last executing test programs:

3.050490539s ago: executing program 2 (id=9871):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) (async)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x800, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9b1}]}}}]}, 0x50}}, 0x0)
r3 = socket$inet(0x2, 0xa, 0x6)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c0002800800040008000060db8f5c008100002006000e0002000000"], 0x4c}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0), 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0), 0x8)
socket$kcm(0x29, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000078a23b3ce4bbe64778ed9baf48f83a8e0080f901000000feffffff000008000500000000010c0014006f301db163200c273cbbfd185ae2a68fea8f7f38cc4c66476bc15818d225436702d76f14d5079fb8d1701add85d14ed8b066", @ANYRESDEC=r0], 0x28}}, 0x20004000) (async)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000078a23b3ce4bbe64778ed9baf48f83a8e0080f901000000feffffff000008000500000000010c0014006f301db163200c273cbbfd185ae2a68fea8f7f38cc4c66476bc15818d225436702d76f14d5079fb8d1701add85d14ed8b066", @ANYRESDEC=r0], 0x28}}, 0x20004000)

2.886806049s ago: executing program 1 (id=9873):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000)
r2 = socket(0x29, 0x2, 0x3)
r3 = socket(0x8, 0x3, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x61e0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x3}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r7, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40080}, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x80000000, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000600)="1f49717aae46536ec821dcc0400609caa2d3bdcb2791df96f030292b548a118ce278339ec0af973fcf7f66c2c9bbab03e1acaa4cbe1aa97d57150b01ada1ec08cfca2bb4ea03318d8fdd8b138abec8ace305dd9159e540", 0x57}], 0x1}}], 0x1, 0x8020)
accept(r0, &(0x7f0000000180)=@x25={0x9, @remote}, &(0x7f0000000280)=0x80)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRESHEX=r4, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYRES64=r5, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="12cdde26e7c496e99a9cf8625ec9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000000)=ANY=[], 0xa)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000200)=0x40005, 0x4)
sendmsg$inet(r10, &(0x7f00000024c0)={&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x24040000)

2.853261234s ago: executing program 3 (id=9875):
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0)

2.622654639s ago: executing program 2 (id=9877):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0xfffeffff}, 0xc)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x0)
recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/124, 0x7c}, {0x0}], 0x2}}], 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x83, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

1.918444851s ago: executing program 3 (id=9885):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xdd}, 0x94)
r0 = socket(0x2b, 0x80801, 0x1)
shutdown(r0, 0x7ffffffe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x480)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x3, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000061107e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

1.89020014s ago: executing program 4 (id=9886):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x2005, 0x4)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000040)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}}, 0x14}}, 0x8004)
setsockopt(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0x5, 0x4, {0x1, @usage=0x2ea, 0x0, 0x170f, 0xd08, 0x0, 0xfff, 0x542, 0x44, @struct={0xfff}, 0x800, 0x1, [0x9, 0x9, 0x80, 0x10000, 0x7]}, {0x7fff, @usage=0x7ff, 0x0, 0xdb2, 0x4c, 0x1ff, 0xffffffff, 0x0, 0x230, @usage=0x7fffffff, 0x7b85, 0x60f4, [0x7, 0x5, 0x1, 0x8, 0x1, 0x7]}, {0x2, @struct={0x0, 0xfffffff8}, 0x0, 0xbd, 0xfffffffffffffffa, 0x6, 0x6, 0xfffffffffffff000, 0x0, @struct={0x5, 0x80000001}, 0xc, 0x5, [0xb04a, 0x8000000000000001, 0x4, 0x100000001, 0xfffffffffffffff9, 0x3]}, {0x0, 0x6, 0x6}})
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000300000000000000", @ANYBLOB="0080220294bbf164"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000010116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

1.807182126s ago: executing program 3 (id=9887):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801, 0x20005}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_delrule={0x98, 0x21, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x80, 0x20, 0x2, 0xa0, 0x0, 0x0, 0x0, 0x10000}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x6}, @FRA_SRC={0x14, 0x2, @private1}, @FRA_SRC={0x14, 0x2, @mcast2}, @FRA_DST={0x14, 0x1, @local}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x3ff}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @remote}]}, 0x98}}, 0x40000)

1.619469542s ago: executing program 3 (id=9889):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x37c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{<r4=>r3, &(0x7f00000000c0)='nl80211\x00', 0x4400, &(0x7f0000000100)={@_ha_fsid={[0x9, 0x6]}, {0x7, 0x8, 0x1, 0x1}}, 0x8, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xa}, {[0x81, 0x4, 0x20000000, 0x6]}, 0x5debd8c7, 0x1b, &(0x7f00000001c0)=""/27})
sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x34}}, 0x40001)
getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x2}, &(0x7f0000000080)=0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
connect$llc(r4, &(0x7f0000000300)={0x1a, 0x2, 0x3, 0x2, 0xcb, 0x1, @random="ac1bb1c956d8"}, 0x10)

1.596366135s ago: executing program 2 (id=9890):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
syz_emit_ethernet(0x7e, &(0x7f0000000200)=ANY=[], 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@dstopts={{0x18, 0x29, 0x37, {0x2f}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}], 0x30}, 0x40440c0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.429825643s ago: executing program 4 (id=9891):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

1.427121026s ago: executing program 0 (id=9892):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000016"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x58, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x0, 0x99, {0x4, 0x33}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "d715ea621913e2acab00"}, @NL80211_ATTR_SSID={0xffffffffffffff36, 0x34, @random="27f3069794ffff00006275b217d7262308565eb6a0cd61b78a9034650d0c40bf"}, @NL80211_ATTR_MAC={0xfffffffffffffec4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x48000)

1.397120294s ago: executing program 1 (id=9893):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r3, @ANYBLOB="200008000a000100aaaaaaaaaabb000005000c000400000008000f0001"], 0x38}}, 0x0)
close(r0)

1.28221532s ago: executing program 3 (id=9894):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000044)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000140)={0x4, [0xff, 0x1, 0x1, 0xe]}, 0xc)
r5 = socket(0x2b, 0x80801, 0x1)
getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78)
getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f00000001c0), &(0x7f00000002c0)=0x4)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r7, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000ddffffffffff2b00000018000180140002007665746830"], 0x2c}}, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x4, &(0x7f0000000040)=0x1ff, 0x4)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x16, 0x0, &(0x7f00000000c0)=0x55)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={<r11=>0x0, <r12=>0x0}, &(0x7f0000000040)=0xc)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x1c, 0x23, 0x20, 0x70bd26, 0x25dfdbfc, {0x15}, [@typed={0x8, 0x110, 0x0, 0x0, @uid=r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a00", @ANYRES32=r13, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r12, @ANYRES8=r12], 0x44}, 0x1, 0x0, 0x0, 0x400c410}, 0x200400c5)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x278, 0x2c, 0x800, 0x2, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x10, 0x0, 0x0, @binary}]}, @nested={0x25c, 0x2, 0x0, 0x1, [@typed={0x4, 0x157}, @generic="05768e80143ecee4fc06c1b59736ec7bfa", @nested={0xdb, 0xc0, 0x0, 0x1, [@nested={0x80, 0x15a, 0x0, 0x1, [@typed={0x14, 0x55, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="3c0d825af76494bb332e51c1d2b94c117d512a49732c62f643ed86a7e602c994e1ab5200611627a8937a0055a01c9853f95c376abc3a13d210a6d5347467b10139a8b56958d7d7e744bcf9af9662842fb77d350fc2e515b75b25ed44eb342b60ffe60d19afbb8cb1"]}, @typed={0x8, 0x72, 0x0, 0x0, @uid=r12}, @generic="22d9bcd3b2aa0e29d5ae216cc722ee48f38217d051821fcf33e8bd7b1437cb7cf8f9063a7fad439ef9e430fe3deb649f0787169ad1230da1805670ec7f72f51270eaef", @typed={0xc, 0x17, 0x0, 0x0, @u64=0x5}]}, @typed={0x101, 0x14d, 0x0, 0x0, @binary="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"}, @generic="e73fe74c246a9406dd21cde98afce2878b116cd53bb9d565f90f77c5258aa6ff33f02dca3ff6d08d20e8fd601fd5781bcca8b0c1132919be2cbcff04f840f9eab5c4782d1384afe62a98799ef77b42", @nested={0xc, 0xf0, 0x0, 0x1, [@typed={0x8, 0xad, 0x0, 0x0, @pid=r11}]}, @typed={0x8, 0x87, 0x0, 0x0, @pid=r11}]}]}, 0x278}, 0x1, 0x0, 0x0, 0xc044}, 0xc050)

1.281455316s ago: executing program 1 (id=9895):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8930, &(0x7f0000000080)={'ip6tnl0\x00', 0x0})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8930, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)

1.279391216s ago: executing program 2 (id=9896):
r0 = socket(0x10, 0x3, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'gre0\x00', <r1=>0x0, 0x700, 0x8487, 0xe, 0x76, {{0x11, 0x4, 0x2, 0x8, 0x44, 0x66, 0x0, 0x55, 0x29, 0x0, @loopback, @local, {[@noop, @generic={0x86, 0xf, "e2444fd96005768da1c10647ca"}, @end, @noop, @ssrr={0x89, 0x1b, 0xee, [@multicast2, @local, @multicast2, @loopback, @private=0xa010102, @loopback]}]}}}}}) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, r2, 0x0, 0x7}, 0x38)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@getstats={0x1c, 0x5e, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x2}, [""]}, 0x1c}}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071187f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

1.202132576s ago: executing program 0 (id=9897):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="0d72d4caa6a87d9d5e8722b43bf8f05a9ed0d480c0fc0987deb6d36918eaa5dbbf7f77fb2266d480a27bebe499603eaf4df20e1476657f99741546025833734f9c61de228ecb5980267ff4a87f182440dfcf06cdd78638a8c507f015ec6cc3e5ad4c910a53ddef082becd53ffad818e4e8131aeedeb93be2a40733b55f274112596a4ac52041ae57e01e903d5b660ce65dccba7dccabcea8b98c1250ab3c3468990401b444d52197722e0e067f8e49ee9f10d1f9ce02e9394930924d55ab885a825ea3bbe11ef766821e", 0xca}, {&(0x7f0000000100)="b23838462bf5da4d08224c7a9423149a3fe3c0cbf4a87d112f1bbd5ca5ee2d49eec79cb42ade1b7bda68", 0x2a}, {&(0x7f0000000140)="7ef261ca35148a2000ababa9700c0c9e4a4f", 0x12}], 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}}, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x85}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x521}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x98}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa075}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x52a}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff0751}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44840}, 0x2404c884)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe4, r5, 0x710, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10, {0x4, 0xf771, 0x4, 0x5}}}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}, @NL80211_ATTR_BSS_SELECT={0x18, 0xe3, 0x0, 0x1, {0x14, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xc}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x2}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200, {0x7, 0x2a33, 0x9, 0xfe}}}, @NL80211_ATTR_BSS_SELECT={0x50, 0xe3, 0x0, 0x1, {0x4c, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5f}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0x5}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x6d}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x6}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xa, 0x3}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x4}]}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x1, 0x7, 0x0, {0x1, 0x7, 0x0, 0x9}, 0x1, 0x9}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x40800)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r1)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000cc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f00000007c0)={0x4b4, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffeffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b13}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe4a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5009}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfe2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x9b}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x44ae}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0a2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0xdb, 0x3, "f48330a76bde98659a5322cec2ca05f30d7c257b5fa2fa73eced1470068282891005ed579d20e388b5af8159377cc3bd878e64629c5c7cf84a95daa9c858b094792d6026cb89d1a508c122993e0a9764e37026379e7b5f7c925d9f462fe4b94a74fe65c9789d0d219f18511c35f29ad6f5a80d7ef152bb4e29d971bace81c776b706dc74b763decabb54868ab422630e753fcb03acd448a7245f1459ec97911e30ed538c3ac16854a202e76abaec405e99ac9d02213609bd256b98b4738affe3ffe898f297266dda15e575595ebda375ba69a390444763"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "5ece70138ae5746c18f27709003ad09760433030d769b0bfa0528e56f5a4ed7eee"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34b4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa9d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20840}, 0x4000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, r9, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8804}, 0x800)
socket$inet6_udp(0xa, 0x2, 0x0)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r4)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r10, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9e0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0xbc, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2f}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c6d31fc0c84d7fbf3e5054910d"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x11, 0x4, "891e0fd7b114469c5d663a0f2f"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "11f7b661d0af8f25ba0e8fb134"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c5782aa2849662c56a6ff24cf0"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2ad034075e"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0xbc}, 0x1, 0x0, 0x0, 0x48015}, 0x80)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000001180), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000011c0)=<r12=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001200)=<r13=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001240)=<r14=>0x0)
sendmsg$NFC_CMD_DISABLE_SE(r8, &(0x7f0000001340)={&(0x7f0000001140), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x4c, r11, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x20000050)
r15 = syz_genetlink_get_family_id$mptcp(&(0x7f00000013c0), r4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={0x1, 0x58, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r16=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001540)={'ip6_vti0\x00', &(0x7f00000014c0)={'ip6gre0\x00', <r17=>0x0, 0x4, 0x6, 0xf7, 0x7, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2, 0x7, 0x80, 0x8, 0xffffff81}})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000017c0)={&(0x7f0000001380), 0xc, &(0x7f0000001780)={&(0x7f0000001680)={0xf4, r15, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r16}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r17}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6e}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4001}, 0x4008890)

1.201773866s ago: executing program 4 (id=9898):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x48, 0x15, 0x1, 0x7fffc, 0x4, {0x5}, [@nested={0x4, 0x48}, @nested={0x24, 0x1, 0x0, 0x1, [@generic="99ee184ed7cff1b09859201e0d6311282226ff210caff964505a9351c663903f"]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c800}, 0x4008094)
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}}, 0x8000)

1.15360196s ago: executing program 1 (id=9899):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x22, 0x2, 0x1)
ioctl$IMGETVERSION(r1, 0x80044944, &(0x7f0000000000)) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', <r2=>0x0}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

1.02632958s ago: executing program 2 (id=9900):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x0, 0x703, {0x0, 0x0, 0x0, 0x0, 0x40220, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x8001}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

1.025984856s ago: executing program 4 (id=9901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00')
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000100))
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x300}, 0x14}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008881)

858.459023ms ago: executing program 0 (id=9902):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014a3dcd55c030000000000008500000005000000bf09000000000000c6090100000003e70600000006000000180100002020702500000000002020207b9af8ff00000000ae9100000000000037010000f8ffffffb702000008000000b70300000000000114000000060000005c93000000000000b5030000b68f3f208500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

843.982705ms ago: executing program 3 (id=9903):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x118)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)

843.018437ms ago: executing program 4 (id=9904):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
connect$llc(r1, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10)
listen(r1, 0x9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r3, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0xb}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2520000}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x100}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x54}}, 0x8040000)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet(0x2, 0xa, 0x803)
setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @loopback, 0x1, "c53bcb64095e68ee06143c02c330428fade4b3b7d8aaf2ecb344bc41aedbb5fa", 0x9, 0x1000, 0x9, 0x2}, 0x3c)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)

841.749586ms ago: executing program 1 (id=9905):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r2=>0x0)
sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x44050)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xfffb, 0x2, [0x3, 0x10]}, 0xc)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240))
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4040)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r7, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x54}, 0x1, 0x0, 0x0, 0xa1ee4b37f44a2cc2}, 0x80)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}]}, 0x3c}}, 0xa1)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040894}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000880)={'team0\x00', <r10=>0x0})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000008c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$nl_route_sched_retired(r9, &(0x7f0000001b40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000900)=@deltclass={0x11f8, 0x29, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x7}, {0x1, 0xfff1}, {0xa, 0x3}}, [@c_cbq={{0x8}, {0x438, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x7f, 0x1, 0x7, 0x0, 0x5, 0x9, 0x2, 0x4, 0x5, 0x2, 0x3, 0x8, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x80, 0x60f2, 0x9, 0xffffe02a, 0x80000000, 0x7f, 0x4, 0x8, 0x3, 0xc1e, 0x8, 0x6, 0x78, 0x0, 0x2, 0x0, 0x0, 0x4, 0x2, 0x7, 0x9, 0x129a, 0x4, 0x4, 0x6, 0xa98a, 0x40, 0x6, 0x100, 0xfffffff7, 0xf, 0x2f, 0x2, 0x200, 0x7, 0x80000000, 0xcf, 0x8, 0xc, 0x236, 0x1, 0x7, 0x1, 0x10000, 0x40, 0x7, 0x87, 0x1ff, 0x2, 0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x2, 0x2, 0x7d8, 0x0, 0x8, 0x1, 0x3, 0x7fff, 0x3, 0x10000, 0x6, 0x3, 0x7, 0x5, 0x3, 0x0, 0x3, 0xfffeffff, 0x2, 0x0, 0x3, 0x7, 0x5, 0xf0e, 0x2, 0xfff, 0x1aba, 0x2, 0x401, 0x8, 0x1, 0x2, 0x6, 0xffffffff, 0x7f, 0x70, 0xfd5e, 0x9, 0x8, 0x4000, 0xbe, 0x5, 0xd0e, 0xffff, 0x5, 0xd, 0x3ff, 0x0, 0x2, 0x6, 0x80, 0xd4ff, 0xc1, 0x0, 0x6, 0x80, 0x3, 0x5, 0x9, 0x4, 0x7fffffff, 0xc, 0x400, 0x5, 0x9, 0x2, 0xffffff7f, 0x9, 0x1, 0xa, 0x9, 0x9, 0x5, 0x26, 0x6, 0x7ff, 0x2, 0x0, 0x10001, 0xe96, 0x2000000, 0x6, 0x32d, 0x90c, 0x8, 0x0, 0xfff00000, 0x5, 0x6, 0xfffffe00, 0xa, 0x6, 0x80000001, 0x5d, 0x1, 0x4, 0x7, 0x5, 0x5, 0x1, 0x3, 0x90e, 0xfff, 0x5, 0x1, 0x1000, 0x0, 0x3, 0x8000, 0x80, 0x4, 0xffffffff, 0x1, 0x3, 0x7, 0x8, 0x6ee, 0x8, 0x800, 0x200, 0x388, 0x0, 0x1, 0xfffffff9, 0x0, 0x6, 0x1000, 0x95, 0x4, 0x1, 0xa, 0x8a56, 0x1, 0x2, 0x10000, 0x5, 0x6, 0x401, 0x8, 0x7fff, 0x1, 0x0, 0x1ff, 0x7, 0x1000, 0x1, 0x0, 0xe, 0x8, 0x0, 0x259, 0xb, 0x2, 0x8, 0x9, 0xdc, 0x6, 0x2, 0x5, 0x1, 0x1000, 0x7fff, 0x80000000, 0x8, 0x2, 0x4, 0xc, 0x2fa, 0x177, 0xd, 0xdbbf, 0xd81, 0x0, 0x8, 0xe3, 0x1, 0x5, 0x8, 0x17ce, 0xf2, 0x6, 0xfffffff3, 0x9, 0x681]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xfff2}, 0x0, 0x10000}}, @TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x2, 0x9, 0x4, 0x739, 0x89b}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x4}, 0x6, 0xf}}]}}, @c_atm={{0x8}, {0x64, 0x2, [@TCA_ATM_FD={0x8, 0x1, r8}, @TCA_ATM_FD={0x8, 0x1, r8}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffff, 0xa}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xb}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0x6}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x10, 0xfff3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0xffff}}, @TCA_ATM_HDR={0x27, 0x3, "019ce35a49b5c580df9839af30dbe3ac289dcebafe076452704ef72a67ec84c071631a"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xb7}}}, @c_atm={{0x8}, {0x88, 0x2, [@TCA_ATM_FD={0x8, 0x1, r8}, @TCA_ATM_HDR={0x20, 0x3, "728278be0d580c67584d65d2e4714774bfdd4ffbc9e5f4498bf829b0"}, @TCA_ATM_FD={0x8, 0x1, r12}, @TCA_ATM_HDR={0x15, 0x3, "f7fff826c762220a2375e0f31abf56d04a"}, @TCA_ATM_FD={0x8, 0x1, r8}, @TCA_ATM_HDR={0x20, 0x3, "c7374a8cb5da048f02ddb8b12ce8898eb0e71aba6f5e57f42e19c9b6"}, @TCA_ATM_HDR={0x12, 0x3, "3f9b58eafc379037b9917c02fe8a"}]}}, @c_cbq={{0x8}, {0xc78, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0xf, 0x1, 0x12, 0x0, 0x8, 0x1, 0x6423, 0xc933}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0xc, 0xffffffff, 0x80, 0xfffff1fe, 0x9, 0x3, 0x9, 0xb436, 0x81, 0xe0000000, 0x8000, 0x6, 0x8, 0x5, 0x6, 0xc, 0xb, 0xe, 0x1, 0x942, 0x6, 0x7, 0x4, 0x80000000, 0x80000001, 0xffffffff, 0x9d2, 0x2, 0xc7, 0x3ff, 0x96, 0x4, 0x7, 0x6, 0x3, 0x7fffffff, 0xde8, 0x7b, 0x7, 0x6, 0x7ff, 0x0, 0x7, 0x35a5, 0x1, 0x7, 0xd, 0x0, 0x8, 0x7ff, 0x4, 0x2, 0xb65, 0x6, 0x6, 0xc, 0x10, 0x6, 0x4, 0x1ff, 0x6, 0x40, 0x80008000, 0xd, 0x4, 0x2, 0x9, 0x80000001, 0x8, 0xb9, 0x4b200000, 0x9, 0x8, 0x7, 0x101, 0xe52, 0x0, 0x5b, 0xfff, 0xfffffffd, 0x287, 0x7, 0x6, 0x4, 0xc3, 0x3, 0x601ef5be, 0x8, 0x7fffffff, 0x6, 0xff, 0x4, 0x7, 0x7ff, 0x2, 0x10001, 0x8, 0x9b6f, 0x10, 0x10000, 0x1, 0x1, 0x204, 0x3, 0x5, 0x3, 0x1, 0x80000001, 0x4, 0x7f, 0x0, 0x5, 0xf9, 0xc, 0xfffffffa, 0x8, 0x4, 0x0, 0x3, 0x5, 0x6, 0x5, 0xd1, 0x5, 0xe66, 0x8, 0x6, 0x3, 0x5, 0x6, 0x5, 0x9, 0xfb1, 0x2, 0x10000, 0x2, 0x8, 0x9, 0x26, 0x8, 0x0, 0x4, 0x3e24, 0x4, 0x10000, 0x401, 0x8, 0x7, 0x9, 0x0, 0xfff, 0x1ff, 0x0, 0x100, 0x5, 0x4, 0x2, 0x5, 0x8, 0x3, 0x3, 0x3, 0x4, 0x9, 0x3, 0x2f, 0x4, 0x18bc, 0x7, 0x0, 0x2, 0x2, 0x7, 0xa, 0x7a, 0xed7, 0x4ad6, 0x0, 0x5, 0x4, 0x6, 0x9, 0x8, 0x5, 0x10, 0x7, 0x1, 0x80000000, 0x4, 0x8, 0x6, 0x4, 0xa4, 0x1e0000, 0xbd, 0xfffffffd, 0x0, 0x7, 0x0, 0x8, 0x1, 0x0, 0x400, 0x6, 0x0, 0x100, 0x1, 0x5, 0xfffffff9, 0x2, 0x6, 0x1, 0x1, 0x7, 0x7d7cf60f, 0x8, 0x970, 0x1ff, 0x80000000, 0x1, 0x7ff, 0x6, 0x6, 0x2, 0x2, 0x8, 0x40, 0x0, 0x7, 0xfffffffb, 0x4, 0xd1, 0x1, 0x8, 0xb, 0x9, 0x0, 0xfffffff7, 0x100, 0x578d, 0x1, 0x955, 0xfffffffe, 0x1f9f, 0x616131df, 0x6a0, 0x3ff, 0x3, 0x7, 0x5, 0x101, 0x400, 0x7fff, 0x101, 0x2]}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x2, 0x8eae, 0x6, 0x1, 0x4}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x0, 0x7, 0x3ff, 0x1, 0x9}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1, 0x0, 0x8, 0x10, 0x8, 0x3, 0x2, 0x2}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x9, 0x7, 0x5, 0x6, 0xfff, 0x6d898c6a, 0x3, 0x5, 0xfffffff8, 0x8a1, 0x1, 0xc, 0x5, 0x6, 0x1000, 0x10000, 0xfff, 0x0, 0x101, 0x300, 0x4, 0x101, 0xffffdba8, 0x34eb, 0x2, 0x3, 0x2, 0x0, 0x5f5c, 0x6d, 0x95, 0x100, 0x4, 0xfffffffd, 0x50ba, 0x4, 0x9, 0x80000000, 0x1, 0x1, 0xfffffffa, 0x5, 0x7, 0x1ff, 0x9, 0xd, 0x3, 0x4, 0x0, 0x0, 0x7ff, 0x88, 0x5, 0x3, 0x2, 0x9, 0x9, 0x80, 0x3ff, 0x8, 0x5, 0x81, 0x3, 0x1, 0x6, 0x841c, 0x2, 0x4, 0x1, 0x6e, 0x1, 0x2, 0x5, 0x6, 0x7, 0x7, 0x6, 0x3, 0xffd, 0x0, 0x1ba21979, 0x7ff, 0xfffffff7, 0x6, 0x0, 0x7, 0x22f, 0xa337, 0x4, 0x200, 0x1, 0x5, 0x9, 0x40, 0x3, 0x2, 0x4, 0x0, 0x4000, 0x200, 0x4, 0x4, 0x37, 0x6, 0x5, 0x7f, 0x0, 0x6, 0x4, 0x9, 0x40, 0x17, 0x40, 0x40b8, 0x80000001, 0xedd, 0xfffffffd, 0xfd47, 0x3, 0x1, 0x7, 0x9, 0x400, 0x9, 0x1000, 0x400, 0x9, 0x0, 0x1, 0x7fffffff, 0x9, 0x8f3, 0x4cef, 0x5, 0x9, 0xf, 0x7, 0x1, 0x7, 0xd85, 0x62e107a5, 0x4, 0x6, 0x3, 0x6, 0x8, 0x7f, 0x9, 0x650, 0xf, 0x7fffffff, 0x2, 0x0, 0x3ff, 0x3, 0x5, 0x70cf, 0x7, 0xbe79, 0x8, 0x3, 0x648, 0x7, 0x8001, 0xde6, 0x2, 0x6, 0x6, 0x9, 0x8, 0x4, 0x5e2a, 0x1, 0x0, 0x4, 0xb86, 0x95a, 0x3, 0xfffffff8, 0x1, 0x7fff, 0x9, 0xc9, 0x8, 0x1, 0x5, 0x6, 0x724, 0x1, 0x6, 0x0, 0x1, 0x4, 0x6, 0x4, 0x5, 0x3697, 0x9, 0x5, 0x7fffffff, 0x8, 0x3, 0x8, 0x81, 0x81, 0xfffffffa, 0x2, 0x80, 0x100, 0x9, 0xca75, 0xb, 0x9, 0x58a, 0x7, 0x6, 0x10e, 0x0, 0x10, 0x7a4, 0xd7, 0x9, 0xff, 0x6, 0x400, 0x9, 0xffffffff, 0x7, 0x40, 0x40, 0x5ed6, 0x80000000, 0x401, 0xbda1, 0x1000, 0x6, 0x3, 0xef47e0a8, 0x7, 0x200000, 0x9, 0x3ff, 0x0, 0xb2, 0x4, 0x8, 0x9, 0x5b2, 0x3, 0x0, 0x40, 0x2, 0x0, 0x7, 0x4, 0x6]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2e, 0x2, 0xc, 0x9, 0x7fcc, 0x6, 0xca, 0xe086}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xc6e0, 0x2, 0x5, 0xc2a, 0x7, 0x2, 0x1000, 0x5, 0x1, 0xa7, 0x2, 0x7, 0x96f, 0x6, 0x3, 0x3, 0x800, 0x33c0, 0x2, 0x7, 0x5, 0x1, 0xde, 0x3, 0x0, 0x200, 0x8, 0x9, 0x100000, 0x9, 0x2, 0x3, 0x8, 0x6, 0x4, 0x6, 0x2, 0x2, 0x200, 0x8, 0xd1d, 0x2, 0x7, 0x7, 0xfffffffc, 0x7, 0x4, 0x101, 0x4, 0x10001, 0xb4f, 0x5, 0x5, 0xfff, 0x1, 0x6, 0x7, 0x7ff, 0x7f, 0x3, 0x1, 0x6fbf, 0x7, 0x7fff, 0x40, 0x20f, 0xaa, 0x2, 0x3, 0x300, 0x7, 0x0, 0x9f, 0x2c000000, 0x401, 0xe76a, 0x2, 0x6, 0x8, 0xfffffffb, 0x7fffffff, 0x2, 0xe, 0x4, 0x5, 0x81, 0x7fffffff, 0x3, 0xfffffff9, 0x8, 0x1ffe00, 0x80, 0x0, 0x8, 0x7, 0x9, 0x3ff, 0x97ac, 0xe, 0x9, 0x2, 0x401, 0x4, 0x3, 0x7, 0xff, 0x6, 0x4, 0x9, 0x3, 0x0, 0xcd, 0x8, 0x4, 0x3, 0x9, 0x7, 0xf, 0x3, 0x2, 0x6, 0x5, 0x37, 0x5, 0x6, 0x7ff, 0xe51, 0x1, 0x4, 0x8, 0xffff, 0x8, 0x7, 0x5, 0x3, 0x70cdebf9, 0x6c, 0xfffffffb, 0x2, 0x7, 0xfffffff8, 0x7fffffff, 0x0, 0x100, 0xc, 0x4, 0x1, 0xaeb, 0x4, 0xfffffffb, 0x8, 0x9, 0xe, 0x3, 0xa, 0x6, 0x0, 0x615, 0x1, 0xe, 0x9, 0x5, 0x65, 0xa, 0xfff, 0x2, 0x4, 0x0, 0x7, 0x200, 0x5, 0x400, 0x10, 0xffffffff, 0x0, 0x7, 0x2, 0x7fff, 0x7, 0x8, 0x2, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x10, 0x5, 0xdf, 0x1, 0xf, 0x5, 0xa799, 0x81, 0x6, 0x4, 0xfff, 0x494, 0x245, 0x4c0, 0x9, 0x1, 0x2, 0x1, 0x7, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x2, 0x861, 0x5, 0xf4fd, 0x6, 0x71, 0x2, 0x4, 0x6, 0x8, 0x6, 0x9, 0x2, 0x401, 0x4856, 0x8, 0x4, 0x80000001, 0x8001, 0x99b0, 0x4, 0x80000001, 0x8b, 0x8, 0x5, 0x80000001, 0x0, 0x7, 0x7ff, 0x8, 0x1db2c00, 0x5, 0x400, 0xffffffc0, 0x4, 0x9c, 0x9, 0x1, 0x4, 0x20000, 0x401, 0xe1, 0x80000000, 0x3]}]}}]}, 0x11f8}, 0x1, 0x0, 0x0, 0x850}, 0x44045)
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001bc0), r6)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001c00)={'wpan1\x00', <r14=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, r13, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x34}}, 0x4000090)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r11, 0x8002f515, &(0x7f0000001d00))
r15 = accept(r11, &(0x7f0000001d40)=@phonet, &(0x7f0000001dc0)=0x80)
sendto$inet6(r15, &(0x7f0000001e00)="340178d1889d491226a3a8401662c99597c7c9b413193831bc16de5cd026cfcc027e650014b50fec83c9c371fe548643f8599abb23e1be9a575d4d608f0565dfc2e0846edcd5e395b515baacc23a668075f0c917a1b2638b6a200dfcd8bf7557dd1a9411dfde27cd772def11bc8e9786e4ca9c7ec50654ba69dacc8339280fe0cf4808f780ed7812a774cb4c492bdae4fb010c399a1fa15f", 0x98, 0x40, &(0x7f0000001ec0)={0xa, 0x4e23, 0x61, @private0, 0x3}, 0x1c)
listen(r3, 0x6)
r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f40), r15)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r15, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x44, r16, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x83}, 0x40)

724.627243ms ago: executing program 0 (id=9906):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

566.071991ms ago: executing program 0 (id=9907):
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d022bbd7000fe04000000087715348612c67041000300060000000500060002000000"], 0x34}}, 0x4000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0xe0, 0x700001b, 0x148, 0xe0, 0x148, 0x178, 0x206, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xb8, 0xe0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@socket0={{0x20}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270)
ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @multicast2}, {0x306, @random="3c06cd95d0ce"}, 0x40, {0x2, 0x4e20, @multicast2}, 'macvlan1\x00'})
syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d022bbd7000fe04000000087715348612c67041000300060000000500060002000000"], 0x34}}, 0x4000) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0xe0, 0x700001b, 0x148, 0xe0, 0x148, 0x178, 0x206, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xb8, 0xe0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@socket0={{0x20}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) (async)
ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @multicast2}, {0x306, @random="3c06cd95d0ce"}, 0x40, {0x2, 0x4e20, @multicast2}, 'macvlan1\x00'}) (async)

269.131373ms ago: executing program 2 (id=9908):
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x9, 0x8, 0x9}, 0x10)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={<r1=>0x0, 0x3, 0x20}, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={<r2=>r1, 0xfff}, &(0x7f0000000100)=0x8) (async)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r3, 0x89e2) (async, rerun: 32)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000140)=0x227, 0x4) (async, rerun: 32)
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x30) (async)
r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) (async)
r5 = accept4$rose(r3, 0x0, &(0x7f0000000280), 0x0)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000300)) (async)
recvfrom$rose(r5, &(0x7f0000000340), 0x0, 0x40012000, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000400)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_getnetconf={0x34, 0x52, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7fffffff}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x200}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6d}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x6}]}, 0x34}}, 0x40014)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) (rerun: 64)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000041)
r10 = socket$inet6_sctp(0xa, 0xdae4f6aff5ba9efc, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, &(0x7f0000000680)={r1, @in6={{0xa, 0x4e23, 0x4, @loopback, 0x8}}, 0xa, 0x3fe6800, 0x7, 0x52, 0x5}, &(0x7f0000000740)=0x98) (async)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000780)=0x9, 0x4) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000007c0)={'veth0_to_bridge\x00', @multicast})
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000800)={r2, 0x9}, &(0x7f0000000840)=0x8) (async)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x10}, 0x18)
ioctl$NILFS_IOCTL_GET_CPINFO(r11, 0x80186e82, &(0x7f00000009c0)={&(0x7f0000000900)=[{0x1, 0x0, 0x5, 0x40, 0xfff, 0x1, 0x3, 0xb}, {0x3, 0x0, 0x4, 0x800, 0x8000000000000001, 0x94, 0x2, 0x2}, {0x1, 0x0, 0x6, 0x6, 0x10000, 0x401, 0x8000, 0x6}], 0x3, 0x38, 0x1, 0x8})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000a00)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0xffff, 0x0, 0x2, 0xe, 0x0, 0x1}, &(0x7f0000000a40)=0x20)

138.177774ms ago: executing program 0 (id=9909):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x2c8, 0x370, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c5090000190f0020c3aaf0ff50000000bf8600000000000016080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000af9800000000000056080000000000008500000007000000b7000000f100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe, '\x00', r3, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) (async, rerun: 32)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=@base={0x18, 0x1, 0x6e0, 0x90, 0x1012, 0xffffffffffffffff, 0xfffffff8, '\x00', r3, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x1a, 0x1f, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0xa, 0xb, 0x4, 0xfffffffffffffef4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @tail_call, @ldst={0x1, 0x3, 0x2, 0x1, 0x1, 0x4, 0xfffffffffffffff8}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000c40)='GPL\x00', 0x8, 0x1000, &(0x7f0000000c80)=""/4096, 0x41000, 0x48, '\x00', r3, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000001c80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001cc0)={0x2, 0xe, 0x40, 0xfffffff9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002000)=[r5, 0x1, r6, r7, r1, r8], 0x0, 0x10, 0xb}, 0x94)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRESDEC, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32)
r13 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) (async)
pipe(&(0x7f0000000040)={<r14=>0xffffffffffffffff})
ioctl$int_in(r14, 0x5421, &(0x7f00000003c0)=0x3d49)
read$alg(r14, &(0x7f0000000140)=""/116, 0x74) (async)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000021e9d4e7f07085781f02000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r15], 0x5c}}, 0x40)

61.803783ms ago: executing program 4 (id=9910):
socket(0x11, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x3d, 0x0, 0x1}, {}, {0x6}]}, 0x10)

0s ago: executing program 1 (id=9911):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
syz_extract_tcp_res(&(0x7f0000000280)={0x41424344, <r4=>0x41424344}, 0x9, 0xfff)
syz_extract_tcp_res(&(0x7f00000002c0)={0x41424344, <r5=>0x41424344}, 0x7f, 0x80)
write$tun(r2, &(0x7f0000000480)={@void, @val={0x2, 0x1, 0xffff, 0x10, 0x1ff, 0xe}, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x56}, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x6, 0x6, "e26419", 0x4d, 0x6, 0x0, @rand_addr=' \x01\x00', @remote, {[@fragment={0x6, 0x0, 0xff, 0x1, 0x0, 0x1, 0x67}], {{0x4e24, 0x4e23, r4, r5, 0x0, 0x0, 0x9, 0x10, 0x1, 0x0, 0xd, {[@window={0x3, 0x3, 0x8}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x5, 0xf989, "ab"}, @sack_perm={0x4, 0x2}]}}, {"33fbe1a09d3b66c6fdcf58b0aea1aba064920984b866e1c061b5cdd7243c498a3d"}}}}}}}}, 0x95)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
r13 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$inet6_int(r13, 0x29, 0x1a, 0x0, 0xfdb7)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7ff}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x8000)

kernel console output (not intermixed with test programs):

ss `syz.1.8180'.
[  990.889948][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8180'.
[  990.916136][ T4556] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8180'.
[  990.975773][ T4570] Cannot find add_set index 46338 as target
[  991.410714][ T4601] netlink: 'syz.2.8193': attribute type 1 has an invalid length.
[  991.707531][ T4616] ip6erspan0: entered promiscuous mode
[  991.723289][ T4620] tipc: MTU too low for tipc bearer
[  991.960328][ T4637] netlink: 'syz.1.8207': attribute type 1 has an invalid length.
[  992.035568][ T4637] 8021q: adding VLAN 0 to HW filter on device bond7
[  992.158651][ T4637] vlan5: entered promiscuous mode
[  992.163925][ T4637] bond7: entered promiscuous mode
[  992.169803][ T4637] vlan5: entered allmulticast mode
[  992.185108][ T4637] bond7: entered allmulticast mode
[  992.482865][ T4667] xt_CT: You must specify a L4 protocol and not use inversions on it
[  992.649088][ T4681] netlink: 'syz.1.8219': attribute type 1 has an invalid length.
[  993.333440][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  993.505803][ T4718] netlink: 'syz.3.8232': attribute type 10 has an invalid length.
[  993.513705][ T4718] __nla_validate_parse: 22 callbacks suppressed
[  993.513733][ T4718] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8232'.
[  993.583865][ T4718] bond9: (slave bond_slave_1): Device is not bonding slave
[  993.591144][ T4718] bond9: option active_slave: invalid value (bond_slave_1)
[  993.602131][ T4718] bond9 (unregistering): Released all slaves
[  993.621559][ T4723] netlink: 'syz.0.8234': attribute type 3 has an invalid length.
[  993.651076][ T4724] netlink: 'syz.0.8234': attribute type 10 has an invalid length.
[  993.697463][ T4724] mac80211_hwsim hwsim78 wlan1: left allmulticast mode
[  993.849222][ T4735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8237'.
[  993.857554][ T4737] sctp: [Deprecated]: syz.1.8238 (pid 4737) Use of int in max_burst socket option deprecated.
[  993.857554][ T4737] Use struct sctp_assoc_value instead
[  994.001617][ T4743] netlink: 'syz.1.8238': attribute type 64 has an invalid length.
[  994.013901][ T4743] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8238'.
[  994.498566][ T4766] syzkaller0: entered promiscuous mode
[  994.504343][ T4766] syzkaller0: entered allmulticast mode
[  994.512840][ T4768] openvswitch: netlink: IPv6 tunnel dst address is zero
[  994.517587][ T4766] tcf_pedit_act: 22 callbacks suppressed
[  994.517606][ T4766] tc action pedit offset must be on 32 bit boundaries
[  994.520308][ T4768] openvswitch: netlink: IPv6 tunnel dst address is zero
[  994.520838][ T4769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8248'.
[  994.551591][ T4766] tc action pedit offset must be on 32 bit boundaries
[  994.558394][ T4766] tc action pedit offset must be on 32 bit boundaries
[  994.565211][ T4766] tc action pedit offset must be on 32 bit boundaries
[  994.572042][ T4766] tc action pedit offset must be on 32 bit boundaries
[  994.578911][ T4766] tc action pedit offset must be on 32 bit boundaries
[  994.586008][ T4766] tc action pedit offset must be on 32 bit boundaries
[  994.592803][ T4766] tc action pedit offset must be on 32 bit boundaries
[  994.599660][ T4766] tc action pedit offset must be on 32 bit boundaries
[  994.606593][ T4766] tc action pedit offset must be on 32 bit boundaries
[  994.613424][ T4766] TC_ACT_REPEAT abuse ?
[  994.943331][ T4783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8254'.
[  994.989719][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8252'.
[  995.007580][ T4790] xt_TPROXY: Can be used only with -p tcp or -p udp
[  995.076858][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8252'.
[  995.169864][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8256'.
[  995.583754][ T4815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8262'.
[  995.775602][ T4824] batman_adv: batadv0: Removing interface: batadv_slave_0
[  995.784073][ T4824] batman_adv: batadv0: Removing interface: batadv_slave_1
[  995.886572][ T4828] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.8262'.
[  996.430964][ T4839] wg1 speed is unknown, defaulting to 1000
[  997.182203][ T4891] netlink: 'syz.4.8281': attribute type 10 has an invalid length.
[  997.221527][ T4891] team0 (unregistering): Port device team_slave_1 removed
[  997.233055][ T4891] team0 (unregistering): Port device batadv1 removed
[  997.369158][ T4896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  997.792964][ T4913] ip6gre1: entered promiscuous mode
[  997.811825][ T4913] ip6gre1: entered allmulticast mode
[  997.885342][ T4913] Timeout policy `syz1' can only be used by L3 protocol number 34948
[  998.100450][ T4930] xt_l2tp: invalid flags combination: 0
[  998.299621][ T4945] netlink: 'syz.2.8292': attribute type 4 has an invalid length.
[  998.320510][ T4949] netlink: 'syz.2.8292': attribute type 4 has an invalid length.
[  998.405511][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  998.732123][ T4972] xt_hashlimit: size too large, truncated to 1048576
[  998.761654][T23794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  998.801931][T23794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  998.891193][ T4975] __nla_validate_parse: 10 callbacks suppressed
[  998.891218][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8301'.
[  998.915634][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  999.109117][ T4989] bridge_slave_0 (unregistering): left allmulticast mode
[  999.116255][ T4989] bridge_slave_0 (unregistering): left promiscuous mode
[  999.123370][ T4989] bridge0: port 1(bridge_slave_0) entered disabled state
[  999.421598][ T5021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8314'.
[  999.431621][ T5021] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8314'.
[  999.443457][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8314'.
[  999.537705][T23794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  999.652586][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  999.667465][ T1272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  999.693373][ T1262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  999.800504][ T5036] xt_bpf: check failed: parse error
[ 1000.079105][ T5046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.087782][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.102115][T19191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.111025][T19191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.119957][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8323'.
[ 1000.129727][ T5046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8323'.
[ 1000.143994][ T5044] tap0: tun_chr_ioctl cmd 1074025672
[ 1000.150969][ T5044] tap0: ignored: set checksum disabled
[ 1000.157212][ T5044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8322'.
[ 1000.265782][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.276299][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.400754][ T5060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8322'.
[ 1000.916291][ T5078] netlink: 'syz.1.8333': attribute type 1 has an invalid length.
[ 1000.926142][ T5078] netlink: 'syz.1.8333': attribute type 2 has an invalid length.
[ 1000.964050][ T5075] netlink: 'syz.4.8331': attribute type 51 has an invalid length.
[ 1001.082584][ T5075] netlink: 592 bytes leftover after parsing attributes in process `syz.4.8331'.
[ 1001.262882][ T5085] erspan0: entered promiscuous mode
[ 1001.279252][ T5086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8335'.
[ 1001.356588][ T5086] netlink: 'syz.0.8335': attribute type 39 has an invalid length.
[ 1001.433114][ T1262] IPVS: starting estimator thread 0...
[ 1001.642722][ T5096] IPVS: using max 31 ests per chain, 74400 per kthread
[ 1001.706835][ T5098] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1002.474414][ T5131] delete_channel: no stack
[ 1003.895431][ T5195] netlink: 'syz.3.8362': attribute type 4 has an invalid length.
[ 1004.079783][ T5202] netlink: 'syz.3.8364': attribute type 4 has an invalid length.
[ 1004.403100][ T5215] __nla_validate_parse: 9 callbacks suppressed
[ 1004.403124][ T5215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8368'.
[ 1004.726926][ T3539] net_ratelimit: 21 callbacks suppressed
[ 1004.726949][ T3539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1004.802032][ T3539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1004.819211][ T5229] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.8371'.
[ 1004.980541][ T5226] syzkaller1: entered promiscuous mode
[ 1004.986356][ T5226] syzkaller1: entered allmulticast mode
[ 1005.090588][T24695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1005.136367][ T5245] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20004
[ 1005.143785][ T5244] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20004
[ 1005.308196][T23797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1005.369057][ T5256] dvmrp0: entered allmulticast mode
[ 1005.600170][ T5269] netlink: 'syz.0.8382': attribute type 1 has an invalid length.
[ 1005.805883][ T1261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1005.884461][ T5274] netlink: 'syz.3.8384': attribute type 39 has an invalid length.
[ 1006.037761][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1006.067782][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1006.218510][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1006.432167][T23797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1006.497679][ T5297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1006.510681][ T5297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8392'.
[ 1006.723380][ T5312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8396'.
[ 1006.846996][ T5317] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8398'.
[ 1006.855982][ T5317] netlink: 21 bytes leftover after parsing attributes in process `syz.4.8398'.
[ 1006.874328][ T5317] netlink: 21 bytes leftover after parsing attributes in process `syz.4.8398'.
[ 1007.016930][ T5322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8396'.
[ 1007.225206][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8400'.
[ 1007.471196][T30132] tipc: Subscription rejected, illegal request
[ 1007.820179][ T5366] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8413'.
[ 1007.840815][ T5361] pim6reg: entered allmulticast mode
[ 1008.077882][ T5379] netlink: 'syz.2.8417': attribute type 21 has an invalid length.
[ 1008.247260][ T5388] xt_hashlimit: size too large, truncated to 1048576
[ 1008.594288][ T5408] ip6erspan1: entered allmulticast mode
[ 1008.614764][ T5408] netlink: 'syz.1.8424': attribute type 13 has an invalid length.
[ 1008.707543][ T5412] netlink: 'syz.4.8426': attribute type 1 has an invalid length.
[ 1008.723042][ T5418] netlink: 'syz.2.8428': attribute type 1 has an invalid length.
[ 1008.766569][ T5422] netlink: 'syz.2.8428': attribute type 1 has an invalid length.
[ 1009.171349][ T5434] ip6erspan1: entered allmulticast mode
[ 1009.374134][   T30] audit: type=1107 audit(1777016115.333:9): pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='a\֟f�}h>TG�}Q�:bk47(_sn���yA��>
[ 1009.374134][   T30] �T����y7�	��@tz����z���?�B��Ԃ�#l#��B1�oA��5̝=�H�e��*chu�U#�t���r���;Ք�'��!�����*�r�X:Ʈ<�e0����'
[ 1009.438718][ T5444] mac80211_hwsim hwsim68 syzkaller0: Caught tx_queue_len zero misconfig
[ 1009.579469][ T5452] __nla_validate_parse: 6 callbacks suppressed
[ 1009.579493][ T5452] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8435'.
[ 1009.623006][T23797] nci: nci_ntf_packet: unknown ntf opcode 0x107
[ 1009.669881][ T5456] netlink: 'syz.1.8438': attribute type 12 has an invalid length.
[ 1009.701061][ T5458] netlink: 'syz.2.8439': attribute type 1 has an invalid length.
[ 1009.753627][ T5463] netlink: 'syz.3.8435': attribute type 1 has an invalid length.
[ 1009.780265][ T5456] bond9: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[ 1009.813492][   T48] net_ratelimit: 17 callbacks suppressed
[ 1009.813519][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1009.950135][ T5458] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1010.068077][ T5463] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1010.118665][ T5458] vlan4: entered allmulticast mode
[ 1010.146511][ T5458] bond10: entered allmulticast mode
[ 1010.554666][ T5499] netlink: 'syz.4.8444': attribute type 8 has an invalid length.
[ 1010.579132][T19191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.589385][T19191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.597807][T19191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.967697][T19191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1011.688355][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1011.737840][T23794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1011.746665][T23794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1011.865887][ T1261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1012.177636][T23794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1012.484509][ T5446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1012.851582][ T5513] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.8449'.
[ 1013.025171][ T5525] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8452'.
[ 1013.147163][ T5531] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.8455'.
[ 1013.182715][ T5528] SET target dimension over the limit!
[ 1013.390783][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8458'.
[ 1013.589629][ T5564] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8466'.
[ 1013.600796][ T5564] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8466'.
[ 1013.687711][ T5568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8465'.
[ 1013.732873][ T5568] netlink: 'syz.1.8465': attribute type 1 has an invalid length.
[ 1013.750812][ T5568] netlink: 'syz.1.8465': attribute type 1 has an invalid length.
[ 1013.784506][ T5568] netlink: 'syz.1.8465': attribute type 2 has an invalid length.
[ 1013.827658][ T5568] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8465'.
[ 1014.258510][ T5604] pim6reg1: entered promiscuous mode
[ 1014.263878][ T5604] pim6reg1: entered allmulticast mode
[ 1014.305024][ T5605] syzkaller0: entered promiscuous mode
[ 1014.322518][ T5605] syzkaller0: entered allmulticast mode
[ 1014.376759][ T1655] block nbd2: Possible stuck request ffff888027405080: control (read@0,1024B). Runtime 270 seconds
[ 1014.386717][ T5605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1014.395586][ T1655] block nbd2: Possible stuck request ffff888027405240: control (read@1024,1024B). Runtime 270 seconds
[ 1014.406837][ T1655] block nbd2: Possible stuck request ffff888027405400: control (read@2048,1024B). Runtime 270 seconds
[ 1014.418675][ T1655] block nbd2: Possible stuck request ffff8880274055c0: control (read@3072,1024B). Runtime 270 seconds
[ 1014.456099][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8478'.
[ 1014.518005][ T5603] tipc: Resetting bearer <eth:syzkaller0>
[ 1014.595851][ T5603] tipc: Disabling bearer <eth:syzkaller0>
[ 1014.936804][ T1262] net_ratelimit: 244 callbacks suppressed
[ 1014.936827][ T1262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1014.959412][ T5642] netlink: 'syz.1.8484': attribute type 12 has an invalid length.
[ 1015.007424][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.244006][T23797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.252548][T23797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.348020][ T5660] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8491'.
[ 1015.496440][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8493'.
[ 1015.517541][ T5661] netlink: 'syz.2.8490': attribute type 1 has an invalid length.
[ 1015.530871][ T5661] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8490'.
[ 1015.540499][ T5661] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8490'.
[ 1015.568063][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8492'.
[ 1015.600495][ T5661] netlink: 'syz.2.8490': attribute type 1 has an invalid length.
[ 1015.630948][ T5661] netlink: 'syz.2.8490': attribute type 8 has an invalid length.
[ 1015.638931][ T5661] netlink: 606 bytes leftover after parsing attributes in process `syz.2.8490'.
[ 1015.650124][ T5670] netlink: 'syz.3.8492': attribute type 1 has an invalid length.
[ 1015.661881][ T5680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8496'.
[ 1015.767508][ T5680] : entered promiscuous mode
[ 1015.788117][T23797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.821344][ T5685] xt_hashlimit: size too large, truncated to 1048576
[ 1015.886212][ T5686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8498'.
[ 1015.918660][ T5690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8498'.
[ 1015.937269][ T5686] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8498'.
[ 1016.125492][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1016.291465][ T1262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1016.457073][T19191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1016.465541][T19191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1016.493736][ T5712] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component
[ 1016.546775][ T5712] bond11: option active_slave: mode dependency failed, not supported in mode 802.3ad(4)
[ 1016.576739][ T5712] bond11 (unregistering): Released all slaves
[ 1016.616064][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1017.514572][ T5754] netlink: 'syz.2.8518': attribute type 1 has an invalid length.
[ 1017.557675][ T5764] sctp: [Deprecated]: syz.1.8522 (pid 5764) Use of int in maxseg socket option.
[ 1017.557675][ T5764] Use struct sctp_assoc_value instead
[ 1018.128737][ T5790] netlink: 'syz.1.8526': attribute type 10 has an invalid length.
[ 1018.137346][ T5790] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[ 1018.238778][ T5798] sctp: [Deprecated]: syz.2.8529 (pid 5798) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1018.238778][ T5798] Use struct sctp_sack_info instead
[ 1018.692863][ T5827] Cannot find set identified by id 1 to match
[ 1018.916252][ T5842] netlink: 'syz.1.8543': attribute type 21 has an invalid length.
[ 1019.149055][ T5861] xt_bpf: check failed: parse error
[ 1019.552329][ T5881] netlink: 'syz.3.8553': attribute type 4 has an invalid length.
[ 1019.820595][ T5916] netlink: 'syz.3.8556': attribute type 12 has an invalid length.
[ 1020.042714][ T5923] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1020.051211][ T5924] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1020.361802][ T5944] __nla_validate_parse: 16 callbacks suppressed
[ 1020.361824][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8566'.
[ 1020.456470][ T5946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8567'.
[ 1020.654279][ T5940] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1020.835193][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8571'.
[ 1020.900095][ T5961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8571'.
[ 1020.919367][ T5961] netlink: 211640 bytes leftover after parsing attributes in process `syz.1.8571'.
[ 1020.992265][ T5968] sctp: [Deprecated]: syz.4.8573 (pid 5968) Use of int in max_burst socket option deprecated.
[ 1020.992265][ T5968] Use struct sctp_assoc_value instead
[ 1021.119129][ T5979] IPVS: length: 4110 != 24
[ 1021.142417][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8575'.
[ 1021.159865][ T5971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8575'.
[ 1021.356158][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8578'.
[ 1021.481801][ T5991] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1022.043015][ T6016] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20003
[ 1022.070279][ T6012] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1022.156512][ T6012] bond11 (unregistering): Released all slaves
[ 1022.532297][ T6031] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.8596'.
[ 1022.577694][ T6031] ieee802154 phy1 wpan1: encryption failed: -22
[ 1022.604866][ T6033] Bluetooth: hci4: Opcode 0x0401 failed: -22
[ 1022.617757][ T6036] netlink: 'syz.1.8595': attribute type 2 has an invalid length.
[ 1022.653918][ T6036] netlink: 'syz.1.8595': attribute type 2 has an invalid length.
[ 1022.704990][ T6036] netlink: 'syz.1.8595': attribute type 29 has an invalid length.
[ 1022.720630][ T6036] netlink: 'syz.1.8595': attribute type 29 has an invalid length.
[ 1022.745982][ T6036] netlink: 'syz.1.8595': attribute type 29 has an invalid length.
[ 1022.764942][ T6036] netlink: 'syz.1.8595': attribute type 29 has an invalid length.
[ 1022.778514][ T6036] netlink: 'syz.1.8595': attribute type 29 has an invalid length.
[ 1022.800984][ T6039] net_ratelimit: 6 callbacks suppressed
[ 1022.801007][ T6039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1022.818478][ T6040] tc_dump_action: action bad kind
[ 1022.870392][ T6040] bond11: entered promiscuous mode
[ 1022.875670][ T6040] bond11: entered allmulticast mode
[ 1023.216302][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8603'.
[ 1023.259348][ T6050] vlan5: entered promiscuous mode
[ 1023.264408][ T6050] bridge0: entered promiscuous mode
[ 1023.626391][ T6069] syzkaller1: entered promiscuous mode
[ 1023.631971][ T6069] syzkaller1: entered allmulticast mode
[ 1024.196911][ T6096] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[ 1024.678268][ T6128] validate_nla: 2 callbacks suppressed
[ 1024.678289][ T6128] netlink: 'syz.1.8625': attribute type 39 has an invalid length.
[ 1026.031015][ T6187] x_tables: duplicate underflow at hook 1
[ 1026.070025][T23797] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1026.093911][T23797] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1026.158039][ T6193] __nla_validate_parse: 13 callbacks suppressed
[ 1026.158064][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8639'.
[ 1026.175923][T23797] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1026.185308][T23797] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1026.311574][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8643'.
[ 1026.599588][ T6203] netlink: 'syz.3.8644': attribute type 4 has an invalid length.
[ 1027.510372][ T6231] netlink: 'syz.4.8653': attribute type 11 has an invalid length.
[ 1027.604481][ T6240] netlink: set zone limit has 4 unknown bytes
[ 1027.775212][ T6248] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1027.794197][ T6248] bond4: (slave lo): Enslaving as an active interface with an up link
[ 1027.804790][ T6248] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1027.962030][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8658'.
[ 1028.278936][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8663'.
[ 1028.289012][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8663'.
[ 1028.342668][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8663'.
[ 1028.466297][ T6282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8665'.
[ 1028.476806][ T6282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8665'.
[ 1028.869427][ T6306] netlink: 'syz.0.8671': attribute type 1 has an invalid length.
[ 1028.909965][ T6306] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8671'.
[ 1029.075607][ T6309] tipc: Resetting bearer <eth:syzkaller0>
[ 1029.160406][ T6321] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8675'.
[ 1029.418146][ T6328] syzkaller1: entered promiscuous mode
[ 1029.423782][ T6328] syzkaller1: entered allmulticast mode
[ 1029.669572][ T6338] netlink: 'syz.4.8679': attribute type 83 has an invalid length.
[ 1029.904856][ T6353] netlink: 'syz.4.8682': attribute type 14 has an invalid length.
[ 1029.934415][ T6354] netlink: 'syz.4.8682': attribute type 14 has an invalid length.
[ 1030.027874][ T6363] netlink: 'syz.0.8685': attribute type 1 has an invalid length.
[ 1030.151828][ T6363] bond14: entered promiscuous mode
[ 1030.158115][ T6363] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1030.203083][ T6363] netlink: 'syz.0.8685': attribute type 1 has an invalid length.
[ 1030.250191][ T6377] bond14: (slave bridge5): making interface the new active one
[ 1030.258033][ T6377] bridge5: entered promiscuous mode
[ 1030.266983][ T6377] bond14: (slave bridge5): Enslaving as an active interface with an up link
[ 1030.814243][ T6419] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[ 1030.822588][ T6419] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1031.329718][ T6437] __nla_validate_parse: 6 callbacks suppressed
[ 1031.329740][ T6437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8705'.
[ 1031.697149][ T6441] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8707'.
[ 1031.850044][ T6462] xt_hashlimit: size too large, truncated to 1048576
[ 1031.884993][ T6458] 8021q: VLANs not supported on ipvlan1
[ 1031.938177][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8715'.
[ 1032.067807][ T6474] netlink: 'syz.4.8717': attribute type 28 has an invalid length.
[ 1032.075872][ T6474] netlink: 'syz.4.8717': attribute type 3 has an invalid length.
[ 1032.083633][ T6474] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8717'.
[ 1032.199168][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8720'.
[ 1032.363883][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8720'.
[ 1032.570234][ T6495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8723'.
[ 1032.820617][ T6515] bridge5: entered promiscuous mode
[ 1032.852300][ T6515] bridge5: entered allmulticast mode
[ 1033.187181][ T6520] netlink: 'syz.2.8723': attribute type 1 has an invalid length.
[ 1033.195000][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8723'.
[ 1034.291382][ T6590] netlink: 788 bytes leftover after parsing attributes in process `syz.0.8742'.
[ 1034.379034][ T6591] netlink: 788 bytes leftover after parsing attributes in process `syz.0.8742'.
[ 1034.512539][ T6604] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1034.526470][ T6591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1035.038064][ T6617] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1035.259485][ T6639] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1035.521768][ T6638] netlink: 'syz.0.8753': attribute type 1 has an invalid length.
[ 1035.675447][ T6655] �x9�: renamed from bridge_slave_0
[ 1036.208469][ T6678] macsec2: entered promiscuous mode
[ 1036.576680][ T6696] __nla_validate_parse: 71 callbacks suppressed
[ 1036.576704][ T6696] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8765'.
[ 1036.703499][ T6706] netlink: 'syz.1.8768': attribute type 22 has an invalid length.
[ 1036.711487][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8768'.
[ 1036.721413][ T6706] netlink: 'syz.1.8768': attribute type 22 has an invalid length.
[ 1036.729533][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8768'.
[ 1036.872573][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8769'.
[ 1036.881677][ T6709] bridge_slave_0: left allmulticast mode
[ 1036.915320][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1037.736621][ T6723] netlink: 576 bytes leftover after parsing attributes in process `syz.2.8774'.
[ 1038.404601][ T6764] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 1038.571740][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8783'.
[ 1038.580688][ T6771] netlink: 'syz.1.8783': attribute type 30 has an invalid length.
[ 1038.616503][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8783'.
[ 1038.625833][ T6772] netlink: 'syz.1.8783': attribute type 30 has an invalid length.
[ 1038.740116][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8783'.
[ 1038.749065][ T6771] netlink: 'syz.1.8783': attribute type 30 has an invalid length.
[ 1039.414756][ T6777] netlink: 'syz.1.8784': attribute type 1 has an invalid length.
[ 1039.846949][ T6788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8788'.
[ 1040.128886][ T6796] ieee802154 phy1 wpan1: encryption failed: -22
[ 1040.548048][ T6719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1040.826438][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8794'.
[ 1040.885997][ T6808] xfrm1: entered promiscuous mode
[ 1040.912397][ T6808] xfrm1: entered allmulticast mode
[ 1040.930458][ T6814] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 !
[ 1041.019689][ T6817] syzkaller0: entered promiscuous mode
[ 1041.038861][ T6817] syzkaller0: entered allmulticast mode
[ 1041.222522][ T6827] IPVS: Scheduler module ip_vs_sip not found
[ 1041.342497][ T6838] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1041.561193][ T6847] netlink: 'syz.2.8806': attribute type 39 has an invalid length.
[ 1041.756865][ T6850] pimreg3: entered allmulticast mode
[ 1041.923204][ T6863] veth0: entered promiscuous mode
[ 1041.930000][ T6860] veth0: left promiscuous mode
[ 1042.235531][ T6872] __nla_validate_parse: 3 callbacks suppressed
[ 1042.235556][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8813'.
[ 1042.342280][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8817'.
[ 1042.561800][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8819'.
[ 1042.792638][ T6906] syzkaller0: entered promiscuous mode
[ 1042.799392][ T6907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8827'.
[ 1042.800153][ T6906] syzkaller0: entered allmulticast mode
[ 1043.281947][ T6932] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8833'.
[ 1043.292836][ T6932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8833'.
[ 1043.404103][ T6935] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[ 1043.455081][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8833'.
[ 1043.464021][ T6941] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8833'.
[ 1043.473123][ T6941] netlink: 'syz.0.8833': attribute type 5 has an invalid length.
[ 1043.917196][ T6973] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8843'.
[ 1044.070528][ T6980] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8847'.
[ 1044.085884][ T6980] netlink: 'syz.2.8847': attribute type 1 has an invalid length.
[ 1044.439182][ T1655] block nbd2: Possible stuck request ffff888027405080: control (read@0,1024B). Runtime 300 seconds
[ 1044.452689][ T1655] block nbd2: Possible stuck request ffff888027405240: control (read@1024,1024B). Runtime 300 seconds
[ 1044.463903][ T1655] block nbd2: Possible stuck request ffff888027405400: control (read@2048,1024B). Runtime 300 seconds
[ 1044.475110][ T1655] block nbd2: Possible stuck request ffff8880274055c0: control (read@3072,1024B). Runtime 300 seconds
[ 1045.354451][ T7031] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 1045.725669][ T7046] bond11: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[ 1045.739795][ T7046] bond11 (unregistering): Released all slaves
[ 1045.816728][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1045.826684][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1045.836942][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1045.847247][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1045.857766][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1045.868051][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1045.878273][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1045.888603][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1045.898870][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1046.127443][ T7026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1046.783870][ T7087] sctp: [Deprecated]: syz.1.8877 (pid 7087) Use of int in maxseg socket option.
[ 1046.783870][ T7087] Use struct sctp_assoc_value instead
[ 1046.832030][ T7092] siw: device registration error -23
[ 1047.395140][ T7128] netlink: 'syz.0.8885': attribute type 1 has an invalid length.
[ 1047.403574][ T7128] __nla_validate_parse: 2 callbacks suppressed
[ 1047.403592][ T7128] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8885'.
[ 1047.422057][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8885'.
[ 1047.432965][ T7128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8885'.
[ 1047.446419][ T7134] pim6reg1: entered promiscuous mode
[ 1047.461756][ T7134] pim6reg1: entered allmulticast mode
[ 1047.482874][ T7128] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8885'.
[ 1047.491906][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8885'.
[ 1048.172364][ T7147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8888'.
[ 1048.181392][ T7147] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8888'.
[ 1051.904482][ T7147] gretap1: entered promiscuous mode
[ 1051.909764][ T7147] gretap1: entered allmulticast mode
[ 1052.245061][T32286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1052.258823][T32286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1052.320736][T32286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1052.333338][T32286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1052.341123][T32286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1052.812252][ T7186] net_ratelimit: 27 callbacks suppressed
[ 1052.812277][ T7186] netlink: set zone limit has 4 unknown bytes
[ 1053.095651][ T7174] wg1 speed is unknown, defaulting to 1000
[ 1053.265568][ T7204] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8901'.
[ 1053.287141][ T7205] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8901'.
[ 1053.669081][ T7226] netlink: 'syz.2.8904': attribute type 1 has an invalid length.
[ 1053.676966][ T7226] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8904'.
[ 1053.748386][ T7228] bridge0: port 3(ipvlan2) entered blocking state
[ 1053.780966][ T7228] bridge0: port 3(ipvlan2) entered disabled state
[ 1053.834165][ T7228] ipvlan2: entered allmulticast mode
[ 1053.850233][ T7228] bridge0: entered allmulticast mode
[ 1053.911329][ T7228] ipvlan2: left allmulticast mode
[ 1053.934701][ T7228] bridge0: left allmulticast mode
[ 1054.024786][ T7174] chnl_net:caif_netlink_parms(): no params data found
[ 1054.376504][T32286] Bluetooth: hci1: command tx timeout
[ 1054.381436][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1054.389858][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1054.398711][ T7174] bridge_slave_0: entered allmulticast mode
[ 1054.407427][ T7174] bridge_slave_0: entered promiscuous mode
[ 1054.420584][ T7260] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8911'.
[ 1054.454547][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1054.461847][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1054.469211][ T7174] bridge_slave_1: entered allmulticast mode
[ 1054.477366][ T7174] bridge_slave_1: entered promiscuous mode
[ 1054.585251][ T7174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1054.611912][ T7174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1054.774488][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.793170][ T7174] team0: Port device team_slave_0 added
[ 1054.810643][ T7174] team0: Port device team_slave_1 added
[ 1054.849158][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1054.856767][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1055.059350][ T7174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1055.114107][ T7279] syz.2.8919 (7279) used obsolete PPPIOCDETACH ioctl
[ 1055.122205][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1055.122227][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1055.122257][ T7174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1055.168928][ T7174] hsr_slave_0: entered promiscuous mode
[ 1055.218067][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8918'.
[ 1055.255912][ T7174] hsr_slave_1: entered promiscuous mode
[ 1055.522000][ T7289] netlink: 'syz.0.8922': attribute type 39 has an invalid length.
[ 1055.596748][ T7293] netlink: 'syz.3.8924': attribute type 11 has an invalid length.
[ 1055.718425][ T7296] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.8925'.
[ 1055.763577][ T7174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1055.806595][ T7174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1055.861639][ T7301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8927'.
[ 1055.959328][ T7307] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8927'.
[ 1055.971218][ T7307] netlink: 320 bytes leftover after parsing attributes in process `syz.4.8927'.
[ 1056.004618][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8928'.
[ 1056.427022][T32286] Bluetooth: hci1: command 0x041b tx timeout
[ 1056.514363][ T7174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1056.530354][ T7174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.792737][ T7343] netlink: 'syz.0.8936': attribute type 10 has an invalid length.
[ 1056.801547][ T7343] bridge_slave_1: left allmulticast mode
[ 1056.815146][ T7343] bridge_slave_1: left promiscuous mode
[ 1056.859500][ T7343] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1057.020778][ T7174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1057.052379][ T7174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.081120][ T7355] block nbd2: NBD_DISCONNECT
[ 1057.086897][ T7355] block nbd2: Send disconnect failed -32
[ 1057.092708][ T7355] block nbd2: shutting down sockets
[ 1057.108204][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1057.117519][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1057.169795][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1057.179690][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[ 1057.187529][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1057.196600][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[ 1057.204441][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1057.213517][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[ 1057.221536][T26955] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1057.231248][T26955] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1057.239436][T26955] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1057.249891][T26955] Buffer I/O error on dev nbd2, logical block 1, async page read
[ 1057.270953][T26955] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1057.280060][T26955] Buffer I/O error on dev nbd2, logical block 2, async page read
[ 1057.288091][T26955] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1057.297168][T26955] Buffer I/O error on dev nbd2, logical block 3, async page read
[ 1057.305166][T26955] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1057.314257][T26955] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1057.367518][T26955] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1057.409418][T26955] Buffer I/O error on dev nbd2, logical block 1, async page read
[ 1057.426273][T26955] ldm_validate_partition_table(): Disk read failed.
[ 1057.440918][T26955] Dev nbd2: unable to read RDB block 0
[ 1057.449017][T26955]  nbd2: unable to read partition table
[ 1057.532402][ T5198] udevd[5198]: worker [26955] terminated by signal 9 (Killed)
[ 1057.545591][ T5198] udevd[5198]: worker [26955] failed while handling '/devices/virtual/block/nbd2'
[ 1057.560266][ T7174] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1057.570589][ T7174] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.629918][ T7371] netlink: zone id is out of range
[ 1057.635188][ T7371] netlink: zone id is out of range
[ 1057.640334][ T7371] netlink: zone id is out of range
[ 1057.645501][ T7371] netlink: zone id is out of range
[ 1057.651105][ T7371] netlink: zone id is out of range
[ 1057.656252][ T7371] netlink: zone id is out of range
[ 1057.661391][ T7371] netlink: zone id is out of range
[ 1057.666537][ T7371] netlink: zone id is out of range
[ 1057.671688][ T7371] netlink: zone id is out of range
[ 1057.675415][T19191] vlan1: left allmulticast mode
[ 1057.681846][T19191] veth0_vlan: left allmulticast mode
[ 1057.691514][T19191] pimreg3: left allmulticast mode
[ 1057.972659][T19191] bond9 (unregistering): (slave vti0): Releasing backup interface
[ 1057.980541][T19191] vti0 (unregistering): left promiscuous mode
[ 1058.072834][T19191] bond1 (unregistering): (slave geneve2): Releasing active interface
[ 1058.396738][T19191] bond0 (unregistering): Released all slaves
[ 1058.407938][T19191] bond1 (unregistering): Released all slaves
[ 1058.422790][T19191] bond2 (unregistering): Released all slaves
[ 1058.444361][T19191] bond3 (unregistering): Released all slaves
[ 1058.463369][T19191] bond4 (unregistering): Released all slaves
[ 1058.477245][T19191] bond5 (unregistering): Released all slaves
[ 1058.509508][T19191] bond6 (unregistering): Released all slaves
[ 1058.523810][T19191] bond7 (unregistering): Released all slaves
[ 1058.538998][T19191] bond8 (unregistering): Released all slaves
[ 1058.546315][T32286] Bluetooth: hci1: command 0x041b tx timeout
[ 1058.559549][T19191] bond9 (unregistering): Released all slaves
[ 1058.573582][T19191] bond10 (unregistering): Released all slaves
[ 1058.660016][ T7383] geneve2: entered promiscuous mode
[ 1058.762237][ T7391] syzkaller0: entered promiscuous mode
[ 1058.767780][ T7391] syzkaller0: entered allmulticast mode
[ 1058.985413][ T7174] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1058.996993][ T7174] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1059.005521][ T7174] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1059.016318][ T7174] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1059.024457][ T7174] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1059.036828][ T7174] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1059.045759][ T7174] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1059.114786][ T7174] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1059.322057][T19191] tipc: Disabling bearer <udp:syz0>
[ 1059.327734][T19191] tipc: Left network mode
[ 1059.675694][ T7174] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1059.708579][ T7174] 8021q: adding VLAN 0 to HW filter on device team0
[ 1059.808997][ T7437] __nla_validate_parse: 7 callbacks suppressed
[ 1059.809018][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8953'.
[ 1059.934666][T30131] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1059.941929][T30131] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1060.000522][ T7442] xt_hashlimit: size too large, truncated to 1048576
[ 1060.573782][T30131] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1060.581167][T30131] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1060.609118][ T5844] Bluetooth: hci1: command 0x041b tx timeout
[ 1060.716738][ T7462] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1061.542068][ T7174] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1061.622772][ T7506] xt_l2tp: wrong L2TP version: 0
[ 1061.748103][ T7174] veth0_vlan: entered promiscuous mode
[ 1061.827887][ T7174] veth1_vlan: entered promiscuous mode
[ 1061.834089][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8970'.
[ 1061.861647][ T7174] veth0_macvtap: entered promiscuous mode
[ 1061.946546][ T7174] veth1_macvtap: entered promiscuous mode
[ 1061.965929][ T7517] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8969'.
[ 1061.970957][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1061.991665][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1062.018502][ T7517] tipc: Failed to remove unknown binding: 66,0,0/1312414130:1177753606/1177753607
[ 1062.047519][   T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1062.070958][   T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1062.091795][ T7517] tipc: Failed to remove unknown binding: 66,0,0/1312414130:1177753606/1177753607
[ 1062.183778][   T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1062.229985][   T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1062.268750][ T7529] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8973'.
[ 1062.685981][ T5844] Bluetooth: hci1: command 0x041b tx timeout
[ 1062.776180][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1062.817225][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1062.950781][T23794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1062.987329][T23794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1063.178270][ T7556] Cannot find add_set index 2 as target
[ 1063.186062][ T7554] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8980'.
[ 1063.341952][T19191] hsr_slave_0: left promiscuous mode
[ 1063.348979][ T7562] netlink: 'syz.1.8891': attribute type 1 has an invalid length.
[ 1063.357556][T19191] hsr_slave_1: left promiscuous mode
[ 1063.472551][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8983'.
[ 1063.517270][T19191] veth1_vlan: left allmulticast mode
[ 1063.522888][T19191] veth1_macvtap: left promiscuous mode
[ 1063.528590][T19191] veth1_vlan: left promiscuous mode
[ 1063.533922][T19191] veth0_vlan: left promiscuous mode
[ 1063.667172][ T7570] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1063.847861][ T7574] netlink: 'syz.4.8986': attribute type 1 has an invalid length.
[ 1063.855741][ T7574] netlink: 'syz.4.8986': attribute type 2 has an invalid length.
[ 1063.871672][T19191] team0 (unregistering): Port device batadv2 removed
[ 1064.747537][ T7583] netlink: 'syz.4.8988': attribute type 29 has an invalid length.
[ 1064.765403][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8988'.
[ 1064.777439][ T7584] netlink: 'syz.4.8988': attribute type 29 has an invalid length.
[ 1064.788704][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8988'.
[ 1065.178476][ T7606] netlink: 'syz.0.8995': attribute type 4 has an invalid length.
[ 1065.215739][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8994'.
[ 1065.225976][ T7606] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8995'.
[ 1065.248616][ T7606] xt_hashlimit: size too large, truncated to 1048576
[ 1065.271364][ T7610] netlink: 'syz.3.8996': attribute type 1 has an invalid length.
[ 1065.295547][ T7609] netlink: 'syz.4.8997': attribute type 10 has an invalid length.
[ 1065.306999][ T7610] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1065.391517][ T7610] bond12: (slave veth1): Enslaving as an active interface with a down link
[ 1065.469456][ T7617] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 1065.534560][ T7610] bond12: (slave veth7): Enslaving as an active interface with a down link
[ 1065.543486][ T7610] netlink: 'syz.3.8996': attribute type 1 has an invalid length.
[ 1065.551246][ T7610] netlink: 'syz.3.8996': attribute type 2 has an invalid length.
[ 1065.710623][ T7625] bond5: entered promiscuous mode
[ 1065.717638][ T7625] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1065.870621][ T7628] bond5: (slave bridge7): making interface the new active one
[ 1065.911266][ T7628] bridge7: entered promiscuous mode
[ 1065.964737][ T7628] bond5: (slave bridge7): Enslaving as an active interface with an up link
[ 1066.214916][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9003'.
[ 1066.231400][T19191] IPVS: stop unused estimator thread 0...
[ 1066.339951][ T7641] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9005'.
[ 1066.402333][T32286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1066.420874][T32286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1066.431522][T32286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1066.441483][T32286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1066.449681][T32286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1066.575552][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9008'.
[ 1066.608852][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9008'.
[ 1066.935927][ T7643] wg1 speed is unknown, defaulting to 1000
[ 1067.215881][ T7677] netlink: 596 bytes leftover after parsing attributes in process `syz.3.9015'.
[ 1067.554051][ T7643] chnl_net:caif_netlink_parms(): no params data found
[ 1067.596975][ T7694] netlink: 204 bytes leftover after parsing attributes in process `syz.4.9018'.
[ 1068.308442][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9022'.
[ 1068.629255][T32286] Bluetooth: hci0: command tx timeout
[ 1068.928875][T19191] bond1 (unregistering): (slave bridge1): Releasing backup interface
[ 1068.937288][T19191] bond1 (unregistering): (slave bridge1): the permanent HWaddr of slave - 22:55:e5:1e:5f:cc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1069.127879][T19191] bond1 (unregistering): (slave bridge2): Releasing backup interface
[ 1069.943811][T19191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1069.954182][T19191] bond_slave_0: left allmulticast mode
[ 1069.968339][T19191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1069.977703][T19191] bond_slave_1: left allmulticast mode
[ 1069.993617][T19191] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1070.003333][T19191] bridge_slave_1: left allmulticast mode
[ 1070.012447][T19191] bond0 (unregistering): Released all slaves
[ 1070.026436][T19191] bond1 (unregistering): Released all slaves
[ 1070.054699][T19191] bond2 (unregistering): Released all slaves
[ 1070.088323][T19191] bond3 (unregistering): Released all slaves
[ 1070.122120][T19191] bond4 (unregistering): Released all slaves
[ 1070.153506][T19191] bond5 (unregistering): Released all slaves
[ 1070.177303][T19191] bond6 (unregistering): (slave veth5): Releasing backup interface
[ 1070.191605][T19191] bond6 (unregistering): Released all slaves
[ 1070.223395][T19191] bond7 (unregistering): Released all slaves
[ 1070.263257][T19191] bond8 (unregistering): Released all slaves
[ 1070.298463][T19191] bond9 (unregistering): Released all slaves
[ 1070.328566][T19191] bond10 (unregistering): Released all slaves
[ 1070.384168][ T7708] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9020'.
[ 1070.543897][ T7715] bond0: entered promiscuous mode
[ 1070.567507][ T7715] bond_slave_0: entered promiscuous mode
[ 1070.573477][ T7715] bond_slave_1: entered promiscuous mode
[ 1070.582832][ T7715] geneve0: entered promiscuous mode
[ 1070.616801][ T7715] hsr1: entered promiscuous mode
[ 1070.665399][T32286] Bluetooth: hci0: command tx timeout
[ 1071.114162][T19191] tipc: Left network mode
[ 1071.118831][ T1263] syz1: Port: 1 Link DOWN
[ 1071.328586][ T7728] pim6reg: entered allmulticast mode
[ 1071.345432][ T7643] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1071.381623][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1071.409112][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9029'.
[ 1071.445383][ T7643] bridge_slave_0: entered allmulticast mode
[ 1071.471285][ T7643] bridge_slave_0: entered promiscuous mode
[ 1071.527900][ T7643] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1071.549400][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1071.576299][ T7643] bridge_slave_1: entered allmulticast mode
[ 1071.647617][ T7643] bridge_slave_1: entered promiscuous mode
[ 1071.764003][ T7643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1071.778168][ T7643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1072.089612][ T7748] validate_nla: 6 callbacks suppressed
[ 1072.089633][ T7748] netlink: 'syz.1.9031': attribute type 10 has an invalid length.
[ 1072.116215][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9031'.
[ 1072.390979][ T7643] team0: Port device team_slave_0 added
[ 1072.404554][ T7748] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1072.427567][ T7748] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1072.442910][ T7748] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1072.479039][ T7643] team0: Port device team_slave_1 added
[ 1072.551529][ T7643] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1072.579313][ T7643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1072.607349][ T7643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1072.765471][T32286] Bluetooth: hci0: command tx timeout
[ 1072.788420][ T7643] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1072.801251][ T7643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1072.827619][ T7643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1072.968882][ T7643] hsr_slave_0: entered promiscuous mode
[ 1072.975978][ T7643] hsr_slave_1: entered promiscuous mode
[ 1072.982762][ T7643] debugfs: 'hsr0' already exists in 'hsr'
[ 1073.035330][ T7643] Cannot create hsr debugfs directory
[ 1073.044451][ T7788] netlink: 'syz.0.9044': attribute type 142 has an invalid length.
[ 1073.314054][ T7806] netlink: 516 bytes leftover after parsing attributes in process `syz.1.9049'.
[ 1073.623222][ T7814] x_tables: duplicate underflow at hook 2
[ 1073.702338][ T7809] net_ratelimit: 134 callbacks suppressed
[ 1073.702361][ T7809] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1073.856394][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9055'.
[ 1073.941322][ T7833] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9057'.
[ 1073.960083][ T7833] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9057'.
[ 1073.966903][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9056'.
[ 1074.198409][ T7643] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.217558][ T7840] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1074.328254][ T7844] xt_hashlimit: size too large, truncated to 1048576
[ 1074.632784][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9063'.
[ 1074.641840][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9063'.
[ 1074.686486][ T7643] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.878959][T32286] Bluetooth: hci0: command tx timeout
[ 1074.931758][ T7872] Cannot find map_set index 135 as target
[ 1074.976592][ T7872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1075.143575][ T7643] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1075.185117][ T7884] netlink: zone id is out of range
[ 1075.190647][ T7884] netlink: zone id is out of range
[ 1075.199886][ T7884] netlink: zone id is out of range
[ 1075.206071][ T7884] netlink: zone id is out of range
[ 1075.224259][ T7884] netlink: zone id is out of range
[ 1075.229440][ T7884] netlink: zone id is out of range
[ 1075.234601][ T7884] netlink: zone id is out of range
[ 1075.333234][ T7884] netlink: set zone limit has 4 unknown bytes
[ 1075.339123][ T7891] x_tables: duplicate underflow at hook 1
[ 1075.387235][T19191] hsr_slave_0: left promiscuous mode
[ 1075.398692][T19191] hsr_slave_1: left promiscuous mode
[ 1075.421813][T19191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1075.429488][T19191] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1075.437891][T19191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1075.445328][T19191] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1075.462296][T19191] veth1_macvtap: left promiscuous mode
[ 1075.467960][T19191] veth0_macvtap: left promiscuous mode
[ 1075.473563][T19191] veth1_vlan: left promiscuous mode
[ 1075.478903][T19191] veth0_vlan: left promiscuous mode
[ 1075.884285][T19191] team0 (unregistering): Port device team_slave_1 removed
[ 1075.899741][T19191] team0 (unregistering): Port device team_slave_0 removed
[ 1075.915996][ T1154] smc: removing ib device syz1
[ 1076.063833][ T7643] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.223100][ T7905] syzkaller0: entered promiscuous mode
[ 1076.239579][ T7905] syzkaller0: entered allmulticast mode
[ 1076.964116][ T7923] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9081'.
[ 1077.050129][ T7925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9082'.
[ 1077.194483][ T7643] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1077.234389][ T7643] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1077.242904][ T7643] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1077.394642][ T7643] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1077.450640][ T7643] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1077.468940][ T7930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9083'.
[ 1077.492131][ T7936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9086'.
[ 1077.530393][ T7643] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1077.538558][ T7643] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1077.589034][ T7643] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1077.825359][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9090'.
[ 1077.834876][ T7958] netlink: 'syz.1.9088': attribute type 1 has an invalid length.
[ 1077.842732][ T7958] netlink: 'syz.1.9088': attribute type 1 has an invalid length.
[ 1077.851001][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9090'.
[ 1078.035531][ T7961] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9091'.
[ 1078.044628][ T7961] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1078.114267][ T7643] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1078.136106][ T7643] 8021q: adding VLAN 0 to HW filter on device team0
[ 1078.186188][ T7643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1078.196679][ T7643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1078.316022][T30132] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1078.323271][T30132] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1078.373581][T30132] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1078.380891][T30132] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1078.493707][ T7972] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9095'.
[ 1079.262503][ T7986] syzkaller0: entered promiscuous mode
[ 1079.280141][ T7986] syzkaller0: entered allmulticast mode
[ 1079.500094][ T7643] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1079.686110][ T7643] veth0_vlan: entered promiscuous mode
[ 1079.752570][ T7643] veth1_vlan: entered promiscuous mode
[ 1079.836624][ T7643] veth0_macvtap: entered promiscuous mode
[ 1079.899591][ T8012] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[ 1079.962194][ T7643] veth1_macvtap: entered promiscuous mode
[ 1080.108282][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9105'.
[ 1080.207974][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9103'.
[ 1080.225728][ T7643] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1080.286275][ T7643] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1080.385161][ T8025] tc_dump_action: action bad kind
[ 1080.506315][T23794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.591819][ T8028] vlan3: entered promiscuous mode
[ 1080.615921][ T8028] geneve1: entered promiscuous mode
[ 1080.634122][ T8028] vlan3: entered allmulticast mode
[ 1080.656340][T23794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.706874][T23794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.736312][T23794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.782293][T19191] IPVS: stop unused estimator thread 0...
[ 1081.076065][ T8045] netlink: 'syz.0.9113': attribute type 21 has an invalid length.
[ 1081.141600][T30131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1081.178731][T30131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1081.257663][ T8053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1081.317507][ T8056] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9
[ 1081.330789][ T8057] netlink: 'syz.0.9115': attribute type 1 has an invalid length.
[ 1081.368140][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1081.384149][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1081.458556][ T8057] 8021q: adding VLAN 0 to HW filter on device bond16
[ 1081.538382][ T8062] vlan4: entered promiscuous mode
[ 1081.543496][ T8062] bond16: entered promiscuous mode
[ 1081.549066][ T8062] vlan4: entered allmulticast mode
[ 1081.554243][ T8062] bond16: entered allmulticast mode
[ 1081.571832][ T8067] openvswitch: netlink: Message has 592 unknown bytes.
[ 1081.589582][ T8057] openvswitch: netlink: Flow key attr not present in new flow.
[ 1081.600684][ T8067] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1082.026868][ T8080] syzkaller1: entered promiscuous mode
[ 1082.028070][ T8082] nftables ruleset with unbound chain
[ 1082.037911][ T8080] syzkaller1: entered allmulticast mode
[ 1082.300561][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1082.319341][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1082.330451][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1082.353658][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1082.371131][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1082.772938][ T8094] netlink: 'syz.1.9128': attribute type 1 has an invalid length.
[ 1082.810119][T30132] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1082.810621][ T8095] __nla_validate_parse: 8 callbacks suppressed
[ 1082.810638][ T8095] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9128'.
[ 1082.820660][T30132] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1082.820707][T30132] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1082.874563][ T8088] wg1 speed is unknown, defaulting to 1000
[ 1082.891280][ T8094] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9128'.
[ 1082.908914][ T8094] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9128'.
[ 1082.917921][ T8094] netlink: 'syz.1.9128': attribute type 5 has an invalid length.
[ 1082.964765][ T8094] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9128'.
[ 1082.978636][ T8095] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9128'.
[ 1083.011838][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9130'.
[ 1083.120812][T30132] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1083.131308][T30132] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1083.141660][T30132] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1083.165229][ T8110] tipc: Enabled bearer <ib:gretap0>, priority 10
[ 1083.378255][T30132] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1083.408024][T30132] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1083.418353][T30132] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1083.476726][ T8088] chnl_net:caif_netlink_parms(): no params data found
[ 1083.531023][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9135'.
[ 1083.648518][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1083.655898][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.663250][ T8088] bridge_slave_0: entered allmulticast mode
[ 1083.671390][ T8088] bridge_slave_0: entered promiscuous mode
[ 1083.685291][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1083.692564][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1083.699909][ T8088] bridge_slave_1: entered allmulticast mode
[ 1083.708016][ T8088] bridge_slave_1: entered promiscuous mode
[ 1083.775811][ T8088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1083.789152][ T8088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1083.841759][ T8142] netlink: 'syz.1.9138': attribute type 14 has an invalid length.
[ 1083.869654][ T8088] team0: Port device team_slave_0 added
[ 1083.878943][ T8088] team0: Port device team_slave_1 added
[ 1083.943610][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1083.950675][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1083.997513][ T8088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1084.010818][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1084.017940][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1084.046787][ T8088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1084.193291][T30132] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1084.203674][T30132] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.213970][T30132] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1084.396886][ T8088] hsr_slave_0: entered promiscuous mode
[ 1084.448633][ T8088] hsr_slave_1: entered promiscuous mode
[ 1084.455581][ T8088] debugfs: 'hsr0' already exists in 'hsr'
[ 1084.461530][ T8088] Cannot create hsr debugfs directory
[ 1084.535013][T32286] Bluetooth: hci3: command tx timeout
[ 1084.913808][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9148'.
[ 1084.930669][T30131] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1084.961385][T30131] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1084.984877][T23794] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1085.013031][T23794] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[ 1085.053088][ T8088] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1085.085993][T30132] bridge_slave_1: left allmulticast mode
[ 1085.091668][T30132] bridge_slave_1: left promiscuous mode
[ 1085.099827][T30132] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1085.109249][T30132] bridge_slave_0: left allmulticast mode
[ 1085.114949][T30132] bridge_slave_0: left promiscuous mode
[ 1085.121320][T30132] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1085.147464][T30132] pimreg: left allmulticast mode
[ 1085.429981][T30132] team0: Port device gretap1 removed
[ 1085.459464][T30132] bond4 (unregistering): (slave gretap2): Releasing active interface
[ 1086.091801][T30132] bond1 (unregistering): (slave veth3): Releasing active interface
[ 1086.101663][T30132] bond1 (unregistering): Released all slaves
[ 1086.117091][T30132] bond2 (unregistering): Released all slaves
[ 1086.131861][T30132] bond3 (unregistering): Released all slaves
[ 1086.150613][T30132] bond0 (unregistering): (slave lo): Releasing backup interface
[ 1086.158989][T30132] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 1086.170495][T30132] bond0 (unregistering): Released all slaves
[ 1086.198773][T30132] bond4 (unregistering): Released all slaves
[ 1086.217243][T30132] bond5 (unregistering): Released all slaves
[ 1086.231516][T30132] bond6 (unregistering): Released all slaves
[ 1086.245350][T30132] bond7 (unregistering): Released all slaves
[ 1086.260173][T30132] bond8 (unregistering): Released all slaves
[ 1086.276336][T30132] bond9 (unregistering): Released all slaves
[ 1086.293167][T30132] bond10 (unregistering): Released all slaves
[ 1086.326697][T30132] bond11 (unregistering): Released all slaves
[ 1086.344916][T30132] bond12 (unregistering): (slave veth1): Releasing active interface
[ 1086.357646][T30132] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface
[ 1086.369462][T30132] bond12 (unregistering): (slave veth7): Releasing active interface
[ 1086.379219][T30132] bond12 (unregistering): Released all slaves
[ 1086.398109][ T8088] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1086.588565][T30132] : left promiscuous mode
[ 1086.642796][T32286] Bluetooth: hci3: command tx timeout
[ 1086.763899][ T8088] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1086.889742][T30132] tipc: Disabling bearer <udp:syz2>
[ 1086.895495][T30132] tipc: Left network mode
[ 1087.012100][ T8088] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1087.739728][ T8174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1087.951479][ T8088] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1087.982229][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1087.990479][ T8088] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1088.031520][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1088.046406][ T8088] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1088.107510][ T8200] netlink: 'syz.0.9155': attribute type 8 has an invalid length.
[ 1088.115565][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1088.140216][ T8088] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1088.172526][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1088.308613][ T8209] syzkaller0: entered promiscuous mode
[ 1088.329748][ T8209] syzkaller0: entered allmulticast mode
[ 1088.354806][ T8209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9156'.
[ 1088.448660][T30132] hsr_slave_0: left promiscuous mode
[ 1088.464204][T30132] hsr_slave_1: left promiscuous mode
[ 1088.476349][T30132] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1088.483761][T30132] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1088.495096][ T8222] Cannot find map_set index 135 as target
[ 1088.507684][T30132] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1088.515123][T30132] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1088.621525][T30132] dummy0: left allmulticast mode
[ 1088.626608][T30132] veth1_macvtap: left promiscuous mode
[ 1088.632243][T30132] veth1_vlan: left promiscuous mode
[ 1088.766683][T32286] Bluetooth: hci3: command tx timeout
[ 1089.232152][T30132] team0 (unregistering): Port device team_slave_1 removed
[ 1089.246916][T30132] team0 (unregistering): Port device team_slave_0 removed
[ 1089.762910][ T8088] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1089.786013][ T8088] 8021q: adding VLAN 0 to HW filter on device team0
[ 1089.847844][T19191] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1089.855364][T19191] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1089.929206][T19191] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1089.936564][T19191] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1090.281391][ T8258] netlink: 192 bytes leftover after parsing attributes in process `syz.1.9166'.
[ 1090.291726][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9167'.
[ 1090.315660][ T8266] atomic_op ffff88807f42b998 conn xmit_atomic 0000000000000000
[ 1090.331525][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9166'.
[ 1090.334287][T30132] IPVS: stop unused estimator thread 0...
[ 1090.362680][ T8258] bridge_slave_1: left allmulticast mode
[ 1090.368373][ T8258] bridge_slave_1: left promiscuous mode
[ 1090.374194][ T8258] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1090.499646][ T8258] bridge_slave_0: left allmulticast mode
[ 1090.508830][ T8258] bridge_slave_0: left promiscuous mode
[ 1090.554513][ T8258] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1090.846901][T32286] Bluetooth: hci3: command tx timeout
[ 1091.033499][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9170'.
[ 1091.369923][ T8088] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1091.485007][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9173'.
[ 1091.528090][ T8088] veth0_vlan: entered promiscuous mode
[ 1091.569163][ T8088] veth1_vlan: entered promiscuous mode
[ 1091.680737][ T8088] veth0_macvtap: entered promiscuous mode
[ 1091.709567][ T8088] veth1_macvtap: entered promiscuous mode
[ 1091.792369][ T8088] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1091.827154][ T8088] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1091.870272][T23792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1091.879127][T23792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1091.919707][T19191] nci: nci_ntf_packet: unknown ntf opcode 0x107
[ 1091.938048][T23792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1091.956452][T23792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1092.010444][ T8318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1092.418779][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1092.441144][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1092.597678][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1092.605920][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1093.072417][ T8356] netlink: 'syz.3.9121': attribute type 10 has an invalid length.
[ 1094.102398][ T8386] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1094.233419][ T8390] netlink: 'syz.3.9182': attribute type 8 has an invalid length.
[ 1094.661682][ T8411] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1094.702271][ T8414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9187'.
[ 1096.344700][ T8488] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9205'.
[ 1096.370657][ T8490] Bluetooth: MGMT ver 1.23
[ 1096.403953][ T8490] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9206'.
[ 1097.042132][ T8526] netlink: 'syz.4.9214': attribute type 8 has an invalid length.
[ 1097.099169][ T8528] netlink: 'syz.3.9216': attribute type 1 has an invalid length.
[ 1097.153032][ T8528] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9216'.
[ 1097.225119][ T8528] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9216'.
[ 1097.280546][ T8528] netlink: 658 bytes leftover after parsing attributes in process `syz.3.9216'.
[ 1097.315145][ T8529] sctp: [Deprecated]: syz.3.9216 (pid 8529) Use of int in maxseg socket option.
[ 1097.315145][ T8529] Use struct sctp_assoc_value instead
[ 1097.481004][ T8550] openvswitch: netlink: Message has 4 unknown bytes.
[ 1097.596974][ T8551] syzkaller1: entered promiscuous mode
[ 1097.602538][ T8551] syzkaller1: entered allmulticast mode
[ 1097.817453][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9223'.
[ 1097.884710][ T8569] macvlan2: entered allmulticast mode
[ 1097.890167][ T8569] dummy0: entered allmulticast mode
[ 1098.217845][ T8584] netlink: 'syz.2.9225': attribute type 1 has an invalid length.
[ 1098.379863][ T8596] netlink: 294 bytes leftover after parsing attributes in process `syz.2.9225'.
[ 1098.405639][ T8596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1098.479485][ T8596] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9225'.
[ 1098.649388][ T8594] lo: entered promiscuous mode
[ 1098.683045][ T8594] tunl0: entered promiscuous mode
[ 1098.690935][ T8607] netlink: 'syz.0.9230': attribute type 6 has an invalid length.
[ 1098.713345][ T8594] gre0: entered promiscuous mode
[ 1098.735620][ T8594] gretap0: entered promiscuous mode
[ 1098.757334][ T8594] erspan0: entered promiscuous mode
[ 1098.772769][ T8594] ip_vti0: entered promiscuous mode
[ 1098.899646][ T8617] netlink: 'syz.0.9232': attribute type 10 has an invalid length.
[ 1098.936086][ T8606] bond6: entered promiscuous mode
[ 1098.941993][ T8606] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1098.979542][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9233'.
[ 1099.365792][ T8633] syzkaller0: entered promiscuous mode
[ 1099.384744][ T8633] syzkaller0: entered allmulticast mode
[ 1099.960321][ T8667] __nla_validate_parse: 3 callbacks suppressed
[ 1099.960345][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9242'.
[ 1100.350003][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1100.366937][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1100.377070][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1100.387166][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1100.398970][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1100.616797][ T8678] wg1 speed is unknown, defaulting to 1000
[ 1101.079255][ T8698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9251'.
[ 1101.088273][ T8698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9251'.
[ 1101.276282][ T8678] chnl_net:caif_netlink_parms(): no params data found
[ 1101.313983][ T8690] netlink: 'syz.2.9249': attribute type 39 has an invalid length.
[ 1101.764261][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1101.786180][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1101.801121][ T8721] netlink: 'syz.1.9257': attribute type 4 has an invalid length.
[ 1101.816043][ T8678] bridge_slave_0: entered allmulticast mode
[ 1101.834341][ T8721] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9257'.
[ 1101.846497][ T8678] bridge_slave_0: entered promiscuous mode
[ 1101.873604][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1101.894743][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1101.911206][ T8678] bridge_slave_1: entered allmulticast mode
[ 1101.931259][ T8678] bridge_slave_1: entered promiscuous mode
[ 1102.090965][ T8678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1102.129090][ T8678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1102.203489][ T8725] debugfs: 'K��u�cr��K:����̥�B����|����lS��-!' already exists in 'ieee80211'
[ 1102.219430][ T8727] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[ 1102.260989][ T8678] team0: Port device team_slave_0 added
[ 1102.283605][ T8678] team0: Port device team_slave_1 added
[ 1102.391012][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1102.414306][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1102.452204][ T8678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1102.484508][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1102.504123][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1102.539753][ T5844] Bluetooth: hci5: command tx timeout
[ 1102.565119][ T8678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1102.678186][ T8678] hsr_slave_0: entered promiscuous mode
[ 1102.685540][ T8678] hsr_slave_1: entered promiscuous mode
[ 1102.692119][ T8678] debugfs: 'hsr0' already exists in 'hsr'
[ 1102.692138][ T8738] openvswitch: netlink: IP tunnel dst address not specified
[ 1102.692452][ T8738] openvswitch: netlink: IP tunnel dst address not specified
[ 1102.697885][ T8678] Cannot create hsr debugfs directory
[ 1102.776376][ T8738] openvswitch: netlink: IP tunnel dst address not specified
[ 1102.784122][ T8738] openvswitch: netlink: IP tunnel dst address not specified
[ 1102.791868][ T8738] openvswitch: netlink: IP tunnel dst address not specified
[ 1102.799795][ T8738] openvswitch: netlink: IP tunnel dst address not specified
[ 1102.809172][ T8738] openvswitch: netlink: IP tunnel dst address not specified
[ 1102.817381][ T8738] openvswitch: netlink: IP tunnel dst address not specified
[ 1102.825190][ T8738] openvswitch: netlink: IP tunnel dst address not specified
[ 1102.833299][ T8738] openvswitch: netlink: IP tunnel dst address not specified
[ 1103.109631][ T8678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.389405][ T8678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.418598][ T8759] netlink: 'syz.1.9267': attribute type 8 has an invalid length.
[ 1103.426589][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9267'.
[ 1103.770174][ T8787] sctp: [Deprecated]: syz.3.9274 (pid 8787) Use of int in maxseg socket option.
[ 1103.770174][ T8787] Use struct sctp_assoc_value instead
[ 1103.805877][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9274'.
[ 1103.881383][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9275'.
[ 1103.982637][ T8678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.083670][ T8792] x_tables: unsorted entry at hook 3
[ 1104.105637][ T8792] x_tables: unsorted entry at hook 3
[ 1104.253322][ T8678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.671197][ T5844] Bluetooth: hci5: command tx timeout
[ 1104.949412][ T8824] syzkaller0: entered promiscuous mode
[ 1104.955515][ T8824] syzkaller0: entered allmulticast mode
[ 1104.988527][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9287'.
[ 1105.002423][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9287'.
[ 1105.186703][ T8678] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1105.194602][ T8835] netlink: 'syz.2.9290': attribute type 1 has an invalid length.
[ 1105.194657][ T8835] netlink: 'syz.2.9290': attribute type 2 has an invalid length.
[ 1105.194673][ T8835] netlink: 'syz.2.9290': attribute type 1 has an invalid length.
[ 1105.194688][ T8835] netlink: 'syz.2.9290': attribute type 3 has an invalid length.
[ 1105.194713][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9290'.
[ 1105.266722][ T8678] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1105.299705][ T8678] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1105.310929][ T8678] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1105.320328][ T8678] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1105.336597][ T8678] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1105.346701][ T8840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9292'.
[ 1105.356328][ T8678] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1105.366573][ T8678] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1105.374143][ T8838] syzkaller0: entered promiscuous mode
[ 1105.380146][ T8838] syzkaller0: entered allmulticast mode
[ 1105.399813][ T8838] tcf_pedit_act: 22 callbacks suppressed
[ 1105.399835][ T8838] tc action pedit offset must be on 32 bit boundaries
[ 1105.414412][ T8838] tc action pedit offset must be on 32 bit boundaries
[ 1105.421267][ T8838] tc action pedit offset must be on 32 bit boundaries
[ 1105.428150][ T8838] tc action pedit offset must be on 32 bit boundaries
[ 1105.435059][ T8838] tc action pedit offset must be on 32 bit boundaries
[ 1105.441909][ T8838] tc action pedit offset must be on 32 bit boundaries
[ 1105.450444][ T8838] tc action pedit offset must be on 32 bit boundaries
[ 1105.457407][ T8838] tc action pedit offset must be on 32 bit boundaries
[ 1105.464211][ T8838] tc action pedit offset must be on 32 bit boundaries
[ 1105.471068][ T8838] tc action pedit offset must be on 32 bit boundaries
[ 1105.630829][ T8853] ip6t_REJECT: ECHOREPLY is not supported
[ 1105.674166][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9294'.
[ 1105.762679][ T8860] netlink: 'syz.0.9296': attribute type 39 has an invalid length.
[ 1105.865581][ T8678] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1105.948455][ T8864] netlink: 'syz.0.9297': attribute type 1 has an invalid length.
[ 1105.980473][ T8864] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[ 1106.027502][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9298'.
[ 1106.122597][ T8678] 8021q: adding VLAN 0 to HW filter on device team0
[ 1106.137795][T23793] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1106.145121][T23793] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1106.182235][T23793] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1106.189541][T23793] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1106.256105][ T8878] sctp: [Deprecated]: syz.3.9302 (pid 8878) Use of int in maxseg socket option.
[ 1106.256105][ T8878] Use struct sctp_assoc_value instead
[ 1106.350256][ T8678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1106.689758][ T5844] Bluetooth: hci5: command tx timeout
[ 1106.719412][ T8894] syzkaller0: entered promiscuous mode
[ 1106.746703][ T8894] syzkaller0: entered allmulticast mode
[ 1106.805348][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9311'.
[ 1107.055780][ T8678] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1107.378721][ T8928] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9319'.
[ 1107.382535][ T8931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9320'.
[ 1107.388820][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9319'.
[ 1107.842384][ T8678] veth0_vlan: entered promiscuous mode
[ 1107.886884][ T8678] veth1_vlan: entered promiscuous mode
[ 1107.987005][ T8956] bridge2: the hash_elasticity option has been deprecated and is always 16
[ 1107.998709][ T8678] veth0_macvtap: entered promiscuous mode
[ 1108.034136][ T8678] veth1_macvtap: entered promiscuous mode
[ 1108.211915][ T8969] net_ratelimit: 2 callbacks suppressed
[ 1108.211947][ T8969] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[ 1108.217101][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1108.242668][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1108.266608][T23794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.275650][T23794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.284505][T23794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.298502][T23794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.470490][T30132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1108.484527][T30132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1108.543828][T30131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1108.552998][T30131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1108.786605][ T8988] openvswitch: netlink: Key type 30 is not supported
[ 1108.809121][ T5844] Bluetooth: hci5: command tx timeout
[ 1108.956935][ T8997] nbd: illegal input index 2958377
[ 1109.069420][ T8996] syzkaller0: entered promiscuous mode
[ 1109.075435][ T8996] syzkaller0: entered allmulticast mode
[ 1114.274178][ T9039] netlink: 'syz.3.9347': attribute type 1 has an invalid length.
[ 1114.323835][ T9039] netlink: 'syz.3.9347': attribute type 2 has an invalid length.
[ 1114.363950][ T9039] netlink: 'syz.3.9347': attribute type 1 has an invalid length.
[ 1114.377033][ T9038] netlink: 'syz.3.9347': attribute type 32 has an invalid length.
[ 1114.396785][ T9039] netlink: 'syz.3.9347': attribute type 3 has an invalid length.
[ 1114.447323][ T9039] __nla_validate_parse: 11 callbacks suppressed
[ 1114.447344][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9347'.
[ 1114.804533][ T9057] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9352'.
[ 1114.918403][ T9066] delete_channel: no stack
[ 1114.923498][ T9066] netlink: 'syz.2.9353': attribute type 11 has an invalid length.
[ 1115.213141][ T9080] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9357'.
[ 1115.222171][ T9080] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9357'.
[ 1115.237646][ T9080] netlink: 'syz.4.9357': attribute type 6 has an invalid length.
[ 1115.245438][ T9080] netlink: 'syz.4.9357': attribute type 5 has an invalid length.
[ 1115.253200][ T9080] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9357'.
[ 1115.324460][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9360'.
[ 1115.333605][ T9084] netlink: 50 bytes leftover after parsing attributes in process `syz.3.9360'.
[ 1115.342590][ T9084] netlink: 50 bytes leftover after parsing attributes in process `syz.3.9360'.
[ 1115.821445][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9369'.
[ 1116.187637][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.204591][ T5844] block nbd2: Receive control failed (result -1)
[ 1116.991686][ T9158] netlink: 204 bytes leftover after parsing attributes in process `syz.4.9382'.
[ 1118.283311][ T9236] ieee802154 phy1 wpan1: encryption failed: -22
[ 1118.335442][ T9240] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1118.630759][ T9246] veth5: entered allmulticast mode
[ 1118.804830][ T9262] tunl0: entered promiscuous mode
[ 1118.816912][ T9262] netlink: 'syz.2.9415': attribute type 3 has an invalid length.
[ 1119.492886][ T9290] netlink: 'syz.3.9421': attribute type 1 has an invalid length.
[ 1119.512433][ T9290] __nla_validate_parse: 4 callbacks suppressed
[ 1119.512454][ T9290] netlink: 228 bytes leftover after parsing attributes in process `syz.3.9421'.
[ 1119.527400][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9423'.
[ 1119.609942][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9421'.
[ 1119.683693][ T9306] netlink: 'syz.1.9426': attribute type 16 has an invalid length.
[ 1119.702400][ T9298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1119.743732][ T9306] netlink: 364 bytes leftover after parsing attributes in process `syz.1.9426'.
[ 1119.923416][ T9310] netlink: 272 bytes leftover after parsing attributes in process `syz.4.9428'.
[ 1120.027010][ T9313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1120.046873][ T9313] bridge0: entered promiscuous mode
[ 1120.058761][ T9313] bridge0: entered allmulticast mode
[ 1120.073953][ T9317] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9429'.
[ 1120.084680][ T9313] team0: Port device bridge0 added
[ 1120.102296][ T9316] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9429'.
[ 1120.304935][ T9331] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9434'.
[ 1120.490890][ T9345] tap0: tun_chr_ioctl cmd 2148553947
[ 1120.566502][ T9343] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9439'.
[ 1120.665737][ T9353] netlink: 'syz.2.9443': attribute type 21 has an invalid length.
[ 1120.723677][ T9353] netlink: 'syz.2.9443': attribute type 1 has an invalid length.
[ 1120.921352][ T9365] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1120.963376][ T9365] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1120.971153][ T9365] gretap1: entered promiscuous mode
[ 1120.976407][ T9365] gretap1: entered allmulticast mode
[ 1121.057219][ T9372] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.9448'.
[ 1121.611357][T32286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1121.630514][T32286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1121.645405][T32286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1121.653579][T32286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1121.660869][ T9386] netlink: 'syz.1.9453': attribute type 58 has an invalid length.
[ 1121.661830][T32286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1121.764771][ T9387] wg1 speed is unknown, defaulting to 1000
[ 1122.109800][ T9408] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1122.136261][ T9407] bond0: option ad_select: unable to set because the bond device is up
[ 1122.257239][ T9387] chnl_net:caif_netlink_parms(): no params data found
[ 1122.270331][ T9408] netlink: 'syz.3.9458': attribute type 1 has an invalid length.
[ 1122.475799][ T9407] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1122.555096][ T9421] netlink: 'syz.1.9463': attribute type 32 has an invalid length.
[ 1122.693433][ T9430] xt_hashlimit: size too large, truncated to 1048576
[ 1122.778397][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1122.785797][ T9387] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1122.793336][ T9387] bridge_slave_0: entered allmulticast mode
[ 1122.802724][ T9387] bridge_slave_0: entered promiscuous mode
[ 1122.812093][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1122.819468][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1122.827489][ T9387] bridge_slave_1: entered allmulticast mode
[ 1122.835843][ T9387] bridge_slave_1: entered promiscuous mode
[ 1122.943175][ T9387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1122.968779][ T9387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1122.995387][ T9445] ip6t_rpfilter: unknown options
[ 1123.062876][ T9387] team0: Port device team_slave_0 added
[ 1123.092396][ T9387] team0: Port device team_slave_1 added
[ 1123.209750][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1123.225820][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1123.285591][ T9387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1123.315509][ T9452] debugfs: 'K��u�cr��K:����̥�B����|����lS��-!' already exists in 'ieee80211'
[ 1123.383559][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1123.391878][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1123.473719][ T9387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1123.607808][ T9387] hsr_slave_0: entered promiscuous mode
[ 1123.614864][ T9387] hsr_slave_1: entered promiscuous mode
[ 1123.621555][ T9387] debugfs: 'hsr0' already exists in 'hsr'
[ 1123.627436][ T9387] Cannot create hsr debugfs directory
[ 1123.715930][T32286] Bluetooth: hci2: command tx timeout
[ 1124.312576][ T9387] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1124.371199][ T9387] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1124.502018][ T9510] netlink: 'syz.3.9488': attribute type 39 has an invalid length.
[ 1124.707520][ T9517] __nla_validate_parse: 9 callbacks suppressed
[ 1124.707541][ T9517] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9492'.
[ 1124.739464][ T9517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9492'.
[ 1124.749580][ T9517] netlink: 'syz.1.9492': attribute type 1 has an invalid length.
[ 1124.752138][ T9387] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1124.784624][ T9387] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1124.831647][ T9517] bond1: entered promiscuous mode
[ 1124.837180][ T9517] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1125.176046][ T9387] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1125.186341][ T9387] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1125.237608][ T9538] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1125.249228][ T9538] bond2 (unregistering): Released all slaves
[ 1125.277717][ T9536] syzkaller0: entered promiscuous mode
[ 1125.283301][ T9536] syzkaller0: entered allmulticast mode
[ 1125.431054][ T9542] ieee802154 phy1 wpan1: encryption failed: -22
[ 1125.489393][ T9547] pimreg: entered allmulticast mode
[ 1125.530368][ T9552] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9502'.
[ 1125.650427][ T9387] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1125.662984][ T9387] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1125.749262][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9505'.
[ 1125.787614][T32286] Bluetooth: hci2: command tx timeout
[ 1126.330492][ T9387] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1126.341626][ T9580] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9512'.
[ 1126.342617][ T9387] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1126.365467][ T9387] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1126.424988][ T9387] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1126.426988][ T9583] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9513'.
[ 1126.442376][ T9387] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1126.454778][ T9387] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1126.464514][ T9387] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1126.476067][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9513'.
[ 1126.502889][ T9387] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1126.563530][ T9585] IPVS: set_ctl: invalid protocol: 33 10.1.1.2:20003
[ 1126.785535][ T9387] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1126.805220][ T9606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9518'.
[ 1126.817612][ T9606] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.9518'.
[ 1126.913255][ T9387] 8021q: adding VLAN 0 to HW filter on device team0
[ 1126.959750][ T9611] xt_addrtype: ipv6 does not support BROADCAST matching
[ 1126.972230][T23794] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1126.979540][T23794] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1127.095993][T23794] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1127.103216][T23794] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1127.333633][ T9627] netlink: 'syz.1.9526': attribute type 4 has an invalid length.
[ 1127.344456][ T9627] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9526'.
[ 1127.479443][ T9640] syzkaller1: entered promiscuous mode
[ 1127.485068][ T9640] syzkaller1: entered allmulticast mode
[ 1127.629255][ T9387] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1127.783518][ T9387] veth0_vlan: entered promiscuous mode
[ 1127.811130][ T9387] veth1_vlan: entered promiscuous mode
[ 1127.898399][T32286] Bluetooth: hci2: command tx timeout
[ 1127.908029][ T9387] veth0_macvtap: entered promiscuous mode
[ 1127.927395][ T9387] veth1_macvtap: entered promiscuous mode
[ 1127.963112][ T9653] x_tables: duplicate underflow at hook 2
[ 1127.986006][ T9653] 8021q: VLANs not supported on gre0
[ 1128.025124][ T9387] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1128.107570][ T9387] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1128.122990][ T9654] syzkaller1: entered promiscuous mode
[ 1128.129187][ T9654] syzkaller1: entered allmulticast mode
[ 1128.154865][ T9654] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[ 1128.216308][ T9654] bond2 (unregistering): Released all slaves
[ 1128.391733][T30131] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.414325][T30131] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.514472][ T9670] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1128.595510][ T9675] netlink: 'syz.1.9540': attribute type 13 has an invalid length.
[ 1129.165730][T30131] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.174715][T30131] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.219312][ T9675] veth0_macvtap: left promiscuous mode
[ 1129.224945][ T9675] macvtap0: entered allmulticast mode
[ 1129.235227][ T9675] macvtap0: refused to change device tx_queue_len
[ 1129.549530][ T9698] gtp1: entered promiscuous mode
[ 1129.554635][ T9698] gtp1: entered allmulticast mode
[ 1129.620842][T30131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1129.642350][T30131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1129.653970][ T9698] netlink: 'syz.2.9547': attribute type 10 has an invalid length.
[ 1129.688131][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1129.696467][ T9698] bridge_slave_1: left allmulticast mode
[ 1129.736421][ T9698] bridge_slave_1: left promiscuous mode
[ 1129.742577][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1129.757811][ T9698] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1129.921334][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1129.964037][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1130.016573][T32286] Bluetooth: hci2: command tx timeout
[ 1130.116475][ T9722] __nla_validate_parse: 4 callbacks suppressed
[ 1130.116499][ T9722] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9552'.
[ 1131.560893][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9561'.
[ 1131.983038][ T9778] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1132.260090][ T9780] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9565'.
[ 1133.614482][ T9746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1133.788167][ T9785] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1133.795717][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1133.838483][ T9785] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1133.845940][ T9785] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1133.897249][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9567'.
[ 1133.901159][ T9791] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9569'.
[ 1133.906609][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9567'.
[ 1134.046967][ T9790] macvtap1: entered allmulticast mode
[ 1134.052432][ T9790] veth0_macvtap: entered allmulticast mode
[ 1134.080332][ T9801] syzkaller1: entered promiscuous mode
[ 1134.086484][ T9801] syzkaller1: entered allmulticast mode
[ 1134.458289][ T9814] can: request_module (can-proto-0) failed.
[ 1134.619237][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9578'.
[ 1134.628927][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9578'.
[ 1134.803345][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9578'.
[ 1134.862314][ T9828] team0 (unregistering): Port device team_slave_0 removed
[ 1134.872907][ T9828] team0 (unregistering): Port device team_slave_1 removed
[ 1134.916110][ T9828] team0 (unregistering): Port device bridge0 removed
[ 1134.937142][ T9840] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9581'.
[ 1135.154946][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9584'.
[ 1135.380815][ T9827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1135.474809][ T9869] netlink: 'syz.3.9587': attribute type 4 has an invalid length.
[ 1135.508270][ T9869] netlink: 'syz.3.9587': attribute type 4 has an invalid length.
[ 1135.527464][ T9869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9587'.
[ 1135.631807][ T9882] netlink: 312 bytes leftover after parsing attributes in process `syz.2.9597'.
[ 1135.659965][ T9881] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1135.671371][ T9881] batadv_slave_0: entered promiscuous mode
[ 1135.789465][ T9887] netlink: 'syz.2.9600': attribute type 11 has an invalid length.
[ 1135.797442][ T9887] netlink: 150288 bytes leftover after parsing attributes in process `syz.2.9600'.
[ 1135.834261][ T9887] netlink: 'syz.2.9600': attribute type 32 has an invalid length.
[ 1135.842149][ T9887] netlink: 776 bytes leftover after parsing attributes in process `syz.2.9600'.
[ 1136.178631][ T9910] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[ 1136.193415][ T9910] bond2 (unregistering): Released all slaves
[ 1136.273958][ T9915] netlink: 1096 bytes leftover after parsing attributes in process `syz.1.9607'.
[ 1136.309774][ T9920] netlink: 'syz.3.9609': attribute type 1 has an invalid length.
[ 1136.320666][ T9920] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9609'.
[ 1136.330319][ T9920] NCSI netlink: No device for ifindex 0
[ 1136.394285][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9611'.
[ 1136.464700][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9612'.
[ 1137.675839][ T9973] netlink: 9660 bytes leftover after parsing attributes in process `syz.2.9626'.
[ 1137.721665][ T9973] openvswitch: netlink: Flow key attr not present in new flow.
[ 1138.783960][T10011] openvswitch: netlink: IP tunnel dst address not specified
[ 1139.026993][T10033] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1139.051153][T10033] netlink: 'syz.4.9641': attribute type 1 has an invalid length.
[ 1139.146332][T10036] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1139.556167][T10058] netlink: 'syz.1.9647': attribute type 12 has an invalid length.
[ 1142.140190][T10043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1161.453195][T10070] __nla_validate_parse: 4 callbacks suppressed
[ 1161.453217][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9654'.
[ 1161.500753][T10073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1161.512110][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9653'.
[ 1161.597844][T10073] 8021q: adding VLAN 0 to HW filter on device macsec1
[ 1161.615943][ T1263] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 1161.644653][T10070] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9654'.
[ 1161.644849][T10079] netlink: 'syz.1.9652': attribute type 22 has an invalid length.
[ 1161.661488][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9652'.
[ 1161.677190][T10070] tipc: Started in network mode
[ 1161.687298][T10070] tipc: Node identity b6ca60bba2b3, cluster identity 4711
[ 1161.700265][T10070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1161.737148][T10079] netlink: 'syz.1.9652': attribute type 22 has an invalid length.
[ 1161.745118][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9652'.
[ 1161.754596][T10070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1161.770036][T30132] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1161.787204][T30132] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1161.796211][T30132] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1161.804947][T30132] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1161.814488][T10070] +
: renamed from syzkaller0
[ 1161.820629][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9656'.
[ 1161.839315][T10084] netlink: 'syz.0.9656': attribute type 10 has an invalid length.
[ 1161.872402][T10070] tipc: Disabling bearer <eth:syzkaller0>
[ 1161.909471][T10084] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1161.944612][T10084] bridge_slave_1: left allmulticast mode
[ 1161.961415][T10084] bridge_slave_1: left promiscuous mode
[ 1161.986721][T10084] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1162.033400][T10084] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1162.095682][T10098] vlan2: entered allmulticast mode
[ 1162.106518][T10098] bond0: entered allmulticast mode
[ 1162.116737][T10098] bond_slave_0: entered allmulticast mode
[ 1162.123174][T10098] bond_slave_1: entered allmulticast mode
[ 1162.129289][T10098] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 1162.200907][T10102] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.9661'.
[ 1162.463270][T10113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1162.546793][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9668'.
[ 1162.547214][T10121] lo speed is unknown, defaulting to 1000
[ 1162.561630][T10121] lo speed is unknown, defaulting to 1000
[ 1162.589819][T10115] bond2: option xmit_hash_policy: invalid value (64)
[ 1162.598701][T10115] bond2 (unregistering): Released all slaves
[ 1162.631623][T10127] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.9669'.
[ 1162.642507][T10127] openvswitch: netlink: Message has 5 unknown bytes.
[ 1162.660007][T10121] lo speed is unknown, defaulting to 1000
[ 1162.673873][T10121] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1162.702254][T10121] lo speed is unknown, defaulting to 1000
[ 1162.709750][T10121] lo speed is unknown, defaulting to 1000
[ 1162.716702][T10121] lo speed is unknown, defaulting to 1000
[ 1162.758570][T10121] lo speed is unknown, defaulting to 1000
[ 1162.767385][T10121] lo speed is unknown, defaulting to 1000
[ 1162.776186][T10121] lo speed is unknown, defaulting to 1000
[ 1162.784237][T10121] lo speed is unknown, defaulting to 1000
[ 1162.793169][T10121] lo speed is unknown, defaulting to 1000
[ 1162.804237][T10121] lo speed is unknown, defaulting to 1000
[ 1162.814916][T10121] lo speed is unknown, defaulting to 1000
[ 1162.833724][T10121] lo speed is unknown, defaulting to 1000
[ 1162.851523][T10121] lo speed is unknown, defaulting to 1000
[ 1163.473040][   T48] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1163.673895][T10158] netlink: 'syz.4.9677': attribute type 1 has an invalid length.
[ 1163.686775][T10158] netlink: 'syz.4.9677': attribute type 2 has an invalid length.
[ 1164.313553][T10194] netlink: 'syz.3.9689': attribute type 39 has an invalid length.
[ 1166.329072][T10147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1166.760361][T10220] Bluetooth: MGMT ver 1.23
[ 1166.766516][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9697'.
[ 1166.871603][T10228] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes))
[ 1167.024541][T10241] netlink: 'syz.3.9702': attribute type 1 has an invalid length.
[ 1167.049339][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9704'.
[ 1167.061526][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9704'.
[ 1167.070692][T10244] netlink: 'syz.0.9704': attribute type 8 has an invalid length.
[ 1167.081599][T10245] netlink: 'syz.0.9704': attribute type 8 has an invalid length.
[ 1167.116605][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9704'.
[ 1167.177700][T10247] netlink: 'syz.2.9705': attribute type 4 has an invalid length.
[ 1167.280405][T10255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9706'.
[ 1167.296433][T10247] netlink: 'syz.2.9705': attribute type 4 has an invalid length.
[ 1167.458057][T10267] syzkaller0: entered promiscuous mode
[ 1167.463832][T10267] syzkaller0: entered allmulticast mode
[ 1167.729459][T10279] sctp: [Deprecated]: syz.0.9712 (pid 10279) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1167.729459][T10279] Use struct sctp_sack_info instead
[ 1167.850156][T10278] syzkaller1: entered promiscuous mode
[ 1167.858561][T10278] syzkaller1: entered allmulticast mode
[ 1168.128420][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9718'.
[ 1168.168448][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9718'.
[ 1168.375073][T10310] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1168.653575][T10335] netlink: 'syz.3.9730': attribute type 39 has an invalid length.
[ 1168.876067][T10347] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9733'.
[ 1169.037858][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9734'.
[ 1169.197353][T10359] sctp: [Deprecated]: syz.4.9736 (pid 10359) Use of int in maxseg socket option.
[ 1169.197353][T10359] Use struct sctp_assoc_value instead
[ 1169.630780][T10378] netlink: 'syz.4.9743': attribute type 1 has an invalid length.
[ 1169.892548][T10382] bond2: (slave bridge1): making interface the new active one
[ 1169.923306][T10382] bond2: (slave bridge1): Enslaving as an active interface with an up link
[ 1170.047253][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9747'.
[ 1170.068842][T10397] bridge2: entered promiscuous mode
[ 1170.074809][T10397] bridge2: entered allmulticast mode
[ 1170.095736][T10395] bridge3: entered promiscuous mode
[ 1170.101799][T10395] bridge3: entered allmulticast mode
[ 1170.137803][T10398] netlink: 'syz.1.9748': attribute type 10 has an invalid length.
[ 1170.149444][T10400] atomic_op ffff88803c4ee198 conn xmit_atomic 0000000000000000
[ 1170.185674][T10398] netlink: 'syz.1.9748': attribute type 10 has an invalid length.
[ 1170.205126][T10398] dummy0: entered promiscuous mode
[ 1170.210704][T10398] dummy0: entered allmulticast mode
[ 1170.216942][T10398] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1170.465374][T10415] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[ 1170.604185][T10415] netlink: 'syz.0.9756': attribute type 16 has an invalid length.
[ 1171.414608][T10415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1172.300386][T10477] __nla_validate_parse: 6 callbacks suppressed
[ 1172.300408][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9767'.
[ 1172.628132][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9771'.
[ 1172.683488][T10496] validate_nla: 6 callbacks suppressed
[ 1172.683564][T10496] netlink: 'syz.2.9775': attribute type 1 has an invalid length.
[ 1172.900943][T10485] team0: Port device team_slave_0 removed
[ 1172.969611][T10496] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1173.001002][T10501] vlan0: entered allmulticast mode
[ 1173.047785][T10501] veth0_to_bond: entered allmulticast mode
[ 1173.202093][T10512] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 1173.266422][T10514] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 1173.305241][T10525] netlink: 'syz.4.9781': attribute type 1 has an invalid length.
[ 1173.410400][T10529] x_tables: duplicate underflow at hook 2
[ 1173.427445][T10529] netlink: 'syz.0.9782': attribute type 31 has an invalid length.
[ 1173.806052][T10547] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9787'.
[ 1174.157925][T10559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1174.414078][T10535] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1174.436506][T10562] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9791'.
[ 1174.465190][T10535] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1174.474808][T10535] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1174.641330][T10576] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9797'.
[ 1174.780831][T10584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9800'.
[ 1174.957358][T10596] netlink: 'syz.0.9802': attribute type 10 has an invalid length.
[ 1174.972735][T10596] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9802'.
[ 1175.275654][T10610] netlink: 'syz.0.9806': attribute type 18 has an invalid length.
[ 1175.473534][T23797] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1175.514312][T10331] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1175.550608][T10610] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9806'.
[ 1175.596463][T10331] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1175.628704][T10610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9806'.
[ 1175.668960][T10331] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1176.236256][T10637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9812'.
[ 1176.443409][T10674] vcan0: tx address claim with different name
[ 1176.766590][T10688] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 1177.332724][T10711] __nla_validate_parse: 6 callbacks suppressed
[ 1177.332747][T10711] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.9830'.
[ 1177.420641][T10702] syzkaller0: entered promiscuous mode
[ 1177.426282][T10702] syzkaller0: entered allmulticast mode
[ 1177.614097][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.692304][T10733] netlink: 'syz.0.9836': attribute type 11 has an invalid length.
[ 1177.700189][T10733] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.9836'.
[ 1177.950450][T10734] syzkaller0: entered promiscuous mode
[ 1177.964795][T10734] syzkaller0: entered allmulticast mode
[ 1178.069677][T10749] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1178.109720][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9840'.
[ 1178.112317][T10753] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[ 1178.122255][T10749] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[ 1178.237600][T10751] veth0_macvtap: left promiscuous mode
[ 1178.767195][T10769] netlink: 'syz.4.9845': attribute type 1 has an invalid length.
[ 1178.775051][T10769] nbd: error processing sock list
[ 1179.561876][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9850'.
[ 1179.735036][T10814] xt_nat: multiple ranges no longer supported
[ 1179.840593][T10823] netlink: 'syz.4.9858': attribute type 1 has an invalid length.
[ 1180.018016][T10823] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1180.026133][T10830] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9859'.
[ 1180.186864][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9864'.
[ 1180.313728][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9866'.
[ 1180.589532][T10864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9868'.
[ 1180.650501][T10868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9871'.
[ 1180.660869][T10870] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1180.833417][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1181.218920][T10900] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 1181.295952][T10901] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9877'.
[ 1181.758329][T10930] xt_l2tp: unknown flags: 10
[ 1181.952817][T10935] atomic_op ffff8880805ae998 conn xmit_atomic 0000000000000000
[ 1182.159201][T10943] netlink: 'syz.2.9890': attribute type 1 has an invalid length.
[ 1182.261806][T10950] netlink: 'syz.0.9892': attribute type 10 has an invalid length.
[ 1182.317749][T10955] netlink: 'syz.1.9895': attribute type 2 has an invalid length.
[ 1182.565578][T10973] __nla_validate_parse: 8 callbacks suppressed
[ 1182.565597][T10973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9899'.
[ 1182.634454][T10974] bond0: Device is already in use.
[ 1182.676328][T10978] netlink: 'syz.2.9900': attribute type 1 has an invalid length.
[ 1182.805728][T10986] netlink: 'syz.4.9904': attribute type 11 has an invalid length.
[ 1182.845846][T10986] netlink: 228 bytes leftover after parsing attributes in process `syz.4.9904'.
[ 1183.535190][T11012] Cannot find add_set index 65532 as target
[ 1183.541496][T11010] 
[ 1183.543852][T11010] ======================================================
[ 1183.550904][T11010] WARNING: possible circular locking dependency detected
[ 1183.557945][T11010] syzkaller #0 Not tainted
[ 1183.562382][T11010] ------------------------------------------------------
[ 1183.569420][T11010] syz.2.9908/11010 is trying to acquire lock:
[ 1183.575514][T11010] ffffffff8ff4c298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90
[ 1183.584697][T11010] 
[ 1183.584697][T11010] but task is already holding lock:
[ 1183.592081][T11010] ffff888031a01d70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[ 1183.601364][T11010] 
[ 1183.601364][T11010] which lock already depends on the new lock.
[ 1183.601364][T11010] 
[ 1183.611875][T11010] 
[ 1183.611875][T11010] the existing dependency chain (in reverse order) is:
[ 1183.620915][T11010] 
[ 1183.620915][T11010] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[ 1183.628953][T11010]        _raw_spin_lock_bh+0x36/0x50
[ 1183.634273][T11010]        nr_rt_ioctl+0x215/0xf90
[ 1183.639248][T11010]        sock_do_ioctl+0x101/0x320
[ 1183.644387][T11010]        sock_ioctl+0x5c6/0x7f0
[ 1183.649266][T11010]        __se_sys_ioctl+0xfc/0x170
[ 1183.654397][T11010]        do_syscall_64+0x15f/0xf80
[ 1183.659530][T11010]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1183.665962][T11010] 
[ 1183.665962][T11010] -> #1 (nr_node_list_lock){+...}-{3:3}:
[ 1183.673797][T11010]        _raw_spin_lock_bh+0x36/0x50
[ 1183.679095][T11010]        nr_rt_device_down+0xbe/0x860
[ 1183.684484][T11010]        nr_device_event+0x137/0x150
[ 1183.689781][T11010]        notifier_call_chain+0x1ad/0x3d0
[ 1183.695440][T11010]        netif_close_many+0x2ae/0x420
[ 1183.700853][T11010]        netif_close+0x160/0x220
[ 1183.705814][T11010]        dev_close+0x10a/0x220
[ 1183.710603][T11010]        bpq_device_event+0x377/0x6a0
[ 1183.715996][T11010]        notifier_call_chain+0x1ad/0x3d0
[ 1183.721649][T11010]        __dev_notify_flags+0x16d/0x310
[ 1183.727237][T11010]        netif_change_flags+0xe8/0x1a0
[ 1183.732728][T11010]        dev_change_flags+0x130/0x270
[ 1183.738121][T11010]        dev_ioctl+0x7b4/0x1150
[ 1183.742991][T11010]        sock_do_ioctl+0x23e/0x320
[ 1183.748111][T11010]        sock_ioctl+0x5c6/0x7f0
[ 1183.752973][T11010]        __se_sys_ioctl+0xfc/0x170
[ 1183.758095][T11010]        do_syscall_64+0x15f/0xf80
[ 1183.763225][T11010]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1183.769646][T11010] 
[ 1183.769646][T11010] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[ 1183.777580][T11010]        __lock_acquire+0x15a5/0x2cf0
[ 1183.782987][T11010]        lock_acquire+0x106/0x350
[ 1183.788076][T11010]        _raw_spin_lock_bh+0x36/0x50
[ 1183.793384][T11010]        nr_rt_ioctl+0x40c/0xf90
[ 1183.798355][T11010]        sock_do_ioctl+0x101/0x320
[ 1183.803484][T11010]        sock_ioctl+0x5c6/0x7f0
[ 1183.808352][T11010]        __se_sys_ioctl+0xfc/0x170
[ 1183.813470][T11010]        do_syscall_64+0x15f/0xf80
[ 1183.818601][T11010]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1183.825039][T11010] 
[ 1183.825039][T11010] other info that might help us debug this:
[ 1183.825039][T11010] 
[ 1183.835298][T11010] Chain exists of:
[ 1183.835298][T11010]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[ 1183.835298][T11010] 
[ 1183.849156][T11010]  Possible unsafe locking scenario:
[ 1183.849156][T11010] 
[ 1183.856616][T11010]        CPU0                    CPU1
[ 1183.861985][T11010]        ----                    ----
[ 1183.867357][T11010]   lock(&nr_node->node_lock);
[ 1183.872135][T11010]                                lock(nr_node_list_lock);
[ 1183.879262][T11010]                                lock(&nr_node->node_lock);
[ 1183.886566][T11010]   lock(nr_neigh_list_lock);
[ 1183.891255][T11010] 
[ 1183.891255][T11010]  *** DEADLOCK ***
[ 1183.891255][T11010] 
[ 1183.899498][T11010] 2 locks held by syz.2.9908/11010:
[ 1183.904707][T11010]  #0: ffffffff8ff4c2f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90
[ 1183.914221][T11010]  #1: ffff888031a01d70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[ 1183.923905][T11010] 
[ 1183.923905][T11010] stack backtrace:
[ 1183.929802][T11010] CPU: 0 UID: 0 PID: 11010 Comm: syz.2.9908 Not tainted syzkaller #0 PREEMPT(full) 
[ 1183.929823][T11010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1183.929835][T11010] Call Trace:
[ 1183.929845][T11010]  <TASK>
[ 1183.929853][T11010]  dump_stack_lvl+0xe8/0x150
[ 1183.929881][T11010]  print_circular_bug+0x2e1/0x300
[ 1183.929911][T11010]  check_noncircular+0x12e/0x150
[ 1183.929940][T11010]  __lock_acquire+0x15a5/0x2cf0
[ 1183.929972][T11010]  ? nr_rt_ioctl+0x40c/0xf90
[ 1183.929995][T11010]  lock_acquire+0x106/0x350
[ 1183.930016][T11010]  ? nr_rt_ioctl+0x40c/0xf90
[ 1183.930041][T11010]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1183.930057][T11010]  ? nr_rt_ioctl+0x821/0xf90
[ 1183.930082][T11010]  ? nr_rt_ioctl+0x40c/0xf90
[ 1183.930106][T11010]  _raw_spin_lock_bh+0x36/0x50
[ 1183.930124][T11010]  ? nr_rt_ioctl+0x40c/0xf90
[ 1183.930147][T11010]  nr_rt_ioctl+0x40c/0xf90
[ 1183.930176][T11010]  ? __pfx_nr_rt_ioctl+0x10/0x10
[ 1183.930205][T11010]  ? apparmor_capable+0x126/0x170
[ 1183.930225][T11010]  ? capable+0x88/0xe0
[ 1183.930248][T11010]  ? nr_ioctl+0x1b1/0x3b0
[ 1183.930270][T11010]  sock_do_ioctl+0x101/0x320
[ 1183.930291][T11010]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1183.930309][T11010]  ? do_futex+0x333/0x420
[ 1183.930338][T11010]  sock_ioctl+0x5c6/0x7f0
[ 1183.930357][T11010]  ? __pfx_sock_ioctl+0x10/0x10
[ 1183.930375][T11010]  ? __fget_files+0x2a/0x420
[ 1183.930397][T11010]  ? __fget_files+0x3a0/0x420
[ 1183.930415][T11010]  ? __fget_files+0x2a/0x420
[ 1183.930438][T11010]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1183.930456][T11010]  ? __pfx_sock_ioctl+0x10/0x10
[ 1183.930473][T11010]  __se_sys_ioctl+0xfc/0x170
[ 1183.930496][T11010]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1183.930514][T11010]  do_syscall_64+0x15f/0xf80
[ 1183.930536][T11010]  ? trace_irq_disable+0x3b/0x140
[ 1183.930554][T11010]  ? clear_bhb_loop+0x40/0x90
[ 1183.930573][T11010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1183.930591][T11010] RIP: 0033:0x7ff7bc19cdd9
[ 1183.930607][T11010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1183.930624][T11010] RSP: 002b:00007ff7bd05c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1183.930643][T11010] RAX: ffffffffffffffda RBX: 00007ff7bc415fa0 RCX: 00007ff7bc19cdd9
[ 1183.930657][T11010] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005
[ 1183.930667][T11010] RBP: 00007ff7bc232d69 R08: 0000000000000000 R09: 0000000000000000
[ 1183.930678][T11010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1183.930690][T11010] R13: 00007ff7bc416038 R14: 00007ff7bc415fa0 R15: 00007ffe5e1e18f8
[ 1183.930710][T11010]  </TASK>
[ 1184.207265][T11012] netlink: 'syz.0.9909': attribute type 1 has an invalid length.
[ 1184.746654][ T5844] Bluetooth: hci1: command 0x041b tx timeout
[ 1189.866217][T11113] Bluetooth: hci0: command 0x0406 tx timeout