_nla: 2 callbacks suppressed
[  181.815408][T13417] netlink: 'syz.3.2261': attribute type 39 has an invalid length.
[  181.985119][T13427] 8021q: adding VLAN 0 to HW filter on device team0
[  181.992890][T13427] team0: Cannot enslave team device to itself
[  182.011532][T13426] netlink: 'syz.0.2264': attribute type 1 has an invalid length.
[  182.115655][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2267'.
[  183.106780][T13480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2277'.
[  183.167130][T13486] netlink: 'syz.0.2279': attribute type 9 has an invalid length.
[  183.228807][T13480] vlan2: left allmulticast mode
[  183.250523][T13492] netlink: 'syz.0.2279': attribute type 9 has an invalid length.
[  183.260563][T13480] veth0_to_bond: left allmulticast mode
[  183.310995][T13480] bridge8: left allmulticast mode
[  183.317011][T13480] macsec2: left allmulticast mode
[  183.388995][T13495] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.2280'.
[  183.412230][T13499] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2281'.
[  183.567587][T13510] sctp: [Deprecated]: syz.2.2284 (pid 13510) Use of int in maxseg socket option.
[  183.567587][T13510] Use struct sctp_assoc_value instead
[  183.758180][T13532] veth0: entered promiscuous mode
[  183.773000][T13531] veth0: left promiscuous mode
[  183.807281][T13534] netlink: 'syz.0.2291': attribute type 1 has an invalid length.
[  183.835693][T13536] sctp: [Deprecated]: syz.2.2292 (pid 13536) Use of struct sctp_assoc_value in delayed_ack socket option.
[  183.835693][T13536] Use struct sctp_sack_info instead
[  183.847571][T13534] bond10: entered promiscuous mode
[  183.859898][T13534] 8021q: adding VLAN 0 to HW filter on device bond10
[  183.895907][T13538] 8021q: adding VLAN 0 to HW filter on device bond11
[  183.904577][T13538] bond10: (slave bond11): making interface the new active one
[  183.915327][T13538] bond11: entered promiscuous mode
[  183.922606][T13538] bond10: (slave bond11): Enslaving as an active interface with an up link
[  183.931461][T13536] sctp: [Deprecated]: syz.2.2292 (pid 13536) Use of struct sctp_assoc_value in delayed_ack socket option.
[  183.931461][T13536] Use struct sctp_sack_info instead
[  184.192331][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2299'.
[  184.219153][T13562] xfrm1: entered promiscuous mode
[  184.251266][T13562] xfrm1: entered allmulticast mode
[  184.271403][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2299'.
[  184.471671][T13596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2310'.
[  184.508688][T13596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2310'.
[  184.572619][T13604] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2313'.
[  184.593471][T13605] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  184.599197][T13609] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  184.622462][T13604] netlink: 'syz.4.2313': attribute type 4 has an invalid length.
[  184.787908][T13630] netlink: 'syz.3.2316': attribute type 11 has an invalid length.
[  184.915257][T13650] netlink: 'syz.0.2325': attribute type 2 has an invalid length.
[  185.252005][T13684] ip6gretap0: entered promiscuous mode
[  185.257736][T13684] macsec4: entered promiscuous mode
[  185.266642][T13684] ip6gretap0: left promiscuous mode
[  185.452536][T13697] netlink: 'syz.2.2342': attribute type 7 has an invalid length.
[  185.486090][T13697] bond7 (unregistering): Released all slaves
[  185.721928][T13718] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  185.804364][T13719] netlink: 'syz.2.2347': attribute type 11 has an invalid length.
[  185.918026][T13731] netlink: 'syz.2.2351': attribute type 21 has an invalid length.
[  185.941213][T13732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.109747][T13743] lo speed is unknown, defaulting to 1000
[  186.238960][T13759] openvswitch: netlink: Key type 321 is out of range max 32
[  186.643919][T13801] __nla_validate_parse: 13 callbacks suppressed
[  186.643942][T13801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2374'.
[  186.695085][T13799] pimreg: entered allmulticast mode
[  186.747181][T13810] sctp: [Deprecated]: syz.0.2377 (pid 13810) Use of int in max_burst socket option deprecated.
[  186.747181][T13810] Use struct sctp_assoc_value instead
[  186.978585][T13831] validate_nla: 1 callbacks suppressed
[  186.978609][T13831] netlink: 'syz.4.2380': attribute type 3 has an invalid length.
[  187.173529][T13842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2381'.
[  187.360075][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2383'.
[  187.449268][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2386'.
[  187.589987][T13863] syzkaller0: entered allmulticast mode
[  187.620978][T13872] lo speed is unknown, defaulting to 1000
[  187.863521][T13882] bond3: (slave bond4): Releasing backup interface
[  187.880939][ T5930] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  187.896253][T13897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2395'.
[  187.912748][T13882] bond5: (slave gretap2): Releasing active interface
[  187.960394][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  187.991649][ T5873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  188.005211][T13896] netlink: 'syz.1.2395': attribute type 1 has an invalid length.
[  188.060744][T13896] netlink: 'syz.1.2395': attribute type 1 has an invalid length.
[  188.159756][T13904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.184720][T13904] syzkaller0: entered promiscuous mode
[  188.194771][T13904] syzkaller0: entered allmulticast mode
[  188.216517][T13911] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2400'.
[  188.248123][T13904] tipc: Resetting bearer <eth:syzkaller0>
[  188.265582][T13920] delete_channel: no stack
[  188.272610][T13920] netlink: 'syz.0.2402': attribute type 4 has an invalid length.
[  188.288849][T13902] tipc: Resetting bearer <eth:syzkaller0>
[  188.299279][T13902] tipc: Disabling bearer <eth:syzkaller0>
[  188.346489][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2404'.
[  188.353300][T13924] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2403'.
[  188.366842][T13924] netlink: 'syz.0.2403': attribute type 1 has an invalid length.
[  188.375808][T13924] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2403'.
[  188.386863][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2403'.
[  188.467786][T13929] netlink: 'syz.3.2406': attribute type 3 has an invalid length.
[  188.744014][T13957] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  188.913349][T13969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.927346][T13967] netlink: 'syz.4.2418': attribute type 9 has an invalid length.
[  188.928011][T13969] syzkaller0: entered promiscuous mode
[  188.959680][T13969] syzkaller0: entered allmulticast mode
[  188.966984][T13967] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  188.995563][T13967] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  189.010011][T13969] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  189.015108][T13978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.042018][T13968] tipc: Resetting bearer <eth:syzkaller0>
[  189.085787][T13968] tipc: Disabling bearer <eth:syzkaller0>
[  189.209093][T13981] netlink: 'syz.1.2423': attribute type 9 has an invalid length.
[  189.927969][T14039] syzkaller0: entered promiscuous mode
[  189.942475][T14039] syzkaller0: entered allmulticast mode
[  190.128369][T14061] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  191.296361][T14104] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  191.463762][T14111] netlink: 'syz.4.2464': attribute type 12 has an invalid length.
[  191.632808][T14121] netlink: 'syz.4.2469': attribute type 5 has an invalid length.
[  191.648259][T14123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.694066][T14122] team0: Port device team_slave_1 removed
[  191.784870][T14123] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  191.809304][T14123] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  191.822045][T14123] gretap3: entered promiscuous mode
[  191.840302][T14123] gretap3: entered allmulticast mode
[  191.847665][T14135] __nla_validate_parse: 15 callbacks suppressed
[  191.847686][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2475'.
[  191.854975][T14128] syzkaller1: entered promiscuous mode
[  191.868883][T14128] syzkaller1: entered allmulticast mode
[  191.877003][T14136] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  191.923111][T14140] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2476'.
[  192.044530][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2478'.
[  192.201074][ T5876] Bluetooth: hci0: command tx timeout
[  192.276224][T14173] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2487'.
[  192.310088][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2487'.
[  192.321987][T14180] netlink: 'syz.0.2490': attribute type 10 has an invalid length.
[  192.321987][T14179] netlink: 'syz.0.2490': attribute type 10 has an invalid length.
[  192.322962][T14173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2487'.
[  192.354043][T14180] bridge_slave_1: left allmulticast mode
[  192.383745][T14180] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  192.603141][T14199] netlink: 'syz.2.2495': attribute type 1 has an invalid length.
[  192.613238][T14199] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2495'.
[  192.849198][T14226] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20003
[  192.918625][T14230] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  192.936663][T14232] netlink: 'syz.1.2507': attribute type 4 has an invalid length.
[  192.955387][T14232] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2507'.
[  192.987049][T14232] netlink: 'syz.1.2507': attribute type 1 has an invalid length.
[  192.995182][T14232] netlink: 'syz.1.2507': attribute type 4 has an invalid length.
[  193.010322][T14232] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2507'.
[  193.059751][T14242] netlink: 'syz.0.2511': attribute type 39 has an invalid length.
[  193.168349][T14251] ieee802154 phy0 wpan0: encryption failed: -22
[  193.268315][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2515'.
[  193.304316][T14260] nbd: must specify at least one socket
[  193.818966][T14311] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20000
[  194.013407][T14328] netlink: 'syz.4.2533': attribute type 7 has an invalid length.
[  194.050045][T14331] IPVS: set_ctl: invalid protocol: 98 172.20.20.63:20001
[  194.388548][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.414820][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.439692][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.482031][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.503582][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.509855][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.522597][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.540651][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.550757][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.565015][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.580690][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.602674][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.625664][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.634841][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.641285][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.647878][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.655890][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.669216][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.691200][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.709445][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.727794][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.735023][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.742423][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.748808][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.755541][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.786386][T14396] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  194.793780][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.822378][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.834457][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.841234][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.847670][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.855237][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.862118][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.868442][T14365] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  194.957773][T14405] netlink: 'syz.1.2557': attribute type 7 has an invalid length.
[  195.283342][T14432] ieee802154 phy0 wpan0: encryption failed: -22
[  195.289746][T14432] ieee802154 phy0 wpan0: encryption failed: -22
[  195.573436][T14463] syzkaller1: entered promiscuous mode
[  195.579108][T14463] syzkaller1: entered allmulticast mode
[  195.896938][T14488] veth13: entered allmulticast mode
[  196.003322][T14504] netlink: 'syz.4.2588': attribute type 1 has an invalid length.
[  196.097699][T14499] gretap1: entered promiscuous mode
[  196.218511][T14514] veth0: entered promiscuous mode
[  196.310077][T14521] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032
[  196.424751][T14529] syzkaller1: entered allmulticast mode
[  196.440724][ T5184] Bluetooth: hci0: command tx timeout
[  196.446212][ T5184] Bluetooth: hci2: command 0x0406 tx timeout
[  196.452652][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  196.458778][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  196.697632][T14544] sctp: [Deprecated]: syz.1.2603 (pid 14544) Use of int in maxseg socket option.
[  196.697632][T14544] Use struct sctp_assoc_value instead
[  196.995983][T14571] __nla_validate_parse: 20 callbacks suppressed
[  196.996004][T14571] netlink: 696 bytes leftover after parsing attributes in process `syz.2.2611'.
[  197.084137][T14571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  197.100071][T14578] IPv6: NLM_F_CREATE should be specified when creating new route
[  197.194804][   T30] audit: type=1800 audit(1756284045.128:7): pid=14587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2614" name="memory.events" dev="tmpfs" ino=2840 res=0 errno=0
[  197.321531][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2616'.
[  197.783852][T14624] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.937383][T11529] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.961067][T11529] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.062593][T11529] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[  198.082617][T11529] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.109238][T11529] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.119829][T11529] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[  198.147904][T11529] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.180065][T11529] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.209598][T11529] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[  198.248694][T11529] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.268921][T11529] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.284086][T11529] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[  198.296259][T14665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2635'.
[  198.306642][T14665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.346632][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2638'.
[  198.473687][T14685] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2642'.
[  198.490003][T14688] validate_nla: 2 callbacks suppressed
[  198.490025][T14688] netlink: 'syz.0.2643': attribute type 25 has an invalid length.
[  198.633301][T14694] lo speed is unknown, defaulting to 1000
[  198.763941][T14700] delete_channel: no stack
[  198.872774][T14707] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  199.044340][T14705] "syz.3.2650" (14705) uses obsolete ecb(arc4) skcipher
[  199.247853][T14724] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2655'.
[  199.270419][T14724] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2655'.
[  199.279716][T14724] netlink: 'syz.4.2655': attribute type 5 has an invalid length.
[  199.312914][T14724] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2655'.
[  199.370621][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2657'.
[  199.486214][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  199.496163][T14732] macvtap1: entered promiscuous mode
[  199.510960][T14732] vlan0: entered promiscuous mode
[  199.520823][T14732] macvtap1: entered allmulticast mode
[  199.526254][T14732] vlan0: entered allmulticast mode
[  199.904675][T14785] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3305233861/3305233863
[  199.961009][T14785] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3305233861/3305233863
[  200.305307][T14817] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2679'.
[  200.444548][T14828] netlink: 'syz.4.2682': attribute type 6 has an invalid length.
[  200.458826][T14828] netlink: 'syz.4.2682': attribute type 4 has an invalid length.
[  200.468683][T14829] netlink: 'syz.4.2682': attribute type 4 has an invalid length.
[  200.706437][T14845] netlink: 'syz.1.2687': attribute type 1 has an invalid length.
[  200.724628][T14846] netlink: 'syz.1.2687': attribute type 1 has an invalid length.
[  200.790551][T14851] lo speed is unknown, defaulting to 1000
[  200.830610][T14846] veth15: entered promiscuous mode
[  200.893058][T14863] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  200.908938][T14861] IPVS: stopping backup sync thread 14863 ...
[  201.028987][T14880] netlink: 'syz.1.2699': attribute type 1 has an invalid length.
[  201.048019][T14882] netlink: 'syz.1.2699': attribute type 1 has an invalid length.
[  201.369773][T14906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.728663][T14929] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  201.813151][T14939] netlink: 'syz.0.2717': attribute type 1 has an invalid length.
[  202.045172][T14958] sctp: [Deprecated]: syz.4.2722 (pid 14958) Use of struct sctp_assoc_value in delayed_ack socket option.
[  202.045172][T14958] Use struct sctp_sack_info instead
[  202.137609][T14964] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  202.174815][T14971] __nla_validate_parse: 11 callbacks suppressed
[  202.174839][T14971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2725'.
[  202.299206][T14983] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2729'.
[  203.274278][T15021] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96
[  203.345258][T15024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2742'.
[  203.624361][   T24] IPVS: starting estimator thread 0...
[  203.674056][T15069] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2756'.
[  203.683799][T15069] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2756'.
[  203.713652][T15062] IPVS: using max 35 ests per chain, 84000 per kthread
[  203.919114][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2761'.
[  204.154923][T15087] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2763'.
[  204.268892][T15094] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2765'.
[  204.279936][T15093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2765'.
[  204.302196][T15098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.401758][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2767'.
[  204.459943][T15114] batadv_slave_0: entered promiscuous mode
[  204.547237][T15118] batadv_slave_0: left promiscuous mode
[  204.623948][T15132] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  204.654342][T15134] openvswitch: netlink: Flow actions attr not present in new flow.
[  204.782570][T15134] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  204.795556][T15134] validate_nla: 2 callbacks suppressed
[  204.795579][T15134] netlink: 'syz.2.2777': attribute type 26 has an invalid length.
[  204.866522][T15150] 8021q: adding VLAN 0 to HW filter on device bond9
[  204.900505][T15150] 8021q: adding VLAN 0 to HW filter on device bond9
[  204.908057][T15150] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  204.922454][T15150] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  205.006518][T15168] netlink: 'syz.2.2786': attribute type 2 has an invalid length.
[  205.027369][T15170] bridge: RTM_NEWNEIGH with invalid ether address
[  205.075289][T15175] netlink: 'syz.3.2791': attribute type 1 has an invalid length.
[  205.131624][T15180] netlink: 'syz.3.2793': attribute type 11 has an invalid length.
[  205.229079][T15187] netlink: 'syz.0.2796': attribute type 1 has an invalid length.
[  205.240709][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  205.448369][T10625] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  205.457471][T15200] can: request_module (can-proto-4) failed.
[  205.479578][T10625] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  205.488910][T10625] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  205.498256][T10625] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  205.587337][T15214] veth15: entered allmulticast mode
[  205.833880][T15229] tunl0: left allmulticast mode
[  205.842621][T15229] netlink: 'syz.2.2808': attribute type 3 has an invalid length.
[  205.976887][T15239] netlink: 'syz.2.2811': attribute type 14 has an invalid length.
[  206.027058][T15239] netlink: 'syz.2.2811': attribute type 14 has an invalid length.
[  206.327291][T15273] netlink: 'syz.3.2823': attribute type 5 has an invalid length.
[  206.608604][T15294] netlink: 'syz.3.2827': attribute type 5 has an invalid length.
[  206.683351][T15296] IPVS: Unknown mcast interface: nicvf0
[  206.814780][T15303] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20002
[  206.885343][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  206.896519][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  206.906383][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  206.915643][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  206.932688][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  206.958141][T15314] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  206.965073][T15315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.006497][T15315] syzkaller0: entered promiscuous mode
[  207.024215][T15315] syzkaller0: entered allmulticast mode
[  207.057177][T15320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.076022][T15326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.081612][T15306] lo speed is unknown, defaulting to 1000
[  207.153415][T15315] tipc: Resetting bearer <eth:syzkaller0>
[  207.194818][T15335] __nla_validate_parse: 25 callbacks suppressed
[  207.194840][T15335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2841'.
[  207.389531][T15306] chnl_net:caif_netlink_parms(): no params data found
[  207.408693][T15349] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2845'.
[  207.437922][T15349] NCSI netlink: No device for ifindex 458760
[  207.481633][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'.
[  207.536406][T15306] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.544643][T15306] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.553145][T15306] bridge_slave_0: entered allmulticast mode
[  207.561336][T15306] bridge_slave_0: entered promiscuous mode
[  207.569267][T15306] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.583261][T15306] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.592389][T15306] bridge_slave_1: entered allmulticast mode
[  207.599588][T15306] bridge_slave_1: entered promiscuous mode
[  207.744628][T15308] tipc: Resetting bearer <eth:syzkaller0>
[  207.771772][T15308] tipc: Disabling bearer <eth:syzkaller0>
[  207.803988][T15306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.834023][T15306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.887478][T15306] team0: Port device team_slave_0 added
[  207.899010][T15306] team0: Port device team_slave_1 added
[  207.942444][T15306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.948224][T15395] Bluetooth: MGMT ver 1.23
[  207.965921][T15306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.035729][T15306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.072580][T15306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.081750][T15306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.111760][T15306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.151519][T15306] hsr_slave_0: entered promiscuous mode
[  208.158002][T15306] hsr_slave_1: entered promiscuous mode
[  208.237786][T15306] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.283637][T15306] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.334584][T15306] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.374492][T15306] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.730613][T15306] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  208.765711][T15306] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  208.814318][T15306] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  208.832307][T15417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2862'.
[  208.848191][T15306] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  208.919662][T15417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  209.003289][ T5860] Bluetooth: hci0: command tx timeout
[  209.045423][T15444] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2868'.
[  209.131943][T15306] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.168805][T15306] 8021q: adding VLAN 0 to HW filter on device team0
[  209.196241][T10611] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.203436][T10611] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.228390][T10607] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.235633][T10607] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.284760][T15457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2874'.
[  209.352756][T15306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  209.391902][T15463] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2875'.
[  209.679454][T15471] vlan0 (unregistering): left allmulticast mode
[  209.696639][T15471] vlan0 (unregistering): left promiscuous mode
[  209.774238][T15471] vlan1 (unregistering): left allmulticast mode
[  209.782090][T15471] veth0_vlan (unregistering): left allmulticast mode
[  209.813359][T15488] ip6gretap2: entered promiscuous mode
[  209.821904][T15487] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  209.916042][T15505] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  209.967992][T15505] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  210.112192][T15306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.176711][T15306] veth0_vlan: entered promiscuous mode
[  210.188760][T15306] veth1_vlan: entered promiscuous mode
[  210.247169][T15306] veth0_macvtap: entered promiscuous mode
[  210.273775][T15306] veth1_macvtap: entered promiscuous mode
[  210.307321][T15306] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.327098][T15306] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.349352][T10607] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.367748][T10607] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.389802][T10607] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.416804][T10607] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.456384][T15528] validate_nla: 7 callbacks suppressed
[  210.456403][T15528] netlink: 'syz.3.2892': attribute type 1 has an invalid length.
[  210.471623][T10623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.474301][T15528] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2892'.
[  210.483963][T15531] syzkaller1: entered promiscuous mode
[  210.492673][T15527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2892'.
[  210.497373][T10623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.512451][T15531] syzkaller1: entered allmulticast mode
[  210.572560][T10624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.585029][T10624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.636693][T15537] netlink: 'syz.3.2894': attribute type 2 has an invalid length.
[  210.814511][T15554] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2899'.
[  210.879736][T15560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.082833][ T5860] Bluetooth: hci0: command tx timeout
[  211.149011][T15576] bridge1: the hash_elasticity option has been deprecated and is always 16
[  211.521015][T15612] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  211.590934][T15616] netlink: 'syz.3.2917': attribute type 4 has an invalid length.
[  211.664297][T15622] netlink: 'syz.3.2917': attribute type 4 has an invalid length.
[  211.882572][T15633] netlink: 'syz.1.2923': attribute type 4 has an invalid length.
[  212.255748][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  212.265190][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  212.276550][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  212.287022][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  212.297472][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  212.344738][T10624] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.366019][T10624] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.413275][T15655] lo speed is unknown, defaulting to 1000
[  212.440092][T10624] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.456950][T10624] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.537894][T10624] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.550094][T10624] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.623171][T10624] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.634726][T10624] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.717480][T15688] __nla_validate_parse: 8 callbacks suppressed
[  212.717499][T15688] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2937'.
[  212.739900][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2937'.
[  212.789869][T15693] netlink: 'syz.1.2935': attribute type 1 has an invalid length.
[  212.816652][T15688] veth15: entered allmulticast mode
[  212.826337][T10624] veth0_to_bond: left allmulticast mode
[  212.834708][T10624] veth0_to_bond: left promiscuous mode
[  212.842443][T10624] bridge1: port 2(veth0_to_bond) entered disabled state
[  212.863880][T10624] veth3: left allmulticast mode
[  212.868797][T10624] veth3: left promiscuous mode
[  212.874476][T10624] bridge1: port 1(veth3) entered disabled state
[  212.949744][T10624] bond6 (unregistering): (slave ip6gretap1): Releasing active interface
[  213.170531][ T5865] Bluetooth: hci0: command tx timeout
[  213.383917][T10624] bond1 (unregistering): Released all slaves
[  213.395192][T10624] bond2 (unregistering): Released all slaves
[  213.406634][T10624] bond3 (unregistering): Released all slaves
[  213.417342][T10624] bond4 (unregistering): Released all slaves
[  213.433682][T10624] bond0 (unregistering): (slave bond5): Releasing backup interface
[  213.443189][T10624] bond5 (unregistering): left promiscuous mode
[  213.449810][T10624] bond5 (unregistering): left allmulticast mode
[  213.459778][T10624] bond0 (unregistering): Released all slaves
[  213.472648][T10624] bond5 (unregistering): Released all slaves
[  213.485093][T10624] bond6 (unregistering): Released all slaves
[  213.613814][T15655] chnl_net:caif_netlink_parms(): no params data found
[  213.630145][T10624] : left promiscuous mode
[  213.664795][T15714] netlink: 'syz.0.2944': attribute type 1 has an invalid length.
[  213.686312][T15714] netlink: 'syz.0.2944': attribute type 1 has an invalid length.
[  213.695069][T15714] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2944'.
[  213.706790][T15714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2944'.
[  213.717123][T15714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2944'.
[  213.726420][T10624] tipc: Disabling bearer <udp:syz2>
[  213.726567][T10624] tipc: Left network mode
[  213.785707][T15714] bridge0: port 1(vlan1) entered blocking state
[  213.796191][T15714] bridge0: port 1(vlan1) entered disabled state
[  213.804070][T15714] vlan1: entered allmulticast mode
[  213.815491][T15714] vlan1: left allmulticast mode
[  213.957223][T15734] bridge_slave_0: default FDB implementation only supports local addresses
[  213.972563][T15655] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.997015][T15655] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.005173][T15655] bridge_slave_0: entered allmulticast mode
[  214.013696][T15655] bridge_slave_0: entered promiscuous mode
[  214.022691][T15655] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.030047][T15655] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.038021][T15655] bridge_slave_1: entered allmulticast mode
[  214.046446][T15655] bridge_slave_1: entered promiscuous mode
[  214.205396][T10624] veth1_macvtap: left promiscuous mode
[  214.222273][T10624] veth0_macvtap: left promiscuous mode
[  214.227957][T10624] veth1_vlan: left promiscuous mode
[  214.233839][T10624] veth0_vlan: left promiscuous mode
[  214.279350][T15758] Set syz1 is full, maxelem 1038 reached
[  214.286555][T15758] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  214.310591][T10624] pim6reg527 (unregistering): left allmulticast mode
[  214.361458][ T5865] Bluetooth: hci3: command tx timeout
[  214.437137][T10624] team0 (unregistering): Port device team_slave_1 removed
[  214.449223][T10624] team0 (unregistering): Port device team_slave_0 removed
[  214.528252][T15741] lo speed is unknown, defaulting to 1000
[  214.531393][T15655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.544060][T15756] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2
[  214.563233][T15756] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€
[  214.581403][T15655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.658857][T15655] team0: Port device team_slave_0 added
[  214.688628][T15769] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2959'.
[  214.714023][T15655] team0: Port device team_slave_1 added
[  214.886696][T15655] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.906703][T15655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.937447][T15655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.956117][T15655] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.967022][T15655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.994989][T15655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.016978][T15780] netlink: 'syz.3.2963': attribute type 1 has an invalid length.
[  215.045587][T10624] IPVS: stop unused estimator thread 0...
[  215.079933][T15655] hsr_slave_0: entered promiscuous mode
[  215.101033][T15655] hsr_slave_1: entered promiscuous mode
[  215.107326][T15655] debugfs: 'hsr0' already exists in 'hsr'
[  215.114301][T15655] Cannot create hsr debugfs directory
[  215.242851][ T5865] Bluetooth: hci0: command tx timeout
[  215.428984][T15813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2973'.
[  215.454477][T15813] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  215.469199][T15813] gretap1: entered promiscuous mode
[  215.475846][T15813] gretap1: entered allmulticast mode
[  215.599858][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2978'.
[  215.618327][T15830] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2978'.
[  215.635118][T15836] lo speed is unknown, defaulting to 1000
[  215.648255][T15836] lo speed is unknown, defaulting to 1000
[  215.667198][T15836] lo speed is unknown, defaulting to 1000
[  215.719651][T15655] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  215.739827][T15655] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  215.762409][T15839] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2981'.
[  215.874857][T15849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.918270][T15655] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  215.944042][T15836] infiniband syz0: set active
[  215.945916][T15655] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  215.955567][T15836] infiniband syz0: added lo
[  216.003944][   T24] lo speed is unknown, defaulting to 1000
[  216.034398][T15836] RDS/IB: syz0: added
[  216.038590][T15836] smc: adding ib device syz0 with port count 1
[  216.047523][T15836] smc:    ib device syz0 port 1 has pnetid 
[  216.059158][ T1219] lo speed is unknown, defaulting to 1000
[  216.075592][T15836] lo speed is unknown, defaulting to 1000
[  216.162294][T15655] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.195535][T15655] 8021q: adding VLAN 0 to HW filter on device team0
[  216.236481][T11529] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.243689][T11529] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.294505][T11529] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.301830][T11529] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.444176][ T5865] Bluetooth: hci3: command tx timeout
[  216.461759][T15836] lo speed is unknown, defaulting to 1000
[  216.607803][T15836] lo speed is unknown, defaulting to 1000
[  216.738347][T15908] openvswitch: netlink: Unknown nsh attribute 0
[  216.762144][T15908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.877768][T15655] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.939475][T15836] lo speed is unknown, defaulting to 1000
[  216.954468][T15655] veth0_vlan: entered promiscuous mode
[  216.987370][T15655] veth1_vlan: entered promiscuous mode
[  216.989847][T15921] netlink: 'syz.4.3004': attribute type 6 has an invalid length.
[  217.038228][T15655] veth0_macvtap: entered promiscuous mode
[  217.054849][T15655] veth1_macvtap: entered promiscuous mode
[  217.086776][T15655] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.136491][T15655] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.168324][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.187712][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.210926][T11529] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.223483][T11529] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.254561][T15836] lo speed is unknown, defaulting to 1000
[  217.329948][T11529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.355134][T11529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.384928][T15944] netlink: 'syz.1.3011': attribute type 1 has an invalid length.
[  217.399548][T11529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.417487][T11529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.426201][T15944] netlink: 'syz.1.3011': attribute type 1 has an invalid length.
[  217.535851][T15836] lo speed is unknown, defaulting to 1000
[  217.663929][T15960] netlink: 'syz.2.3015': attribute type 1 has an invalid length.
[  217.822929][T15975] lo speed is unknown, defaulting to 1000
[  217.828929][T15975] lo speed is unknown, defaulting to 1000
[  217.836066][T15975] lo speed is unknown, defaulting to 1000
[  217.853843][T15975] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  217.875917][T15975] lo speed is unknown, defaulting to 1000
[  217.884430][T15975] lo speed is unknown, defaulting to 1000
[  217.892889][T15975] lo speed is unknown, defaulting to 1000
[  217.899724][T15975] lo speed is unknown, defaulting to 1000
[  217.907523][T15975] lo speed is unknown, defaulting to 1000
[  217.915473][T15975] lo speed is unknown, defaulting to 1000
[  218.125581][T15984] lo speed is unknown, defaulting to 1000
[  218.271980][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  218.279303][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  218.289942][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  218.298917][ T5860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  218.307818][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  218.409939][T15984] lo speed is unknown, defaulting to 1000
[  218.411433][T15988] lo speed is unknown, defaulting to 1000
[  218.502318][T15993] __nla_validate_parse: 13 callbacks suppressed
[  218.502343][T15993] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3024'.
[  218.521949][ T5865] Bluetooth: hci3: command tx timeout
[  218.753949][T15988] lo speed is unknown, defaulting to 1000
[  218.761882][T16012] netlink: 'syz.1.3031': attribute type 1 has an invalid length.
[  218.825802][T16012] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  218.838282][T16012] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  218.853233][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'.
[  218.868865][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'.
[  218.974623][T16020] gretap2: entered promiscuous mode
[  218.999817][T16020] bond1: (slave gretap2): making interface the new active one
[  219.015476][T16020] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  219.145034][T16023] macvlan2: entered promiscuous mode
[  219.160981][T16023] macvlan2: entered allmulticast mode
[  219.169226][T16023] bond1: entered promiscuous mode
[  219.179420][T16023] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  219.193363][T16023] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  219.197624][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3036'.
[  219.205892][T16034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3036'.
[  219.225017][T16031] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3035'.
[  219.235201][T16023] bond1: left promiscuous mode
[  219.276022][T16035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.293927][T16030] syzkaller0: entered promiscuous mode
[  219.317278][T16030] syzkaller0: entered allmulticast mode
[  219.378061][T16035] tipc: Resetting bearer <eth:syzkaller0>
[  219.395062][T16044] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3039'.
[  219.407201][T16044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3039'.
[  219.427091][T16029] tipc: Resetting bearer <eth:syzkaller0>
[  219.458703][T16029] tipc: Disabling bearer <eth:syzkaller0>
[  219.533608][T16050] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0
[  219.558694][T15988] chnl_net:caif_netlink_parms(): no params data found
[  219.675124][T16054] IPVS: Scheduler module ip_vs_sip not found
[  219.840722][T16079] IPVS: length: 187 != 1672
[  219.858278][T15988] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.874527][T15988] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.882687][T15988] bridge_slave_0: entered allmulticast mode
[  219.889929][T15988] bridge_slave_0: entered promiscuous mode
[  219.903523][T15988] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.921563][T15988] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.939115][T15988] bridge_slave_1: entered allmulticast mode
[  219.955414][T15988] bridge_slave_1: entered promiscuous mode
[  220.009149][T15988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.035243][T15988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.119478][T16103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3056'.
[  220.134885][T15988] team0: Port device team_slave_0 added
[  220.135034][T16103] openvswitch: netlink: Flow key attr not present in new flow.
[  220.152417][T15988] team0: Port device team_slave_1 added
[  220.226739][T15988] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.252968][T15988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.308560][T15988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.324189][T15988] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.332327][T15988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.368197][T15988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.389886][ T5865] Bluetooth: hci5: command tx timeout
[  220.560090][T15988] hsr_slave_0: entered promiscuous mode
[  220.575012][T15988] hsr_slave_1: entered promiscuous mode
[  220.586305][T15988] debugfs: 'hsr0' already exists in 'hsr'
[  220.588030][T16132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3064'.
[  220.598852][T15988] Cannot create hsr debugfs directory
[  220.609220][ T5865] Bluetooth: hci3: command tx timeout
[  220.683423][T16132] veth1: entered allmulticast mode
[  220.713229][T16136] nbd: nbd0 already in use
[  220.808879][T16144] netlink: 'syz.2.3068': attribute type 24 has an invalid length.
[  220.844896][T16144] netlink: 'syz.2.3068': attribute type 24 has an invalid length.
[  221.024513][T15988] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  221.042605][T15988] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.155497][T15988] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  221.158687][T16169] netlink: 'syz.2.3076': attribute type 6 has an invalid length.
[  221.174645][T15988] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.227510][T15988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  221.239753][T15988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.288830][T15988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  221.301184][T15988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.328571][T16174] syzkaller0: entered promiscuous mode
[  221.337251][T16174] syzkaller0: entered allmulticast mode
[  221.459329][T15988] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  221.489952][T15988] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  221.525834][T15988] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  221.555040][T15988] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  221.635000][T16183] netlink: 'syz.2.3078': attribute type 10 has an invalid length.
[  221.668820][T16183] 8021q: adding VLAN 0 to HW filter on device team0
[  221.698304][T16183] bond0: (slave team0): Enslaving as an active interface with an up link
[  221.887380][T15988] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.934171][T15988] 8021q: adding VLAN 0 to HW filter on device team0
[  222.014407][T10611] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.021608][T10611] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.074580][T10611] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.081817][T10611] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.384772][T16209] netlink: 'syz.4.3087': attribute type 13 has an invalid length.
[  222.441732][ T5865] Bluetooth: hci5: command tx timeout
[  222.648807][T15988] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.741377][T15988] veth0_vlan: entered promiscuous mode
[  222.769283][T15988] veth1_vlan: entered promiscuous mode
[  222.828978][T16234] netlink: 'syz.4.3095': attribute type 13 has an invalid length.
[  222.855125][T15988] veth0_macvtap: entered promiscuous mode
[  222.874342][T15988] veth1_macvtap: entered promiscuous mode
[  222.912500][T16234] nbd4: detected capacity change from 0 to 549764202496
[  222.935540][T15988] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.953033][ T5865] block nbd4: Receive control failed (result -32)
[  222.975679][T15988] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.023211][T10611] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.049919][T10611] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.093362][T10611] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.118233][T10611] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.284538][T10623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.292751][T10623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.467864][T11529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.478962][T11529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.623332][T16262] gre1: entered promiscuous mode
[  223.629146][T16262] gre1: entered allmulticast mode
[  223.679182][T16258] __nla_validate_parse: 16 callbacks suppressed
[  223.679205][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3019'.
[  224.191579][T16283] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  224.487565][T16141] Set syz1 is full, maxelem 65536 reached
[  224.497955][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  224.506771][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  224.517601][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  224.524845][ T5876] Bluetooth: hci5: command tx timeout
[  224.534061][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  224.543611][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  224.603366][T16288] lo speed is unknown, defaulting to 1000
[  224.653280][T16296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.872707][T16288] lo speed is unknown, defaulting to 1000
[  224.884197][T16306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3116'.
[  224.884377][T16296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  224.983825][T16310] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  225.010527][T16310] netlink: 'syz.2.3117': attribute type 7 has an invalid length.
[  225.029972][T16312] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  225.189774][T16288] chnl_net:caif_netlink_parms(): no params data found
[  225.300109][T16288] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.324184][T16288] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.332814][T16288] bridge_slave_0: entered allmulticast mode
[  225.340140][T16288] bridge_slave_0: entered promiscuous mode
[  225.356325][T16288] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.363679][T16288] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.371208][T16288] bridge_slave_1: entered allmulticast mode
[  225.378351][T16341] netlink: 'syz.1.3123': attribute type 4 has an invalid length.
[  225.378364][T16288] bridge_slave_1: entered promiscuous mode
[  225.391509][T16342] netlink: 'syz.1.3123': attribute type 1 has an invalid length.
[  225.402144][T16342] netlink: 'syz.1.3123': attribute type 4 has an invalid length.
[  225.409932][T16342] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3123'.
[  225.433248][T16341] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3123'.
[  225.476072][T16288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.507755][T16341] `: renamed from bond0 (while UP)
[  225.511078][T16349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'.
[  225.516052][T16343] can: request_module (can-proto-0) failed.
[  225.537545][T16350] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3126'.
[  225.553942][T16288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.656905][T16359] netlink: 'syz.3.3128': attribute type 29 has an invalid length.
[  225.670026][T16288] team0: Port device team_slave_0 added
[  225.683782][T16360] netlink: 'syz.3.3128': attribute type 29 has an invalid length.
[  225.700970][T16288] team0: Port device team_slave_1 added
[  225.803501][T16288] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.812566][T16372] netlink: 'syz.1.3132': attribute type 1 has an invalid length.
[  225.828711][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.916971][T16288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.995079][T16386] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  226.019631][T16288] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.028515][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.061274][T16288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.086861][T16389] syzkaller1: entered promiscuous mode
[  226.096665][T16389] syzkaller1: entered allmulticast mode
[  226.130071][T16400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3141'.
[  226.211803][T16403] netlink: 'syz.3.3142': attribute type 23 has an invalid length.
[  226.251909][T16288] hsr_slave_0: entered promiscuous mode
[  226.258361][T16288] hsr_slave_1: entered promiscuous mode
[  226.265932][T16288] debugfs: 'hsr0' already exists in 'hsr'
[  226.272429][T16288] Cannot create hsr debugfs directory
[  226.302980][T16400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.518918][T16427] policy can only be matched on NF_INET_PRE_ROUTING
[  226.518942][T16427] unable to load match
[  226.600612][ T5860] Bluetooth: hci5: command tx timeout
[  226.610993][ T5860] Bluetooth: hci2: command tx timeout
[  226.622553][T16288] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.639789][T16288] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.670089][T16432] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  226.707647][T16288] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.732765][T16288] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.783836][T16288] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.794055][T16288] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.836069][T16450] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  226.865722][T16288] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.885644][T16288] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.908466][T16452] team0: Device ipvlan1 failed to register rx_handler
[  227.601934][T16288] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  227.632229][T16288] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  227.694825][T16288] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  227.747035][T16288] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  227.778099][T10623] nci: nci_rsp_packet: unknown rsp opcode 0x221
[  227.786879][T16502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3170'.
[  227.796986][T16502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3170'.
[  228.681518][ T5860] Bluetooth: hci2: command tx timeout
[  228.727550][T16520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3175'.
[  228.764882][T16531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3177'.
[  228.785404][T16288] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.798732][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3177'.
[  228.847223][T16288] 8021q: adding VLAN 0 to HW filter on device team0
[  228.869762][T11529] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.876961][T11529] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.938210][T11529] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.945406][T11529] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.974878][T16288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  228.990061][T16288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.025014][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'.
[  229.037266][T16538] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3181'.
[  229.054916][T16544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.171325][T16556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3186'.
[  229.220826][T16544] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.297481][T16550] tipc: Started in network mode
[  229.306019][T16550] tipc: Node identity f2c132a426d3, cluster identity 4711
[  229.314454][T16550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.395781][T16542] tipc: Resetting bearer <eth:syzkaller0>
[  229.632849][T16542] tipc: Disabling bearer <eth:syzkaller0>
[  229.639307][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3189'.
[  229.689860][T16288] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.786186][T16288] veth0_vlan: entered promiscuous mode
[  229.829806][T16288] veth1_vlan: entered promiscuous mode
[  229.910029][T16288] veth0_macvtap: entered promiscuous mode
[  229.947474][T16288] veth1_macvtap: entered promiscuous mode
[  229.994840][T16288] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.035999][T16288] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.070069][T16606] validate_nla: 2 callbacks suppressed
[  230.070090][T16606] netlink: 'syz.2.3198': attribute type 2 has an invalid length.
[  230.084851][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'.
[  230.088280][T16606] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3198'.
[  230.115531][T10602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.150854][T10602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.169542][T10602] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.183059][T10602] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.318861][T10611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.320061][T16621] netlink: 808 bytes leftover after parsing attributes in process `syz.2.3203'.
[  230.342949][T10611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.378142][T16624] netlink: 'syz.4.3205': attribute type 4 has an invalid length.
[  230.380961][T10611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.399105][T10611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.555015][T16641] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  230.760504][ T5860] Bluetooth: hci2: command tx timeout
[  230.798483][T16646] Bluetooth: MGMT ver 1.23
[  230.967209][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  230.979765][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  230.989308][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  230.997843][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  231.013058][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  231.045720][T16654] netlink: 'syz.3.3212': attribute type 7 has an invalid length.
[  231.073222][T16654] netlink: 'syz.3.3212': attribute type 8 has an invalid length.
[  231.079949][T16649] lo speed is unknown, defaulting to 1000
[  231.113909][T16659] veth1_macvtap: left promiscuous mode
[  231.119438][T16659] macsec0: entered promiscuous mode
[  231.129569][T16659] macsec0: entered allmulticast mode
[  231.198090][T16654] veth1_macvtap: entered promiscuous mode
[  231.204842][T16654] veth1_macvtap: entered allmulticast mode
[  231.216663][T16654] macsec0: left promiscuous mode
[  231.224047][T16654] macsec0: left allmulticast mode
[  231.229170][T16654] veth1_macvtap: left allmulticast mode
[  231.242833][T16649] lo speed is unknown, defaulting to 1000
[  231.541572][T16688] netlink: 'syz.3.3222': attribute type 7 has an invalid length.
[  231.544691][T16649] chnl_net:caif_netlink_parms(): no params data found
[  231.583419][T16689] netlink: 'syz.3.3222': attribute type 2 has an invalid length.
[  231.596310][T16688] netlink: 'syz.3.3222': attribute type 8 has an invalid length.
[  231.656384][T16688] gretap0: entered promiscuous mode
[  231.677198][T16688] batadv_slave_1: entered promiscuous mode
[  231.687362][T16688] erspan0: entered promiscuous mode
[  231.693991][T16688] debugfs: 'hsr1' already exists in 'hsr'
[  231.699833][T16688] Cannot create hsr debugfs directory
[  231.750020][T16649] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.758550][T16649] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.767346][T16649] bridge_slave_0: entered allmulticast mode
[  231.776662][T16649] bridge_slave_0: entered promiscuous mode
[  231.786148][T16649] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.794812][T16649] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.803174][T16649] bridge_slave_1: entered allmulticast mode
[  231.810685][T16649] bridge_slave_1: entered promiscuous mode
[  231.834864][T16649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.847186][T16649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.875820][T16649] team0: Port device team_slave_0 added
[  231.886065][T16649] team0: Port device team_slave_1 added
[  231.907703][T16649] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.915180][T16649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.941724][T16649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.953421][T16649] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.960736][T16649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.988353][T16649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.024268][T16649] hsr_slave_0: entered promiscuous mode
[  232.031253][T16649] hsr_slave_1: entered promiscuous mode
[  232.037370][T16649] debugfs: 'hsr0' already exists in 'hsr'
[  232.043610][T16649] Cannot create hsr debugfs directory
[  232.139487][T16701] sctp: [Deprecated]: syz.2.3226 (pid 16701) Use of int in max_burst socket option deprecated.
[  232.139487][T16701] Use struct sctp_assoc_value instead
[  232.245637][T16649] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  232.282598][T16649] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.346823][T16711] lo speed is unknown, defaulting to 1000
[  232.397677][T16649] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  232.429247][T16649] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.460010][T16711] lo speed is unknown, defaulting to 1000
[  232.587718][T16649] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  232.599515][T16649] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.729540][T16649] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  232.744692][T16649] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.840921][ T5860] Bluetooth: hci2: command tx timeout
[  232.894189][T16649] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  232.913167][T16649] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  232.951072][T16649] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  233.003832][T16649] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  233.080552][ T5860] Bluetooth: hci1: command tx timeout
[  233.618408][T16649] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.726025][T16803] batman_adv: batadv0: Adding interface: dummy0
[  233.741120][T16803] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.769070][T16803] batman_adv: batadv0: Interface activated: dummy0
[  233.793532][T16649] 8021q: adding VLAN 0 to HW filter on device team0
[  233.816349][T16805] batadv0: mtu less than device minimum
[  233.828544][T16805] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.839822][T16805] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.851119][T16805] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.862357][T16805] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.873580][T16805] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.884820][T16805] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.896244][T16805] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.907428][T16805] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.951725][T10619] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.958962][T10619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.994686][T16819] __nla_validate_parse: 14 callbacks suppressed
[  233.994711][T16819] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3254'.
[  234.022519][T10619] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.029670][T10619] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.069014][T16819] lo: entered promiscuous mode
[  234.087173][T16819] tunl0: entered promiscuous mode
[  234.096447][T16819] gre0: entered promiscuous mode
[  234.116057][T16819] gretap0: entered promiscuous mode
[  234.129792][T16819] erspan0: entered promiscuous mode
[  234.146078][T16819] ip_vti0: entered promiscuous mode
[  234.570171][T16649] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.906831][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3271'.
[  234.918345][T16890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3274'.
[  234.966922][T16894] netlink: 'syz.0.3275': attribute type 21 has an invalid length.
[  234.981381][T16894] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3275'.
[  235.009302][T16894] netlink: 'syz.0.3275': attribute type 5 has an invalid length.
[  235.019231][T16894] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3275'.
[  235.098760][T16899] geneve2: entered promiscuous mode
[  235.106593][T16899] geneve2: entered allmulticast mode
[  235.156731][T16649] veth0_vlan: entered promiscuous mode
[  235.160612][ T5860] Bluetooth: hci1: command tx timeout
[  235.179887][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3277'.
[  235.243461][T16649] veth1_vlan: entered promiscuous mode
[  235.353522][T16649] veth0_macvtap: entered promiscuous mode
[  235.378328][T16649] veth1_macvtap: entered promiscuous mode
[  235.398046][T16916] tipc: Started in network mode
[  235.405833][T16916] tipc: Node identity 5e31861e1498, cluster identity 4711
[  235.414191][T16916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.450590][T16925] syzkaller0: entered promiscuous mode
[  235.457991][T16925] syzkaller0: entered allmulticast mode
[  235.473839][T16916] tipc: Resetting bearer <eth:syzkaller0>
[  235.506382][T16649] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.529615][T16649] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.551788][T16915] tipc: Resetting bearer <eth:syzkaller0>
[  235.552535][T16930] netlink: 'syz.1.3283': attribute type 9 has an invalid length.
[  235.570143][T16915] tipc: Disabling bearer <eth:syzkaller0>
[  235.611343][T16931] lo speed is unknown, defaulting to 1000
[  235.632961][T10607] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.674744][T10607] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.704188][T10607] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.734311][T10607] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.808009][T16945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3286'.
[  235.953931][T16950] team0: Device vti0 is of different type
[  236.162156][T16931] lo speed is unknown, defaulting to 1000
[  236.222370][T11529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.248435][T11529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.307143][T10602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.318485][T10602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.395909][T16966] nbd: nbd0 already in use
[  236.416260][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3293'.
[  236.729581][T16989] smc: net device bond0 applied user defined pnetid SYZ2
[  237.129337][T17010] netlink: 'syz.4.3306': attribute type 9 has an invalid length.
[  237.165774][T17010] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.3306'.
[  237.180660][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3305'.
[  237.243279][ T5860] Bluetooth: hci1: command tx timeout
[  237.372101][T17033] net_ratelimit: 11 callbacks suppressed
[  237.372130][T17033] openvswitch: netlink: Flow actions attr not present in new flow.
[  237.786335][T17076] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  237.847836][T17078] bridge0: port 3(batadv1) entered blocking state
[  237.863458][T17078] bridge0: port 3(batadv1) entered disabled state
[  237.883258][T17078] batadv1: entered allmulticast mode
[  237.893377][T17078] batadv1: entered promiscuous mode
[  238.089193][T17100] netlink: 'syz.1.3333': attribute type 1 has an invalid length.
[  238.147023][T17098] IPVS: Scheduler module ip_vs_sip not found
[  238.216890][T17115] netlink: 'syz.3.3335': attribute type 1 has an invalid length.
[  238.226643][T17114] openvswitch: netlink: IP tunnel dst address not specified
[  238.355968][T10619] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  238.365685][T10619] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  238.496272][T17140] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  238.524758][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  238.706754][T17153] netlink: 'syz.3.3348': attribute type 27 has an invalid length.
[  238.825051][T17160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.922772][T17165] netlink: 'syz.0.3354': attribute type 39 has an invalid length.
[  238.974570][T17170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  239.179848][T17180] __nla_validate_parse: 16 callbacks suppressed
[  239.179871][T17180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3356'.
[  239.321700][ T5865] Bluetooth: hci1: command tx timeout
[  239.449693][T17191] IPv6: sit1: Disabled Multicast RS
[  239.456756][T17191] sit1: entered allmulticast mode
[  239.623660][T17203] netlink: 'syz.1.3363': attribute type 5 has an invalid length.
[  239.639229][T17206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3364'.
[  239.649081][T17207] veth1_macvtap: left promiscuous mode
[  240.084478][T17224] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3368'.
[  240.416556][T17233] netlink: 'syz.2.3371': attribute type 1 has an invalid length.
[  240.440356][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  240.453355][T17233] netlink: 'syz.2.3371': attribute type 1 has an invalid length.
[  240.605744][T17244] netlink: 'syz.4.3376': attribute type 21 has an invalid length.
[  240.624873][T17246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3378'.
[  240.625851][T17244] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3376'.
[  240.655058][T17244] netlink: 'syz.4.3376': attribute type 1 has an invalid length.
[  240.675521][T17244] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3376'.
[  240.708913][T17251] policy can only be matched on NF_INET_PRE_ROUTING
[  240.708934][T17251] unable to load match
[  240.839424][T17246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3378'.
[  240.979411][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3382'.
[  241.034910][T17278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3385'.
[  241.213652][T17275] hsr_slave_0 (unregistering): left promiscuous mode
[  241.263190][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3381'.
[  241.353756][T17273] hsr_slave_1 (unregistering): left promiscuous mode
[  241.402384][ T5865] Bluetooth: hci1: command 0x0405 tx timeout
[  241.516853][T17305] bond1: entered promiscuous mode
[  241.522920][T17305] bond1: entered allmulticast mode
[  241.528560][T17305] 8021q: adding VLAN 0 to HW filter on device bond1
[  241.696920][T17319] 8021q: adding VLAN 0 to HW filter on device bond1
[  241.897167][T17346] netlink: 'syz.2.3405': attribute type 39 has an invalid length.
[  242.221649][T17378] rdma_rxe: rxe_newlink: failed to add vxcan1
[  242.238086][T17378] rdma_rxe: rxe_newlink: failed to add vxcan1
[  242.245536][T17378] rdma_rxe: rxe_newlink: failed to add vxcan1
[  242.256008][T17378] rdma_rxe: rxe_newlink: failed to add vxcan1
[  242.273141][T17375] nbd5: detected capacity change from 0 to 127
[  242.294944][T17378] rdma_rxe: rxe_newlink: failed to add vxcan1
[  242.302139][T17378] rdma_rxe: rxe_newlink: failed to add vxcan1
[  242.308514][T17378] rdma_rxe: rxe_newlink: failed to add vxcan1
[  242.317703][T17378] rdma_rxe: rxe_newlink: failed to add vxcan1
[  242.324690][T17378] rdma_rxe: rxe_newlink: failed to add vxcan1
[  242.337113][T17378] rdma_rxe: rxe_newlink: failed to add vxcan1
[  242.361980][T17376] nbd6: detected capacity change from 0 to 127
[  242.369767][T17383] netlink: 'syz.2.3415': attribute type 1 has an invalid length.
[  242.378062][T17383] netlink: 'syz.2.3415': attribute type 1 has an invalid length.
[  242.403120][ T5860] block nbd5: Receive control failed (result -32)
[  242.409869][ T5865] block nbd6: Receive control failed (result -32)
[  242.557987][T17400] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  242.638039][T17404] lo speed is unknown, defaulting to 1000
[  242.843991][T17424] netlink: 'syz.1.3428': attribute type 1 has an invalid length.
[  242.878254][T17424] nbd: illegal input index 1048576
[  242.970164][T17434] netlink: zone id is out of range
[  242.976863][T17434] netlink: del zone limit has 4 unknown bytes
[  242.986237][T17404] lo speed is unknown, defaulting to 1000
[  243.096757][T17441] netlink: 'syz.2.3434': attribute type 6 has an invalid length.
[  243.694158][T17472] team0: Device ip6gre1 is of different type
[  243.749659][T17475] netlink: 'syz.3.3443': attribute type 39 has an invalid length.
[  244.086489][T17506] syzkaller1: entered promiscuous mode
[  244.106394][T17506] syzkaller1: entered allmulticast mode
[  244.315913][T17529] netlink: 'syz.4.3464': attribute type 1 has an invalid length.
[  244.372817][T17536] __nla_validate_parse: 50 callbacks suppressed
[  244.372838][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3466'.
[  244.382553][T17539] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3467'.
[  244.434743][T17547] netlink: 'syz.2.3467': attribute type 2 has an invalid length.
[  244.465288][T17541] 8021q: adding VLAN 0 to HW filter on device bond3
[  244.472696][T17547] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3467'.
[  244.489798][T17541] bond2: (slave bond3): making interface the new active one
[  244.498716][T17541] bond2: (slave bond3): Enslaving as an active interface with an up link
[  244.513498][T17529] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  244.533460][T17529] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  244.676490][T17564] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3474'.
[  244.721817][T17567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3473'.
[  244.752297][T17567] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.767875][T17571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3475'.
[  244.786347][T17567] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.804363][T17567] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.815465][T17567] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.985726][T17571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3475'.
[  245.354823][T17631] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3492'.
[  245.466036][T17641] C: renamed from lo (while UP)
[  245.664284][T17662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3501'.
[  245.675892][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'.
[  245.938146][T17674] validate_nla: 1 callbacks suppressed
[  245.938167][T17674] netlink: 'syz.0.3505': attribute type 33 has an invalid length.
[  245.955739][T17678] syzkaller1: entered promiscuous mode
[  245.962867][T17678] syzkaller1: entered allmulticast mode
[  246.190686][T17699] sctp: [Deprecated]: syz.1.3513 (pid 17699) Use of int in max_burst socket option.
[  246.190686][T17699] Use struct sctp_assoc_value instead
[  246.301604][T17703] dvmrp0: entered allmulticast mode
[  246.378293][T17709] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  246.748058][T17739] syz.4.3527: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  246.766970][T17739] CPU: 1 UID: 0 PID: 17739 Comm: syz.4.3527 Not tainted syzkaller #0 PREEMPT(full) 
[  246.767002][T17739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  246.767030][T17739] Call Trace:
[  246.767039][T17739]  <TASK>
[  246.767048][T17739]  dump_stack_lvl+0x189/0x250
[  246.767081][T17739]  ? __pfx_dump_stack_lvl+0x10/0x10
[  246.767106][T17739]  ? __pfx__printk+0x10/0x10
[  246.767133][T17739]  ? lock_release+0x4b/0x3e0
[  246.767165][T17739]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  246.767190][T17739]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  246.767216][T17739]  warn_alloc+0x214/0x310
[  246.767248][T17739]  ? stack_depot_save_flags+0x40/0x860
[  246.767278][T17739]  ? __pfx_warn_alloc+0x10/0x10
[  246.767310][T17739]  ? kasan_save_track+0x4f/0x80
[  246.767336][T17739]  ? xskq_create+0x56/0x170
[  246.767363][T17739]  ? xsk_init_queue+0xb0/0x110
[  246.767400][T17739]  ? xsk_setsockopt+0x4dc/0x8d0
[  246.767423][T17739]  ? do_sock_setsockopt+0x17c/0x1b0
[  246.767443][T17739]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  246.767462][T17739]  ? do_syscall_64+0xfa/0x3b0
[  246.767492][T17739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.767517][T17739]  __vmalloc_node_range_noprof+0x125/0x12f0
[  246.767565][T17739]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  246.767596][T17739]  ? xsk_setsockopt+0x462/0x8d0
[  246.767622][T17739]  ? __kasan_kmalloc+0x93/0xb0
[  246.767653][T17739]  vmalloc_user_noprof+0xad/0xf0
[  246.767683][T17739]  ? xskq_create+0xbf/0x170
[  246.767711][T17739]  xskq_create+0xbf/0x170
[  246.767741][T17739]  xsk_init_queue+0xb0/0x110
[  246.767769][T17739]  xsk_setsockopt+0x4dc/0x8d0
[  246.767796][T17739]  ? __pfx_xsk_setsockopt+0x10/0x10
[  246.767822][T17739]  ? __pfx_aa_sk_perm+0x10/0x10
[  246.767908][T17739]  ? lock_release+0x4b/0x3e0
[  246.767940][T17739]  ? aa_sock_opt_perm+0xff/0x1b0
[  246.767961][T17739]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  246.767983][T17739]  ? __pfx_xsk_setsockopt+0x10/0x10
[  246.768008][T17739]  do_sock_setsockopt+0x17c/0x1b0
[  246.768031][T17739]  __x64_sys_setsockopt+0x13f/0x1b0
[  246.768053][T17739]  do_syscall_64+0xfa/0x3b0
[  246.768084][T17739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.768105][T17739]  ? clear_bhb_loop+0x60/0xb0
[  246.768129][T17739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.768150][T17739] RIP: 0033:0x7f960df8ebe9
[  246.768167][T17739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.768196][T17739] RSP: 002b:00007f960ed6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  246.768218][T17739] RAX: ffffffffffffffda RBX: 00007f960e1b5fa0 RCX: 00007f960df8ebe9
[  246.768234][T17739] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  246.768247][T17739] RBP: 00007f960e011e19 R08: 0000000000000004 R09: 0000000000000000
[  246.768260][T17739] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  246.768274][T17739] R13: 00007f960e1b6038 R14: 00007f960e1b5fa0 R15: 00007ffd32a24428
[  246.768300][T17739]  </TASK>
[  246.768315][T17739] Mem-Info:
[  247.076227][T17739] active_anon:4409 inactive_anon:0 isolated_anon:0
[  247.076227][T17739]  active_file:3208 inactive_file:39905 isolated_file:0
[  247.076227][T17739]  unevictable:768 dirty:94 writeback:0
[  247.076227][T17739]  slab_reclaimable:12888 slab_unreclaimable:120508
[  247.076227][T17739]  mapped:29196 shmem:1355 pagetables:1166
[  247.076227][T17739]  sec_pagetables:0 bounce:0
[  247.076227][T17739]  kernel_misc_reclaimable:0
[  247.076227][T17739]  free:1295644 free_pcp:16813 free_cma:0
[  247.167121][T17739] Node 0 active_anon:17644kB inactive_anon:0kB active_file:12832kB inactive_file:159420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116696kB dirty:376kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14716kB pagetables:4524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  247.206850][T17739] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  247.255873][T17739] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  247.274900][T17755] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.293906][T17739] lowmem_reserve[]: 0 2497 2499 2499 2499
[  247.300145][T17739] Node 0 DMA32 free:1275380kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17600kB inactive_anon:0kB active_file:12832kB inactive_file:157852kB unevictable:1536kB writepending:376kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:46560kB local_pcp:23600kB free_cma:0kB
[  247.339404][T17739] lowmem_reserve[]: 0 0 1 1 1
[  247.365690][T17739] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  247.397127][T17739] lowmem_reserve[]: 0 0 0 0 0
[  247.402744][T17739] Node 1 Normal free:3895248kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17328kB local_pcp:9856kB free_cma:0kB
[  247.443202][T17739] lowmem_reserve[]: 0 0 0 0 0
[  247.449607][T17739] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  247.461689][T17761] netlink: 'syz.1.3534': attribute type 1 has an invalid length.
[  247.467643][T17739] Node 0 DMA32: 1995*4kB (UME) 623*8kB (UM) 295*16kB (UME) 198*32kB (UME) 118*64kB (UME) 18*128kB (UME) 79*256kB (UME) 53*512kB (UME) 18*1024kB (U) 2*2048kB (UM) 286*4096kB (UM) = 1275220kB
[  247.513977][T17765] ` (unregistering): (slave bond_slave_0): Releasing backup interface
[  247.527212][T17765] ` (unregistering): (slave bond_slave_1): Releasing backup interface
[  247.530573][T17739] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  247.552237][T17765] ` (unregistering): Released all slaves
[  247.565568][T17739] Node 1 Normal: 214*4kB (UE) 63*8kB (UME) 40*16kB (UME) 76*32kB (UME) 14*64kB (UME) 8*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UM) 4*2048kB (UME) 946*4096kB (M) = 3895248kB
[  247.592702][T17739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  247.606028][T17739] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  247.616514][T17739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  247.626957][T17739] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  247.637533][T17739] 44466 total pagecache pages
[  247.646395][T17739] 0 pages in swap cache
[  247.653769][T17739] Free swap  = 124996kB
[  247.658098][T17739] Total swap = 124996kB
[  247.666986][T17739] 2097051 pages RAM
[  247.672106][T17739] 0 pages HighMem/MovableOnly
[  247.677170][T17739] 425660 pages reserved
[  247.685018][T17739] 0 pages cma reserved
[  247.951773][T17798] netlink: 'syz.4.3547': attribute type 6 has an invalid length.
[  248.376625][T17822] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.410140][T17828] netlink: 'syz.4.3557': attribute type 1 has an invalid length.
[  248.690132][T17846] syzkaller1: entered promiscuous mode
[  248.717105][T17846] syzkaller1: entered allmulticast mode
[  248.740117][T17849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.766432][T17849] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.781911][T17849] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.789630][T17849] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.183854][T17879] netlink: 'syz.3.3574': attribute type 10 has an invalid length.
[  249.221831][T17879] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  249.442299][T17893] netlink: 'syz.1.3579': attribute type 10 has an invalid length.
[  249.529958][T17898] __nla_validate_parse: 17 callbacks suppressed
[  249.529981][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3582'.
[  249.547421][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3582'.
[  249.598369][T17902] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode
[  249.813006][T17924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3588'.
[  249.819253][T17922] syzkaller0: entered promiscuous mode
[  249.834577][T17922] syzkaller0: entered allmulticast mode
[  249.849149][T17920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.925087][T17931] tipc: Resetting bearer <eth:syzkaller0>
[  249.949834][T17931] tipc: Disabling bearer <eth:syzkaller0>
[  249.986840][T17936] IPVS: length: 157 != 24
[  250.019971][T17940] netlink: 'syz.0.3593': attribute type 7 has an invalid length.
[  250.029019][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3593'.
[  250.057552][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3592'.
[  250.239878][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3596'.
[  250.243257][T17959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3598'.
[  250.268350][T17959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3598'.
[  250.280157][T17959] netlink: 50 bytes leftover after parsing attributes in process `syz.2.3598'.
[  250.403565][T17972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3601'.
[  250.528816][T17981] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  250.539408][T17983] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  250.663944][T17991] bond2: entered promiscuous mode
[  250.669736][T17991] bond2: entered allmulticast mode
[  250.684383][T17991] 8021q: adding VLAN 0 to HW filter on device bond2
[  250.871008][T18011] tc_dump_action: action bad kind
[  250.976813][T18020] veth7: entered promiscuous mode
[  250.984864][T18020] veth7: entered allmulticast mode
[  251.888697][T18046] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.928841][T18046] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.948029][T18046] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  251.962653][T18046] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  252.002377][T18055] netlink: 'syz.3.3626': attribute type 4 has an invalid length.
[  252.237040][T18070] xfrm1: entered promiscuous mode
[  252.271834][T18070] xfrm1: entered allmulticast mode
[  252.301545][T18080] geneve2: entered promiscuous mode
[  252.309084][T18078] lo speed is unknown, defaulting to 1000
[  252.523675][T18099] openvswitch: netlink: Unknown key attributes 2
[  252.602313][ T5865] Bluetooth: hci0: command tx timeout
[  252.650984][T18078] lo speed is unknown, defaulting to 1000
[  252.704149][T18108] team0: Device ip6gre1 is of different type
[  252.831654][T18117] syzkaller1: entered allmulticast mode
[  253.024736][T18126] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  253.031285][T18126] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  253.488468][T18155] netlink: 'syz.0.3660': attribute type 1 has an invalid length.
[  253.513642][T18155] hsr_slave_0: left promiscuous mode
[  253.780527][T18177] netlink: 'syz.0.3667': attribute type 4 has an invalid length.
[  253.882962][T18180] bridge_slave_0: left allmulticast mode
[  253.898201][T18180] bridge_slave_0: left promiscuous mode
[  253.906701][T18180] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.917506][T18180] bridge_slave_1: left allmulticast mode
[  253.924203][T18180] bridge_slave_1: left promiscuous mode
[  253.930259][T18180] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.944145][T18180] bond0: (slave bond_slave_0): Releasing backup interface
[  253.955351][T18180] bond0: (slave bond_slave_1): Releasing backup interface
[  253.973332][T18180] team0: Port device team_slave_0 removed
[  253.975432][T18191] netlink: 'syz.0.3667': attribute type 6 has an invalid length.
[  253.994782][T18180] team0: Port device team_slave_1 removed
[  254.017625][T18180] bond2: (slave bond3): Releasing backup interface
[  254.037955][T18190] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  254.059260][T18177] netlink: 'syz.0.3667': attribute type 6 has an invalid length.
[  254.098419][T18190] bond1: entered promiscuous mode
[  254.107596][T18190] bond1: entered allmulticast mode
[  254.115374][T18190] 8021q: adding VLAN 0 to HW filter on device bond1
[  254.202183][T10602] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  254.264574][T10602] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  254.309282][T10602] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  254.334607][   T30] audit: type=1804 audit(1756284102.268:8): pid=18216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3678" name="/newroot/136/memory.events" dev="tmpfs" ino=712 res=1 errno=0
[  254.346883][T18223] xt_time: invalid argument - start or stop time greater than 23:59:59
[  254.387531][T10602] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  254.416818][   T30] audit: type=1800 audit(1756284102.268:9): pid=18216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3678" name="memory.events" dev="tmpfs" ino=712 res=0 errno=0
[  254.544977][T18232] __nla_validate_parse: 18 callbacks suppressed
[  254.544999][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3681'.
[  254.562197][T18232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3681'.
[  254.592536][T18234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3683'.
[  254.602187][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3683'.
[  254.612493][T18234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3683'.
[  254.653975][T18238] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3684'.
[  254.671492][T18238] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3684'.
[  254.701695][T18238] 0ªî{X¹¦: renamed from gretap0
[  254.715290][T18238] 0ªî{X¹¦: left promiscuous mode
[  254.723611][T18238] 0ªî{X¹¦: entered allmulticast mode
[  254.739601][T18238] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  254.762594][T18241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  254.882603][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3689'.
[  254.907914][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'.
[  254.930144][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'.
[  254.947548][T18264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.078324][T18258] syzkaller0: entered promiscuous mode
[  255.089423][T18258] syzkaller0: entered allmulticast mode
[  255.824797][T18345] 8021q: adding VLAN 0 to HW filter on device bond4
[  255.841736][T18345] team0: Failed to send port change of device bond4 via netlink (err -105)
[  255.855441][T18345] team0: Failed to send options change via netlink (err -105)
[  255.863115][T18345] team0: Port device bond4 added
[  255.869027][T18350] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  255.892207][   T13] team0: Failed to send port change of device bond4 via netlink (err -105)
[  255.942301][T18348] pim6reg1: entered promiscuous mode
[  255.948380][T18348] pim6reg1: entered allmulticast mode
[  255.996840][T18363] veth0: entered promiscuous mode
[  256.292574][T18393] netlink: 'syz.0.3720': attribute type 21 has an invalid length.
[  256.310424][T18392] netlink: 'syz.0.3720': attribute type 21 has an invalid length.
[  256.331561][T18359] veth0: left promiscuous mode
[  257.142226][T18465] atomic_op ffff888028d88998 conn xmit_atomic 0000000000000000
[  257.288225][T18474] netlink: 'syz.4.3746': attribute type 21 has an invalid length.
[  257.633183][T18499] xt_socket: unknown flags 0xe4
[  257.803359][T18511] bridge_slave_0: left allmulticast mode
[  257.821937][T18511] bridge_slave_0: left promiscuous mode
[  257.833519][T18511] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.844501][T18511] bridge_slave_1: left allmulticast mode
[  257.851845][T18511] bridge_slave_1: left promiscuous mode
[  257.858054][T18511] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.892130][T18511] team0: Port device team_slave_0 removed
[  257.908722][T18511] team0: Port device team_slave_1 removed
[  257.969080][T18511] bond1: (slave gretap2): Releasing active interface
[  258.466888][T18552] openvswitch: netlink: Message has 8 unknown bytes.
[  258.697734][T18573] netlink: 'syz.3.3782': attribute type 8 has an invalid length.
[  258.706801][T18573] netlink: 'syz.3.3782': attribute type 7 has an invalid length.
[  258.744893][T18566] lo speed is unknown, defaulting to 1000
[  258.866901][T18566] lo speed is unknown, defaulting to 1000
[  259.025157][ T5990] IPVS: starting estimator thread 0...
[  259.035104][T18600] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  259.133782][T18603] IPVS: using max 37 ests per chain, 88800 per kthread
[  259.295090][T18618] netlink: 'syz.2.3795': attribute type 1 has an invalid length.
[  259.376708][T18615] team0: Port device bond4 removed
[  260.384451][T18649] netlink: 'syz.3.3804': attribute type 12 has an invalid length.
[  260.497519][T18660] netlink: 'syz.2.3808': attribute type 1 has an invalid length.
[  260.539384][T18662] netlink: 'syz.2.3808': attribute type 1 has an invalid length.
[  260.572229][T18662] 8021q: adding VLAN 0 to HW filter on device bond2
[  260.591294][T18661] tipc: Started in network mode
[  260.607609][T18661] tipc: Node identity , cluster identity 4711
[  260.625767][T18661] tipc: Failed to obtain node identity
[  260.633600][T18661] tipc: Enabling of bearer <eth:ip_vti0> rejected, failed to enable media
[  260.696737][T18668] bond2: (slave veth5): Enslaving as an active interface with a down link
[  260.758722][T18688] IPVS: length: 113 != 8
[  260.775076][T18681] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  260.856309][T18691] __nla_validate_parse: 25 callbacks suppressed
[  260.856332][T18691] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3817'.
[  260.915474][T18703] IPVS: ip_vs_add_dest(): server weight less than zero
[  261.008282][T18703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3822'.
[  261.074153][T18714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  261.112532][T18715] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  261.137041][T18718] wireguard: wg1: Could not create IPv4 socket
[  261.202903][T18714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  261.243055][T18714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  261.439003][T18743] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.456326][T18750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3840'.
[  261.467790][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3840'.
[  261.491731][T18750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3840'.
[  261.501537][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3840'.
[  261.532402][T18743] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.576343][T18741] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  261.594250][T18745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3838'.
[  261.605726][T18745] Unsupported xt match
[  261.605744][T18745] unable to load match
[  261.635870][T18743] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.749201][T18743] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.787004][T18762] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3844'.
[  261.854668][T18769] sctp: [Deprecated]: syz.4.3846 (pid 18769) Use of int in max_burst socket option deprecated.
[  261.854668][T18769] Use struct sctp_assoc_value instead
[  261.970124][T10607] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.994688][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'.
[  262.029896][T10623] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.150508][T10623] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.170115][T10623] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.476731][   T30] audit: type=1804 audit(1756284110.408:10): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3857" name="/newroot/130/cgroup.controllers" dev="tmpfs" ino=685 res=1 errno=0
[  262.555603][   T30] audit: type=1800 audit(1756284110.408:11): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3857" name="cgroup.controllers" dev="tmpfs" ino=685 res=0 errno=0
[  262.568673][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3860'.
[  262.594821][T18823] netlink: 'syz.1.3860': attribute type 18 has an invalid length.
[  262.645150][T11529] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0
[  262.645266][T18823] netlink: 'syz.1.3860': attribute type 18 has an invalid length.
[  262.658514][T11529] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  262.705230][T11529] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  262.748576][T11529] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  262.939180][T18835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  262.944924][T18857] openvswitch: netlink: Key type 4368 is out of range max 32
[  262.962477][T18852] tipc: Started in network mode
[  262.967403][T18852] tipc: Node identity 46ffcc6eb0dd, cluster identity 4711
[  262.991606][T18852] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.006211][T18852] syzkaller0: entered promiscuous mode
[  263.013668][T18852] syzkaller0: entered allmulticast mode
[  263.103525][T18851] tipc: Resetting bearer <eth:syzkaller0>
[  263.154753][T18868] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  263.184247][T18851] tipc: Disabling bearer <eth:syzkaller0>
[  263.475846][T18895] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  263.495382][T18899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  263.514876][T18899] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 34
[  263.733219][T18917] lo speed is unknown, defaulting to 1000
[  263.769367][T18926] IPv6: addrconf: prefix option has invalid lifetime
[  263.792194][T18926] netlink: 'syz.2.3894': attribute type 29 has an invalid length.
[  263.807989][T18926] netlink: 'syz.2.3894': attribute type 29 has an invalid length.
[  263.866614][T18917] lo speed is unknown, defaulting to 1000
[  263.871002][T18930] netlink: 'syz.2.3894': attribute type 29 has an invalid length.
[  263.945850][T18930] netlink: 'syz.2.3894': attribute type 29 has an invalid length.
[  264.125714][T18948] netlink: 'syz.4.3900': attribute type 7 has an invalid length.
[  264.172201][T18948] : entered promiscuous mode
[  264.192410][T18953] netlink: 'syz.0.3902': attribute type 4 has an invalid length.
[  264.639571][T18999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.046879][T19036] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  265.418307][T19058] IPVS: Error connecting to the multicast addr
[  265.681486][T19084] netlink: 'syz.4.3944': attribute type 1 has an invalid length.
[  265.691546][T19084] netlink: 'syz.4.3944': attribute type 2 has an invalid length.
[  266.921133][ T5860] Bluetooth: hci1: command 0x0405 tx timeout
[  312.120677][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  314.889507][T19116] syzkaller1: entered promiscuous mode
[  314.906988][T19116] syzkaller1: entered allmulticast mode
[  314.956467][T19126] __nla_validate_parse: 19 callbacks suppressed
[  314.956493][T19126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3956'.
[  314.973522][T19126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3956'.
[  315.204971][T19148] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  315.275996][T19157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3964'.
[  315.485116][T19178] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  315.684306][T19197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3981'.
[  315.707981][T19201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3978'.
[  315.725323][T19202] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3980'.
[  315.888053][ T5860] Bluetooth: hci1: link tx timeout
[  315.894283][ T5860] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  315.905088][ T5865] Bluetooth: hci1: link tx timeout
[  315.911576][ T5865] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  315.919775][ T5865] Bluetooth: hci1: link tx timeout
[  315.925274][ T5865] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  315.933078][ T5865] Bluetooth: hci1: link tx timeout
[  315.938279][ T5865] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  316.229677][T19240] 8021q: VLANs not supported on ip_vti0
[  316.251299][T19244] netlink: 'syz.4.3992': attribute type 29 has an invalid length.
[  316.294825][T19244] netlink: 'syz.4.3992': attribute type 29 has an invalid length.
[  316.316831][T19244] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3992'.
[  316.367578][T19253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3994'.
[  316.381913][T19253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3994'.
[  316.714602][T19281] tipc: Started in network mode
[  316.719620][T19281] tipc: Node identity b6f1d165252a, cluster identity 4711
[  316.728230][T19281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  316.736699][T19280] syzkaller0: entered promiscuous mode
[  316.743126][T19280] syzkaller0: entered allmulticast mode
[  316.826166][T19281] tipc: Resetting bearer <eth:syzkaller0>
[  316.838677][T19281] tipc: Disabling bearer <eth:syzkaller0>
[  316.866041][T19286] team0: Device gtp0 is of different type
[  317.067350][T19306] vlan2: entered promiscuous mode
[  317.234716][T19327] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4017'.
[  317.511310][T19355] netlink: zone id is out of range
[  317.949448][T19388] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  317.964143][ T5865] Bluetooth: hci1: command 0x0405 tx timeout
[  318.191741][T19409] netlink: 'syz.0.4039': attribute type 2 has an invalid length.
[  318.219097][T19415] openvswitch: netlink: Flow key attr not present in new flow.
[  318.326695][T19422] netlink: 'syz.0.4043': attribute type 2 has an invalid length.
[  318.344519][T19422] nbd: must specify at least one socket
[  318.411015][T19421] vxcan3: entered allmulticast mode
[  318.637575][T19450] netlink: 'syz.4.4055': attribute type 1 has an invalid length.
[  318.651215][T19450] netlink: 'syz.4.4055': attribute type 10 has an invalid length.
[  318.671726][T19457] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  318.690043][T19450] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  318.909126][T19472] netlink: 'syz.3.4062': attribute type 1 has an invalid length.
[  318.933115][T19472] 8021q: adding VLAN 0 to HW filter on device bond2
[  319.337233][T19494] netlink: 'syz.0.4069': attribute type 16 has an invalid length.
[  319.458093][T19504] gretap1: entered promiscuous mode
[  319.481689][T19504] gretap1: entered allmulticast mode
[  319.600972][T19509] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  319.979608][T19529] pimreg: entered allmulticast mode
[  320.004387][T19534] __nla_validate_parse: 13 callbacks suppressed
[  320.004408][T19534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4083'.
[  320.011362][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4080'.
[  320.031776][T19534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4083'.
[  320.081386][T19540] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4085'.
[  320.477287][T19573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4092'.
[  320.652426][T19591] 8021q: VLANs not supported on nr0
[  320.669884][T19587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4098'.
[  320.966656][T19614] lo speed is unknown, defaulting to 1000
[  321.141104][T19622] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4106'.
[  321.150137][T19614] lo speed is unknown, defaulting to 1000
[  321.314094][T19639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4109'.
[  321.436012][T19642] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  321.458268][T19642] openvswitch: netlink: IP tunnel TTL not specified.
[  321.519583][T19646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4112'.
[  321.548666][T19650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4114'.
[  321.653459][T19654] bridge5: port 1(veth7) entered blocking state
[  321.669530][T19654] bridge5: port 1(veth7) entered disabled state
[  321.701870][T19654] veth7: entered allmulticast mode
[  321.709144][T19654] veth7: entered promiscuous mode
[  321.714721][T19664] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  321.730065][T19646] bridge5: port 2(veth0_to_bond) entered blocking state
[  321.743903][T19646] bridge5: port 2(veth0_to_bond) entered disabled state
[  321.752140][T19646] veth0_to_bond: entered allmulticast mode
[  321.766355][T19646] veth0_to_bond: entered promiscuous mode
[  321.904451][T19679] 8021q: VLANs not supported on gre0
[  321.915849][T19681] netlink: 'syz.4.4124': attribute type 7 has an invalid length.
[  322.269006][T19706] tipc: Started in network mode
[  322.274727][T19706] tipc: Node identity 080211000001, cluster identity 4711
[  322.287546][T19706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.055242][T19763] bond0: (slave bridge_slave_1): Releasing backup interface
[  323.131638][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.194099][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.328044][T19787] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  323.401650][ T5930] tipc: Node number set to 134418688
[  323.589879][T19808] bridge_slave_0: left allmulticast mode
[  323.612494][T19808] bridge_slave_0: left promiscuous mode
[  323.618309][T19808] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.656677][T19808] bridge_slave_1: left allmulticast mode
[  323.688628][T19808] bridge_slave_1: left promiscuous mode
[  323.710824][T19808] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.726932][T19808] bond0: (slave bond_slave_0): Releasing backup interface
[  323.744598][T19808] bond0: (slave bond_slave_1): Releasing backup interface
[  323.759239][T19808] team0: Port device team_slave_0 removed
[  323.768554][T19808] team0: Port device team_slave_1 removed
[  323.775312][T19808] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  323.784386][T19808] batman_adv: batadv0: Removing interface: batadv_slave_0
[  323.793964][T19808] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  323.802966][T19808] batman_adv: batadv0: Removing interface: batadv_slave_1
[  323.817307][T19808] ------------[ cut here ]------------
[  323.822844][T19808] WARNING: CPU: 1 PID: 19808 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0
[  323.832827][T19808] Modules linked in:
[  323.836783][T19808] CPU: 1 UID: 0 PID: 19808 Comm: syz.0.4163 Not tainted syzkaller #0 PREEMPT(full) 
[  323.846214][T19808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  323.856339][T19808] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0
[  323.862659][T19808] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 3d 62 f2 f7 e9 78 fe ff ff e8 73 f9 8e f7 eb 05 e8 6c f9 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 c9 4b 01
[  323.882331][T19808] RSP: 0018:ffffc9000cf86620 EFLAGS: 00010293
[  323.888455][T19808] RAX: ffffffff8a30b1bd RBX: dffffc0000000000 RCX: ffff8880330b5a00
[  323.896464][T19808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  323.904467][T19808] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  323.912484][T19808] R10: dffffc0000000000 R11: fffff520019f0cbc R12: ffff8880784d00de
[  323.920526][T19808] R13: ffff8880564bb890 R14: 0000000000000000 R15: 1ffff1100ac97712
[  323.928534][T19808] FS:  00007f72907f66c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000
[  323.937525][T19808] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  323.944170][T19808] CR2: 00007f960ed4cf98 CR3: 00000000246f2000 CR4: 00000000003526f0
[  323.952213][T19808] Call Trace:
[  323.955519][T19808]  <TASK>
[  323.958471][T19808]  fib6_ifup+0x14a/0x180
[  323.962760][T19808]  ? __pfx_fib6_ifup+0x10/0x10
[  323.967555][T19808]  fib6_clean_node+0x24d/0x590
[  323.972379][T19808]  ? __pfx_fib6_clean_node+0x10/0x10
[  323.977798][T19808]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  323.983730][T19808]  ? rcu_is_watching+0x15/0xb0
[  323.988500][T19808]  fib6_walk_continue+0x678/0x910
[  323.993576][T19808]  fib6_walk+0x149/0x290
[  323.997851][T19808]  __fib6_clean_all+0x234/0x380
[  324.002743][T19808]  ? __fib6_clean_all+0x9b/0x380
[  324.007701][T19808]  ? __pfx_fib6_ifup+0x10/0x10
[  324.012516][T19808]  ? __pfx___fib6_clean_all+0x10/0x10
[  324.017919][T19808]  ? __pfx_fib6_clean_node+0x10/0x10
[  324.023349][T19808]  ? __pfx_fib6_ifup+0x10/0x10
[  324.028207][T19808]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  324.033886][T19808]  rt6_sync_up+0x128/0x160
[  324.038329][T19808]  ? __pfx_rt6_sync_up+0x10/0x10
[  324.043323][T19808]  ? ipv6_mc_up+0x3da/0x580
[  324.047856][T19808]  addrconf_notify+0xd55/0x1010
[  324.052758][T19808]  notifier_call_chain+0x1b3/0x3e0
[  324.057902][T19808]  netif_state_change+0x284/0x3a0
[  324.063007][T19808]  ? mutex_is_locked+0x17/0x50
[  324.067802][T19808]  ? rcu_read_lock_held+0xa/0x50
[  324.072807][T19808]  ? __pfx_netif_state_change+0x10/0x10
[  324.078394][T19808]  ? dev_change_xdp_fd+0x1da/0x220
[  324.083572][T19808]  do_setlink+0x35de/0x41c0
[  324.088110][T19808]  ? __kernel_text_address+0xd/0x40
[  324.093381][T19808]  ? arch_stack_walk+0xfc/0x150
[  324.098273][T19808]  ? __pfx_do_setlink+0x10/0x10
[  324.103169][T19808]  ? stack_trace_save+0x9c/0xe0
[  324.108032][T19808]  ? __mutex_trylock_common+0x153/0x260
[  324.113641][T19808]  ? __pfx___mutex_trylock_common+0x10/0x10
[  324.119565][T19808]  ? rcu_is_watching+0x15/0xb0
[  324.124359][T19808]  ? trace_contention_end+0x39/0x120
[  324.129649][T19808]  ? __mutex_lock+0x335/0x1350
[  324.134571][T19808]  ? rtnl_newlink+0x8db/0x1c70
[  324.139351][T19808]  ? __pfx___mutex_lock+0x10/0x10
[  324.144513][T19808]  ? ns_capable+0x8a/0xf0
[  324.148879][T19808]  ? rtnl_link_get_net_capable+0x16a/0x350
[  324.154739][T19808]  rtnl_newlink+0x149f/0x1c70
[  324.159429][T19808]  ? netlink_sendmsg+0x805/0xb30
[  324.164497][T19808]  ? __pfx_rtnl_newlink+0x10/0x10
[  324.169547][T19808]  ? rcu_is_watching+0x15/0xb0
[  324.174340][T19808]  ? nlmon_xmit+0xb0/0x100
[  324.178763][T19808]  ? kmem_cache_free+0x18f/0x400
[  324.183760][T19808]  ? rcu_is_watching+0x15/0xb0
[  324.188635][T19808]  ? __dev_queue_xmit+0x27b/0x3b50
[  324.193837][T19808]  ? __local_bh_enable_ip+0x12d/0x1c0
[  324.199273][T19808]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  324.205049][T19808]  ? __dev_queue_xmit+0x27b/0x3b50
[  324.210224][T19808]  ? lock_release+0x4b/0x3e0
[  324.214908][T19808]  ? __dev_queue_xmit+0x27b/0x3b50
[  324.220037][T19808]  ? __dev_queue_xmit+0x27b/0x3b50
[  324.225198][T19808]  ? __dev_queue_xmit+0x1d79/0x3b50
[  324.230443][T19808]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  324.235587][T19808]  ? rcu_is_watching+0x15/0xb0
[  324.240824][T19808]  ? lock_release+0x4b/0x3e0
[  324.245875][T19808]  ? bpf_lsm_capable+0x9/0x20
[  324.250604][T19808]  ? security_capable+0x7e/0x2e0
[  324.255572][T19808]  ? __pfx_rtnl_newlink+0x10/0x10
[  324.260641][T19808]  rtnetlink_rcv_msg+0x7cc/0xb70
[  324.265621][T19808]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  324.270948][T19808]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  324.276436][T19808]  ? ref_tracker_free+0x63a/0x7d0
[  324.281515][T19808]  ? __asan_memcpy+0x40/0x70
[  324.286133][T19808]  ? __pfx_ref_tracker_free+0x10/0x10
[  324.291580][T19808]  netlink_rcv_skb+0x208/0x470
[  324.296417][T19808]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  324.301946][T19808]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  324.307252][T19808]  netlink_unicast+0x82c/0x9e0
[  324.312072][T19808]  ? __pfx_netlink_unicast+0x10/0x10
[  324.317389][T19808]  ? netlink_sendmsg+0x642/0xb30
[  324.322471][T19808]  ? skb_put+0x11b/0x210
[  324.326719][T19808]  netlink_sendmsg+0x805/0xb30
[  324.331540][T19808]  ? __pfx_netlink_sendmsg+0x10/0x10
[  324.336872][T19808]  ? futex_unqueue+0x22/0x240
[  324.341600][T19808]  ? aa_sock_msg_perm+0xf1/0x1d0
[  324.346559][T19808]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  324.351900][T19808]  ? __pfx_netlink_sendmsg+0x10/0x10
[  324.357218][T19808]  __sock_sendmsg+0x21c/0x270
[  324.361934][T19808]  ____sys_sendmsg+0x505/0x830
[  324.366707][T19808]  ? __pfx_____sys_sendmsg+0x10/0x10
[  324.372040][T19808]  ? import_iovec+0x74/0xa0
[  324.376568][T19808]  ___sys_sendmsg+0x21f/0x2a0
[  324.381288][T19808]  ? __pfx____sys_sendmsg+0x10/0x10
[  324.386522][T19808]  ? futex_wait+0x285/0x360
[  324.391081][T19808]  ? __fget_files+0x2a/0x420
[  324.395705][T19808]  ? __fget_files+0x3a0/0x420
[  324.400433][T19808]  __x64_sys_sendmsg+0x19b/0x260
[  324.405395][T19808]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  324.410909][T19808]  ? rcu_is_watching+0x15/0xb0
[  324.415693][T19808]  ? rcu_is_watching+0x15/0xb0
[  324.420503][T19808]  do_syscall_64+0xfa/0x3b0
[  324.425125][T19808]  ? rcu_is_watching+0x15/0xb0
[  324.429913][T19808]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.436016][T19808]  ? clear_bhb_loop+0x60/0xb0
[  324.440747][T19808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.446660][T19808] RIP: 0033:0x7f729258ebe9
[  324.451113][T19808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.470892][T19808] RSP: 002b:00007f72907f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  324.479350][T19808] RAX: ffffffffffffffda RBX: 00007f72927b5fa0 RCX: 00007f729258ebe9
[  324.487381][T19808] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  324.495407][T19808] RBP: 00007f7292611e19 R08: 0000000000000000 R09: 0000000000000000
[  324.503434][T19808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  324.511468][T19808] R13: 00007f72927b6038 R14: 00007f72927b5fa0 R15: 00007ffdf3a1fce8
[  324.519478][T19808]  </TASK>
[  324.522536][T19808] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  324.529814][T19808] CPU: 1 UID: 0 PID: 19808 Comm: syz.0.4163 Not tainted syzkaller #0 PREEMPT(full) 
[  324.539194][T19808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  324.549256][T19808] Call Trace:
[  324.552552][T19808]  <TASK>
[  324.555508][T19808]  dump_stack_lvl+0x99/0x250
[  324.560128][T19808]  ? __asan_memcpy+0x40/0x70
[  324.564737][T19808]  ? __pfx_dump_stack_lvl+0x10/0x10
[  324.569953][T19808]  ? __pfx__printk+0x10/0x10
[  324.574578][T19808]  vpanic+0x281/0x750
[  324.578589][T19808]  ? __pfx__printk+0x10/0x10
[  324.583196][T19808]  ? __pfx_vpanic+0x10/0x10
[  324.587725][T19808]  ? is_bpf_text_address+0x26/0x2b0
[  324.592957][T19808]  panic+0xb9/0xc0
[  324.596703][T19808]  ? __pfx_panic+0x10/0x10
[  324.601141][T19808]  __warn+0x31b/0x4b0
[  324.605172][T19808]  ? rt6_multipath_rebalance+0x455/0x8b0
[  324.610824][T19808]  ? rt6_multipath_rebalance+0x455/0x8b0
[  324.616486][T19808]  report_bug+0x2be/0x4f0
[  324.620847][T19808]  ? rt6_multipath_rebalance+0x455/0x8b0
[  324.626508][T19808]  ? rt6_multipath_rebalance+0x455/0x8b0
[  324.632157][T19808]  ? rt6_multipath_rebalance+0x457/0x8b0
[  324.637820][T19808]  handle_bug+0x84/0x160
[  324.642068][T19808]  exc_invalid_op+0x1a/0x50
[  324.646579][T19808]  asm_exc_invalid_op+0x1a/0x20
[  324.651442][T19808] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0
[  324.657698][T19808] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 3d 62 f2 f7 e9 78 fe ff ff e8 73 f9 8e f7 eb 05 e8 6c f9 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 c9 4b 01
[  324.677321][T19808] RSP: 0018:ffffc9000cf86620 EFLAGS: 00010293
[  324.683497][T19808] RAX: ffffffff8a30b1bd RBX: dffffc0000000000 RCX: ffff8880330b5a00
[  324.691488][T19808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  324.699467][T19808] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  324.707448][T19808] R10: dffffc0000000000 R11: fffff520019f0cbc R12: ffff8880784d00de
[  324.715433][T19808] R13: ffff8880564bb890 R14: 0000000000000000 R15: 1ffff1100ac97712
[  324.723426][T19808]  ? rt6_multipath_rebalance+0x44d/0x8b0
[  324.729089][T19808]  fib6_ifup+0x14a/0x180
[  324.733351][T19808]  ? __pfx_fib6_ifup+0x10/0x10
[  324.738217][T19808]  fib6_clean_node+0x24d/0x590
[  324.743002][T19808]  ? __pfx_fib6_clean_node+0x10/0x10
[  324.748311][T19808]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  324.754221][T19808]  ? rcu_is_watching+0x15/0xb0
[  324.758999][T19808]  fib6_walk_continue+0x678/0x910
[  324.764044][T19808]  fib6_walk+0x149/0x290
[  324.768324][T19808]  __fib6_clean_all+0x234/0x380
[  324.773191][T19808]  ? __fib6_clean_all+0x9b/0x380
[  324.778157][T19808]  ? __pfx_fib6_ifup+0x10/0x10
[  324.782951][T19808]  ? __pfx___fib6_clean_all+0x10/0x10
[  324.788348][T19808]  ? __pfx_fib6_clean_node+0x10/0x10
[  324.793667][T19808]  ? __pfx_fib6_ifup+0x10/0x10
[  324.798463][T19808]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  324.804122][T19808]  rt6_sync_up+0x128/0x160
[  324.808559][T19808]  ? __pfx_rt6_sync_up+0x10/0x10
[  324.813511][T19808]  ? ipv6_mc_up+0x3da/0x580
[  324.818029][T19808]  addrconf_notify+0xd55/0x1010
[  324.822937][T19808]  notifier_call_chain+0x1b3/0x3e0
[  324.828067][T19808]  netif_state_change+0x284/0x3a0
[  324.833119][T19808]  ? mutex_is_locked+0x17/0x50
[  324.837901][T19808]  ? rcu_read_lock_held+0xa/0x50
[  324.842850][T19808]  ? __pfx_netif_state_change+0x10/0x10
[  324.848412][T19808]  ? dev_change_xdp_fd+0x1da/0x220
[  324.853539][T19808]  do_setlink+0x35de/0x41c0
[  324.858058][T19808]  ? __kernel_text_address+0xd/0x40
[  324.863275][T19808]  ? arch_stack_walk+0xfc/0x150
[  324.868178][T19808]  ? __pfx_do_setlink+0x10/0x10
[  324.873039][T19808]  ? stack_trace_save+0x9c/0xe0
[  324.877909][T19808]  ? __mutex_trylock_common+0x153/0x260
[  324.883990][T19808]  ? __pfx___mutex_trylock_common+0x10/0x10
[  324.889927][T19808]  ? rcu_is_watching+0x15/0xb0
[  324.894716][T19808]  ? trace_contention_end+0x39/0x120
[  324.900017][T19808]  ? __mutex_lock+0x335/0x1350
[  324.904808][T19808]  ? rtnl_newlink+0x8db/0x1c70
[  324.909603][T19808]  ? __pfx___mutex_lock+0x10/0x10
[  324.914668][T19808]  ? ns_capable+0x8a/0xf0
[  324.919009][T19808]  ? rtnl_link_get_net_capable+0x16a/0x350
[  324.924829][T19808]  rtnl_newlink+0x149f/0x1c70
[  324.929527][T19808]  ? netlink_sendmsg+0x805/0xb30
[  324.934489][T19808]  ? __pfx_rtnl_newlink+0x10/0x10
[  324.939541][T19808]  ? rcu_is_watching+0x15/0xb0
[  324.944317][T19808]  ? nlmon_xmit+0xb0/0x100
[  324.948742][T19808]  ? kmem_cache_free+0x18f/0x400
[  324.953706][T19808]  ? rcu_is_watching+0x15/0xb0
[  324.958497][T19808]  ? __dev_queue_xmit+0x27b/0x3b50
[  324.963634][T19808]  ? __local_bh_enable_ip+0x12d/0x1c0
[  324.969045][T19808]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  324.974782][T19808]  ? __dev_queue_xmit+0x27b/0x3b50
[  324.979915][T19808]  ? lock_release+0x4b/0x3e0
[  324.984530][T19808]  ? __dev_queue_xmit+0x27b/0x3b50
[  324.989744][T19808]  ? __dev_queue_xmit+0x27b/0x3b50
[  324.994957][T19808]  ? __dev_queue_xmit+0x1d79/0x3b50
[  325.000263][T19808]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  325.005404][T19808]  ? rcu_is_watching+0x15/0xb0
[  325.010197][T19808]  ? lock_release+0x4b/0x3e0
[  325.014821][T19808]  ? bpf_lsm_capable+0x9/0x20
[  325.019511][T19808]  ? security_capable+0x7e/0x2e0
[  325.024556][T19808]  ? __pfx_rtnl_newlink+0x10/0x10
[  325.029596][T19808]  rtnetlink_rcv_msg+0x7cc/0xb70
[  325.034549][T19808]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  325.039679][T19808]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  325.045157][T19808]  ? ref_tracker_free+0x63a/0x7d0
[  325.050204][T19808]  ? __asan_memcpy+0x40/0x70
[  325.054816][T19808]  ? __pfx_ref_tracker_free+0x10/0x10
[  325.060212][T19808]  netlink_rcv_skb+0x208/0x470
[  325.065097][T19808]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  325.070571][T19808]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  325.075911][T19808]  netlink_unicast+0x82c/0x9e0
[  325.080705][T19808]  ? __pfx_netlink_unicast+0x10/0x10
[  325.086010][T19808]  ? netlink_sendmsg+0x642/0xb30
[  325.090960][T19808]  ? skb_put+0x11b/0x210
[  325.095209][T19808]  netlink_sendmsg+0x805/0xb30
[  325.099994][T19808]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.105295][T19808]  ? futex_unqueue+0x22/0x240
[  325.109991][T19808]  ? aa_sock_msg_perm+0xf1/0x1d0
[  325.114933][T19808]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  325.120227][T19808]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.125540][T19808]  __sock_sendmsg+0x21c/0x270
[  325.130234][T19808]  ____sys_sendmsg+0x505/0x830
[  325.135023][T19808]  ? __pfx_____sys_sendmsg+0x10/0x10
[  325.140324][T19808]  ? import_iovec+0x74/0xa0
[  325.144846][T19808]  ___sys_sendmsg+0x21f/0x2a0
[  325.149545][T19808]  ? __pfx____sys_sendmsg+0x10/0x10
[  325.154758][T19808]  ? futex_wait+0x285/0x360
[  325.159347][T19808]  ? __fget_files+0x2a/0x420
[  325.164056][T19808]  ? __fget_files+0x3a0/0x420
[  325.168754][T19808]  __x64_sys_sendmsg+0x19b/0x260
[  325.173706][T19808]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  325.179175][T19808]  ? rcu_is_watching+0x15/0xb0
[  325.183943][T19808]  ? rcu_is_watching+0x15/0xb0
[  325.188708][T19808]  do_syscall_64+0xfa/0x3b0
[  325.193226][T19808]  ? rcu_is_watching+0x15/0xb0
[  325.197994][T19808]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.204070][T19808]  ? clear_bhb_loop+0x60/0xb0
[  325.208761][T19808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.214668][T19808] RIP: 0033:0x7f729258ebe9
[  325.219091][T19808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.238713][T19808] RSP: 002b:00007f72907f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  325.247161][T19808] RAX: ffffffffffffffda RBX: 00007f72927b5fa0 RCX: 00007f729258ebe9
[  325.255158][T19808] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  325.263228][T19808] RBP: 00007f7292611e19 R08: 0000000000000000 R09: 0000000000000000
[  325.271231][T19808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  325.279206][T19808] R13: 00007f72927b6038 R14: 00007f72927b5fa0 R15: 00007ffdf3a1fce8
[  325.287197][T19808]  </TASK>
[  325.290578][T19808] Kernel Offset: disabled
[  325.294904][T19808] Rebooting in 86400 seconds..