last executing test programs:

6.712262293s ago: executing program 0 (id=3068):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x60000016})
epoll_pwait(r4, &(0x7f0000000100)=[{}], 0x1, 0xfffffffe, 0x0, 0x0)
close(r2)
r5 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000008d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
r10 = socket(0x29, 0x1, 0x8)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x1, 0x6}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x893}, 0x200440c4)
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r5)

6.210210979s ago: executing program 0 (id=3073):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)
socket$inet(0x2, 0x1, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710446000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bind$llc(0xffffffffffffffff, 0x0, 0x0)

5.442871463s ago: executing program 0 (id=3078):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000001f00000000000000080009000d000000", 0x24)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20088001}, 0x0)

5.226853577s ago: executing program 0 (id=3079):
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000003c0)={0xb, 0x9, 0xffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x200, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0xd}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x8884)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x13, &(0x7f0000000000)="0e209c14fb6900591b1793ff12ad9754720e92"})
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0)

4.943185199s ago: executing program 0 (id=3081):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
r3 = socket(0x1d, 0x800, 0x7)
connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x1, 0x830, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2e, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000200)={0x77359400}, 0x10)
listen(r4, 0x709)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x9)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r8, 0x6, 0x21, 0x0, &(0x7f0000000100))
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000ed03014000000000000000000000000a14000000fa03"], 0x28}}, 0x0)
listen(r6, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
connect$vsock_stream(r5, 0x0, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)
close(r1)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x19, 0x8, 0x2, 0x5020, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r9, &(0x7f0000000040)}, 0x20)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x42}, 0x2810)

4.558692167s ago: executing program 0 (id=3086):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', <r2=>0x0}) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x5fc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x8179}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe}, @jmp={0x5, 0x0, 0xc, 0x2, 0x5, 0xffffffffffffffe0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={<r8=>r7, 0x4, 0x7, 0xfffffff7}, &(0x7f0000000180)=0x10) (rerun: 64)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000000)={0x2542, 0x9, 0x201, 0x5, 0x8, 0xab31, 0x1, 0xb6, r8}, 0x20)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32)
r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) (rerun: 32)
write$cgroup_subtree(r10, &(0x7f0000000500)={[{0x2d, 'cpuset'}, {0x2b, 'rdma'}]}, 0xe) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async)
ioctl$FS_IOC_GETFLAGS(r9, 0x80086601, &(0x7f0000000480)) (async)
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x1) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) (async)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="0203fe001000000000000000fedbdf2505000600330000000a0000000000000000000000000000000000000000000001000000000000000002000100000000000000fc0c0200006005000500000000000a004e2200000000000000000000000000000000000000018000000000000000020013"], 0x80}, 0x1, 0x7}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r13}, 0xc)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x4c, r1, 0x1, 0xfffffffe, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))

2.815614305s ago: executing program 3 (id=3105):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)

2.653019418s ago: executing program 3 (id=3108):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000800000000000000000000000000000ac1414bc000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000000000000000084000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000004000"/241], 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8)
setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="08010000100039042bbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB='h\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800060000000100080006000900000008000400ac14143908000100", @ANYRES32=0x0, @ANYBLOB="0800060003000000080003000d00000008000100", @ANYRES32=0x0, @ANYBLOB="000006000100008008000100", @ANYRES32=0x0, @ANYBLOB="08000200050000000800030062000000080003000000008008000300010000000800060000000000080002000700000008000300ff0700000800060002000000080006000100000008000100", @ANYRES32=r5, @ANYRESHEX=r3], 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000ffdbdf250900020073797a32000000000800416c"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x8040)

2.436892731s ago: executing program 3 (id=3110):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x109040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r7, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) (async)
close(0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendto$packet(r1, &(0x7f0000000200)="3920f4facccf1dd4c7b44a7b85450b691cc034cfc70b332eb3b9da025f31f6b764a5ae8b3103a1d3f62f7b26bb78683b8c10aea3a0f87482bc500b7fde428182b4b596bd70fb02f6aecdccc9dfe060cfe3cc0292960cb75554fdca5dda301de1ecbc7de223ee54f1ce70bfa7160d08a6d94c9a48c4e1d15eeb2567578d9ebd958478e9b1ec2bad714d96d64b117ccd3ab23751788db39d19a50d54af61af44ab01bc4effe3b467b146cb811ea9b640e0d0be9729a1107a644f42458ce6d315", 0xbf, 0x8894, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0xd, 0xfff8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0xec0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

2.162527242s ago: executing program 3 (id=3112):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00')

1.940869794s ago: executing program 3 (id=3114):
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647", 0x9}], 0x2, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x28044854}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000140)={'wg2\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x0, 0xf4, 0xfd, 0x2, 0x1, 0x0, 0x1000}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_NH_ID={0x8, 0x1e, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x440c0)
bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x14, 0x2, 0x3, 0x5, 0x1100, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x14}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6}]}}}, @IFLA_IFALIASn={0x4}]}, 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.609573414s ago: executing program 2 (id=3115):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$unix(r2, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701"], 0x28, 0x2000c000}}], 0x2, 0x88)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41103, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1.607191558s ago: executing program 1 (id=3116):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}, @NFTA_RANGE_TO_DATA={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x84}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000004000000000000000ffffffff180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8efffffb702000008000000b70300000900000085000000c800000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40e00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) (async)
socket(0x1, 0x803, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000017c0)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a00", 0x36}, {&(0x7f0000001800)="1d", 0x1}], 0x2, 0x0, 0x0, 0x7400}, 0x8010) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5f, @local, 0x8001}, 0x1c) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000000000fd5c0000000a38000000060a090400000000000000000200000209000200000000000900020073797a3000000000140000001100010000000000000000000500000a00"/96], 0x60}, 0x1, 0x0, 0x0, 0x40000104}, 0x4000841)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x420000, 0x0)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000016c0)=""/250) (async)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) (async)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r1, r3}) (async)
sendmmsg$inet(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002b80)="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", 0x11b}, {0x0}, {&(0x7f0000000400)="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", 0x3d8}], 0x3}}], 0x1, 0x40) (async)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f0000000340), 0x11000)
vmsplice(r5, &(0x7f0000000000), 0x0, 0xb) (async)
writev(r6, &(0x7f0000000380)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54040}, 0x4004004) (async)
r7 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10)
sendto$inet6(r8, &(0x7f0000000000)="f7", 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r9 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)

1.470917822s ago: executing program 1 (id=3117):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)

1.468344375s ago: executing program 2 (id=3118):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000001c0)={{<r2=>r1, &(0x7f0000000000)='.(\\\x00', 0x509200, &(0x7f0000000080)={@align=0x4, {0x8, 0x5, 0xa1, 0x2}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x8}, {[0x81, 0x8, 0x56e, 0x6]}, 0x5, 0x8, &(0x7f0000000180)=""/8})
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000240)=0x9, 0x4)
socket$nl_rdma(0x10, 0x3, 0x14)

1.403851216s ago: executing program 1 (id=3119):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000800000000000000000000000000000ac1414bc000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000000000000000084000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000004000"/241], 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8)
setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="08010000100039042bbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB='h\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800060000000100080006000900000008000400ac14143908000100", @ANYRES32=0x0, @ANYBLOB="0800060003000000080003000d00000008000100", @ANYRES32=0x0, @ANYBLOB="000006000100008008000100", @ANYRES32=0x0, @ANYBLOB="08000200050000000800030062000000080003000000008008000300010000000800060000000000080002000700000008000300ff0700000800060002000000080006000100000008000100", @ANYRES32=r5, @ANYRESHEX=r3], 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000ffdbdf250900020073797a32000000000800416c"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x8040)

1.273135044s ago: executing program 2 (id=3120):
unshare(0x20400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r0, 0x5451)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x14}, [@generic={0x71, 0x0, 0x1, 0x8e}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

1.122743638s ago: executing program 1 (id=3122):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0xfffd, 0x0, 0x0, {[@generic={0x13, 0x12, "be00000080deae1159bf0ddcef2238d0"}, @generic={0x13, 0x2}, @sack={0x5, 0xe, [0x5, 0x5, 0x7f]}]}}}}}}}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c000180060006006d1c00007c13028078131480731315806f13012971"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_open_procfs$namespace(0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000500), 0x0, 0x4000801)
setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f00000000c0)=0x2, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, &(0x7f00000001c0)=0x10)
shutdown(r2, 0x1)
getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a000000000000000000000006001d000000000006001c000000000018086da4aa78f723"], 0x2c}}, 0x0)
clock_gettime(0x0, &(0x7f00000002c0)={<r3=>0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000100)={0xf4, 0xee, 0x701, 0x4, 0xffffffff, 0x100000001, 0x1ff, 0x7}, &(0x7f0000000240)={0x8, 0xffffffffffffff47, 0x0, 0x8, 0x3, 0x7, 0x7, 0x2}, &(0x7f0000000280)={0x3, 0x5f, 0x5, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x6, 0x5}, &(0x7f0000000300)={r3, r4+10000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x3]}, 0x8})

1.076784046s ago: executing program 2 (id=3123):
socket$netlink(0x10, 0x3, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00203c002400000000000600000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf2501000000050005000c0000000500050009000000280006800208000300ffffffff08000700", @ANYRES32=r9, @ANYBLOB="1400040000000000000000000000000000000001050005006a000000140006800500020001000000080006000a00000008000400050000002400018006000100080000000600010002000000050002000500000008000700", @ANYRES32=r6, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x404008c}, 0x8041)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)
r10 = socket(0xa, 0x800, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000f8e40d8af5b6f8b381b76fe738cc4410000104000000000000000000000000007f5d21d10cabdb177346d84ebc9302526db1866d66d482dfa9bea5d18233acbb9668b22dad1b85223f0a757ed5f85bfd2e1df86e69fb791063b9f8abb54d4e90f57be3f30145f55b2cb338e82d07c2c8", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e20000004000600"], 0x40}}, 0x40800)

991.743161ms ago: executing program 4 (id=3124):
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0b062dbd70000040000030000000050035000200000005003600040000800a0001007770616e3000000005"], 0x38}, 0x1, 0x8000000, 0x0, 0x1}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x40}, 0x20008024)

851.090307ms ago: executing program 4 (id=3125):
r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @bcast}, [@default, @netrom, @null, @default, @bcast, @null, @default, @bcast]}, &(0x7f0000000040)=0x48, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'team_slave_1\x00', &(0x7f0000000200)=@ethtool_modinfo={0x42, 0x9, 0x101}})
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="2f00000000008000000000f3", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000001400000004"], 0x20)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10)
close(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)

820.354497ms ago: executing program 1 (id=3126):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@dev={0xfe, 0x80, '\x00', 0x36}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x2000000, 0x0, 0x7a, 0x180, 0xfffffffffffffffb, 0x9b0318})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @mcast1, 0x10000006, 0x0, 0x1, 0x0, 0x9, 0x10380})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x64604, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x20044850)
getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000740)=0x5, &(0x7f0000000780)=0x1) (async)
getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000740)=0x5, &(0x7f0000000780)=0x1)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x4}}]}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x4}}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {0xfff1, 0x4}, {0x5}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0x10}, {0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x200000d4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x80000, 0x9) (async)
socket$inet6(0xa, 0x80000, 0x9)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x1142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @ipv4=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x1142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @ipv4=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_USERDATA={0x3c, 0xc, "6c1dc5a84e2564648645ddb5c4842721e0e5a60aa16eccd88f7e60a1c3f04d5951a1206ce1ea2d286893dd6cbf4b0d864bb3b3e3940110f6"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x100, 0x2, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xd4, 0x6, "5e4b1cb268becc130c28130a159888d51c9fe13f3026e7ae578cbbaccbab747913356c467ab663b3be8cb824ed68b3853fee45dd08c5bc9360fdb38b2ca231debc90c648ce1d48fd26f5a0c7da91924bc5f5434e59449ac11d633d2e0c89e22a9bae2e48b9340779376c23f4340072850e26b54cc8763ea8934114dfc35eba7182f46550ea0af812ff136b426b3d981f19d94d59c29a9b0d56149fdfb5daf459412715497292b0c7fc9da67f086072c4888140fc851216c7f6f2169ad8df80ccd67330098a1f983e7a895bf2f50b5eda"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x22c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "2c930082263609cf6811750395da624fae419da2ea80cf4b0dbc96d9862c3a97b7b4614b20efd962cd51d32932dd37e6f0511c636b6caba5411714eadcc6de7d655ba90325be7f8c6f792405fce50852ec1ebcb770f74e25003755060049340dc76d986b7c18ce7ed93bf34519cbe818340d542f615fe8dfd876358249ca3b8389ab08f196040e7f35d5f2a1eb60971799a4e3b3a503c8dec30ae34056cf8a9af8878808fe422b8b4acc8f8aa3a10faaa9e05cbdb82f1c93aace70e9c070db0de4a83b6b5dcc34cb2d0912ef6d2417c7b618258aad288b9f8d2d842775"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x20, 0x6, "9b11b2958158ff09549715de36e6c87337895d27b7bd3ff45c7cb89a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xcf, 0x6, "ae4845e27b70ac7298c1af7d1737e4882a97a00a6ffc3c627ad31e8a4586b22b4be5c8ef72b83d111ca61131491520022211638d8ab3acdd5f7071706e1f4ad44d7fc0e9d2157e929276cecda69d2449e4e7f1b969c32b9678a976c3c89a984934405ae64567d38e52d942ffd647b325fe041045e95f2c9e2a208b29311c5b04a3a03c9bd1ac1f470b8385215b7425b2dddaf2fc4ac18c52edc8fd866f8d9a5ec89f47d30e9952b6838ad0189ff6021a99c4ee05a6b7cd09ff2d912e407877f847b89e04df0d3dd5cbf3b4"}]}, @NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x100, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3dc}, 0x1, 0x0, 0x0, 0x4000041}, 0x4)

807.136217ms ago: executing program 3 (id=3127):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0)
recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000f40)=""/239, 0xef}, {&(0x7f0000003bc0)=""/4085, 0xff5}, {&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/166, 0xa6}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x4, 0x2120, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x28000600)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r1}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="faff491f6a0bffff", @ANYRES16=r4, @ANYBLOB="010069bd7000fcdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="0c0023800500060006000000"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4040)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fedbdf256400000008000300", @ANYRES32=r5, @ANYBLOB="a4f49d83bddab5767f0e2cbf4c3a8c8807fe40ccb7f20000000000000000984e44dcce1c61"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r7)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
shutdown(r7, 0x0)
recvmmsg(r7, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, 0x0, &(0x7f0000000100))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="18100000ab37b41c385465f95d898193c30e4cfe43cc29ecf677cfc0570ebe23a1d1db84c2b9b2485a013128b1fb7007035d197e1dbb2099db6bd2545c1f3582e97172f45c16a6e88241910864aefc32e05de2490046976ce78aa73952f41b33291aea9b71f6a77410538549001b7c2f9d4a5c", @ANYRES16=r10, @ANYBLOB="080029bd7000fedbdf251000000004000680"], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x4000041)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="00012000000000000300000008000000000085", @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf256000000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r12 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)

675.042679ms ago: executing program 4 (id=3128):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)

520.143188ms ago: executing program 4 (id=3129):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x8008}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r5, @ANYBLOB="80007f0a0a00020091"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r8)
sendmsg$NLBL_CALIPSO_C_LISTALL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r9, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052)
sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000540)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xb, &(0x7f00000004c0)={&(0x7f0000000140)={0x380, 0x13, 0x4, 0x70bd2b, 0x25dfdbfc, {0x29, 0x4, 0xa, 0x40, {0x4e21, 0x4e24, [0x2, 0x9, 0x6f44, 0x800], [0x6, 0x7, 0xd67, 0x5df7], r7, [0x5, 0x80]}, 0x100, 0x81}, [@INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "e8e637a4794742d9a0315b8136a9fb1c5739b416d955282c3dc9f9f1b614122d5526043b82926b451edd60916ef21fe0b38ba8900f2dd5b01bbeaa7691f9560814660c00c727e00857b144b7c62da495c941309b5741f59819e9b3bfc41bf2909dad13b19b1eae6f8c9234915c690375e8a7f09268324d35363e1841c3d78546c5451ff43e4051e715fcfc"}, @INET_DIAG_REQ_BYTECODE={0xf5, 0x1, "4f7f008e5b1a7b1a0943c8f8d297fd5f7a89414ed28ec48544cd94c84601fb8e331623fa160b0e0bd54ffa23da431517bdd7afa7d3911356678dc788d3381190c06bc55334fece10c8ac561647e99a841cf967238b153d29e9f553c8ce88678c58b2382f7a39fa2309774ab10b56bb9fd7443099faa4499260921c97aed23a83229f9393546a2ac907e290083b026f9c495b86943bfd481d56c76066d50a6af09163cf8173583860c47a99265a7217c7d5d74215c4d192779fb9eccb74ffeacb5a0b555d3290607da8e01ae06f206cad26be4f7d8047b7bd98498a86f8e181ffb4a48311d4dc640f57a10ac293eb0c726c"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "4892b13c633f51cc5d1c1da6651939521dc7bd94eb9de51e2271a2c5100fb84d9763bfbf7f92068f4a4dba8d75c938b03c172dceb1f3958060df72081125cbccaa1bdb0a017e92a759a745409b2d80a5ce7a87dbd9dcf58d8c9e9bdd12c3d11263721f9f41b20860fa8245f495784692c824ab41cb9681d0238b7c8ccd1fa3af81abec8184378b3b818d1eefc2369374086343e244924d5616ac25b8a6aba86c4d59faeba995eacfcc2d4c5d5a61de160066e2aca56536498fe931e91c26b318062ef73ec69d7fd469a612f63da4764b9667d2f42468ffe8d102ff849c9f0b"}, @INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "dc8b78a6613c97a4a6ac8480b689009e992636a703f027157d1afa416fe910fce2739f981afcb444e354d09ef3084236b94766336a1ce5ce46229004617f84c19033ae5f530df90706a8d2374a2384db7122a33c5dff55ab2339c44270a88a38b4687e275071da3b5f5a020ac25c9ee287c458ec799b8481ed1496a1cb24d9d519e4e7dd0b9e29382d3feb1ca63a1872d9b067da84c394c7233ccbd796b97488cd91100339ae76a3d82eaf85d0a6105bc74ca3f9593dc5c25349e9dc962bcbb57ca3de"}]}, 0x380}, 0x1, 0x0, 0x0, 0x48044}, 0x40)

311.680318ms ago: executing program 1 (id=3130):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10)
connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe08}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

262.874467ms ago: executing program 2 (id=3131):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000800000000000000000000000000000ac1414bc000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000000000000000084000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000004000"/241], 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8)
setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="08010000100039042bbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB='h\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800060000000100080006000900000008000400ac14143908000100", @ANYRES32=0x0, @ANYBLOB="0800060003000000080003000d00000008000100", @ANYRES32=0x0, @ANYBLOB="000006000100008008000100", @ANYRES32=0x0, @ANYBLOB="08000200050000000800030062000000080003000000008008000300010000000800060000000000080002000700000008000300ff0700000800060002000000080006000100000008000100", @ANYRES32=r5, @ANYRESHEX=r3], 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000ffdbdf250900020073797a32000000000800416c"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x8040)

139.473947ms ago: executing program 4 (id=3132):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000060a0b0400000000000000000200000028000480240001800a000100717565756500000014000280060001400800000006000240f6ffffff0900010073797a30000000000900020073797a32"], 0x7c}}, 0x40)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf252500000005002b000100000008000200", @ANYRES32=r4, @ANYBLOB="050029000100000005002b000100"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080)

90.03128ms ago: executing program 2 (id=3133):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000780)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async)
r2 = accept4(r1, 0x0, 0x0, 0x800)
splice(r2, 0x0, r0, 0x0, 0x9, 0x1200000000000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) (rerun: 32)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="ffff2ae3d84a31dbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)

0s ago: executing program 4 (id=3134):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'pim6reg0\x00', {}, {}, 0x6, 0x1, 0x9}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'ipvlan0\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x6, 0x4, 0x3, 0x2], 0x2, 0x1}, {0xffffffffffffffff, [0x5, 0x6, 0x6, 0x6, 0x4, 0x1], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) (async)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'pim6reg0\x00', {}, {}, 0x6, 0x1, 0x9}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'ipvlan0\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x6, 0x4, 0x3, 0x2], 0x2, 0x1}, {0xffffffffffffffff, [0x5, 0x6, 0x6, 0x6, 0x4, 0x1], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r4, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3, 0x9, 0x2b, 0x9}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@random="11501d21acce", @device_b}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="84f47cae0ab8"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004051}, 0x400c0)
shutdown(r1, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x4080)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r9, &(0x7f0000000240)}, 0x20)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r11}, 0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x80, 0x2, 0x2, 0x5, r8}, 0x10) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x80, 0x2, 0x2, 0x5, r8}, 0x10)
ioctl$NILFS_IOCTL_GET_SUINFO(r7, 0x80186e84, &(0x7f0000000480)={&(0x7f0000000440)=[{0xffffffff00000001, 0x9}, {0x0, 0x0, 0x2}, {0x1, 0xe5b3, 0x1}], 0x3, 0x10, 0x1, 0x9}) (async)
ioctl$NILFS_IOCTL_GET_SUINFO(r7, 0x80186e84, &(0x7f0000000480)={&(0x7f0000000440)=[{0xffffffff00000001, 0x9}, {0x0, 0x0, 0x2}, {0x1, 0xe5b3, 0x1}], 0x3, 0x10, 0x1, 0x9})

kernel console output (not intermixed with test programs):

.559138][T10950]  ? rw_verify_area+0x2a6/0x4d0
[  216.559160][T10950]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  216.559192][T10950]  vfs_read+0x20c/0xa70
[  216.559212][T10950]  ? fdget_pos+0x246/0x320
[  216.559249][T10950]  ? __pfx___mutex_lock+0x10/0x10
[  216.559281][T10950]  ? __pfx_vfs_read+0x10/0x10
[  216.559310][T10950]  ? __fget_files+0x2a/0x420
[  216.559345][T10950]  ? __fget_files+0x3a0/0x420
[  216.559375][T10950]  ? __fget_files+0x2a/0x420
[  216.559415][T10950]  ksys_read+0x150/0x270
[  216.559440][T10950]  ? __pfx_ksys_read+0x10/0x10
[  216.559475][T10950]  do_syscall_64+0x14d/0xf80
[  216.559504][T10950]  ? trace_irq_disable+0x3b/0x150
[  216.559535][T10950]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.559557][T10950]  ? clear_bhb_loop+0x40/0x90
[  216.559584][T10950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.559605][T10950] RIP: 0033:0x7fa36ff5cfce
[  216.559624][T10950] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  216.559642][T10950] RSP: 002b:00007fa370eeffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  216.559664][T10950] RAX: ffffffffffffffda RBX: 00007fa370ef06c0 RCX: 00007fa36ff5cfce
[  216.559679][T10950] RDX: 000000000000000f RSI: 00007fa370ef00a0 RDI: 0000000000000004
[  216.559692][T10950] RBP: 00007fa370ef0090 R08: 0000000000000000 R09: 0000000000000000
[  216.559705][T10950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.559717][T10950] R13: 00007fa370216038 R14: 00007fa370215fa0 R15: 00007ffd98edaeb8
[  216.559751][T10950]  </TASK>
[  217.026619][T10963] netlink: 'syz.4.1299': attribute type 1 has an invalid length.
[  217.193284][T10964] bond8: (slave bridge3): making interface the new active one
[  217.227041][T10964] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  217.303245][T10977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1300'.
[  217.322628][T10977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1300'.
[  217.697828][T10997] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1307'.
[  218.133607][T11015] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 0, id = 0
[  218.401905][T11026] vlan2: entered allmulticast mode
[  220.997046][T11010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  221.243423][T11060] __nla_validate_parse: 1 callbacks suppressed
[  221.243447][T11060] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1321'.
[  221.521408][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'.
[  221.752029][T11096] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1332'.
[  221.984174][T11106] 8021q: adding VLAN 0 to HW filter on device bond5
[  222.824685][T11125] syzkaller0: entered promiscuous mode
[  222.830841][T11125] syzkaller0: entered allmulticast mode
[  222.843084][T11127] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1344'.
[  222.964031][T11131] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1345'.
[  223.006845][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1343'.
[  223.255491][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'.
[  223.270283][T11135] xt_time: invalid argument - start or stop time greater than 23:59:59
[  223.669328][T11153] netlink: 'syz.3.1349': attribute type 1 has an invalid length.
[  223.697907][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'.
[  223.714400][T11153] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1349'.
[  223.721950][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'.
[  223.875806][T11165] netlink: 'syz.2.1352': attribute type 10 has an invalid length.
[  223.972641][T11165] veth0_vlan: left promiscuous mode
[  224.016835][T11165] veth0_vlan: entered promiscuous mode
[  224.038950][T11165] team0: Device veth0_vlan failed to register rx_handler
[  224.108987][T11167] : entered promiscuous mode
[  224.670372][T11194] lo speed is unknown, defaulting to 1000
[  224.735696][T11173] syzkaller1: entered promiscuous mode
[  224.741232][T11173] syzkaller1: entered allmulticast mode
[  225.064316][T11210] netlink: 'syz.3.1367': attribute type 4 has an invalid length.
[  225.072579][T11211] netlink: 'syz.3.1367': attribute type 4 has an invalid length.
[  225.124939][T11213] netlink: 'syz.3.1367': attribute type 4 has an invalid length.
[  225.840532][T11241] openvswitch: netlink: Missing key (keys=40, expected=80)
[  226.270230][T11254] syzkaller1: entered promiscuous mode
[  226.285483][T11254] syzkaller1: entered allmulticast mode
[  226.562308][T11270] __nla_validate_parse: 8 callbacks suppressed
[  226.562330][T11270] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1380'.
[  226.865239][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'.
[  227.116886][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'.
[  227.291033][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'.
[  227.419124][T11305] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1394'.
[  227.420477][T11306] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1393'.
[  227.793452][T11326] netlink: 'syz.2.1398': attribute type 1 has an invalid length.
[  227.865131][T11326] bond6: entered promiscuous mode
[  227.870732][T11326] 8021q: adding VLAN 0 to HW filter on device bond6
[  227.966577][T11326] vlan3: entered allmulticast mode
[  227.986512][T11326] bond6: entered allmulticast mode
[  228.070656][T11332] bond6: (slave bridge2): making interface the new active one
[  228.095411][T11332] bridge2: entered promiscuous mode
[  228.101004][T11332] bridge2: entered allmulticast mode
[  228.131020][T11332] bond6: (slave bridge2): Enslaving as an active interface with an up link
[  228.361851][T11349] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1407'.
[  228.387771][T11352] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1408'.
[  228.417177][T11350] netlink: 'syz.4.1408': attribute type 29 has an invalid length.
[  228.455388][T11350] netlink: 'syz.4.1408': attribute type 29 has an invalid length.
[  228.515324][T11357] netlink: 'syz.3.1411': attribute type 1 has an invalid length.
[  228.645364][T11366] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1409'.
[  228.768405][T11374] netlink: 'syz.3.1414': attribute type 1 has an invalid length.
[  228.785644][T11374] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1414'.
[  228.827101][T11375] lo speed is unknown, defaulting to 1000
[  228.972762][T11382] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  229.002815][T11382] bond3 (unregistering): Released all slaves
[  255.719451][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  276.400309][T11418] __nla_validate_parse: 1 callbacks suppressed
[  276.400331][T11418] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1427'.
[  276.518084][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1429'.
[  276.563336][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1429'.
[  276.813317][T11448] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1435'.
[  277.291210][T11474] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1440'.
[  277.455371][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'.
[  277.498483][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'.
[  277.529539][T11482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1442'.
[  277.565157][T11484] vlan3: entered promiscuous mode
[  277.582249][T11484] bridge0: entered promiscuous mode
[  278.137752][T11500] macsec3: entered allmulticast mode
[  278.157857][T11500] macsec0: entered allmulticast mode
[  278.178129][T11500] veth1_macvtap: entered allmulticast mode
[  278.185383][T11506] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1452'.
[  278.198663][T11500] macsec0: left allmulticast mode
[  278.203767][T11500] veth1_macvtap: left allmulticast mode
[  278.212430][T11506] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1452'.
[  278.389424][T11511] bridge4: entered promiscuous mode
[  278.395333][T11517] netlink: 'syz.4.1454': attribute type 10 has an invalid length.
[  278.407042][T11511] bridge4: entered allmulticast mode
[  278.443838][T11511] team0: Port device bridge4 added
[  278.459913][T11514] bridge0: port 1(team0) entered blocking state
[  278.476109][T11511] netlink: 'syz.4.1454': attribute type 1 has an invalid length.
[  278.491606][T11514] bridge0: port 1(team0) entered disabled state
[  278.498625][T11514] team0: entered allmulticast mode
[  278.507675][T11514] team0: entered promiscuous mode
[  278.597533][ T6483] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  278.628884][ T6483] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  278.651114][ T6483] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  278.660638][ T6483] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  279.303277][T11553] netlink: 'syz.4.1469': attribute type 30 has an invalid length.
[  279.322833][T11556] 8021q: adding VLAN 0 to HW filter on device bond4
[  279.342800][T11553] netlink: 'syz.4.1469': attribute type 30 has an invalid length.
[  279.355080][T11558] netlink: 'syz.4.1469': attribute type 30 has an invalid length.
[  279.370897][T11560] netlink: 'syz.0.1470': attribute type 4 has an invalid length.
[  279.384140][T11559] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.397699][T11559] bond4: (slave bond0): making interface the new active one
[  279.410244][T11559] bond4: (slave bond0): Enslaving as an active interface with an up link
[  279.435033][T11558] netlink: 'syz.4.1469': attribute type 30 has an invalid length.
[  279.445552][T11560] .`: renamed from bond0 (while UP)
[  279.561606][ T6483] bond4: (slave .`): link status definitely down, disabling slave
[  279.578214][ T6483] bond4: now running without any active interface!
[  279.698102][T11569] netlink: 'syz.3.1474': attribute type 2 has an invalid length.
[  280.621620][T11628] netlink: 'syz.3.1489': attribute type 1 has an invalid length.
[  280.704075][T11628] 8021q: adding VLAN 0 to HW filter on device bond5
[  280.730381][T11628] vlan4: entered allmulticast mode
[  280.735995][T11628] syz_tun: entered allmulticast mode
[  280.749983][T11628] bond5: (slave vlan4): making interface the new active one
[  280.759607][T11628] bond5: (slave vlan4): Enslaving as an active interface with an up link
[  280.796931][T11628] vlan5: entered allmulticast mode
[  280.802461][T11628] bond5: entered allmulticast mode
[  281.352834][T11650] sctp: [Deprecated]: syz.1.1496 (pid 11650) Use of int in max_burst socket option deprecated.
[  281.352834][T11650] Use struct sctp_assoc_value instead
[  281.382487][T11651] syzkaller1: entered promiscuous mode
[  281.398054][T11651] syzkaller1: entered allmulticast mode
[  281.555558][T11657] netlink: 'syz.0.1497': attribute type 10 has an invalid length.
[  281.672946][T11668] __nla_validate_parse: 24 callbacks suppressed
[  281.672968][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'.
[  281.703266][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'.
[  281.712371][T11668] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1500'.
[  281.776082][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1499'.
[  281.959488][T11675] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1502'.
[  282.214328][T11677] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1503'.
[  282.229165][T11677] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  282.251428][T11683] lo speed is unknown, defaulting to 1000
[  282.516733][T11691] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1506'.
[  282.557771][T11691] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1506'.
[  282.764216][T11700] xt_l2tp: invalid flags combination: 0
[  283.062687][T11703] lo speed is unknown, defaulting to 1000
[  283.119910][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'.
[  283.567436][T11720] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1514'.
[  283.813232][T11722] lo speed is unknown, defaulting to 1000
[  284.739339][T11744] lo speed is unknown, defaulting to 1000
[  284.934062][T11747] 8021q: adding VLAN 0 to HW filter on device bond6
[  285.230908][T11764] netlink: 'syz.4.1525': attribute type 1 has an invalid length.
[  285.536548][ T1023] bond5: (slave vlan4): link status definitely down, disabling slave
[  285.563498][ T1023] bond5: now running without any active interface!
[  285.611310][T11781] netlink: 'syz.4.1529': attribute type 2 has an invalid length.
[  286.124288][T11810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  286.463668][T11826] pimreg: entered allmulticast mode
[  286.473673][T11828] netlink: 'syz.4.1546': attribute type 2 has an invalid length.
[  286.488698][T11828] netlink: 'syz.4.1546': attribute type 1 has an invalid length.
[  286.722711][T11836] netlink: 'syz.3.1548': attribute type 11 has an invalid length.
[  286.743022][T11836] netlink: 'syz.3.1548': attribute type 4 has an invalid length.
[  286.763841][T11836] __nla_validate_parse: 18 callbacks suppressed
[  286.763862][T11836] netlink: 199768 bytes leftover after parsing attributes in process `syz.3.1548'.
[  286.960658][T11848] sctp: [Deprecated]: syz.1.1552 (pid 11848) Use of struct sctp_assoc_value in delayed_ack socket option.
[  286.960658][T11848] Use struct sctp_sack_info instead
[  287.064344][T11852] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1554'.
[  287.109681][T11852] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1554'.
[  287.267992][T11857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1556'.
[  287.348733][   T29] audit: type=1804 audit(1773499372.621:4): pid=11860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1558" name="/newroot/296/cgroup.controllers" dev="tmpfs" ino=1536 res=1 errno=0
[  287.379608][   T29] audit: type=1800 audit(1773499372.651:5): pid=11860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1558" name="cgroup.controllers" dev="tmpfs" ino=1536 res=0 errno=0
[  287.440271][T11872] netlink: 212088 bytes leftover after parsing attributes in process `syz.2.1560'.
[  287.460911][T11872] netlink: 212088 bytes leftover after parsing attributes in process `syz.2.1560'.
[  287.479546][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1561'.
[  287.510432][T11872] netlink: 212088 bytes leftover after parsing attributes in process `syz.2.1560'.
[  287.521629][T11872] netlink: 212088 bytes leftover after parsing attributes in process `syz.2.1560'.
[  287.532512][T11872] netlink: 212088 bytes leftover after parsing attributes in process `syz.2.1560'.
[  288.038047][T11903] lo speed is unknown, defaulting to 1000
[  288.283804][ T9942] IPVS: starting estimator thread 0...
[  288.397195][T11915] IPVS: using max 29 ests per chain, 69600 per kthread
[  288.480112][T11904] lo speed is unknown, defaulting to 1000
[  288.740357][T11933] pimreg: entered allmulticast mode
[  289.012878][T11945] syz.3.1579 (11945) used obsolete PPPIOCDETACH ioctl
[  289.089764][T11948] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  289.887164][T11970] lo speed is unknown, defaulting to 1000
[  290.454359][T11986] xt_CT: No such helper "netbios-ns"
[  290.514135][T11984] 5nè‹Ò: entered promiscuous mode
[  291.243764][T12009] delete_channel: no stack
[  292.026855][T12039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.217706][T12039] tipc: Resetting bearer <eth:syzkaller0>
[  292.270416][T12045] netlink: 'syz.0.1606': attribute type 1 has an invalid length.
[  292.355309][T12047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  292.403234][T12045] 8021q: adding VLAN 0 to HW filter on device bond0
[  292.438843][T12047] veth3: entered promiscuous mode
[  292.451216][T12047] bond0: (slave veth3): Enslaving as an active interface with an up link
[  292.477569][T12038] tipc: Resetting bearer <eth:syzkaller0>
[  292.624002][T12060] tun0: tun_chr_ioctl cmd 1074025681
[  292.726206][T12067] __nla_validate_parse: 39 callbacks suppressed
[  292.726229][T12067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1612'.
[  293.048507][ T9942] tipc: Node number set to 7726892
[  293.142482][T12080] hsr0: entered promiscuous mode
[  293.152362][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'.
[  293.162867][T12080] hsr_slave_0: left promiscuous mode
[  293.169964][T12080] hsr_slave_1: left promiscuous mode
[  293.211299][T12080] hsr0 (unregistering): left promiscuous mode
[  293.418023][T12102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1620'.
[  293.441775][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1621'.
[  293.473946][T12107] SET target dimension over the limit!
[  293.511701][ T6475] tipc: Resetting bearer <eth:syzkaller0>
[  293.605205][T12108] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  293.727303][T12108] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  293.789823][T12116] netlink: 'syz.1.1626': attribute type 29 has an invalid length.
[  293.839671][T12116] netlink: 'syz.1.1626': attribute type 29 has an invalid length.
[  293.875562][T12116] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1626'.
[  294.027678][T12127] netlink: zone id is out of range
[  294.032869][T12127] netlink: set zone limit has 8 unknown bytes
[  294.304323][T12143] team0: left allmulticast mode
[  294.312619][T12143] team0: left promiscuous mode
[  294.330623][T12143] bridge0: port 1(team0) entered disabled state
[  294.379627][T12101] delete_channel: no stack
[  294.410061][T12143] bond8: (slave bridge3): Releasing active interface
[  294.436560][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'.
[  294.486191][T12143] team0: Port device bridge4 removed
[  294.527279][T12160] netlink: 'syz.3.1641': attribute type 6 has an invalid length.
[  294.617981][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'.
[  294.646728][T12162] team0: No ports can be present during mode change
[  294.688936][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'.
[  294.711143][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1644'.
[  294.745744][T12168] syzkaller0: entered promiscuous mode
[  294.762930][T12168] syzkaller0: entered allmulticast mode
[  294.807025][T12179] netlink: 548 bytes leftover after parsing attributes in process `syz.2.1647'.
[  295.003455][T12190] batadv_slave_0: entered promiscuous mode
[  295.039762][T12189] batadv_slave_0: left promiscuous mode
[  296.396166][T12274] dvmrp0: entered allmulticast mode
[  296.469114][T12274] netlink: 'syz.1.1666': attribute type 9 has an invalid length.
[  296.477066][T12274] netlink: 'syz.1.1666': attribute type 11 has an invalid length.
[  296.485132][T12274] netlink: 'syz.1.1666': attribute type 12 has an invalid length.
[  296.502224][T12281] macsec2: entered promiscuous mode
[  296.516393][T12282] netlink: 'syz.2.1669': attribute type 1 has an invalid length.
[  296.557641][T12275] macsec2: entered promiscuous mode
[  296.934405][T12307] vti1: entered promiscuous mode
[  297.028197][T12311] lo speed is unknown, defaulting to 1000
[  297.723244][T12336] lo speed is unknown, defaulting to 1000
[  297.780434][T12338] FAULT_INJECTION: forcing a failure.
[  297.780434][T12338] name failslab, interval 1, probability 0, space 0, times 0
[  297.816742][T12338] CPU: 0 UID: 0 PID: 12338 Comm: syz.3.1680 Not tainted syzkaller #0 PREEMPT(full) 
[  297.816779][T12338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  297.816808][T12338] Call Trace:
[  297.816817][T12338]  <TASK>
[  297.816844][T12338]  dump_stack_lvl+0xe8/0x150
[  297.816879][T12338]  should_fail_ex+0x412/0x560
[  297.816913][T12338]  should_failslab+0xa8/0x100
[  297.816943][T12338]  __kvmalloc_node_noprof+0x178/0x8a0
[  297.816970][T12338]  ? xt_alloc_table_info+0x40/0xb0
[  297.817001][T12338]  xt_alloc_table_info+0x40/0xb0
[  297.817021][T12338]  do_ipt_set_ctl+0x903/0xe00
[  297.817048][T12338]  ? rcu_is_watching+0x15/0xb0
[  297.817078][T12338]  ? trace_contention_end+0x3d/0x150
[  297.817113][T12338]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  297.817157][T12338]  ? __pfx___mutex_lock+0x10/0x10
[  297.817190][T12338]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  297.817220][T12338]  ? __lock_acquire+0x6b5/0x2cf0
[  297.817251][T12338]  ? __pfx___mutex_lock+0x10/0x10
[  297.817295][T12338]  nf_setsockopt+0x26f/0x290
[  297.817320][T12338]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  297.817352][T12338]  smc_setsockopt+0x249/0xac0
[  297.817386][T12338]  ? __pfx_smc_setsockopt+0x10/0x10
[  297.817411][T12338]  ? aa_sock_opt_perm+0xff/0x1a0
[  297.817442][T12338]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  297.817466][T12338]  ? __pfx_smc_setsockopt+0x10/0x10
[  297.817496][T12338]  do_sock_setsockopt+0x17c/0x1b0
[  297.817535][T12338]  __x64_sys_setsockopt+0x13d/0x1b0
[  297.817573][T12338]  do_syscall_64+0x14d/0xf80
[  297.817603][T12338]  ? trace_irq_disable+0x3b/0x150
[  297.817633][T12338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.817655][T12338]  ? clear_bhb_loop+0x40/0x90
[  297.817682][T12338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.817704][T12338] RIP: 0033:0x7fa36ff9c799
[  297.817724][T12338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  297.817743][T12338] RSP: 002b:00007fa370ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  297.817773][T12338] RAX: ffffffffffffffda RBX: 00007fa370215fa0 RCX: 00007fa36ff9c799
[  297.817789][T12338] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004
[  297.817803][T12338] RBP: 00007fa370ef0090 R08: 0000000000000280 R09: 0000000000000000
[  297.817816][T12338] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[  297.817830][T12338] R13: 00007fa370216038 R14: 00007fa370215fa0 R15: 00007ffd98edaeb8
[  297.817865][T12338]  </TASK>
[  298.138305][T12340] __nla_validate_parse: 7 callbacks suppressed
[  298.138387][T12340] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1681'.
[  298.620621][T12346] netlink: 'syz.0.1682': attribute type 142 has an invalid length.
[  298.654279][T12346] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1682'.
[  298.701425][T12353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1685'.
[  298.732652][T12350] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1683'.
[  299.093199][T12380] netlink: 'syz.0.1693': attribute type 11 has an invalid length.
[  299.102354][T12380] netlink: 'syz.0.1693': attribute type 23 has an invalid length.
[  299.128708][T12380] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1693'.
[  299.142993][T12381] netlink: 'syz.4.1691': attribute type 2 has an invalid length.
[  299.250072][T12381] : entered promiscuous mode
[  299.916253][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'.
[  300.673363][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1705'.
[  300.994004][T12459] syzkaller1: entered promiscuous mode
[  301.004225][T12459] syzkaller1: entered allmulticast mode
[  301.445550][T12497] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1713'.
[  301.482166][T12497] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1713'.
[  301.965046][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1719'.
[  302.130148][T12527] macsec0: left promiscuous mode
[  304.044507][T12469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  304.224558][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'.
[  304.248765][T12549] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20003
[  304.360841][T12563] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  304.376215][T12566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1729'.
[  304.394846][T12566] netem: change failed
[  304.402273][T12563] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1730'.
[  304.416504][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'.
[  304.733255][T12581] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1735'.
[  304.743612][T12581] netlink: 'syz.0.1735': attribute type 1 has an invalid length.
[  304.751888][T12581] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1735'.
[  304.955238][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'.
[  305.078209][T12568] netlink: 'syz.4.1728': attribute type 10 has an invalid length.
[  305.583177][T12616] pim6reg1: entered promiscuous mode
[  305.604838][T12616] pim6reg1: entered allmulticast mode
[  305.909797][T12627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1749'.
[  305.984521][T12637] netlink: 'syz.4.1750': attribute type 1 has an invalid length.
[  306.047507][T12637] 8021q: adding VLAN 0 to HW filter on device bond11
[  306.086769][T12643] bond11: (slave gretap1): making interface the new active one
[  306.096100][T12643] bond11: (slave gretap1): Enslaving as an active interface with an up link
[  306.102935][T12637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1750'.
[  306.128529][T12639] lo speed is unknown, defaulting to 1000
[  306.160345][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1753'.
[  306.518168][T12659] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  306.927616][T12672] syzkaller1: entered promiscuous mode
[  306.953930][T12672] syzkaller1: entered allmulticast mode
[  307.117996][T12684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.928391][T12703] xt_hashlimit: size too large, truncated to 1048576
[  308.130264][T12711] macsec1: entered promiscuous mode
[  308.185693][T12711] geneve1: entered promiscuous mode
[  308.192466][T12711] macsec1: entered allmulticast mode
[  308.208455][T12711] geneve1: entered allmulticast mode
[  308.960993][T12760] gre2: entered allmulticast mode
[  308.987488][T12760] netlink: 'syz.1.1787': attribute type 2 has an invalid length.
[  309.007246][T12760] hmac(sha224: entered promiscuous mode
[  309.270783][T12723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  309.922744][T12798] __nla_validate_parse: 7 callbacks suppressed
[  309.922764][T12798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1796'.
[  309.949659][T12798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1796'.
[  310.188818][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'.
[  310.206662][T12807] netlink: 'syz.0.1797': attribute type 1 has an invalid length.
[  310.226624][T12807] netlink: 'syz.0.1797': attribute type 1 has an invalid length.
[  310.318115][T12807] lo speed is unknown, defaulting to 1000
[  311.031604][T12834] bridge0: entered promiscuous mode
[  311.042013][T12834] vlan3: entered promiscuous mode
[  311.327782][T12838] 8021q: adding VLAN 0 to HW filter on device .`
[  311.335661][T12855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1805'.
[  311.338674][T12838] 8021q: adding VLAN 0 to HW filter on device team0
[  311.469667][T12838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  311.570305][T12848] lo speed is unknown, defaulting to 1000
[  311.692273][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'.
[  312.093650][T12885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1812'.
[  312.146062][T12880] bond3: entered promiscuous mode
[  312.315293][T12891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1813'.
[  312.452705][T12901] netlink: 'syz.4.1816': attribute type 1 has an invalid length.
[  312.541969][T12901] 8021q: adding VLAN 0 to HW filter on device bond12
[  312.550474][T12896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1814'.
[  312.653843][T12911] tipc: Failed to remove unknown binding: 66,1,1/7726892:868869550/868869552
[  312.662950][T12911] tipc: Failed to remove unknown binding: 66,1,1/7726892:868869550/868869552
[  312.815276][T12916] syzkaller0: entered promiscuous mode
[  312.820829][T12916] syzkaller0: entered allmulticast mode
[  312.845147][T12920] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1821'.
[  312.879942][T12922] sctp: [Deprecated]: syz.4.1823 (pid 12922) Use of int in max_burst socket option.
[  312.879942][T12922] Use struct sctp_assoc_value instead
[  312.922711][T12924] IPVS: length: 35 != 24
[  312.936619][T12920] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1821'.
[  312.968106][T12916] bond0: option primary: mode dependency failed, not supported in mode 802.3ad(4)
[  313.235368][T12935] netlink: 'syz.2.1827': attribute type 7 has an invalid length.
[  313.328702][T12944] "syz.0.1830" (12944) uses obsolete ecb(arc4) skcipher
[  313.365374][T12935] nbd2: detected capacity change from 0 to 63
[  313.375751][T12945] block nbd2: NBD_DISCONNECT
[  313.383816][T12945] block nbd2: Disconnected due to user request.
[  313.383935][T12944] netlink: 'syz.0.1830': attribute type 13 has an invalid length.
[  313.399274][T11438] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  313.409945][T12945] block nbd2: shutting down sockets
[  313.419495][T12944] netlink: 'syz.0.1830': attribute type 27 has an invalid length.
[  313.445500][T11438] Buffer I/O error on dev nbd2, logical block 0, async page read
[  313.455310][ T1626] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  313.465473][ T1626] Buffer I/O error on dev nbd2, logical block 1, async page read
[  313.473260][ T1626] Buffer I/O error on dev nbd2, logical block 2, async page read
[  313.482557][ T1626] Buffer I/O error on dev nbd2, logical block 3, async page read
[  313.493964][T11438] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  313.560951][T12950] bond0: option min_links: invalid value (18446744073709551614)
[  313.579894][T11438] Buffer I/O error on dev nbd2, logical block 0, async page read
[  313.606603][T12950] bond0: option min_links: allowed values 0 - 2147483647
[  313.613834][T11438] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  313.631239][T11438] Buffer I/O error on dev nbd2, logical block 1, async page read
[  313.638862][T12954] tipc: Resetting bearer <eth:syzkaller0>
[  313.685949][T11438] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  313.701333][T12953] tipc: Resetting bearer <eth:syzkaller0>
[  313.723793][T11438] Buffer I/O error on dev nbd2, logical block 2, async page read
[  313.753132][T11438] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  313.775223][T11438] Buffer I/O error on dev nbd2, logical block 3, async page read
[  313.791984][T11438] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  313.816948][T11438] Buffer I/O error on dev nbd2, logical block 0, async page read
[  313.851467][T11438] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  313.887432][T11438] Buffer I/O error on dev nbd2, logical block 1, async page read
[  313.904960][T11438] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  313.914578][T11438] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  313.979856][T12969] syzkaller1: entered promiscuous mode
[  313.986874][T11438] ldm_validate_partition_table(): Disk read failed.
[  313.994423][T11438] Dev nbd2: unable to read RDB block 0
[  314.000336][T12969] syzkaller1: entered allmulticast mode
[  314.017495][T11438]  nbd2: unable to read partition table
[  314.046858][T11438] ldm_validate_partition_table(): Disk read failed.
[  314.060263][T11438] Dev nbd2: unable to read RDB block 0
[  314.081058][T11438]  nbd2: unable to read partition table
[  314.141318][T12969] bridge0: entered promiscuous mode
[  314.293936][ T6466] tipc: Resetting bearer <eth:syzkaller0>
[  314.611885][T13003] ip6gretap0: entered allmulticast mode
[  314.996699][T13020] syzkaller0: entered promiscuous mode
[  315.002250][T13020] syzkaller0: entered allmulticast mode
[  315.028558][T13018] syzkaller0: entered promiscuous mode
[  315.038144][T13018] syzkaller0: entered allmulticast mode
[  315.278081][T13027] __nla_validate_parse: 10 callbacks suppressed
[  315.278164][T13027] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1849'.
[  315.753997][T13047] lo speed is unknown, defaulting to 1000
[  315.779502][T13049] geneve3: entered promiscuous mode
[  315.796782][T13049] geneve3: entered allmulticast mode
[  315.925739][T13059] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1859'.
[  316.050948][T13063] tc_dump_action: action bad kind
[  316.073643][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1860'.
[  316.092005][T13063] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1860'.
[  316.214314][T13065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1862'.
[  316.235626][T13065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1862'.
[  316.252206][T13065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1862'.
[  316.293850][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'.
[  316.773982][T13089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1868'.
[  316.930248][T13089] can: request_module (can-proto-0) failed.
[  317.161842][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.267355][T13108] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  317.338060][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'.
[  317.533587][T13122] netlink: 'syz.3.1877': attribute type 2 has an invalid length.
[  317.547316][T13122] netlink: 'syz.3.1877': attribute type 8 has an invalid length.
[  317.894631][T13140] lo speed is unknown, defaulting to 1000
[  319.231465][T13208] netlink: 'syz.0.1899': attribute type 13 has an invalid length.
[  319.239826][T13208] netlink: 'syz.0.1899': attribute type 17 has an invalid length.
[  319.407175][T13208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  319.517054][T13222] sctp: [Deprecated]: syz.2.1903 (pid 13222) Use of struct sctp_assoc_value in delayed_ack socket option.
[  319.517054][T13222] Use struct sctp_sack_info instead
[  320.123896][T13255] lo speed is unknown, defaulting to 1000
[  320.802117][T13246] delete_channel: no stack
[  321.164019][T13285] syzkaller0: entered promiscuous mode
[  321.179925][T13285] syzkaller0: entered allmulticast mode
[  321.276183][T13287] __nla_validate_parse: 6 callbacks suppressed
[  321.276204][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'.
[  321.322512][T13287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1919'.
[  321.334848][T13289] netlink: 'syz.4.1920': attribute type 5 has an invalid length.
[  321.342000][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1919'.
[  321.354138][T13290] netlink: 'syz.4.1920': attribute type 5 has an invalid length.
[  321.377991][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'.
[  321.387587][T13287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1919'.
[  321.398302][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1919'.
[  321.471814][T13289] lo speed is unknown, defaulting to 1000
[  321.494378][T13292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1921'.
[  321.724367][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'.
[  321.897663][T13300] team0: Port device team_slave_0 removed
[  322.142005][T13325] netlink: 'syz.3.1927': attribute type 10 has an invalid length.
[  322.179994][T13325] team0: Port device dummy0 added
[  322.525889][T13335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1928'.
[  322.737864][T13335] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1928'.
[  322.964595][T13346] syzkaller1: entered promiscuous mode
[  323.005029][T13346] syzkaller1: entered allmulticast mode
[  323.302991][ T6475] bond0: (slave bond_slave_0): interface is now down
[  323.323159][ T6475] bond0: (slave bond_slave_1): interface is now down
[  323.349172][ T6475] bond0: now running without any active interface!
[  323.392132][T13363] x_tables: duplicate underflow at hook 3
[  323.518286][T13373] netlink: 'syz.2.1936': attribute type 8 has an invalid length.
[  323.552544][T13373] bond0: entered promiscuous mode
[  323.574098][T13373] bond_slave_0: entered promiscuous mode
[  323.590809][T13373] bond_slave_1: entered promiscuous mode
[  323.611346][T13373] gretap0: entered promiscuous mode
[  323.629388][T13373] bond0: left promiscuous mode
[  323.637614][T13373] bond_slave_0: left promiscuous mode
[  323.655553][T13373] bond_slave_1: left promiscuous mode
[  323.671215][T13373] gretap0: left promiscuous mode
[  323.768117][T13385] lo speed is unknown, defaulting to 1000
[  324.544629][T13378] mpoa:mpoad_close: (<unknown>) going down
[  324.750295][T13423] netlink: 'syz.3.1944': attribute type 1 has an invalid length.
[  324.972612][T13429] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  324.984516][T13429] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  325.035274][T13435] sit0: entered promiscuous mode
[  325.061898][T13435] netlink: 'syz.4.1947': attribute type 1 has an invalid length.
[  325.365378][T13423] bond8: (slave gretap1): making interface the new active one
[  325.386785][T13423] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  325.410308][T13443] batadv0: entered promiscuous mode
[  325.433383][T13443] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  325.484011][T13444] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  325.828405][T13468] sctp: [Deprecated]: syz.1.1955 (pid 13468) Use of int in max_burst socket option.
[  325.828405][T13468] Use struct sctp_assoc_value instead
[  325.884290][T13470] syzkaller0: entered promiscuous mode
[  325.914782][T13470] syzkaller0: entered allmulticast mode
[  326.313663][T13497] ipt_REJECT: ECHOREPLY no longer supported.
[  326.484009][T13510] __nla_validate_parse: 7 callbacks suppressed
[  326.484032][T13510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1965'.
[  326.880635][T13524] netlink: 'syz.1.1967': attribute type 3 has an invalid length.
[  326.920458][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1967'.
[  327.561193][T13577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1971'.
[  327.759691][T13588] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1979'.
[  327.846020][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1979'.
[  327.872421][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1980'.
[  327.963438][T13588] lo speed is unknown, defaulting to 1000
[  328.687600][T13620] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32)
[  328.777215][T13625] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1984'.
[  328.873956][T13620] gretap2: entered promiscuous mode
[  328.893616][T13620] batman_adv: batadv0: Adding interface: gretap2
[  328.909042][T13620] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  328.993829][T13633] netlink: 'syz.2.1988': attribute type 1 has an invalid length.
[  329.023985][T13620] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
[  329.264801][T13621] lo speed is unknown, defaulting to 1000
[  329.319079][T13640] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  329.356256][T13633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1988'.
[  329.453591][T13633] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface
[  329.509113][T13633] bond7 (unregistering): Released all slaves
[  330.052092][T13663] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  330.086733][T13663] bond4 (unregistering): Released all slaves
[  330.392440][T13680] netlink: 'syz.2.2000': attribute type 9 has an invalid length.
[  330.420098][T13680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2000'.
[  330.652416][T13691] openvswitch: netlink: Flow actions attr not present in new flow.
[  330.791575][T13693] tipc: Started in network mode
[  330.805074][T13693] tipc: Node identity 12d1e3c5fa2a, cluster identity 4711
[  330.820734][T13693] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  330.852034][T13693] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.961442][T13704] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2007'.
[  331.018955][T13693] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.141916][T13693] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.183498][T13712] netlink: 'syz.0.2009': attribute type 21 has an invalid length.
[  331.192102][T13711] netlink: 'syz.2.2011': attribute type 29 has an invalid length.
[  331.201546][T13712] netlink: 'syz.0.2009': attribute type 4 has an invalid length.
[  331.244424][T13693] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.276200][T13712] netlink: 'syz.0.2009': attribute type 1 has an invalid length.
[  331.361136][T13712] bond5: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  331.383571][T13712] bond5 (unregistering): Released all slaves
[  331.472928][T13715] lo speed is unknown, defaulting to 1000
[  331.539175][ T6475] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  331.554535][ T6475] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  331.615155][ T6475] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  331.702523][ T6475] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  331.738078][T13726] __nla_validate_parse: 5 callbacks suppressed
[  331.738099][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'.
[  331.772046][T13726] openvswitch: netlink: Flow actions attr not present in new flow.
[  331.806436][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'.
[  331.828792][T13726] netlink: 39 bytes leftover after parsing attributes in process `syz.0.2014'.
[  331.896619][ T9942] tipc: Node number set to 3908821957
[  332.914010][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2020'.
[  333.029139][T13759] 8021q: adding VLAN 0 to HW filter on device bond4
[  333.090025][T13766] macsec2: entered promiscuous mode
[  333.118929][T13766] bond4: entered promiscuous mode
[  333.146699][T13766] bond4: left promiscuous mode
[  333.204567][T13759] macsec2: entered promiscuous mode
[  333.223762][T13759] bond4: entered promiscuous mode
[  333.243966][T13759] bond4: left promiscuous mode
[  333.279621][T13771] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2023'.
[  333.552232][T13793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2029'.
[  333.578678][T13791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2029'.
[  333.697212][T13798] lo speed is unknown, defaulting to 1000
[  334.589736][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'.
[  334.605401][T13834] trusted_key: syz.3.2040 sent an empty control message without MSG_MORE.
[  334.995930][T13846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.008146][T13846] syzkaller0: entered promiscuous mode
[  335.013957][T13846] syzkaller0: entered allmulticast mode
[  335.040501][T13851] syzkaller0: mtu greater than device maximum
[  335.055523][T13854] netlink: 'syz.3.2048': attribute type 1 has an invalid length.
[  335.110221][T13854] bond9: entered promiscuous mode
[  335.121217][T13854] 8021q: adding VLAN 0 to HW filter on device bond9
[  335.172016][T13845] tipc: Resetting bearer <eth:syzkaller0>
[  335.205023][T13845] tipc: Disabling bearer <eth:syzkaller0>
[  335.267632][T13856] 8021q: adding VLAN 0 to HW filter on device bond10
[  335.290205][T13856] bond9: (slave bond10): making interface the new active one
[  335.345740][T13856] bond10: entered promiscuous mode
[  335.362396][T13856] bond9: (slave bond10): Enslaving as an active interface with an up link
[  335.458857][T13859] bond13: entered promiscuous mode
[  335.464578][T13859] 8021q: adding VLAN 0 to HW filter on device bond13
[  335.495621][T13862] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  335.834087][T13875] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2051'.
[  335.948552][T13871] syzkaller1: entered promiscuous mode
[  335.965401][T13871] syzkaller1: entered allmulticast mode
[  336.188369][ T5823] IPVS: starting estimator thread 0...
[  336.198320][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'.
[  336.284949][T13886] IPVS: using max 24 ests per chain, 57600 per kthread
[  336.428358][T13897] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  336.486335][T13897] xt_CT: You must specify a L4 protocol and not use inversions on it
[  336.734807][T13913] IPVS: set_ctl: invalid protocol: 39555 229.182.219.106:43509
[  337.304596][T13932] __nla_validate_parse: 1 callbacks suppressed
[  337.304618][T13932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2071'.
[  337.346299][T13939] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.2073'.
[  337.505940][T13945] netlink: 'syz.2.2074': attribute type 1 has an invalid length.
[  337.533613][T13945] bond7: entered promiscuous mode
[  337.582758][T13945] 8021q: adding VLAN 0 to HW filter on device bond7
[  337.632062][T13945] 8021q: adding VLAN 0 to HW filter on device bond7
[  337.642588][T13945] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[  337.657411][T13945] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  337.668945][T13961] IPv6: Can't replace route, no match found
[  337.675383][T13961] IPv6: Can't replace route, no match found
[  337.821531][T13945] bond7: (slave wireguard0): making interface the new active one
[  337.831696][T13945] wireguard0: entered promiscuous mode
[  337.840002][T13945] bond7: (slave wireguard0): Enslaving as an active interface with an up link
[  337.880970][T13961] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address
[  337.909454][T13961] bond7: (slave wireguard1): Enslaving as a backup interface with an up link
[  338.005936][T13977] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2080'.
[  338.097750][T13981] netlink: 'syz.0.2081': attribute type 1 has an invalid length.
[  338.113565][T13979] lo speed is unknown, defaulting to 1000
[  338.587148][T13971] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  338.662875][T14006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2087'.
[  338.725905][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2087'.
[  338.772266][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'.
[  339.008944][T14020] netlink: 'syz.3.2091': attribute type 29 has an invalid length.
[  339.339405][T14037] lo speed is unknown, defaulting to 1000
[  339.896145][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'.
[  339.980117][T14040] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2097'.
[  339.989435][T14040] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2097'.
[  340.265902][T14080] netlink: 'syz.1.2105': attribute type 2 has an invalid length.
[  340.288269][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2107'.
[  341.184883][T14116] : renamed from veth0_to_bond
[  341.299076][T14121] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  341.369007][T14127] team1: entered promiscuous mode
[  341.400150][T14127] team1: entered allmulticast mode
[  341.407156][T14127] 8021q: adding VLAN 0 to HW filter on device team1
[  341.855498][T14165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  342.171259][T14179] netlink: 'syz.1.2135': attribute type 12 has an invalid length.
[  342.399991][T14191] ve: renamed from veth0_vlan
[  342.443333][T14194] __nla_validate_parse: 7 callbacks suppressed
[  342.443365][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2139'.
[  342.649360][T14204] netlink: 'syz.1.2146': attribute type 11 has an invalid length.
[  342.680465][T14204] : entered promiscuous mode
[  342.811217][T14210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2148'.
[  342.871365][T14213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2150'.
[  343.216193][T14235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'.
[  343.348365][T14243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2156'.
[  343.387399][T14245] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002
[  343.526272][T14252] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2159'.
[  343.748032][T14256] xt_CT: No such helper "snmp_trap"
[  343.923839][T14270] netlink: 'syz.1.2163': attribute type 4 has an invalid length.
[  343.939828][T14270] netlink: 'syz.1.2163': attribute type 4 has an invalid length.
[  343.987027][T14273] bridge3: the hash_elasticity option has been deprecated and is always 16
[  344.006427][T14273] bridge3: entered allmulticast mode
[  344.060172][T14279] netlink: 'syz.3.2167': attribute type 3 has an invalid length.
[  344.077162][T14281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2168'.
[  344.088429][T14279] netlink: 'syz.3.2167': attribute type 1 has an invalid length.
[  344.105134][T14279] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2167'.
[  344.305869][T14296] netlink: 'syz.0.2172': attribute type 1 has an invalid length.
[  344.403399][T14303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2175'.
[  344.414291][T14303] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2175'.
[  344.494538][T14308] netlink: 'syz.3.2176': attribute type 2 has an invalid length.
[  344.517429][T14310] bridge4: entered allmulticast mode
[  345.011381][T14337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.377053][T14344] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.384199][T14344] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  345.399844][T14344] bond0: (slave sit0): Error -95 calling set_mac_address
[  345.502074][T14358] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.560825][T14344] sctp: [Deprecated]: syz.3.2188 (pid 14344) Use of struct sctp_assoc_value in delayed_ack socket option.
[  345.560825][T14344] Use struct sctp_sack_info instead
[  345.593687][T14368] lo speed is unknown, defaulting to 1000
[  345.693578][T14358] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.804493][T14358] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.887066][T14384] xt_CT: You must specify a L4 protocol and not use inversions on it
[  345.916808][T14358] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  346.541861][ T6483] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  346.556607][ T6483] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  346.595273][ T6483] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  346.698163][ T1023] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  346.944372][T14424] netlink: 'syz.4.2203': attribute type 21 has an invalid length.
[  347.142169][T14426] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  347.160436][T14426] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  347.187128][T14428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  347.267355][T14428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  347.298682][T14428] bond0 (unregistering): Released all slaves
[  347.691100][T14468] __nla_validate_parse: 18 callbacks suppressed
[  347.691158][T14468] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2211'.
[  347.707525][T14470] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2211'.
[  347.860698][T14477] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2214'.
[  347.903289][T14479] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2214'.
[  347.928083][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'.
[  347.945825][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'.
[  348.283529][T14491] smc: net device wlan0 applied user defined pnetid SYZ0
[  348.301476][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2218'.
[  348.475909][T14505] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2220'.
[  348.497661][T14504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2221'.
[  348.586939][T14504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2221'.
[  348.729208][T14521] netlink: 'syz.3.2224': attribute type 1 has an invalid length.
[  348.851182][T14521] 8021q: adding VLAN 0 to HW filter on device bond11
[  349.049711][T14540] batman_adv: batadv0: Adding interface: wlan1
[  349.057594][T14540] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active
[  349.180280][T14543] bond_slave_1: entered allmulticast mode
[  349.307287][T14555] netlink: 'syz.4.2234': attribute type 7 has an invalid length.
[  349.781472][T14587] syzkaller0: entered promiscuous mode
[  349.788690][T14587] syzkaller0: entered allmulticast mode
[  349.805431][T14589] sit2: entered promiscuous mode
[  349.819844][T14590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  350.321766][T14619] x_tables: unsorted underflow at hook 4
[  350.656575][T14641] syzkaller1: entered promiscuous mode
[  350.662115][T14641] syzkaller1: entered allmulticast mode
[  350.805147][T14648] nbd1: detected capacity change from 0 to 63
[  350.856748][T14648] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.898625][T14661] netlink: 'syz.4.2265': attribute type 39 has an invalid length.
[  350.988536][T14648] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.074468][T14667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  351.130338][T14648] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.257791][T14648] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.404242][ T6473] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  351.441796][ T5143] block nbd1: Receive control failed (result -104)
[  351.461821][ T6473] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  351.590485][ T1023] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  351.653630][ T6473] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  351.826197][T14705] dummy0: entered promiscuous mode
[  351.836638][T14705] macsec4: entered allmulticast mode
[  351.842015][T14705] dummy0: entered allmulticast mode
[  351.884055][T14705] dummy0: left allmulticast mode
[  351.900407][T14705] dummy0: left promiscuous mode
[  352.375091][T14743] lo speed is unknown, defaulting to 1000
[  352.952996][T14758] __nla_validate_parse: 18 callbacks suppressed
[  352.953018][T14758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2294'.
[  353.139253][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'.
[  353.154032][T14768] netlink: 'syz.0.2299': attribute type 2 has an invalid length.
[  353.163472][T14768] netlink: 616 bytes leftover after parsing attributes in process `syz.0.2299'.
[  353.232229][T14768] netlink: 616 bytes leftover after parsing attributes in process `syz.0.2299'.
[  353.422391][T14777] syzkaller1: entered promiscuous mode
[  353.440712][T14777] syzkaller1: entered allmulticast mode
[  353.688055][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2303'.
[  353.752133][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2303'.
[  353.792786][T14788] lo speed is unknown, defaulting to 1000
[  353.826547][T14793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2306'.
[  354.093839][T14803] syzkaller1: entered promiscuous mode
[  354.099823][T14803] syzkaller1: entered allmulticast mode
[  354.108436][T14808] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  354.773589][T14790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  355.078360][T14822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2311'.
[  355.763986][T14872] lo speed is unknown, defaulting to 1000
[  356.282068][T14896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2331'.
[  356.465959][T14904] netlink: 'syz.0.2332': attribute type 10 has an invalid length.
[  356.501893][T14904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2332'.
[  356.622918][T14907] netlink: 'syz.1.2333': attribute type 1 has an invalid length.
[  356.678311][T14904] dummy0: entered promiscuous mode
[  356.683531][T14904] dummy0: entered allmulticast mode
[  356.745912][T14904] bridge0: port 3(dummy0) entered blocking state
[  356.752645][T14904] bridge0: port 3(dummy0) entered disabled state
[  356.800856][T14904] bridge0: port 3(dummy0) entered blocking state
[  356.807467][T14904] bridge0: port 3(dummy0) entered forwarding state
[  357.207608][T14918] syzkaller0: entered promiscuous mode
[  357.213167][T14918] syzkaller0: entered allmulticast mode
[  358.959905][T14955] netlink: 'syz.3.2345': attribute type 3 has an invalid length.
[  358.984887][T14955] __nla_validate_parse: 3 callbacks suppressed
[  358.984907][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2345'.
[  359.286491][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2353'.
[  359.362450][T14983] netlink: 'syz.2.2354': attribute type 2 has an invalid length.
[  359.374352][T14983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2354'.
[  359.465392][T14988] team0: Mode "" not found
[  359.575694][T14995] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  359.602761][T14993] lo speed is unknown, defaulting to 1000
[  360.021187][T15008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  360.709791][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2365'.
[  360.776909][T15023] hsr_slave_1 (unregistering): left promiscuous mode
[  361.096910][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2369'.
[  361.306726][T15052] netlink: 'syz.2.2372': attribute type 8 has an invalid length.
[  361.649153][T15063] openvswitch: netlink: Message has 1 unknown bytes.
[  361.675098][T15063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.716489][T15033] geneve1: left allmulticast mode
[  361.721605][T15033] geneve1: left promiscuous mode
[  361.802815][T15049] syzkaller0: entered promiscuous mode
[  361.810114][T15049] syzkaller0: entered allmulticast mode
[  361.858918][T15063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2376'.
[  361.908803][T15063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2376'.
[  361.934337][T15063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2376'.
[  361.948377][T15070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2377'.
[  361.958631][T15063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2376'.
[  361.968243][T15063] netlink: 'syz.0.2376': attribute type 6 has an invalid length.
[  362.143479][T15070] 8021q: adding VLAN 0 to HW filter on device bond15
[  362.185524][T15075] tipc: Resetting bearer <eth:syzkaller0>
[  362.337157][T15080] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.533240][T15075] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link
[  362.724576][T15115] netlink: 'syz.0.2387': attribute type 1 has an invalid length.
[  362.833170][T15074] tipc: Resetting bearer <eth:syzkaller0>
[  362.865261][ T6473] tipc: Resetting bearer <eth:syzkaller0>
[  363.576837][T15148] netlink: 'syz.3.2399': attribute type 8 has an invalid length.
[  363.673751][T15148] bond0: entered promiscuous mode
[  363.708810][T15148] gretap0: entered promiscuous mode
[  363.756292][T15148] bond0: left promiscuous mode
[  363.775219][T15148] gretap0: left promiscuous mode
[  363.950918][T15158] bond5: entered promiscuous mode
[  363.988762][T15158] 8021q: adding VLAN 0 to HW filter on device bond5
[  364.031915][T15159] __nla_validate_parse: 10 callbacks suppressed
[  364.031938][T15159] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2402'.
[  364.353757][T15176] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2404'.
[  364.560099][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'.
[  364.671326][T15192] 8021q: adding VLAN 0 to HW filter on device bond12
[  364.834581][T15196] netlink: 'syz.1.2409': attribute type 21 has an invalid length.
[  365.430938][T15224] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2416'.
[  365.466748][T15229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2418'.
[  365.642163][T15232] netlink: 'syz.0.2420': attribute type 1 has an invalid length.
[  365.651144][T15234] tipc: Resetting bearer <eth:syzkaller0>
[  365.899460][T15253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2423'.
[  366.036460][T15249] bond6: (slave gretap2): making interface the new active one
[  366.066739][T15249] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  366.108487][T15231] tipc: Resetting bearer <eth:syzkaller0>
[  366.119111][T15253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2423'.
[  366.156240][T15253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2423'.
[  366.182662][T15253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2423'.
[  366.203379][ T6473] tipc: Resetting bearer <eth:syzkaller0>
[  366.233554][T15262] netlink: 'syz.1.2425': attribute type 27 has an invalid length.
[  366.264108][T15253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2423'.
[  366.303968][T15262] netlink: 'syz.1.2425': attribute type 27 has an invalid length.
[  366.526165][T15278] lo speed is unknown, defaulting to 1000
[  366.697200][T15293] netlink: 'syz.3.2431': attribute type 1 has an invalid length.
[  366.864474][T15293] bond13: entered promiscuous mode
[  366.884850][T15293] bond13: entered allmulticast mode
[  366.892859][T15293] 8021q: adding VLAN 0 to HW filter on device bond13
[  366.959377][T15296] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  367.416966][T15310] lo speed is unknown, defaulting to 1000
[  367.435544][T15313] x_tables: duplicate underflow at hook 2
[  367.746807][T15323] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  369.006870][T15346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  369.111136][T15368] __nla_validate_parse: 31 callbacks suppressed
[  369.111158][T15368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2452'.
[  369.158892][T15368] unsupported nla_type 142
[  369.306510][T15380] lo speed is unknown, defaulting to 1000
[  369.429935][T15386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2456'.
[  369.695244][T15389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2458'.
[  369.718521][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'.
[  369.869771][T15395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2458'.
[  369.870217][T15398] lo speed is unknown, defaulting to 1000
[  370.135811][T15404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2461'.
[  370.385721][T15415] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2464'.
[  370.412335][T15397] lo speed is unknown, defaulting to 1000
[  371.066571][T15402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2460'.
[  371.416681][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2469'.
[  371.474549][T15447] IPVS: set_ctl: invalid protocol: 187 224.0.0.2:20000
[  371.697926][T15449] netlink: 'syz.0.2471': attribute type 1 has an invalid length.
[  371.833075][T15458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2472'.
[  371.866662][T15458] netlink: 'syz.4.2472': attribute type 4 has an invalid length.
[  371.962168][T15449] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  371.962958][T15453] veth0_macvtap: mtu less than device minimum
[  372.336183][T15469] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  372.649894][T15481] netlink: 'syz.0.2479': attribute type 11 has an invalid length.
[  372.722528][T15482] lo speed is unknown, defaulting to 1000
[  372.919993][T15490] IPVS: set_ctl: invalid protocol: 38377 255.255.255.255:20002
[  373.300797][T15506] lo speed is unknown, defaulting to 1000
[  373.673045][T15521] netlink: 'syz.1.2490': attribute type 1 has an invalid length.
[  373.980641][T15537] netlink: 'syz.1.2494': attribute type 13 has an invalid length.
[  374.638492][T15553] lo speed is unknown, defaulting to 1000
[  374.798658][T15574] __nla_validate_parse: 7 callbacks suppressed
[  374.798678][T15574] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2501'.
[  374.860392][T15578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'.
[  374.875935][T15579] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2504'.
[  374.975405][T15578] bond5: entered promiscuous mode
[  374.980715][T15578] bond5: entered allmulticast mode
[  374.986763][T15578] 8021q: adding VLAN 0 to HW filter on device bond5
[  375.047611][T15587] xt_l2tp: invalid flags combination: 0
[  375.135651][T15591] netlink: 'syz.1.2506': attribute type 11 has an invalid length.
[  375.196363][T15595] netlink: 840 bytes leftover after parsing attributes in process `syz.0.2505'.
[  375.796969][T15617] pim6reg: tun_chr_ioctl cmd 1074812117
[  375.861240][T15617] netlink: 'syz.1.2510': attribute type 1 has an invalid length.
[  375.948428][T15617] bond6: entered promiscuous mode
[  375.974073][T15617] 8021q: adding VLAN 0 to HW filter on device bond6
[  376.317569][T15606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  376.437988][T15649] tun0: tun_chr_ioctl cmd 1074025677
[  376.443813][T15649] tun0: linktype set to 778
[  376.496643][T15651] netlink: 'syz.1.2517': attribute type 16 has an invalid length.
[  376.509255][T15651] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2517'.
[  376.658703][T15665] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2522'.
[  376.772718][T15668] delete_channel: no stack
[  377.149293][T15689] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2530'.
[  377.158861][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'.
[  377.159020][T15692] netlink: 39 bytes leftover after parsing attributes in process `syz.0.2532'.
[  377.285324][T15703] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2536'.
[  377.630525][T15721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.030399][T15757] lo speed is unknown, defaulting to 1000
[  378.171838][T15765] netlink: 'syz.3.2558': attribute type 11 has an invalid length.
[  378.181324][T15763] netlink: 'syz.0.2557': attribute type 1 has an invalid length.
[  378.198051][T15765] netlink: 'syz.3.2558': attribute type 23 has an invalid length.
[  378.603858][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.795295][ T5957] tipc: Node number set to 1176719632
[  378.801044][T15788] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  378.857293][T15794] lo speed is unknown, defaulting to 1000
[  378.875190][T15794] lo speed is unknown, defaulting to 1000
[  378.886871][T15793] netlink: 'syz.0.2566': attribute type 27 has an invalid length.
[  378.896201][T15794] lo speed is unknown, defaulting to 1000
[  378.927708][T15794] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  378.956678][T15794] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  379.109808][T15793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  379.195597][T15794] lo speed is unknown, defaulting to 1000
[  379.223600][T15794] lo speed is unknown, defaulting to 1000
[  379.254447][T15794] lo speed is unknown, defaulting to 1000
[  379.326471][T15794] lo speed is unknown, defaulting to 1000
[  379.351367][T15794] lo speed is unknown, defaulting to 1000
[  379.539126][T15808] bond7: option downdelay: invalid value (18446744073709551615)
[  379.550427][T15808] bond7: option downdelay: allowed values 0 - 2147483647
[  379.560865][T15808] bond7 (unregistering): Released all slaves
[  379.631335][T15820] tipc: Enabled bearer <eth:tunl0>, priority 10
[  379.675800][T15815] lo speed is unknown, defaulting to 1000
[  379.778123][T15829] x_tables: (null)_tables: pkttype.0 match: invalid size 8 (kernel) != (user) 16
[  379.869487][T15831] __nla_validate_parse: 10 callbacks suppressed
[  379.869508][T15831] netlink: 296 bytes leftover after parsing attributes in process `syz.4.2578'.
[  379.896985][T15831] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  379.910528][T15831] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2578'.
[  379.993011][T15833] netlink: 'syz.2.2579': attribute type 1 has an invalid length.
[  380.006039][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2581'.
[  380.067540][T15833] 8021q: adding VLAN 0 to HW filter on device bond8
[  380.135472][T15840] netlink: 209412 bytes leftover after parsing attributes in process `syz.4.2582'.
[  380.185132][T15815] lo speed is unknown, defaulting to 1000
[  380.236256][T15833] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2579'.
[  380.260499][T15842] IPVS: Unknown mcast interface: vgth0_to_bond
[  380.315198][T15850] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  380.323239][T15850] batadv_slave_0: entered promiscuous mode
[  380.333780][T15850] batadv_slave_0: left promiscuous mode
[  380.340618][T15850] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  380.588157][T15866] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  380.626920][T15870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2588'.
[  380.763593][T15877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2590'.
[  380.795285][T15877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2590'.
[  381.041119][T15880] lo speed is unknown, defaulting to 1000
[  381.163854][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2594'.
[  381.205380][ T1626] block nbd1: Possible stuck request ffff888026da0000: control (read@0,1024B). Runtime 30 seconds
[  381.218545][ T1626] block nbd1: Possible stuck request ffff888026da0200: control (read@1024,1024B). Runtime 30 seconds
[  381.229602][ T1626] block nbd1: Possible stuck request ffff888026da0400: control (read@2048,1024B). Runtime 30 seconds
[  381.241212][ T1626] block nbd1: Possible stuck request ffff888026da0600: control (read@3072,1024B). Runtime 30 seconds
[  381.275831][T15895] netlink: 'syz.0.2596': attribute type 7 has an invalid length.
[  381.372871][T15897] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2597'.
[  381.382744][T15897] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  381.410409][T15897] 0ªî{X¹¦: entered allmulticast mode
[  381.416521][T15897] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  381.773456][T15880] lo speed is unknown, defaulting to 1000
[  383.135077][T15959] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  383.270172][T15967] tipc: Resetting bearer <eth:syzkaller0>
[  383.332170][T15971] gre1: entered allmulticast mode
[  383.347316][T15966] tipc: Resetting bearer <eth:syzkaller0>
[  383.588410][T15981] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535)
[  383.610533][T15981] netlink: 'syz.2.2620': attribute type 21 has an invalid length.
[  383.993475][T16005] dvmrp1: entered allmulticast mode
[  384.029670][T16008] netlink: 'syz.2.2627': attribute type 2 has an invalid length.
[  384.243915][T16010] lo speed is unknown, defaulting to 1000
[  384.821705][T16011] lo speed is unknown, defaulting to 1000
[  384.836259][T16010] lo speed is unknown, defaulting to 1000
[  385.059896][T16041] netlink: 'syz.0.2637': attribute type 1 has an invalid length.
[  385.076621][T16040] __nla_validate_parse: 10 callbacks suppressed
[  385.076641][T16040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2638'.
[  385.116375][T16041] 8021q: adding VLAN 0 to HW filter on device bond7
[  385.328980][T16053] netlink: 'syz.3.2639': attribute type 1 has an invalid length.
[  385.349140][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2640'.
[  385.388360][T16054] netlink: 'syz.1.2642': attribute type 83 has an invalid length.
[  385.501068][T16053] bond14: entered promiscuous mode
[  385.507120][T16053] 8021q: adding VLAN 0 to HW filter on device bond14
[  385.532563][T16011] lo speed is unknown, defaulting to 1000
[  385.611410][T16066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2646'.
[  385.621177][T16066] openvswitch: netlink: Flow key attr not present in new flow.
[  385.693975][T16068] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2647'.
[  385.706013][T16068] netlink: 'syz.3.2647': attribute type 8 has an invalid length.
[  385.778692][T16063] netlink: 'syz.2.2644': attribute type 23 has an invalid length.
[  385.968917][T16075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2649'.
[  385.981433][T16075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2649'.
[  386.208011][T16092] sctp: [Deprecated]: syz.2.2653 (pid 16092) Use of int in maxseg socket option.
[  386.208011][T16092] Use struct sctp_assoc_value instead
[  386.350230][T16098] tipc: Resetting bearer <eth:tunl0>
[  386.447786][T16098] bridge0: port 3(dummy0) entered disabled state
[  386.550071][T16098] tipc: Resetting bearer <eth:syzkaller0>
[  386.623680][T16109] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  386.720785][T16101] lo speed is unknown, defaulting to 1000
[  386.732379][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'.
[  386.990183][T16132] netlink: 'syz.3.2664': attribute type 10 has an invalid length.
[  387.023772][T16132] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  387.034065][T16132] team0: Port device dummy0 removed
[  387.084449][T16101] lo speed is unknown, defaulting to 1000
[  387.120640][T16095] mpoa:mpoad_close: (<unknown>) going down
[  387.127504][T16128] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  387.129512][T16134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.345629][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2665'.
[  387.356710][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2666'.
[  387.470730][T16142] bond0: option resend_igmp: invalid value (28515)
[  387.485728][T16142] bond0: option resend_igmp: allowed values 0 - 255
[  387.869641][T16160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2671'.
[  388.374335][T16187] bpq0: entered promiscuous mode
[  388.390173][T16187] bpq0: entered allmulticast mode
[  388.416876][T16187] netlink: 'syz.3.2680': attribute type 11 has an invalid length.
[  388.432442][T16187] netlink: 'syz.3.2680': attribute type 23 has an invalid length.
[  389.385591][T16244] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  389.397749][T16247] netlink: 'syz.0.2699': attribute type 22 has an invalid length.
[  389.400965][T16244] tipc: Resetting bearer <eth:syzkaller0>
[  389.457928][T16247] netlink: 'syz.0.2699': attribute type 22 has an invalid length.
[  389.467772][ T6475] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  389.490987][ T6475] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  389.530358][ T6475] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  389.544233][ T6475] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  389.652708][T16262] lo speed is unknown, defaulting to 1000
[  390.563339][T16302] __nla_validate_parse: 6 callbacks suppressed
[  390.563359][T16302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2706'.
[  390.589304][T16302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2706'.
[  390.599558][T16303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.699166][T16283] lo speed is unknown, defaulting to 1000
[  390.711733][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2710'.
[  390.721954][T16312] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2709'.
[  390.732127][T16262] lo speed is unknown, defaulting to 1000
[  390.764841][T16311] hsr_slave_0 (unregistering): left promiscuous mode
[  390.926733][T16322] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2712'.
[  390.991148][T16319] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2712'.
[  391.021482][T16322] bond17 (unregistering): Released all slaves
[  391.062903][T16327] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2712'.
[  391.183684][T16328] xt_hashlimit: size too large, truncated to 1048576
[  391.286658][T16283] lo speed is unknown, defaulting to 1000
[  391.294355][T16334] netlink: 'syz.3.2715': attribute type 4 has an invalid length.
[  391.648936][T16339] netlink: 'syz.1.2717': attribute type 2 has an invalid length.
[  391.656894][T16339] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2717'.
[  391.761352][T16341] IPv6: sit2: Disabled Multicast RS
[  391.913551][T16347] lo speed is unknown, defaulting to 1000
[  392.195649][T16345] syzkaller1: entered promiscuous mode
[  392.201195][T16345] syzkaller1: entered allmulticast mode
[  392.256461][T16357] tipc: Resetting bearer <eth:syzkaller0>
[  392.280849][T16347] lo speed is unknown, defaulting to 1000
[  392.361355][T16356] tipc: Resetting bearer <eth:syzkaller0>
[  392.460937][T16363] nbd: socks must be embedded in a SOCK_ITEM attr
[  392.507356][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2724'.
[  392.542380][T16367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2725'.
[  393.163715][ T6473] tipc: Resetting bearer <eth:syzkaller0>
[  393.281208][T16407] netlink: 'syz.3.2735': attribute type 32 has an invalid length.
[  393.299322][T16409] 8021q: adding VLAN 0 to HW filter on device batadv0
[  393.339730][T16409] netlink: 'syz.0.2736': attribute type 10 has an invalid length.
[  393.379899][T16409] 8021q: adding VLAN 0 to HW filter on device batadv0
[  393.423102][T16409] .`: (slave batadv0): Enslaving as an active interface with an up link
[  393.913064][T16438] openvswitch: netlink: Flow key attr not present in new flow.
[  394.098340][T16446] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  394.323579][T16446] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  394.468192][T16463] syzkaller0: entered promiscuous mode
[  394.477040][T16463] syzkaller0: entered allmulticast mode
[  394.500451][T16446] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  394.735897][T16446] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  394.885941][ T6473] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  394.951773][ T1151] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  394.965302][ T1151] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  395.035533][ T6473] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  395.058414][T16489] syzkaller0: entered promiscuous mode
[  395.084881][T16489] syzkaller0: entered allmulticast mode
[  395.347068][T16506] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  395.657746][T16531] hsr0: entered promiscuous mode
[  395.668798][T16531] __nla_validate_parse: 15 callbacks suppressed
[  395.668905][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2764'.
[  395.688852][T16531] hsr_slave_1: left promiscuous mode
[  395.701650][T16531] hsr0 (unregistering): left promiscuous mode
[  396.041686][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'.
[  396.076089][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'.
[  396.100861][T16557] bridge0: entered allmulticast mode
[  396.196086][T16575] netlink: 'syz.2.2768': attribute type 1 has an invalid length.
[  396.283475][T16575] bond9: entered promiscuous mode
[  396.324889][T16575] bond9: entered allmulticast mode
[  396.330509][T16575] 8021q: adding VLAN 0 to HW filter on device bond9
[  396.378265][T16580] netlink: 'syz.3.2773': attribute type 1 has an invalid length.
[  396.386238][T16580] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2773'.
[  396.395633][T16580] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2773'.
[  396.411806][T16580] netlink: 'syz.3.2773': attribute type 8 has an invalid length.
[  396.426431][T16580] netlink: 630 bytes leftover after parsing attributes in process `syz.3.2773'.
[  396.429327][T16578] erspan2: entered allmulticast mode
[  396.440083][T16580] netlink: 'syz.3.2773': attribute type 1 has an invalid length.
[  396.450025][T16580] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2773'.
[  396.459581][T16580] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2773'.
[  396.468944][T16580] netlink: 'syz.3.2773': attribute type 8 has an invalid length.
[  396.477076][T16578] bond9: (slave erspan2): making interface the new active one
[  396.477104][T16578] erspan2: entered promiscuous mode
[  396.485601][T16578] bond9: (slave erspan2): Enslaving as an active interface with an up link
[  396.492648][T16580] netlink: 630 bytes leftover after parsing attributes in process `syz.3.2773'.
[  396.513236][T16580] netlink: 'syz.3.2773': attribute type 1 has an invalid length.
[  396.523414][T16580] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2773'.
[  396.533043][T16580] netlink: 'syz.3.2773': attribute type 8 has an invalid length.
[  396.553658][T16580] netlink: 'syz.3.2773': attribute type 1 has an invalid length.
[  396.562060][T16580] netlink: 'syz.3.2773': attribute type 8 has an invalid length.
[  410.982660][ T5193] udevd[5193]: worker [11438] /devices/virtual/block/nbd1 is taking a long time
[  411.235706][ T1626] block nbd1: Possible stuck request ffff888026da0000: control (read@0,1024B). Runtime 60 seconds
[  411.246621][ T1626] block nbd1: Possible stuck request ffff888026da0200: control (read@1024,1024B). Runtime 60 seconds
[  411.257819][ T1626] block nbd1: Possible stuck request ffff888026da0400: control (read@2048,1024B). Runtime 60 seconds
[  411.284798][ T1626] block nbd1: Possible stuck request ffff888026da0600: control (read@3072,1024B). Runtime 60 seconds
[  437.567180][T16593] __nla_validate_parse: 5 callbacks suppressed
[  437.567204][T16593] netlink: 744 bytes leftover after parsing attributes in process `syz.2.2776'.
[  437.603727][T16593] netlink: 'syz.2.2776': attribute type 7 has an invalid length.
[  437.615494][T16593] netlink: 'syz.2.2776': attribute type 8 has an invalid length.
[  437.635275][T16593] netlink: 'syz.2.2776': attribute type 8 has an invalid length.
[  437.646238][T16597] netlink: 'syz.1.2779': attribute type 1 has an invalid length.
[  437.654338][T16593] netlink: 'syz.2.2776': attribute type 4 has an invalid length.
[  437.662682][T16593] netlink: 'syz.2.2776': attribute type 7 has an invalid length.
[  437.671171][T16593] netlink: 207236 bytes leftover after parsing attributes in process `syz.2.2776'.
[  437.722435][T16597] bond7: entered promiscuous mode
[  437.731503][T16597] 8021q: adding VLAN 0 to HW filter on device bond7
[  437.762762][T16597] vlan2: entered allmulticast mode
[  437.768712][T16597] bond7: entered allmulticast mode
[  437.806489][T16597] bond7: (slave bridge5): making interface the new active one
[  437.824432][T16597] bridge5: entered promiscuous mode
[  437.830006][T16597] bridge5: entered allmulticast mode
[  437.838351][T16597] bond7: (slave bridge5): Enslaving as an active interface with an up link
[  437.941854][T16607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2781'.
[  437.952765][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2781'.
[  437.963477][T16607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2781'.
[  438.027467][T16607] smc: removing ib device sqz0
[  438.141721][T16611] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2782'.
[  438.541994][T16617] lo speed is unknown, defaulting to 1000
[  439.987516][T16671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2792'.
[  440.037984][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  440.056195][T16644] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.2789'.
[  440.094883][T16644] netlink: Unknown conntrack attr (type=2304, max=9)
[  440.160745][T16666] lo speed is unknown, defaulting to 1000
[  440.300871][T16680] sock: sock_set_timeout: `syz.0.2795' (pid 16680) tries to set negative timeout
[  440.337987][T16683] tipc: Resetting bearer <eth:syzkaller0>
[  440.352000][T16684] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2797'.
[  440.405334][T16684] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2797'.
[  440.504932][T16688] tipc: Resetting bearer <eth:syzkaller0>
[  440.832396][  T209] tipc: Resetting bearer <eth:syzkaller0>
[  441.038001][  T209] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  441.054838][  T209] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  441.117219][  T209] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  441.147247][  T209] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  441.189307][T16731] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  441.318872][ T1626] block nbd1: Possible stuck request ffff888026da0000: control (read@0,1024B). Runtime 90 seconds
[  441.333642][ T1626] block nbd1: Possible stuck request ffff888026da0200: control (read@1024,1024B). Runtime 90 seconds
[  441.345873][ T1626] block nbd1: Possible stuck request ffff888026da0400: control (read@2048,1024B). Runtime 90 seconds
[  441.357433][ T1626] block nbd1: Possible stuck request ffff888026da0600: control (read@3072,1024B). Runtime 90 seconds
[  441.845956][T16759] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  441.865546][T16759] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  441.896794][T16759] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  441.928397][T16759] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  441.944874][T16759] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  442.056039][T16755] lo speed is unknown, defaulting to 1000
[  442.636425][T16779] sctp: [Deprecated]: syz.0.2820 (pid 16779) Use of int in max_burst socket option.
[  442.636425][T16779] Use struct sctp_assoc_value instead
[  442.697527][T16776] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  442.711597][T16782] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20000
[  442.720787][T16782] __nla_validate_parse: 8 callbacks suppressed
[  442.720807][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2821'.
[  442.866139][T16755] chnl_net:caif_netlink_parms(): no params data found
[  443.048199][T16792] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  443.086785][T16792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2824'.
[  443.173648][T16755] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.202266][T16755] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.228413][T16755] bridge_slave_0: entered allmulticast mode
[  443.254022][T16755] bridge_slave_0: entered promiscuous mode
[  443.274289][T16755] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.293083][T16755] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.309158][T16755] bridge_slave_1: entered allmulticast mode
[  443.321026][T16755] bridge_slave_1: entered promiscuous mode
[  443.350789][T16806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2826'.
[  443.379138][T16806] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2826'.
[  443.418413][T16755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  443.450290][T16755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  443.542619][T16755] team0: Port device team_slave_0 added
[  443.568992][T16755] team0: Port device team_slave_1 added
[  443.657998][T16755] batman_adv: batadv0: Adding interface: batadv_slave_0
[  443.677034][T16755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.784907][T16755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  443.872817][T16755] batman_adv: batadv0: Adding interface: batadv_slave_1
[  443.908124][T16755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.943454][T16831] x_tables: ip_tables: ah match: only valid for protocol 51
[  443.960096][T16831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2831'.
[  443.989126][T16755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.034968][ T5143] Bluetooth: hci5: command tx timeout
[  444.144333][T16755] hsr_slave_0: entered promiscuous mode
[  444.151756][T16755] hsr_slave_1: entered promiscuous mode
[  444.161240][T16755] debugfs: 'hsr0' already exists in 'hsr'
[  444.167720][T16755] Cannot create hsr debugfs directory
[  444.303444][T16851] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2835'.
[  444.502301][T16860] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2838'.
[  444.541763][T16860] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2838'.
[  444.668187][T16755] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.689343][T16755] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.834468][T16755] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.836870][T16873] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2840'.
[  444.871340][T16755] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.030878][T16867] lo speed is unknown, defaulting to 1000
[  445.046827][T16755] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  445.081032][T16755] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.211371][T16755] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  445.233633][T16755] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.281952][T16897] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2851'.
[  445.467461][T16755] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  445.627338][T16755] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  445.640611][T16755] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  445.673618][T16755] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  445.986271][T16930] netlink: 'syz.1.2857': attribute type 11 has an invalid length.
[  446.117814][ T5143] Bluetooth: hci5: command tx timeout
[  446.182253][T16942] macvtap0: entered promiscuous mode
[  446.241766][T16755] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.296114][T16942] macvtap0 (unregistering): left promiscuous mode
[  446.368335][T16952] bond8: entered promiscuous mode
[  446.374330][T16952] 8021q: adding VLAN 0 to HW filter on device bond8
[  446.396597][T16957] netlink: 'syz.4.2864': attribute type 13 has an invalid length.
[  446.411676][T16755] 8021q: adding VLAN 0 to HW filter on device team0
[  446.442859][T16957] netlink: 'syz.4.2864': attribute type 13 has an invalid length.
[  446.477923][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.485162][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.537768][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.545036][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[  447.025643][T16991] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  447.079583][T16989] syzkaller0: entered promiscuous mode
[  447.105474][T16989] syzkaller0: entered allmulticast mode
[  447.161638][T16755] 8021q: adding VLAN 0 to HW filter on device batadv0
[  447.311473][T16755] veth0_vlan: entered promiscuous mode
[  447.324667][T16755] veth1_vlan: entered promiscuous mode
[  447.405217][T16755] veth0_macvtap: entered promiscuous mode
[  447.418556][T16755] veth1_macvtap: entered promiscuous mode
[  447.481800][T17014] syzkaller0: entered promiscuous mode
[  447.493886][T17014] syzkaller0: entered allmulticast mode
[  447.579474][T16755] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.593401][T17014] netlink: 'syz.3.2879': attribute type 11 has an invalid length.
[  447.609556][T16755] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.684350][ T6483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.693541][ T6483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.704006][ T6483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.714429][ T6483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.961491][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.995177][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.040139][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.049260][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.194983][ T5143] Bluetooth: hci5: command tx timeout
[  448.299626][T17041] __nla_validate_parse: 11 callbacks suppressed
[  448.300122][T17041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2885'.
[  448.532944][T17051] syzkaller0: entered promiscuous mode
[  448.574759][T17051] syzkaller0: entered allmulticast mode
[  448.623238][T17057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2891'.
[  448.634212][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2888'.
[  448.662461][T17054] lo speed is unknown, defaulting to 1000
[  448.986508][T17067] bond1: entered promiscuous mode
[  448.991988][T17067] 8021q: adding VLAN 0 to HW filter on device bond1
[  449.048007][T17063] lo speed is unknown, defaulting to 1000
[  449.321270][T17089] netlink: 'syz.3.2899': attribute type 1 has an invalid length.
[  449.350087][T17089] netlink: 'syz.3.2899': attribute type 3 has an invalid length.
[  449.559563][T17096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.649960][T17098] netlink: 'syz.0.2903': attribute type 1 has an invalid length.
[  449.659573][T17096] x_tables: duplicate underflow at hook 2
[  449.689752][T17098] netlink: 'syz.0.2903': attribute type 2 has an invalid length.
[  449.702454][T17095] tipc: Resetting bearer <eth:syzkaller0>
[  449.774332][T17098] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  449.992084][T17118] bond15: entered promiscuous mode
[  449.999324][T17118] 8021q: adding VLAN 0 to HW filter on device bond15
[  450.008260][ T6475] tipc: Resetting bearer <eth:syzkaller0>
[  450.228967][T17141] netlink: 'syz.2.2911': attribute type 1 has an invalid length.
[  450.275270][ T5143] Bluetooth: hci5: command tx timeout
[  450.331687][T17146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2914'.
[  450.463119][T17156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2918'.
[  450.481536][T17156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2918'.
[  450.500861][T17156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2918'.
[  450.512398][T17156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2918'.
[  450.522915][T17156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2918'.
[  450.534213][T17160] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2918'.
[  450.651517][T17164] ipvlan1: entered promiscuous mode
[  450.658833][T17164] ipvlan1: left promiscuous mode
[  450.970200][T17186] netlink: 'syz.3.2926': attribute type 17 has an invalid length.
[  451.497656][T17213] bpq0: left promiscuous mode
[  451.502435][T17213] bpq0: left allmulticast mode
[  451.510843][T17213] netlink: 'syz.0.2933': attribute type 11 has an invalid length.
[  451.519295][T17213] netlink: 'syz.0.2933': attribute type 23 has an invalid length.
[  451.843958][T17227] lo speed is unknown, defaulting to 1000
[  452.108713][T17248] netlink: 'syz.3.2944': attribute type 1 has an invalid length.
[  452.900492][T17290] bond4: option mode: unable to set because the bond device has slaves
[  452.925243][T17290] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.968739][T17290] bond4: (slave bond0): making interface the new active one
[  453.000185][T17299] netlink: 'syz.0.2952': attribute type 4 has an invalid length.
[  453.029191][T17290] bond0: entered promiscuous mode
[  453.049574][T17290] bond4: (slave bond0): Enslaving as an active interface with an up link
[  453.373553][T17313] tipc: Resetting bearer <eth:syzkaller0>
[  453.459775][T17309] tipc: Resetting bearer <eth:syzkaller0>
[  453.645975][ T6483] tipc: Resetting bearer <eth:syzkaller0>
[  453.823354][T17335] __nla_validate_parse: 41 callbacks suppressed
[  453.823375][T17335] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2967'.
[  453.903615][T17335] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2967'.
[  454.023322][T17345] rdma_op ffff88807616c9f0 conn xmit_rdma 0000000000000000
[  454.039264][T17345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2967'.
[  454.091549][T16759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  454.102883][T16759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  454.111326][T16759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  454.127413][T16759] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  454.152895][T16759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  454.260804][T17351] lo speed is unknown, defaulting to 1000
[  454.365586][T17363] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2973'.
[  454.764122][T17382] vlan3: entered promiscuous mode
[  454.792452][T17382] macvlan0: entered promiscuous mode
[  454.840523][T17351] chnl_net:caif_netlink_parms(): no params data found
[  455.014405][T17351] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.022352][T17351] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.030568][T17351] bridge_slave_0: entered allmulticast mode
[  455.039714][T17351] bridge_slave_0: entered promiscuous mode
[  455.052613][T17351] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.060552][T17351] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.068482][T17351] bridge_slave_1: entered allmulticast mode
[  455.077783][T17351] bridge_slave_1: entered promiscuous mode
[  455.107393][T17400] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2979'.
[  455.121854][T17400] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2979'.
[  455.143547][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2980'.
[  455.168265][T17351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.198975][T17351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.270858][T17351] team0: Port device team_slave_0 added
[  455.295480][T17351] team0: Port device team_slave_1 added
[  455.335984][T17351] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.343124][T17351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.376950][T17351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.392489][T17351] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.435625][T17351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.495179][T17351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.646761][T17351] hsr_slave_0: entered promiscuous mode
[  455.661831][T17351] hsr_slave_1: entered promiscuous mode
[  455.671976][T17351] debugfs: 'hsr0' already exists in 'hsr'
[  455.678483][T17351] Cannot create hsr debugfs directory
[  456.195558][ T5143] Bluetooth: hci2: command tx timeout
[  457.372406][T17431] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2987'.
[  457.566060][T17450] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2993'.
[  457.713110][T17351] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  457.743617][T17351] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  457.772680][T17351] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  457.797503][T17351] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  458.029879][T17488] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2999'.
[  458.046126][T17351] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.059935][T17489] gtp1: entered promiscuous mode
[  458.066377][T17489] gtp1: entered allmulticast mode
[  458.091862][T17351] 8021q: adding VLAN 0 to HW filter on device team0
[  458.108266][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.115549][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.133791][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.140946][ T6483] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.292267][ T5143] Bluetooth: hci2: command tx timeout
[  458.471206][T17351] 8021q: adding VLAN 0 to HW filter on device batadv0
[  458.601015][T17511] netlink: 'syz.3.3006': attribute type 1 has an invalid length.
[  458.615585][T17511] netlink: 'syz.3.3006': attribute type 1 has an invalid length.
[  458.623389][T17511] netlink: 'syz.3.3006': attribute type 8 has an invalid length.
[  458.750322][T17517] netlink: 'syz.3.3008': attribute type 1 has an invalid length.
[  458.776811][T17519] macvtap0: entered promiscuous mode
[  458.967181][T17351] veth0_vlan: entered promiscuous mode
[  458.991495][T17351] veth1_vlan: entered promiscuous mode
[  459.062387][T17351] veth0_macvtap: entered promiscuous mode
[  459.087640][T17535] syzkaller0: entered promiscuous mode
[  459.094422][T17535] syzkaller0: entered allmulticast mode
[  459.108010][T17351] veth1_macvtap: entered promiscuous mode
[  459.118940][T17535] __nla_validate_parse: 5 callbacks suppressed
[  459.119010][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'.
[  459.148427][T17535] vlan6: entered promiscuous mode
[  459.153692][T17535] team0: entered promiscuous mode
[  459.161649][T17535] team_slave_0: entered promiscuous mode
[  459.168739][T17535] team_slave_1: entered promiscuous mode
[  459.249171][T17545] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  459.286448][T17351] batman_adv: batadv0: Interface activated: batadv_slave_0
[  459.325374][T17351] batman_adv: batadv0: Interface activated: batadv_slave_1
[  459.400652][ T1151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  459.451393][ T1151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  459.461191][ T1151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  459.486542][ T1151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.586858][T17550] lo speed is unknown, defaulting to 1000
[  459.703389][T17558] tipc: Resetting bearer <eth:syzkaller0>
[  459.742300][T17562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3021'.
[  459.820601][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.850942][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.909773][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3024'.
[  459.965980][T17567] 8021q: adding VLAN 0 to HW filter on device bond9
[  459.983677][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3024'.
[  459.996348][T17573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3024'.
[  460.022168][T17573] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.033024][T17573] bond9: (slave bond0): making interface the new active one
[  460.047801][T17573] bond9: (slave bond0): Enslaving as an active interface with an up link
[  460.093255][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.106352][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.122266][T17567] netlink: 'syz.1.3024': attribute type 4 has an invalid length.
[  460.130429][T17567] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3024'.
[  460.157679][T17567] .`: renamed from bond0 (while UP)
[  460.305269][T17582] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3025'.
[  460.368418][ T5143] Bluetooth: hci2: command tx timeout
[  460.502226][T17592] netlink: 'syz.0.3028': attribute type 8 has an invalid length.
[  460.704298][T17589] netlink: 'syz.3.3027': attribute type 10 has an invalid length.
[  460.737175][T16759] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  460.750080][T16759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  460.759606][T16759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  460.769956][T16759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  460.780439][T16759] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  460.866236][  T209] bond9: (slave .`): link status definitely down, disabling slave
[  460.923849][  T209] bond9: now running without any active interface!
[  461.128086][T17615] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3033'.
[  461.170549][T17615] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3033'.
[  461.258940][T17605] lo speed is unknown, defaulting to 1000
[  461.553606][T17629] syzkaller0: left promiscuous mode
[  461.583473][T17629] syzkaller0: left allmulticast mode
[  461.590646][T17629] tipc: Resetting bearer <eth:syzkaller0>
[  461.660960][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3038'.
[  461.739358][T17639] gtp0: entered promiscuous mode
[  461.748360][T17639] gtp0: entered allmulticast mode
[  461.782287][T17636] netlink: 'syz.3.3038': attribute type 29 has an invalid length.
[  461.832335][T17605] chnl_net:caif_netlink_parms(): no params data found
[  462.046018][T17605] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.053375][T17605] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.061667][T17605] bridge_slave_0: entered allmulticast mode
[  462.071220][T17605] bridge_slave_0: entered promiscuous mode
[  462.080779][T17605] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.088451][T17605] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.096588][T17605] bridge_slave_1: entered allmulticast mode
[  462.105205][T17605] bridge_slave_1: entered promiscuous mode
[  462.146613][T17605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.159704][T17605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.281559][T17605] team0: Port device team_slave_0 added
[  462.291466][T17605] team0: Port device team_slave_1 added
[  462.356173][T17605] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.373549][T17605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.428933][T17605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.445749][T17605] batman_adv: batadv0: Adding interface: batadv_slave_1
[  462.453450][T16759] Bluetooth: hci2: command tx timeout
[  462.468197][T17605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.496896][T17605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  462.627756][T17680] lo speed is unknown, defaulting to 1000
[  462.650582][T17605] hsr_slave_0: entered promiscuous mode
[  462.661353][T17605] hsr_slave_1: entered promiscuous mode
[  462.670108][T17605] debugfs: 'hsr0' already exists in 'hsr'
[  462.677544][T17605] Cannot create hsr debugfs directory
[  462.846779][T16759] Bluetooth: hci3: command tx timeout
[  463.093960][T17700] IPVS: length: 24 != 412310568984
[  463.549177][T17725] netlink: 'syz.2.3055': attribute type 39 has an invalid length.
[  463.879064][T17739] netlink: 'syz.4.3059': attribute type 3 has an invalid length.
[  464.009372][T17739] block nbd4: NBD_DISCONNECT
[  464.119193][T17739] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  464.212290][T17750] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address
[  464.240938][T17750] bond16: (slave vxcan1): Error -95 calling set_mac_address
[  464.346478][T17752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  464.572950][T17605] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  464.602545][T17605] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  464.653673][T17605] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  464.761316][T17605] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  464.917330][ T5143] Bluetooth: hci3: command tx timeout
[  465.135998][T17605] 8021q: adding VLAN 0 to HW filter on device bond0
[  465.153732][T17796] netlink: 'syz.4.3066': attribute type 11 has an invalid length.
[  465.182141][T17796] __nla_validate_parse: 7 callbacks suppressed
[  465.182160][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3066'.
[  465.231330][T17800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3068'.
[  465.313187][T17605] 8021q: adding VLAN 0 to HW filter on device team0
[  465.357070][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.364260][ T6475] bridge0: port 1(bridge_slave_0) entered forwarding state
[  465.414556][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.421801][ T6475] bridge0: port 2(bridge_slave_1) entered forwarding state
[  465.469584][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3068'.
[  465.694553][T17827] netlink: 'syz.0.3073': attribute type 3 has an invalid length.
[  465.813179][T17821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3072'.
[  465.865628][T17831] block nbd0: NBD_DISCONNECT
[  465.968159][T17827] dvmrp1: left allmulticast mode
[  466.029142][T17831] siw: device registration error -23
[  466.038659][T17605] 8021q: adding VLAN 0 to HW filter on device batadv0
[  466.077628][T17831] 0ªî{X¹¦: left allmulticast mode
[  466.152901][T17831] 8021q: adding VLAN 0 to HW filter on device .`
[  466.161982][T17831] 8021q: adding VLAN 0 to HW filter on device team0
[  466.173832][T17831] bridge0: port 3(dummy0) entered blocking state
[  466.180570][T17831] bridge0: port 3(dummy0) entered forwarding state
[  466.196856][T17831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  466.337630][T17605] veth0_vlan: entered promiscuous mode
[  466.377975][T17605] veth1_vlan: entered promiscuous mode
[  466.463256][T17605] veth0_macvtap: entered promiscuous mode
[  466.483314][T17605] veth1_macvtap: entered promiscuous mode
[  466.549798][T17605] batman_adv: batadv0: Interface activated: batadv_slave_0
[  466.570530][T17605] batman_adv: batadv0: Interface activated: batadv_slave_1
[  466.643037][ T6475] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.663456][ T6475] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.713601][ T6475] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.802020][ T6475] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.999463][ T5143] Bluetooth: hci3: command tx timeout
[  467.136501][T17878] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3083'.
[  467.169279][ T6483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.206965][ T6483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.239683][T17882] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3083'.
[  467.292332][  T209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.306371][  T209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.424148][T17892] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3087'.
[  468.062590][T17931] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3096'.
[  468.074214][T17930] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3097'.
[  468.107610][T17930] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3097'.
[  468.403882][T17942] netlink: 'syz.4.3099': attribute type 1 has an invalid length.
[  468.513866][T17942] vlan2: entered allmulticast mode
[  468.538987][T17942] vlan1: entered allmulticast mode
[  468.544186][T17942] veth0_vlan: entered allmulticast mode
[  468.934556][T16759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  468.945893][T16759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  468.953846][T16759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  468.961963][T16759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  468.970155][T16759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  469.075823][T16759] Bluetooth: hci3: command tx timeout
[  469.097711][T17960] lo speed is unknown, defaulting to 1000
[  469.391652][T17976] netlink: 'syz.1.3109': attribute type 7 has an invalid length.
[  469.412425][T17976] netlink: 'syz.1.3109': attribute type 8 has an invalid length.
[  469.421005][T17976] netlink: 'syz.1.3109': attribute type 8 has an invalid length.
[  469.430850][T17976] netlink: 'syz.1.3109': attribute type 4 has an invalid length.
[  469.472178][T17970] lo speed is unknown, defaulting to 1000
[  469.488800][T17976] netlink: 'syz.1.3109': attribute type 7 has an invalid length.
[  469.604060][T17986] xt_hashlimit: size too large, truncated to 1048576
[  469.627604][T17986] xt_hashlimit: max too large, truncated to 1048576
[  469.752047][T17991] bridge5: entered promiscuous mode
[  469.758128][T17991] bridge5: entered allmulticast mode
[  469.767478][T17991] team0: Port device bridge5 added
[  469.773438][T17960] chnl_net:caif_netlink_parms(): no params data found
[  469.814137][T17990] bridge0: port 3(team0) entered blocking state
[  469.821560][T17990] bridge0: port 3(team0) entered disabled state
[  469.829117][T17990] team0: entered allmulticast mode
[  469.834438][T17990] team_slave_0: entered allmulticast mode
[  469.840960][T17990] team_slave_1: entered allmulticast mode
[  470.253889][T17960] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.263566][T17960] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.290958][T17960] bridge_slave_0: entered allmulticast mode
[  470.309316][T17960] bridge_slave_0: entered promiscuous mode
[  470.360907][T17960] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.377525][T17960] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.386614][T17960] bridge_slave_1: entered allmulticast mode
[  470.401248][T17960] bridge_slave_1: entered promiscuous mode
[  470.476977][T17960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.490628][T17960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.517749][T18014] __nla_validate_parse: 10 callbacks suppressed
[  470.517769][T18014] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3119'.
[  470.551294][T17960] team0: Port device team_slave_0 added
[  470.562686][T17960] team0: Port device team_slave_1 added
[  470.591226][T18014] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3119'.
[  470.654281][T17960] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.666564][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.726697][T17960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.776696][T17960] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.783842][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.829105][T18022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.836927][T17960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  470.973807][T18028] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3123'.
[  471.000586][T18024] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3123'.
[  471.023715][T17960] hsr_slave_0: entered promiscuous mode
[  471.030817][T17960] hsr_slave_1: entered promiscuous mode
[  471.039092][T17960] debugfs: 'hsr0' already exists in 'hsr'
[  471.045717][T17960] Cannot create hsr debugfs directory
[  471.071024][T18028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3123'.
[  471.080268][T16759] Bluetooth: hci0: command tx timeout
[  471.347874][T18050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3127'.
[  471.405759][ T1626] block nbd1: Possible stuck request ffff888026da0000: control (read@0,1024B). Runtime 120 seconds
[  471.416708][ T1626] block nbd1: Possible stuck request ffff888026da0200: control (read@1024,1024B). Runtime 120 seconds
[  471.428105][ T1626] block nbd1: Possible stuck request ffff888026da0400: control (read@2048,1024B). Runtime 120 seconds
[  471.440088][ T1626] block nbd1: Possible stuck request ffff888026da0600: control (read@3072,1024B). Runtime 120 seconds
[  471.649526][T18056] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3131'.
[  471.662320][T18056] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3131'.
[  471.735876][T17960] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.836486][T17960] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.904230][T18064] x_tables: ip_tables: ah match: only valid for protocol 51
[  471.916278][T18065] x_tables: ip_tables: ah match: only valid for protocol 51
[  471.917268][T17960] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.989276][T18067] netlink: 'syz.2.3135': attribute type 10 has an invalid length.
[  472.008598][T18067] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  472.022729][T17960] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  472.258507][T17960] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  472.270949][T17960] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  472.289037][T17960] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  472.302191][T17960] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  472.575784][T17960] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.621849][T17960] 8021q: adding VLAN 0 to HW filter on device team0
[  472.660554][  T209] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.667793][  T209] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.720424][  T209] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.727681][  T209] bridge0: port 2(bridge_slave_1) entered forwarding state
[  472.906159][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3140'.
[  472.939492][T18088] netpci0: tun_chr_ioctl cmd 1074025678
[  472.954129][T18088] netpci0: group set to 0
[  473.156055][T16759] Bluetooth: hci0: command tx timeout
[  473.168479][T18096] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3142'.
[  473.342503][T17960] 8021q: adding VLAN 0 to HW filter on device batadv0
[  473.450049][T17960] veth0_vlan: entered promiscuous mode
[  473.465902][T17960] veth1_vlan: entered promiscuous mode
[  473.500732][T17960] veth0_macvtap: entered promiscuous mode
[  473.511556][T17960] veth1_macvtap: entered promiscuous mode
[  473.538671][T17960] batman_adv: batadv0: Interface activated: batadv_slave_0
[  473.560319][T17960] batman_adv: batadv0: Interface activated: batadv_slave_1
[  473.575704][ T6483] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.585665][ T6483] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.607761][ T6483] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  473.619137][ T6483] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  473.701108][ T6486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  473.720334][ T6486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  473.763111][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  473.773672][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.237375][T16759] Bluetooth: hci0: command tx timeout
[  477.315660][T16759] Bluetooth: hci0: command tx timeout
[  481.005065][    C0] ------------[ cut here ]------------
[  481.010797][    C0] ODEBUG: free active (active state 0) object: ffff8880329f8890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560
[  481.023944][    C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: swapper/0/0
[  481.034404][    C0] Modules linked in:
[  481.038721][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  481.047779][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  481.057915][    C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550
[  481.064407][    C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc
[  481.084078][    C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246
[  481.090290][    C0] RAX: ffffffff8a964e00 RBX: ffffffff9a4741f0 RCX: 0000000000000000
[  481.098363][    C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bea60
[  481.106397][    C0] RBP: ffffffff8bcf3ce0 R08: ffff8880329f8890 R09: ffffffff8bcf5000
[  481.114406][    C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff8880329f8a00
[  481.122451][    C0] R13: ffffffff901bea60 R14: ffff8880329f8000 R15: ffff8880329f8890
[  481.130577][    C0] FS:  0000000000000000(0000) GS:ffff888125467000(0000) knlGS:0000000000000000
[  481.139572][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  481.146214][    C0] CR2: 00007f5313e349a2 CR3: 000000000e54c000 CR4: 00000000003526f0
[  481.154227][    C0] Call Trace:
[  481.157647][    C0]  <IRQ>
[  481.160575][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  481.166354][    C0]  kfree+0x13a/0x630
[  481.170335][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  481.175567][    C0]  rose_timer_expiry+0x4cb/0x600
[  481.180556][    C0]  call_timer_fn+0x192/0x640
[  481.185305][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  481.190818][    C0]  ? call_timer_fn+0xd4/0x640
[  481.195553][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  481.200717][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  481.206099][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  481.211619][    C0]  __run_timer_base+0x652/0x8b0
[  481.216544][    C0]  ? ktime_get+0x45/0x200
[  481.220932][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  481.226384][    C0]  ? sched_clock_cpu+0x74/0x440
[  481.231338][    C0]  run_timer_softirq+0xb7/0x170
[  481.236266][    C0]  handle_softirqs+0x22a/0x870
[  481.241104][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  481.245954][    C0]  __irq_exit_rcu+0x5f/0x150
[  481.250589][    C0]  irq_exit_rcu+0x9/0x30
[  481.254892][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  481.260649][    C0]  </IRQ>
[  481.263621][    C0]  <TASK>
[  481.266611][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  481.272673][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  481.278381][    C0] Code: 7e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 c2 1a 00 fb f4 <e9> fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  481.298143][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242
[  481.304265][    C0] RAX: 00000000001721ef RBX: ffffffff819a8c8d RCX: 0000000080000001
[  481.312306][    C0] RDX: 0000000000000001 RSI: ffffffff8def7d76 RDI: ffffffff8c27b500
[  481.320349][    C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b
[  481.328386][    C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901128b0
[  481.336431][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000
[  481.344452][    C0]  ? do_idle+0x1bd/0x500
[  481.348782][    C0]  default_idle+0x9/0x20
[  481.353071][    C0]  default_idle_call+0x72/0xb0
[  481.357901][    C0]  do_idle+0x1bd/0x500
[  481.362029][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  481.368259][    C0]  ? __pfx_do_idle+0x10/0x10
[  481.372920][    C0]  cpu_startup_entry+0x43/0x60
[  481.377755][    C0]  rest_init+0x2de/0x300
[  481.382029][    C0]  start_kernel+0x385/0x3d0
[  481.386736][    C0]  x86_64_start_reservations+0x24/0x30
[  481.392291][    C0]  x86_64_start_kernel+0x143/0x1c0
[  481.397473][    C0]  common_startup_64+0x13e/0x147
[  481.402543][    C0]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  481.405626][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  481.412952][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  481.421922][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  481.432028][    C0] Call Trace:
[  481.435348][    C0]  <IRQ>
[  481.438232][    C0]  vpanic+0x56c/0xa60
[  481.442304][    C0]  ? __pfx__printk+0x10/0x10
[  481.446939][    C0]  ? __pfx_vpanic+0x10/0x10
[  481.451452][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  481.456813][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  481.462065][    C0]  panic+0xc5/0xd0
[  481.465817][    C0]  ? __pfx_panic+0x10/0x10
[  481.470272][    C0]  ? common_startup_64+0x13e/0x147
[  481.475408][    C0]  __warn+0x315/0x4f0
[  481.479426][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  481.485176][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  481.490925][    C0]  __report_bug+0x29a/0x540
[  481.495557][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  481.501392][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  481.507133][    C0]  ? __pfx___report_bug+0x10/0x10
[  481.512186][    C0]  ? run_timer_softirq+0xb7/0x170
[  481.517228][    C0]  ? handle_softirqs+0x22a/0x870
[  481.522190][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  481.526972][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  481.532802][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  481.538971][    C0]  ? pv_native_safe_halt+0xf/0x20
[  481.544015][    C0]  ? default_idle+0x9/0x20
[  481.548443][    C0]  ? default_idle_call+0x72/0xb0
[  481.553402][    C0]  report_bug_entry+0x19a/0x290
[  481.558291][    C0]  ? debug_check_no_obj_freed+0x44a/0x550
[  481.564037][    C0]  ? debug_check_no_obj_freed+0x44f/0x550
[  481.569776][    C0]  handle_bug+0xce/0x200
[  481.574034][    C0]  exc_invalid_op+0x1a/0x50
[  481.578557][    C0]  asm_exc_invalid_op+0x1a/0x20
[  481.583424][    C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550
[  481.589779][    C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc
[  481.609410][    C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246
[  481.615508][    C0] RAX: ffffffff8a964e00 RBX: ffffffff9a4741f0 RCX: 0000000000000000
[  481.623500][    C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bea60
[  481.631496][    C0] RBP: ffffffff8bcf3ce0 R08: ffff8880329f8890 R09: ffffffff8bcf5000
[  481.639577][    C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff8880329f8a00
[  481.647571][    C0] R13: ffffffff901bea60 R14: ffff8880329f8000 R15: ffff8880329f8890
[  481.655575][    C0]  ? __pfx_timer_debug_hint+0x10/0x10
[  481.661010][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  481.666676][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  481.672343][    C0]  kfree+0x13a/0x630
[  481.676253][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  481.681400][    C0]  rose_timer_expiry+0x4cb/0x600
[  481.686372][    C0]  call_timer_fn+0x192/0x640
[  481.690988][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  481.696477][    C0]  ? call_timer_fn+0xd4/0x640
[  481.701189][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  481.706332][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  481.711555][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  481.717044][    C0]  __run_timer_base+0x652/0x8b0
[  481.721923][    C0]  ? ktime_get+0x45/0x200
[  481.726286][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  481.731693][    C0]  ? sched_clock_cpu+0x74/0x440
[  481.736585][    C0]  run_timer_softirq+0xb7/0x170
[  481.741467][    C0]  handle_softirqs+0x22a/0x870
[  481.746263][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  481.751060][    C0]  __irq_exit_rcu+0x5f/0x150
[  481.755677][    C0]  irq_exit_rcu+0x9/0x30
[  481.759947][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  481.765607][    C0]  </IRQ>
[  481.768580][    C0]  <TASK>
[  481.771531][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  481.777618][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  481.783289][    C0] Code: 7e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 c2 1a 00 fb f4 <e9> fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  481.802926][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242
[  481.809032][    C0] RAX: 00000000001721ef RBX: ffffffff819a8c8d RCX: 0000000080000001
[  481.817026][    C0] RDX: 0000000000000001 RSI: ffffffff8def7d76 RDI: ffffffff8c27b500
[  481.825019][    C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b
[  481.833023][    C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901128b0
[  481.841018][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000
[  481.849018][    C0]  ? do_idle+0x1bd/0x500
[  481.853330][    C0]  default_idle+0x9/0x20
[  481.857591][    C0]  default_idle_call+0x72/0xb0
[  481.862380][    C0]  do_idle+0x1bd/0x500
[  481.866504][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  481.872691][    C0]  ? __pfx_do_idle+0x10/0x10
[  481.877325][    C0]  cpu_startup_entry+0x43/0x60
[  481.882122][    C0]  rest_init+0x2de/0x300
[  481.886389][    C0]  start_kernel+0x385/0x3d0
[  481.891015][    C0]  x86_64_start_reservations+0x24/0x30
[  481.896493][    C0]  x86_64_start_kernel+0x143/0x1c0
[  481.901628][    C0]  common_startup_64+0x13e/0x147
[  481.906600][    C0]  </TASK>
[  481.910254][    C0] Kernel Offset: disabled
[  481.914582][    C0] Rebooting in 86400 seconds..