last executing test programs:

41.775552975s ago: executing program 1 (id=1421):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$bt_hci(0xffffffffffffffff, 0x0, 0x5)
write$tun(0xffffffffffffffff, &(0x7f0000000600)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@ipv4={0x8906, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x4500, 0x0, 0x8}}}}}}, 0x32)
write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x26e, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0x27c)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x9d741df904aad753, 0x0, 0x0, {{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0x3, 0x2) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$bt_hci(0xffffffffffffffff, 0x0, 0x5) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000600)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@ipv4={0x8906, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x4500, 0x0, 0x8}}}}}}, 0x32) (async)
write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x26e, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0x27c) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x9d741df904aad753, 0x0, 0x0, {{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) (async)

41.693137893s ago: executing program 1 (id=1424):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdfff}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8001, @rand_addr=' \x01\x00', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dstopts={{0x18, 0x29, 0x37, {0x8}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1c00}}], 0x30}}], 0x1, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x83}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x5, 0x6, 0x8, 0x0, 0x1}, 0x50)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$sock_int(r4, 0x1, 0x26, 0x0, &(0x7f0000000000))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x6430a4e8, 0x4, 0x9, 0x0, r3, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0)

41.626048704s ago: executing program 1 (id=1425):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x3, 0x7)
socket$netlink(0x10, 0x3, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}, 0x1, 0x0, 0x0, 0x24}, 0x0)

41.625072711s ago: executing program 1 (id=1426):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) (rerun: 32)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x9, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_LABEL={0x8, 0x2, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x24050081}, 0x0)
r5 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null}, [@remote, @default, @netrom, @remote, @netrom, @rose, @bcast, @netrom]}, &(0x7f00000001c0)=0x48, 0x80000) (async)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000000)=0x59, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r7 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={<r8=>r7}) (async)
setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000200)=@bpq0, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet6_int(r8, 0x29, 0x13, &(0x7f0000000080)=0x401, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100ffffffff00000000010000000c00050055193c99a8772efb100007800c00018008000100", @ANYRES32=r11, @ANYBLOB="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"], 0x3c}}, 0x20000000)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9) (async, rerun: 64)
ioctl$sock_rose_SIOCDELRT(r8, 0x890c, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async, rerun: 64)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtaction={0x84, 0x30, 0x10b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_mpls={0x6c, 0x1c, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x1b}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe, 0x5, 0x2, 0x5, 0x3ff}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6001}]}, {0x9, 0x6, "e59b7e89be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x84}}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r2, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

41.506827918s ago: executing program 1 (id=1429):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fcffffff000000000000000000000000000076a56ab8754eee1b200f7e9cde5b446b165acb5458aa2c1a905cfcfc6efb2fd01a477abdcf56f58e7a71654c162912"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10) (async)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_buf(r2, 0x0, 0x23, &(0x7f0000000340), 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000340), 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x80, 0x0, {0x81, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c044}, 0x848)
close(0x4) (async)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000100)=""/136, &(0x7f00000001c0)=0x88) (async)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0)

41.433798593s ago: executing program 1 (id=1431):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0000000108653904030405ffffff09c56a3000", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_delneigh={0x2c, 0x1e, 0x1, 0x0, 0x4, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NDA_PROBES={0x8, 0x4, 0x2}]}, 0x2c}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33)
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r6, 0x0, 0x0, 0x80000) (async)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
sendmmsg$alg(r7, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)="b8dc", 0x2}, {&(0x7f0000000500)="82c3", 0x2}], 0x2, &(0x7f0000003440)=ANY=[], 0x118, 0x20000004}], 0x1, 0x20004000)
ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xc)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61129000000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000003d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff2d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c45402000000a2d23da04d1ffc187fa1a2ba7ba0e2d507b92de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d72e690098804de235cf020e35245c9f5526d35df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xe0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0xff000000, 'wg1\x00', 'lo\x00', {}, {0xff}, 0x2f, 0x1, 0x1}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@rand_addr=0x64010102, [0xff, 0xffffff00, 0xffffffff, 0xff], 0x4e22, 0x3c, 0x2, 0x4e22, 0x1, 0x20}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@private=0xa010100, @rand_addr=0x64010100, 0xff, 0xffffffff, 'veth1_to_bridge\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x88, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3}, {0x4, 0x6, 0x9}, 0x7, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2})

26.468377758s ago: executing program 32 (id=1431):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0000000108653904030405ffffff09c56a3000", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_delneigh={0x2c, 0x1e, 0x1, 0x0, 0x4, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NDA_PROBES={0x8, 0x4, 0x2}]}, 0x2c}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33)
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r6, 0x0, 0x0, 0x80000) (async)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
sendmmsg$alg(r7, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)="b8dc", 0x2}, {&(0x7f0000000500)="82c3", 0x2}], 0x2, &(0x7f0000003440)=ANY=[], 0x118, 0x20000004}], 0x1, 0x20004000)
ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xc)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xe0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0xff000000, 'wg1\x00', 'lo\x00', {}, {0xff}, 0x2f, 0x1, 0x1}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@rand_addr=0x64010102, [0xff, 0xffffff00, 0xffffffff, 0xff], 0x4e22, 0x3c, 0x2, 0x4e22, 0x1, 0x20}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@private=0xa010100, @rand_addr=0x64010100, 0xff, 0xffffffff, 'veth1_to_bridge\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x88, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3}, {0x4, 0x6, 0x9}, 0x7, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2})

1.498036802s ago: executing program 0 (id=2024):
socket$netlink(0x10, 0x3, 0x15)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket(0x2b, 0x80801, 0x1)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r2, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11e, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "8edfc10dcedbc710", "566c0b37f066cffc79e1862e9fa0f8ac", "bfb64c00", "4a0f995759a1daf9"}, 0x28)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000180)=0x1, 0x4)

1.392869859s ago: executing program 2 (id=2025):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x1, 0x1, 0x1})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x88c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_PROBE_RESP={0x826, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x3a, 0x7f, [@random={0x8, 0x11, "fb8e2fa0d7a6c9edd4375a45517139c11b"}, @mic={0x8c, 0x18, {0x7b, "b8fc1c9da798", @long="bd9fdd7771912d145bcf87d14f1260fb"}}, @supported_rates={0x1, 0x4, [{0x4}, {0x2, 0x1}, {0x5}, {0xc}]}, @challenge={0x10, 0x1, 0x9e}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40}, 0x24044084)

1.323190271s ago: executing program 2 (id=2026):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x28012, r0, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0xc9)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000800)=0x1, 0x4)

1.082044256s ago: executing program 2 (id=2027):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000053c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000055c0)=[{{&(0x7f0000000180)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000200)=""/194, 0xc2}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/91, 0x5b}, {&(0x7f00000023c0)=""/129, 0x81}, {&(0x7f0000002480)=""/173, 0xad}, {&(0x7f0000002540)=""/111, 0x6f}], 0x7}, 0x122}, {{&(0x7f0000002640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003900)=[{&(0x7f00000026c0)=""/192, 0xc0}, {&(0x7f0000002780)=""/180, 0xb4}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000003840)=""/137, 0x89}], 0x5}, 0x20000000}, {{&(0x7f0000003980)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003a00)=""/62, 0x3e}, {&(0x7f0000003a40)=""/133, 0x85}, {&(0x7f0000003b00)=""/239, 0xef}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/21, 0x15}, {&(0x7f0000004c40)=""/8, 0x8}], 0x6, &(0x7f0000004d00)=""/27, 0x1b}, 0x1b9}, {{&(0x7f0000004d40)=@nfc, 0x80, &(0x7f0000005000)=[{&(0x7f0000004dc0)=""/75, 0x4b}, {&(0x7f0000004e40)=""/203, 0xcb}, {&(0x7f0000004f40)=""/141, 0x8d}], 0x3, &(0x7f0000005040)=""/62, 0x3e}, 0x2}, {{&(0x7f0000005080)=@qipcrtr, 0x80, &(0x7f0000005440)=[{&(0x7f0000005100)=""/222, 0xde}, {&(0x7f0000005200)=""/155, 0x9b}, {&(0x7f00000052c0)=""/199, 0xc7}, {&(0x7f00000053c0)}, {&(0x7f0000005400)=""/34, 0x22}], 0x5, &(0x7f00000054c0)=""/214, 0xd6}, 0x3}], 0x5, 0x4000, &(0x7f0000005700)={0x77359400})
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1, 0x16bf5125}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x400, 0x0, @private2}, 0x1c)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000180)=0x8)
unshare(0x28000600)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x11, 0x4e, &(0x7f0000000080)=0xfffffff7, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r5=>0x0})
setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)={0x7, [0x80, 0xc, 0x6, 0xffff, 0xef, 0xe, 0x383]}, 0x12)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc}]}}}]}, 0x40}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'ip6erspan0\x00', 0x200})

571.465619ms ago: executing program 0 (id=2030):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

570.96151ms ago: executing program 3 (id=2031):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_delroute={0x44, 0x19, 0x1, 0x70bd28, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "468bd48ed14485a2"}}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "fc940df8ae754ae2"}, 0x7}}]}, 0x44}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x8000, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'tunl0\x00', <r5=>0x0, 0x7, 0x20, 0x9, 0x3, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x65, 0x0, 0x8, 0x4, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4}]}}}}})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delqdisc={0x4c, 0x25, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x5, 0xc}, {0x1, 0xe}, {0xffe0, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xa22}, @TCA_RATE={0x6, 0x5, {0xb, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44085}, 0x10)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r6, &(0x7f0000000240)={0xa, 0x82, 0x1000, @empty}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f0000000a80)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @val={@void, {0x8100, 0x4, 0x0, 0x9}}, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0xfffe}}}}}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f0000000a40)={&(0x7f0000000540)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000740)="36e33925560b9c004d3c2ca4e4a1ab05c06ee24948280ed643186c40e985eb12c3c68871af7760225f31da66ecaed451c625c3b179f221d5d3fa6c513884f150a33f197ea142d750267f84d302b81378b7419143978d7674423b", 0x5a}, {&(0x7f00000001c0)="bdf4115686470246819cb0eecef46b838652d3e2252184a0077229f036", 0x1d}, {&(0x7f00000007c0)="f1c959d4678187a5eb600e4f9f98901529ac92b4a450701ce69a1fa95f9f555bb5f88f507fe3e4d5299423684d7f6061c73511c7d1a1fc476a68520131b9d8432612b3655af761560efdf97d575bd67889486ffcefe3b00d89947097780532805ba5", 0x62}, {&(0x7f0000000840)="6be06b0b717ac0c69bbfe72fd8a77d5bd2aca4ed62c0d09cdaaade9fa32b40e5fc8694f7be703cfaf785a11ccebe7e2c62b78887b25585175353223709ccca5612f5883e4c666aea09934a3eb5869f33254b578bb8936b5e680f8ea29d213faf60e32dd29ab02790a9f431d1a4827f7d099921", 0x73}, {&(0x7f00000005c0)="bda6fc6c1bb6695aadb7bea56e2078287bb4fb15475ec5ca252f314d199b96a4becd03e5d338d5515dee4d66a13a9d7584cfdfe07a3a9da3a069", 0x3a}, {&(0x7f00000008c0)="8dc92a2e690f05948c340735dfa03ee8c2a8ddcaedb976b8a53e4aec89dced5ab007f611df9aed4746e4532c939980d603b28aad7971c68cd43cf915102883c52e37688ddde96ca7bcc7a35383532439abe420b3311b235c3c58f4dcafcc6c90055bc25b6de547ff420eb84eaed664104752b88c89f02ba44299cf150e28a644fb23370340e74d384ac64eff415f3afcb3339cc4213798075b033eb72c81251fe706de70a6277ec2263e02f577a5d80cfe7bb5c55ef2c134ed2342ff3bad", 0xbe}, {&(0x7f0000000980)="b001df9ad04d20952bda66b9a260a5be250876e9", 0x14}], 0x7}, 0x4008040)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="0e806005ffffffffffffaaaaaaaaaabb0800450000a1000000000004907865beadd90000000045000000008d9078021400010000000059cbddf893e29a38a7b656970e2ae4d9f9e30149a98f2ba538e814fbeb4c4c990f32359aebd7a38c950818f719a1ae7ab758c84f8c680686c953117a68c0232a15b4ac6ca8e44f1ca3583755924dca6621f119eaa1384223c7953937e3fac5c3d50d879830a38e39a57c23a6f4102000000000000000000000000000001eac3f5adee0a7317a9264a26456ccb85450fa63fa2ceace42aabe672c799204ec55b3a9aa8041c232d7442aacea6e9b2044b439cb35ea622a12295ec8910a3c3c742edcff4d6ed871"], 0xb3)
write$tun(r7, &(0x7f00000003c0)={@val={0x0, 0xc}, @void, @eth={@random="595609c4b5ea", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@mpls_uc={0x8847, {[{0x9}, {0x4, 0x0, 0x1}, {0x4}, {0xd673}, {0x8, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x6}, {0x7}, {0xb, 0x0, 0x1}, {0x8}], @ipv4=@tipc={{0x3e, 0x4, 0x3, 0x8, 0x126, 0x65, 0x0, 0x2, 0x6, 0x0, @multicast2, @rand_addr=0x64010100, {[@end, @timestamp={0x44, 0x18, 0x92, 0x0, 0x9, [0x101, 0x101, 0x0, 0x3, 0x10000]}, @lsrr={0x83, 0x27, 0x7c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @rand_addr=0x64010101, @local, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x1d}]}, @noop, @timestamp_addr={0x44, 0x14, 0xd0, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0x8}]}, @ssrr={0x89, 0x1f, 0x3e, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @remote, @remote]}, @end, @cipso={0x86, 0x41, 0x0, [{0x5, 0x10, "daed1feed5184f6b2d0d9313633e"}, {0x5, 0x9, "95c6526fa2eddb"}, {0x1, 0x9, "5f17f116ae3d80"}, {0x0, 0xc, "9183abbba9ca7d0e63d4"}, {0x0, 0xd, "b74a467eccbf401e8a9640"}]}, @timestamp={0x44, 0x10, 0x9e, 0x0, 0x7, [0x7, 0xffff, 0x8]}, @timestamp_prespec={0x44, 0x1c, 0x27, 0x3, 0x7, [{@private=0xa010100, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x1}, {@broadcast, 0x9}]}]}}, @payload_mcast={{{{{{0x2e, 0x0, 0x0, 0x0, 0x1, 0xb, 0x1, 0x2, 0xe258, 0x0, 0x0, 0x9, 0x6, 0x1, 0xe, 0x4, 0x3, 0x4e22, 0x4e23}, 0x2, 0x4}, 0x4, 0x3}}}, [0x0, 0x0]}}}}}}}, 0x160)

442.739237ms ago: executing program 3 (id=2032):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
close(0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14}}, 0xcc}}, 0x200000d4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2], 0x122}}, 0x20000054)

389.835383ms ago: executing program 3 (id=2033):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_opts(r1, 0x0, 0x6, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1086, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000611274000000000095"], &(0x7f0000000040)='GPL\x00', 0xc38d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r2 = socket(0xa, 0x3, 0x3)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0x8, 0x0, 0x1, 0x7}, 0x8)
mmap(&(0x7f0000703000/0x2000)=nil, 0x2000, 0x3, 0x8031, r2, 0x9b4ef000)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'vlan1\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000140)={'gre0\x00', r5, 0x10, 0x20, 0x3ee, 0xffffffff, {{0x31, 0x4, 0x3, 0x4, 0xc4, 0x67, 0x0, 0x1, 0x2b, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x4c, 0x5f, 0x1, 0x2, [{@remote, 0xa}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010102, 0x6}, {@loopback, 0x9}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x159}, {@multicast2, 0x7ac}, {@remote, 0x3}, {@rand_addr=0x64010100, 0xd}]}, @ssrr={0x89, 0xf, 0xd7, [@loopback, @rand_addr=0x64010102, @broadcast]}, @timestamp_addr={0x44, 0x3c, 0x1b, 0x1, 0x4, [{@loopback, 0xaf}, {@loopback, 0xe}, {@multicast1}, {@rand_addr=0x64010100, 0x1}, {@multicast1, 0xfffffffa}, {@rand_addr=0x64010102, 0x4}, {@multicast1, 0xa243}]}, @ssrr={0x89, 0x17, 0x3f, [@local, @empty, @multicast1, @private=0xa010102, @rand_addr=0x64010101]}]}}}}})

386.889497ms ago: executing program 3 (id=2034):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000400, 0x0, 0x3, 0x9}, 0x20) (async, rerun: 32)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41, 0x4)

313.331316ms ago: executing program 3 (id=2035):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000711212000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x1300, 0x0, 0x0, 0x67, '\x00', 0x0, 0x24}, 0x94)

311.809793ms ago: executing program 3 (id=2036):
socket$netlink(0x10, 0x3, 0x15)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
socket(0x2b, 0x80801, 0x1)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000180)=0x1, 0x4)

220.345066ms ago: executing program 2 (id=2037):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r4) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0500000000000000000000000000000902000000000000000000000d000000000000000000000002000000000000000000000061"], 0x0, 0x61}, 0x28)

155.694257ms ago: executing program 0 (id=2038):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffe}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x100b}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}]}}]}, 0x3c}}, 0x2000c800)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

71.974655ms ago: executing program 2 (id=2039):
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711232000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568}, 0x94)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@dev, @in=@local}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xffffffffffffff55)
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
socket$tipc(0x1e, 0x5, 0x0) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async)
bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002a259100000008f30300010400000000", @ANYRES32=r3, @ANYBLOB="10002d800a0000000101010101010000"], 0x2c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_NAN(r8, 0x0, 0x1) (async)
sendmsg$NL80211_CMD_START_NAN(r8, 0x0, 0x1)
bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="8f51d2b28dec0a94556029c8b55572435036058b00b7a0dc317271aeeb5910ed3a4f404ae82227df139bb5b8727ca41898e2c420e510cbf94c54c3aba19577e854fd268e283eae9fda47b5c0bf6187b8f4c67a1fda8ff934197e478ef7c5ac3a77131d278af5c581b05b97cdbf9c8038df9c62eceae7d076aad834bdb0f2c570dd2bd28b459b9ccde2870dfd46a64b4fe2d2d044a8b10eea0d848653a222bb34a98d6af39b52c01a34a97de0fc08ebfe6b0e6cb5ed046da76d5c9469d178971343ba589a99329c14a07032696f0dddc2cade756c28baea99339275ab9068e8b52229a9e4e956155833a587f149fbddc68827"], 0x118}}, 0x8041)
bind$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x800000}}, 0x10)
socket$tipc(0x1e, 0x2, 0x0) (async)
r9 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async)
sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
socket(0x10, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0)

71.408646ms ago: executing program 0 (id=2040):
r0 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
shutdown(r0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xfffffffd}, 0x8)
sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c)
close(r0)

70.354175ms ago: executing program 0 (id=2041):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe0f4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', <r2=>0x0, 0x2b, 0xb2, 0xca, 0xe, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8, 0x0, 0x3c}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='\x00', 0x0, 0x8}, 0x18)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x200, 0x10}, 0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7de, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, <r6=>0xffffffffffffffff}, 0x4)
pipe(&(0x7f0000001180)={<r7=>0xffffffffffffffff})
bind$alg(r7, &(0x7f0000001380)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-arm\x00'}, 0x58)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1d, 0x2, 0x7, 0x6, 0x2a12, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x100, 0x10}, 0xc)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x3ff, 0xfffffffe, 0x4018, r1, 0x81, '\x00', r2, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0xe}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000200)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000280)='syzkaller\x00', 0xaa, 0x36, &(0x7f00000002c0)=""/54, 0x41000, 0x13, '\x00', r2, 0x18, r3, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x7, 0x4, 0x2}, 0x10, 0x2845f, r4, 0x0, &(0x7f0000000700)=[r5, r9, r7, 0xffffffffffffffff, r8, r6, r9], 0x0, 0x10, 0x3ff}, 0x94)

285.672µs ago: executing program 0 (id=2042):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000010900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xdc}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000010900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xdc}}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) (async)

0s ago: executing program 2 (id=2043):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x59, 0xff, 0x4, 0x7, 0x0, 0x8d7651735d51b07})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800124000001800050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x5, 0x7, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x0, 0xa0, 0x0, @in6={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1000}}]}, 0x38}, 0x1, 0x7}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xffff, 0x4}}}]}, 0x38}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000007000000040000f75383e059daf838e40e7790b5da3576deeb819f601bbadb861f80479c62e2a8d5bedd3b9b7c7f"], 0x0, 0x26}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004"], 0x50)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r9, 0x2, {0x1}}, 0x18)
sendmsg$inet(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000780)="8af83b42e304bd", 0x7}], 0x2}, 0x4000)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c00088008000100506f19360900010073797a30"], 0x110}}, 0x0)
r10 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f0000000000)=0xfffffff6, 0x4)
sendto$inet6(r10, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
shutdown(r10, 0x0)
recvmmsg$unix(r10, &(0x7f00000092c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x161, 0x0)

kernel console output (not intermixed with test programs):

syzkaller login: [   45.062712][ T5811] sshd (5811) used greatest stack depth: 20808 bytes left
Warning: Permanently added '[localhost]:63463' (ED25519) to the list of known hosts.
[   47.855815][ T5822] cgroup: Unknown subsys name 'net'
[   47.962874][ T5822] cgroup: Unknown subsys name 'cpuset'
[   47.966950][ T5822] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.614558][ T5822] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.993880][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.996824][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.999309][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.002786][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.005247][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.031571][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.035077][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.040018][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.043441][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.045979][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.073431][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.076297][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.078910][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.082071][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.086823][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.269872][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   54.335985][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   54.424710][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.427090][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.431102][ T5830] bridge_slave_0: entered allmulticast mode
[   54.433904][ T5830] bridge_slave_0: entered promiscuous mode
[   54.437555][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   54.450042][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.452293][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.454454][ T5830] bridge_slave_1: entered allmulticast mode
[   54.457148][ T5830] bridge_slave_1: entered promiscuous mode
[   54.516481][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.519445][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.522351][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.524687][ T5835] bridge_slave_0: entered allmulticast mode
[   54.527427][ T5835] bridge_slave_0: entered promiscuous mode
[   54.536176][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.539173][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.542474][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.544825][ T5835] bridge_slave_1: entered allmulticast mode
[   54.547616][ T5835] bridge_slave_1: entered promiscuous mode
[   54.616331][ T5830] team0: Port device team_slave_0 added
[   54.621034][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.623946][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.626318][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.628575][ T5838] bridge_slave_0: entered allmulticast mode
[   54.632033][ T5838] bridge_slave_0: entered promiscuous mode
[   54.636243][ T5830] team0: Port device team_slave_1 added
[   54.640084][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.650804][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.652982][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.655203][ T5838] bridge_slave_1: entered allmulticast mode
[   54.657954][ T5838] bridge_slave_1: entered promiscuous mode
[   54.694244][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.696441][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.705025][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.710881][ T5835] team0: Port device team_slave_0 added
[   54.713294][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.715540][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.724567][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.737290][ T5835] team0: Port device team_slave_1 added
[   54.746872][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.771267][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.818283][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.821636][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.832058][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.840890][ T5830] hsr_slave_0: entered promiscuous mode
[   54.843696][ T5830] hsr_slave_1: entered promiscuous mode
[   54.848561][ T5838] team0: Port device team_slave_0 added
[   54.851943][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.854709][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.866024][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.880643][ T5838] team0: Port device team_slave_1 added
[   54.944345][ T5835] hsr_slave_0: entered promiscuous mode
[   54.946693][ T5835] hsr_slave_1: entered promiscuous mode
[   54.948741][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.951926][ T5835] Cannot create hsr debugfs directory
[   54.954104][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.956200][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.964020][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.972132][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.974244][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.982992][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.085172][ T5838] hsr_slave_0: entered promiscuous mode
[   55.087395][ T5838] hsr_slave_1: entered promiscuous mode
[   55.089631][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.091981][ T5838] Cannot create hsr debugfs directory
[   55.174664][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.184560][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.193814][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.212921][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.281980][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.295085][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.305038][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.316923][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.351110][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.356140][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.362537][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.367563][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.446880][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.484618][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   55.493116][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.498836][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.518946][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.521604][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.526253][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.528483][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.546255][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   55.550269][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   55.557781][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.560169][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.577179][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.579577][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.596532][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.598728][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.611275][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.613525][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.775071][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.804320][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.835039][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.838729][ T5835] veth0_vlan: entered promiscuous mode
[   55.853148][ T5835] veth1_vlan: entered promiscuous mode
[   55.885156][ T5830] veth0_vlan: entered promiscuous mode
[   55.893490][ T5838] veth0_vlan: entered promiscuous mode
[   55.900903][ T5830] veth1_vlan: entered promiscuous mode
[   55.905380][ T5835] veth0_macvtap: entered promiscuous mode
[   55.911672][ T5835] veth1_macvtap: entered promiscuous mode
[   55.914796][ T5838] veth1_vlan: entered promiscuous mode
[   55.931926][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.946138][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.957399][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.961743][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.964400][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.966979][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.973573][ T5838] veth0_macvtap: entered promiscuous mode
[   55.976319][ T5830] veth0_macvtap: entered promiscuous mode
[   55.980784][ T5838] veth1_macvtap: entered promiscuous mode
[   55.990332][ T5830] veth1_macvtap: entered promiscuous mode
[   56.029235][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.033499][ T5833] Bluetooth: hci0: command tx timeout
[   56.052777][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.052999][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.055201][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.059241][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.066389][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.069102][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.072927][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.075654][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.083756][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.092507][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.095241][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.097909][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.102132][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.110318][ T5833] Bluetooth: hci2: command tx timeout
[   56.115708][ T5218] Bluetooth: hci1: command tx timeout
[   56.116279][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.124157][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.209167][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.220427][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.226570][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.275003][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.283425][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.285776][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.288167][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.312932][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.315431][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.385624][ T5898] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.391733][ T5900] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.405188][ T5900] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.424988][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   56.444408][ T5898] netlink: 'syz.0.1': attribute type 8 has an invalid length.
[   56.493602][ T5907] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6'.
[   56.510265][ T5907] Zero length message leads to an empty skb
[   56.593998][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'.
[   56.595394][ T5915] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   56.602847][ T5915] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   56.690347][ T5923] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11'.
[   56.741580][ T5930] netlink: 244 bytes leftover after parsing attributes in process `syz.1.15'.
[   56.753403][ T5931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'.
[   56.756594][ T5931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'.
[   56.856705][ T5941] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.857874][ T5939] netlink: 'syz.2.19': attribute type 13 has an invalid length.
[   56.862991][ T5939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19'.
[   56.867685][ T5939] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[   56.978887][ T5950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22'.
[   56.986516][ T5950] tipc: Started in network mode
[   56.988522][ T5950] tipc: Node identity 0e0a70707b4c, cluster identity 4711
[   56.992593][ T5950] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.995178][ T5950] syzkaller0: entered promiscuous mode
[   56.997094][ T5950] syzkaller0: entered allmulticast mode
[   57.033849][ T5950] tipc: Resetting bearer <eth:syzkaller0>
[   57.045079][ T5949] tipc: Resetting bearer <eth:syzkaller0>
[   57.062895][ T5949] tipc: Disabling bearer <eth:syzkaller0>
[   57.416790][ T5989] syz.1.36 (5989) used greatest stack depth: 18904 bytes left
[   57.426835][ T5987] syzkaller0: entered promiscuous mode
[   57.428583][ T5987] syzkaller0: entered allmulticast mode
[   58.109871][ T5833] Bluetooth: hci0: command tx timeout
[   58.199774][ T5833] Bluetooth: hci2: command tx timeout
[   58.201521][ T5833] Bluetooth: hci1: command tx timeout
[   58.983851][ T6013] geneve1: mtu less than device minimum
[   59.049150][ T6025] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   59.055804][ T6025] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   59.408306][ T6040] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   59.413594][ T6040] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   59.468352][ T6044] syz_tun: entered allmulticast mode
[   59.483307][ T6043] syz_tun: left allmulticast mode
[   59.529084][ T6050] warning: `syz.1.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.552621][ T6053] tipc: Trying to set illegal importance in message
[   59.691381][ T6069] netlink: 'syz.0.64': attribute type 4 has an invalid length.
[   59.936368][ T6092] geneve2: entered promiscuous mode
[   60.183034][ T6110] nbd: must specify at least one socket
[   60.199911][ T5833] Bluetooth: hci0: command tx timeout
[   60.229289][ T6116] netlink: 'syz.0.82': attribute type 1 has an invalid length.
[   60.269771][ T5833] Bluetooth: hci1: command tx timeout
[   60.272117][ T5833] Bluetooth: hci2: command tx timeout
[   60.358342][ T6130] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan0, syncid = 0, id = 0
[   60.514050][ T6149] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   61.468314][ T6207] __nla_validate_parse: 80 callbacks suppressed
[   61.468327][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.109'.
[   61.527707][ T6212] ieee802154 phy0 wpan0: encryption failed: -22
[   61.534903][ T6212] netlink: 'syz.1.110': attribute type 1 has an invalid length.
[   61.537389][ T6212] netlink: 224 bytes leftover after parsing attributes in process `syz.1.110'.
[   61.685529][ T5832] IPVS: starting estimator thread 0...
[   61.688232][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.114'.
[   61.770623][ T6225] IPVS: using max 61 ests per chain, 146400 per kthread
[   61.823190][ T6234] netlink: 'syz.0.118': attribute type 11 has an invalid length.
[   61.840809][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.119'.
[   62.150907][ T6262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.127'.
[   62.199228][ T6241] netlink: 64 bytes leftover after parsing attributes in process `syz.2.121'.
[   62.269834][ T6122] Bluetooth: hci0: command tx timeout
[   62.313210][ T6270] netlink: 'syz.0.131': attribute type 21 has an invalid length.
[   62.315629][ T6270] netlink: 128 bytes leftover after parsing attributes in process `syz.0.131'.
[   62.318464][ T6270] netlink: 'syz.0.131': attribute type 4 has an invalid length.
[   62.321283][ T6270] netlink: 'syz.0.131': attribute type 5 has an invalid length.
[   62.323624][ T6270] netlink: 3 bytes leftover after parsing attributes in process `syz.0.131'.
[   62.359629][ T6122] Bluetooth: hci2: command 0x0419 tx timeout
[   62.362230][   T53] Bluetooth: hci1: command tx timeout
[   62.367664][ T6272] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[   62.372302][ T6272] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[   62.919028][ T6291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.137'.
[   62.956320][ T6293] syz.2.138 uses obsolete (PF_INET,SOCK_PACKET)
[   62.962379][ T6293] netlink: 'syz.2.138': attribute type 1 has an invalid length.
[   62.964771][ T6293] netlink: 'syz.2.138': attribute type 11 has an invalid length.
[   62.967207][ T6293] netlink: 220 bytes leftover after parsing attributes in process `syz.2.138'.
[   63.088170][ T6297] netlink: 'syz.2.140': attribute type 10 has an invalid length.
[   63.102352][ T6297] 8021q: adding VLAN 0 to HW filter on device team0
[   63.106785][ T6297] bond0: (slave team0): Enslaving as an active interface with an up link
[   63.214507][ T6307] 8021q: VLANs not supported on ip6tnl0
[   63.352514][ T6318] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   63.361984][ T6318] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   63.364041][ T6318] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   63.366058][ T6318] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   63.368296][ T6318] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   63.370448][ T6318] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   63.373039][ T6318] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   63.375105][ T6318] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   63.377152][ T6318] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   63.379209][ T6318] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   63.471951][ T6330] netlink: 'syz.2.148': attribute type 1 has an invalid length.
[   63.526185][ T6331] netlink: 'syz.1.152': attribute type 1 has an invalid length.
[   63.531570][ T6331] netlink: 'syz.1.152': attribute type 3 has an invalid length.
[   63.535795][ T6331] NCSI netlink: No device for ifindex 0
[   64.024617][ T6374] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[   64.430895][ T5218] Bluetooth: hci2: command 0x0419 tx timeout
[   65.137667][ T6465] veth3: entered promiscuous mode
[   65.225484][ T6470] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.228341][ T6470] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.231185][ T6470] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.234108][ T6470] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.502695][ T6575] __nla_validate_parse: 68 callbacks suppressed
[   66.502706][ T6575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.240'.
[   66.507401][ T6575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.240'.
[   66.517404][ T6576] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.241'.
[   66.521841][ T6574] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.241'.
[   66.526732][ T6576] IPVS: set_ctl: invalid protocol: 8345 172.30.1.2:20003
[   66.530658][ T6574] Cannot find add_set index 3 as target
[   66.588343][ T6576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.208951][ T6603] Bluetooth: MGMT ver 1.23
[   67.428030][ T6624] validate_nla: 9 callbacks suppressed
[   67.428056][ T6624] netlink: 'syz.1.256': attribute type 1 has an invalid length.
[   67.451132][ T6624] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.465767][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'.
[   67.468586][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'.
[   67.474369][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'.
[   67.477523][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'.
[   67.487197][ T6624] vlan2: entered allmulticast mode
[   67.488962][ T6624] geneve1: entered allmulticast mode
[   67.494375][ T6624] bond1: (slave vlan2): making interface the new active one
[   67.498839][ T6624] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   67.507841][ T6624] xt_cgroup: xt_cgroup: no path or classid specified
[   67.699192][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'.
[   67.704405][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'.
[   67.793221][ T6650] netlink: 'syz.1.265': attribute type 303 has an invalid length.
[   67.798474][ T6650] ieee802154 phy0 wpan0: encryption failed: -22
[   68.085945][ T6657] bond0: option lp_interval: invalid value (18446744073709551604)
[   68.088532][ T6657] bond0: option lp_interval: allowed values 1 - 2147483647
[   68.091156][ T6658] bond0: option lp_interval: invalid value (18446744073709551604)
[   68.093462][ T6658] bond0: option lp_interval: allowed values 1 - 2147483647
[   68.404536][ T6685] net_ratelimit: 3323 callbacks suppressed
[   68.404546][ T6685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.415251][ T6687] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.676818][ T6705] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   69.309076][ T6777] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.312361][ T6777] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.314974][ T6777] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.317566][ T6777] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.328028][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.339417][ T6777] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   69.349446][ T6777] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   69.569593][ T6802] trusted_key: syz.0.318 sent an empty control message without MSG_MORE.
[   70.573879][ T6851] batman_adv: batadv0: Adding interface: ip6gretap1
[   70.577068][ T6851] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.585252][ T6851] batman_adv: batadv0: Interface activated: ip6gretap1
[   70.833973][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.837465][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.857164][ T6870] syz_tun: entered allmulticast mode
[   70.874791][ T6869] syz_tun: left allmulticast mode
[   70.905569][ T6876] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   70.909104][ T6876] gretap1: entered promiscuous mode
[   70.915048][ T6876] gretap1: entered allmulticast mode
[   71.746329][ T6903] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   71.750633][ T6903] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   71.803753][ T6909] x_tables: duplicate underflow at hook 1
[   71.892647][ T6929] __nla_validate_parse: 24 callbacks suppressed
[   71.892657][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.367'.
[   71.901295][ T6929] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[   71.990304][ T6941] geneve2: entered promiscuous mode
[   72.035311][ T6947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.375'.
[   72.068956][ T6951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.376'.
[   72.100495][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'.
[   72.105573][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'.
[   72.108798][ T6955] netlink: 'syz.2.378': attribute type 15 has an invalid length.
[   72.111546][ T6955] netlink: 'syz.2.378': attribute type 18 has an invalid length.
[   72.116601][ T6958] netlink: 'syz.1.379': attribute type 15 has an invalid length.
[   72.119414][ T6958] netlink: 92 bytes leftover after parsing attributes in process `syz.1.379'.
[   72.235302][ T6967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.382'.
[   72.252790][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'.
[   72.319124][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'.
[   72.329525][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'.
[   72.387019][ T6983] syzkaller1: entered promiscuous mode
[   72.388784][ T6983] syzkaller1: entered allmulticast mode
[   72.421893][ T6986] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[   72.627425][ T7011] IPVS: stopping backup sync thread 7012 ...
[   72.629829][ T7012] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[   72.781204][ T7033] netlink: 'syz.0.406': attribute type 1 has an invalid length.
[   72.854566][ T7045] syzkaller0: refused to change device tx_queue_len
[   72.913588][ T7049] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   73.295699][ T7077] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[   73.355871][ T7085] netlink: 'syz.2.425': attribute type 25 has an invalid length.
[   73.358300][ T7085] netlink: 'syz.2.425': attribute type 7 has an invalid length.
[   73.463201][ T7097] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   73.504337][ T7101] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   73.517725][ T7101] bridge_slave_0: left allmulticast mode
[   73.520320][ T7101] bridge_slave_0: left promiscuous mode
[   73.522759][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.540544][ T7101] bridge_slave_1: left allmulticast mode
[   73.542315][ T7101] bridge_slave_1: left promiscuous mode
[   73.544151][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.565722][ T7110] netlink: 'syz.0.431': attribute type 10 has an invalid length.
[   73.569037][ T7101] bond0: (slave bond_slave_0): Releasing backup interface
[   73.582712][ T7101] bond0: (slave bond_slave_1): Releasing backup interface
[   73.603763][ T7101] team0: Port device team_slave_0 removed
[   73.609362][ T7101] team0: Port device team_slave_1 removed
[   73.612295][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.614588][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.618159][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.622940][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.624022][ T7121] netlink: 'syz.1.437': attribute type 3 has an invalid length.
[   73.633103][ T7101] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   73.635266][ T7101] batman_adv: batadv0: Removing interface: ip6gretap1
[   73.638146][ T7110] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   73.645467][ T7110] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.651864][ T7110] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   73.703907][ T7125] netlink: 'syz.1.438': attribute type 10 has an invalid length.
[   73.706528][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.709424][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.745773][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.748088][ T7125] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.750646][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.752832][ T7125] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.758084][ T7125] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   73.872380][ T7144] netlink: 'syz.0.444': attribute type 4 has an invalid length.
[   74.693803][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.696047][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.751788][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.759369][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.807083][ T7206] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   74.828407][ T7206] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.831802][ T7206] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.834501][ T7206] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.837276][ T7206] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.840537][ T7206] geneve2: left promiscuous mode
[   74.845040][ T7206] veth3: left promiscuous mode
[   74.849176][ T7206] vlan2: left allmulticast mode
[   74.852400][ T7206] geneve1: left allmulticast mode
[   74.854418][ T7206] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.857200][ T7206] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.860251][ T7206] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.863030][ T7206] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.879288][ T7210] vlan2: entered promiscuous mode
[   74.881100][ T7210] bond0: entered promiscuous mode
[   74.882942][ T7210] bond_slave_0: entered promiscuous mode
[   74.886157][ T7210] bond_slave_1: entered promiscuous mode
[   74.890839][ T7210] team0: entered promiscuous mode
[   74.893101][ T7210] team_slave_0: entered promiscuous mode
[   74.895470][ T7210] team_slave_1: entered promiscuous mode
[   74.897687][ T7210] vlan2: entered allmulticast mode
[   74.899445][ T7210] bond0: entered allmulticast mode
[   74.901411][ T7210] bond_slave_0: entered allmulticast mode
[   74.903346][ T7210] bond_slave_1: entered allmulticast mode
[   74.905861][ T7210] team0: entered allmulticast mode
[   74.907907][ T7210] team_slave_0: entered allmulticast mode
[   74.911148][ T7210] team_slave_1: entered allmulticast mode
[   74.923056][ T7218] netlink: 'syz.1.469': attribute type 11 has an invalid length.
[   74.994283][ T7222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.059272][ T7224] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   75.061849][ T7224] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   75.088598][ T7222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.155588][ T7222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.231606][ T7222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.281100][ T7222] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.288686][ T7222] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.298439][ T7222] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.299791][ T7247] netlink: 'syz.0.479': attribute type 3 has an invalid length.
[   75.305507][ T7248] netlink: 'syz.1.478': attribute type 10 has an invalid length.
[   75.308360][ T7222] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.344236][ T7251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.456343][ T7273] netlink: 'syz.2.487': attribute type 13 has an invalid length.
[   75.593607][ T7282] hsr0: entered promiscuous mode
[   75.595344][ T7282] macvlan0: entered promiscuous mode
[   75.597073][ T7282] macvlan0: entered allmulticast mode
[   75.602627][ T7282] hsr0: entered allmulticast mode
[   75.604214][ T7282] hsr_slave_0: entered allmulticast mode
[   75.605931][ T7282] hsr_slave_1: entered allmulticast mode
[   75.800388][ T7291] hsr0 (unregistering): left allmulticast mode
[   76.117309][ T7314] SET target dimension over the limit!
[   77.323170][ T7426] __nla_validate_parse: 65 callbacks suppressed
[   77.323180][ T7426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.542'.
[   77.609695][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'.
[   77.735309][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'.
[   77.737996][ T7460] openvswitch: netlink: Message has 3 unknown bytes.
[   77.769252][ T7464] nftables ruleset with unbound chain
[   77.815053][ T7472] Cannot find add_set index 3 as target
[   77.988319][ T7494] netlink: 56 bytes leftover after parsing attributes in process `syz.0.566'.
[   77.991425][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.566'.
[   78.155974][ T7504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.569'.
[   78.279443][ T7513] xt_time: invalid argument - start or stop time greater than 23:59:59
[   78.821639][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.587'.
[   79.016293][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'.
[   79.022843][ T7572] ip6tnl2: entered promiscuous mode
[   79.292510][ T7616] macsec1: entered promiscuous mode
[   79.294170][ T7616] batadv0: entered promiscuous mode
[   79.310021][ T7616] batadv0: left promiscuous mode
[   79.331512][ T7623] netlink: 64 bytes leftover after parsing attributes in process `syz.2.610'.
[   79.384504][ T7628] netlink: 32 bytes leftover after parsing attributes in process `syz.2.612'.
[   79.588716][ T7663] validate_nla: 4 callbacks suppressed
[   79.588727][ T7663] netlink: 'syz.0.617': attribute type 4 has an invalid length.
[   79.597642][ T7663] wlan1: mtu less than device minimum
[   79.706484][ T7678] xt_ecn: cannot match TCP bits for non-tcp packets
[   81.073495][    T9] cfg80211: failed to load regulatory.db
[   81.152881][ T7755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.466398][ T7775] x_tables: duplicate underflow at hook 1
[   81.472408][ T7775] sctp: [Deprecated]: syz.0.656 (pid 7775) Use of int in max_burst socket option.
[   81.472408][ T7775] Use struct sctp_assoc_value instead
[   81.550360][ T6122] Bluetooth: hci2: command 0x0419 tx timeout
[   81.688564][ T7789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.692086][ T7790] syzkaller0: entered promiscuous mode
[   81.693763][ T7790] syzkaller0: entered allmulticast mode
[   81.704278][ T7791] tipc: Resetting bearer <eth:syzkaller0>
[   81.717042][ T7791] tipc: Disabling bearer <eth:syzkaller0>
[   82.030916][ T7847] bridge0: entered promiscuous mode
[   82.032768][ T7847] macsec1: entered promiscuous mode
[   82.035255][ T7847] bridge0: port 3(macsec1) entered blocking state
[   82.037617][ T7847] bridge0: port 3(macsec1) entered disabled state
[   82.041732][ T7847] macsec1: entered allmulticast mode
[   82.043393][ T7847] bridge0: entered allmulticast mode
[   82.046384][ T7847] macsec1: left allmulticast mode
[   82.048066][ T7847] bridge0: left allmulticast mode
[   82.051536][ T7847] bridge0: left promiscuous mode
[   82.120841][ T7853] netlink: 'syz.0.684': attribute type 1 has an invalid length.
[   82.202166][ T7865] netlink: 'syz.1.688': attribute type 12 has an invalid length.
[   82.205240][ T7865] netlink: 'syz.1.688': attribute type 29 has an invalid length.
[   82.207594][ T7865] netlink: 'syz.1.688': attribute type 2 has an invalid length.
[   82.213450][ T7865] netlink: 'syz.1.688': attribute type 12 has an invalid length.
[   82.239457][ T7865] netlink: 'syz.1.688': attribute type 29 has an invalid length.
[   82.242514][ T7865] netlink: 'syz.1.688': attribute type 2 has an invalid length.
[   82.246133][ T7865] netlink: 'syz.1.688': attribute type 12 has an invalid length.
[   82.248479][ T7865] netlink: 'syz.1.688': attribute type 29 has an invalid length.
[   82.352264][ T7891] __nla_validate_parse: 157 callbacks suppressed
[   82.352276][ T7891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.697'.
[   82.388122][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.699'.
[   82.423187][ T7887] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.555913][ T7910] bond0: (slave wlan1): Releasing backup interface
[   82.585812][ T7912] syzkaller0: entered allmulticast mode
[   82.796264][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'.
[   82.877130][ T7941] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.712'.
[   82.955084][ T7955] netlink: 3 bytes leftover after parsing attributes in process `syz.0.718'.
[   82.965109][ T7955] batadv1: entered promiscuous mode
[   82.966754][ T7955] batadv1: entered allmulticast mode
[   82.978975][ T7958] tipc: Started in network mode
[   82.981676][ T7958] tipc: Node identity 7a3029d62ef3, cluster identity 4711
[   82.984042][ T7958] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.985815][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'.
[   82.986143][ T7957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   82.993256][ T7958] syzkaller0: entered promiscuous mode
[   82.995072][ T7958] syzkaller0: entered allmulticast mode
[   83.032301][ T7957] tipc: Resetting bearer <eth:syzkaller0>
[   83.038344][ T7956] tipc: Resetting bearer <eth:syzkaller0>
[   83.045862][ T7956] tipc: Disabling bearer <eth:syzkaller0>
[   83.107192][ T7955] netlink: 48 bytes leftover after parsing attributes in process `syz.0.718'.
[   83.155247][ T7970] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   83.262103][ T7965] xt_bpf: check failed: parse error
[   83.493438][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'.
[   83.757357][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'.
[   83.848384][ T8013] netlink: 48 bytes leftover after parsing attributes in process `syz.1.740'.
[   84.021740][ T8027] batadv_slave_1: entered promiscuous mode
[   84.042273][ T8027] net veth1_virt_wifi : renamed from virt_wifi0
[   84.052488][ T8031] Bluetooth: MGMT ver 1.23
[   84.102049][ T8026] batadv_slave_1: left promiscuous mode
[   84.148003][ T8033] batadv0: entered promiscuous mode
[   84.173318][ T8044] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   84.565317][ T8093] batadv_slave_1: entered promiscuous mode
[   84.589309][ T8091] batadv_slave_1: left promiscuous mode
[   84.882714][ T8156] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   86.398342][ T8230] xt_cgroup: xt_cgroup: no path or classid specified
[   86.411472][ T8232] validate_nla: 188 callbacks suppressed
[   86.411481][ T8232] netlink: 'syz.2.812': attribute type 1 has an invalid length.
[   86.428283][ T8232] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.465948][ T8232] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.468342][ T8232] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   86.481268][ T8232] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   86.520284][ T8239] veth5: entered promiscuous mode
[   86.532100][ T8239] bond3: (slave veth5): Enslaving as an active interface with a down link
[   86.612348][ T8239] erspan0: entered allmulticast mode
[   86.622989][ T8239] bond3: (slave erspan0): making interface the new active one
[   86.627349][ T8239] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   86.766382][ T8245] netlink: 'syz.0.815': attribute type 3 has an invalid length.
[   86.768889][ T8245] netlink: 'syz.0.815': attribute type 6 has an invalid length.
[   86.778288][ T8245] xt_hashlimit: invalid interval
[   86.879005][ T8251] x_tables: duplicate underflow at hook 3
[   87.066065][ T8276] xt_CT: You must specify a L4 protocol and not use inversions on it
[   87.143179][ T8282] pim6reg1: entered promiscuous mode
[   87.147381][ T8282] pim6reg1: entered allmulticast mode
[   87.397523][ T8304] netlink: 'syz.1.836': attribute type 1 has an invalid length.
[   87.410661][ T8304] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.427605][ T8304] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.429972][ T8304] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[   87.433911][ T8304] bond3: (slave vxcan1): Error -95 calling set_mac_address
[   87.485841][ T8309] veth5: entered promiscuous mode
[   87.490338][ T8309] bond3: (slave veth5): Enslaving as an active interface with a down link
[   87.494691][ T8306] __nla_validate_parse: 15 callbacks suppressed
[   87.494699][ T8306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.835'.
[   87.562560][ T8309] erspan0: entered allmulticast mode
[   87.566485][ T8309] bond3: (slave erspan0): making interface the new active one
[   87.569015][ T8309] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   88.044319][ T8317] syz_tun: entered allmulticast mode
[   88.373351][ T8345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.848'.
[   88.514242][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'.
[   88.599912][ T8369] xt_TPROXY: Can be used only with -p tcp or -p udp
[   88.870664][ T8387] netlink: 'syz.0.860': attribute type 1 has an invalid length.
[   88.873372][ T8387] netlink: 'syz.0.860': attribute type 11 has an invalid length.
[   88.876592][ T8387] netlink: 220 bytes leftover after parsing attributes in process `syz.0.860'.
[   88.917666][ T8393] veth1_virt_wifi: entered promiscuous mode
[   88.921631][ T8393] veth1_virt_wifi: entered allmulticast mode
[   89.038942][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.868'.
[   89.044406][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'.
[   89.047220][ T8409] netlink: 'syz.2.868': attribute type 5 has an invalid length.
[   89.088318][ T8409] netlink: 'syz.2.868': attribute type 7 has an invalid length.
[   89.090748][ T8409] netlink: 'syz.2.868': attribute type 8 has an invalid length.
[   89.093149][ T8409] netlink: 'syz.2.868': attribute type 7 has an invalid length.
[   89.382865][ T8426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.872'.
[   89.546819][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'.
[   89.551233][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'.
[   89.554151][ T8442] netlink: 42 bytes leftover after parsing attributes in process `syz.1.877'.
[   89.618423][ T8446] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   89.680311][   T33] audit: type=1804 audit(1752768715.214:2): pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.880" name="/newroot/340/cgroup.controllers" dev="tmpfs" ino=1736 res=1 errno=0
[   89.687090][   T33] audit: type=1800 audit(1752768715.224:3): pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.880" name="cgroup.controllers" dev="tmpfs" ino=1736 res=0 errno=0
[   89.695250][   T33] audit: type=1800 audit(1752768715.234:4): pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.880" name="cgroup.controllers" dev="tmpfs" ino=1736 res=0 errno=0
[   90.200445][ T8494] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   90.444930][ T8515] 8021q: adding VLAN 0 to HW filter on device bond4
[   90.447918][ T8515] bond4: entered promiscuous mode
[   90.452072][ T8515] bond4: entered allmulticast mode
[   90.454273][ T8515] team0: Port device bond4 added
[   90.817160][ T8523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.909631][ T8542] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   90.912005][ T8542] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   91.427568][ T8585] lo speed is unknown, defaulting to 1000
[   91.429943][ T8585] lo speed is unknown, defaulting to 1000
[   91.433198][ T8585] lo speed is unknown, defaulting to 1000
[   91.438556][ T8585] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   91.448035][ T8585] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   91.466502][ T8585] lo speed is unknown, defaulting to 1000
[   91.469312][ T8585] lo speed is unknown, defaulting to 1000
[   91.472290][ T8585] lo speed is unknown, defaulting to 1000
[   92.011257][ T8595] x_tables: duplicate underflow at hook 2
[   92.084452][ T8604] validate_nla: 5 callbacks suppressed
[   92.084463][ T8604] netlink: 'syz.1.934': attribute type 1 has an invalid length.
[   92.170421][ T8611] netem: change failed
[   92.183305][ T8615] xt_ipcomp: unknown flags F7
[   92.393330][ T8638] lo speed is unknown, defaulting to 1000
[   92.444682][ T8646] bridge4: port 1(veth5) entered blocking state
[   92.446859][ T8646] bridge4: port 1(veth5) entered disabled state
[   92.450852][ T8646] veth5: entered allmulticast mode
[   92.453525][ T8646] veth5: entered promiscuous mode
[   92.467718][ T8646] bridge4: port 2(veth0_to_bond) entered blocking state
[   92.471179][ T8646] bridge4: port 2(veth0_to_bond) entered disabled state
[   92.480002][ T8646] veth0_to_bond: entered allmulticast mode
[   92.482871][ T8646] veth0_to_bond: entered promiscuous mode
[   92.581211][ T8661] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[   92.586744][ T8661] openvswitch: netlink: Duplicate or invalid key (type 0).
[   92.589456][ T8661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.599319][ T8661] tipc: Started in network mode
[   92.603103][ T8661] tipc: Node identity 080211000001, cluster identity 4711
[   92.605852][ T8661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.686357][ T8674] __nla_validate_parse: 12 callbacks suppressed
[   92.686368][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'.
[   92.764908][ T8680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.957'.
[   92.767954][ T8680] netlink: 'syz.2.957': attribute type 6 has an invalid length.
[   92.826984][ T8688] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   92.832943][ T8688] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   92.883650][ T5859] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[   93.030997][ T8712] netlink: 'syz.0.968': attribute type 10 has an invalid length.
[   93.113094][ T8720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.970'.
[   93.128436][ T8720] lo speed is unknown, defaulting to 1000
[   93.676039][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'.
[   93.682485][ T8736] netlink: 136 bytes leftover after parsing attributes in process `syz.1.975'.
[   93.685765][ T8736] netlink: 'syz.1.975': attribute type 1 has an invalid length.
[   93.706341][ T8736] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   93.711662][ T5860] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   93.716982][ T8736] 8021q: adding VLAN 0 to HW filter on device bond4
[   93.720948][    T9] tipc: Node number set to 134418688
[   93.821646][ T5860] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   93.941164][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'.
[   94.011624][ T8755] netlink: 44 bytes leftover after parsing attributes in process `syz.2.982'.
[   94.014688][ T8755] bridge: RTM_NEWNEIGH with invalid ether address
[   94.105583][ T8761] netlink: 32 bytes leftover after parsing attributes in process `syz.1.985'.
[   94.146392][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'.
[   94.153103][ T8769] netlink: 'syz.1.988': attribute type 22 has an invalid length.
[   94.155832][ T8769] netlink: 148 bytes leftover after parsing attributes in process `syz.1.988'.
[   94.164233][ T8769] netlink: 'syz.1.988': attribute type 1 has an invalid length.
[   94.232932][ T8776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.274442][ T8776] netlink: 'syz.1.992': attribute type 8 has an invalid length.
[   94.690920][ T8798] tipc: Resetting bearer <eth:syzkaller0>
[   95.153497][ T8807] hsr_slave_0: left promiscuous mode
[   95.155891][ T8807] hsr_slave_1: left promiscuous mode
[   95.218313][ T8807] lo speed is unknown, defaulting to 1000
[   95.490837][ T8838] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.502139][ T8838] netlink: 'syz.2.1010': attribute type 8 has an invalid length.
[   95.631940][ T8856] hsr_slave_0: left promiscuous mode
[   95.639635][ T8856] hsr_slave_1: left promiscuous mode
[   95.674427][ T8863] batman_adv: batadv0: Adding interface: ip6gretap2
[   95.676481][ T8863] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.685952][ T8863] batman_adv: batadv0: Interface activated: ip6gretap2
[   95.725054][ T8867] lo speed is unknown, defaulting to 1000
[   95.805770][ T8875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.809945][ T8877] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.878092][ T8882] syzkaller1: entered promiscuous mode
[   95.881134][ T8882] syzkaller1: entered allmulticast mode
[   95.977514][ T8893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.013536][ T8896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.345624][ T8918] macvlan0: entered promiscuous mode
[   96.347935][ T8918] macvlan0: left promiscuous mode
[   96.392729][ T8920] netlink: 'syz.1.1040': attribute type 5 has an invalid length.
[   96.425613][ T8924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.623711][ T8945] lo speed is unknown, defaulting to 1000
[   96.922792][ T8984] netlink: 'syz.2.1063': attribute type 2 has an invalid length.
[   96.932857][ T8984] veth1_macvtap: left promiscuous mode
[   96.953784][ T8987] sctp: [Deprecated]: syz.0.1064 (pid 8987) Use of int in maxseg socket option.
[   96.953784][ T8987] Use struct sctp_assoc_value instead
[   96.963770][ T8987] sctp: [Deprecated]: syz.0.1064 (pid 8987) Use of struct sctp_assoc_value in delayed_ack socket option.
[   96.963770][ T8987] Use struct sctp_sack_info instead
[   97.165439][ T9014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.183327][ T9009] lo speed is unknown, defaulting to 1000
[   97.197835][ T9016] netlink: 'syz.2.1075': attribute type 20 has an invalid length.
[   97.204443][ T9016] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.206979][ T9016] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.209372][ T9016] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.211862][ T9016] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.215290][ T9016] netlink: 'syz.2.1075': attribute type 20 has an invalid length.
[   97.381379][ T9009] netlink: 'syz.0.1073': attribute type 2 has an invalid length.
[  124.678400][ T9062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.705858][ T9062] __nla_validate_parse: 32 callbacks suppressed
[  124.705867][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'.
[  124.716968][ T9062] netlink: 'syz.2.1089': attribute type 8 has an invalid length.
[  124.754868][ T9073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.758939][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'.
[  124.762730][ T9073] netlink: 'syz.0.1091': attribute type 8 has an invalid length.
[  124.904636][ T9089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1095'.
[  125.611509][ T9098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.615940][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1100'.
[  125.650764][ T9098] netlink: 'syz.1.1100': attribute type 8 has an invalid length.
[  125.696657][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'.
[  125.767451][ T9110] sch_fq: defrate 0 ignored.
[  125.949145][ T9117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.957718][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'.
[  125.962451][ T9117] netlink: 'syz.2.1107': attribute type 8 has an invalid length.
[  126.226017][ T9132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.233722][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'.
[  126.237710][ T9132] netlink: 'syz.2.1114': attribute type 8 has an invalid length.
[  126.380329][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1118'.
[  126.383052][ T9143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1118'.
[  126.392062][ T9143] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1118'.
[  126.485023][ T9150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.492732][ T9150] netlink: 'syz.0.1121': attribute type 8 has an invalid length.
[  126.637734][ T9167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.656756][ T9167] netlink: 'syz.0.1127': attribute type 8 has an invalid length.
[  126.744626][ T9176] netlink: 'syz.1.1129': attribute type 11 has an invalid length.
[  126.777521][ T9178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.820925][ T9178] netlink: 'syz.1.1130': attribute type 8 has an invalid length.
[  127.165639][ T9200] netlink: 'syz.1.1138': attribute type 2 has an invalid length.
[  127.177158][ T9200] : entered promiscuous mode
[  127.207512][ T9202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.559264][ T9221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.642463][ T9254] pim6reg1: entered promiscuous mode
[  128.649557][ T9254] pim6reg1: entered allmulticast mode
[  128.788718][ T9264] lo speed is unknown, defaulting to 1000
[  128.836284][ T5218] Bluetooth: hci2: link tx timeout
[  128.838307][ T5218] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  128.842057][ T5218] Bluetooth: hci2: link tx timeout
[  128.843625][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.846521][ T5218] Bluetooth: hci2: link tx timeout
[  128.848072][ T5218] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  128.850432][ T5218] Bluetooth: hci2: link tx timeout
[  128.851998][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.854391][ T5218] Bluetooth: hci2: link tx timeout
[  128.855931][ T5218] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  128.858197][ T5218] Bluetooth: hci2: link tx timeout
[  128.859900][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.862184][ T5218] Bluetooth: hci2: link tx timeout
[  128.863708][ T5218] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  128.866180][ T5218] Bluetooth: hci2: link tx timeout
[  128.867733][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.943913][ T9275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.946408][ T9275] syzkaller0: entered promiscuous mode
[  128.948162][ T9275] syzkaller0: entered allmulticast mode
[  128.961236][ T9275] tipc: Resetting bearer <eth:syzkaller0>
[  128.966129][ T9274] tipc: Resetting bearer <eth:syzkaller0>
[  128.976415][ T9274] tipc: Disabling bearer <eth:syzkaller0>
[  129.392293][ T9310] lo speed is unknown, defaulting to 1000
[  129.694258][ T9338] 8021q: VLANs not supported on nlmon0
[  130.053388][ T9368] net_ratelimit: 3 callbacks suppressed
[  130.053399][ T9368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.060985][ T9368] __nla_validate_parse: 24 callbacks suppressed
[  130.060996][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1201'.
[  130.117409][ T9368] validate_nla: 7 callbacks suppressed
[  130.117421][ T9368] netlink: 'syz.1.1201': attribute type 8 has an invalid length.
[  130.388535][ T9387] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  130.598498][ T9390] lo speed is unknown, defaulting to 1000
[  130.601771][ T9390] lo speed is unknown, defaulting to 1000
[  130.603970][ T9390] lo speed is unknown, defaulting to 1000
[  130.613853][ T9390] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  130.627259][ T9390] lo speed is unknown, defaulting to 1000
[  130.632515][ T9390] lo speed is unknown, defaulting to 1000
[  130.635268][ T9390] lo speed is unknown, defaulting to 1000
[  130.659195][ T9390] Driver unsupported XDP return value 0 on prog  (id 263) dev N/A, expect packet loss!
[  130.905712][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'.
[  130.912191][ T9402] xt_ipcomp: unknown flags F7
[  130.921293][ T5218] Bluetooth: hci2: command 0x0419 tx timeout
[  130.962029][ T9407] netlink: 'syz.0.1213': attribute type 1 has an invalid length.
[  131.012881][ T9410] netlink: 'syz.1.1214': attribute type 7 has an invalid length.
[  131.016452][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'.
[  131.155587][ T9425] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.174095][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'.
[  131.191129][ T9430] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  131.224262][ T9425] netlink: 'syz.1.1218': attribute type 8 has an invalid length.
[  131.272598][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'.
[  131.275731][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'.
[  131.278823][ T9442] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1224'.
[  131.372559][ T9451] pim6reg1: entered promiscuous mode
[  131.374290][ T9451] pim6reg1: entered allmulticast mode
[  131.428915][ T9457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1226'.
[  131.604782][ T9468] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  131.673707][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'.
[  131.714229][ T9477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1234'.
[  131.779048][ T9480] netlink: 'syz.2.1235': attribute type 1 has an invalid length.
[  132.035355][ T9502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.066245][ T9502] syzkaller0: entered promiscuous mode
[  132.068304][ T9502] syzkaller0: entered allmulticast mode
[  132.072310][ T9502] tipc: Resetting bearer <eth:syzkaller0>
[  132.074191][ T9507] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  132.075831][ T9502] netlink: 'syz.2.1243': attribute type 1 has an invalid length.
[  132.079006][ T9502] netlink: 'syz.2.1243': attribute type 2 has an invalid length.
[  132.081520][ T9502] netlink: 'syz.2.1243': attribute type 8 has an invalid length.
[  132.085369][ T9501] tipc: Resetting bearer <eth:syzkaller0>
[  132.288847][ T9513] openvswitch: netlink: Flow actions attr not present in new flow.
[  132.972878][ T9501] tipc: Disabling bearer <eth:syzkaller0>
[  132.999678][ T5218] Bluetooth: hci2: command 0x0419 tx timeout
[  133.034342][ T9521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.060712][ T9527] netlink: 'syz.2.1250': attribute type 1 has an invalid length.
[  133.080991][ T9521] netlink: 'syz.1.1249': attribute type 8 has an invalid length.
[  133.292960][ T9541] lo speed is unknown, defaulting to 1000
[  133.296274][ T9541] lo speed is unknown, defaulting to 1000
[  133.433866][ T9549] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  133.748747][ T9558] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  133.803813][ T9562] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  134.015555][ T9582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.025570][ T9583] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  134.430701][ T9614] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  135.044261][ T9635] lo speed is unknown, defaulting to 1000
[  135.046919][ T9635] lo speed is unknown, defaulting to 1000
[  135.325922][ T9666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.423460][ T9671] __nla_validate_parse: 12 callbacks suppressed
[  135.423472][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'.
[  135.429811][ T9671] validate_nla: 2 callbacks suppressed
[  135.429820][ T9671] netlink: 'syz.0.1287': attribute type 8 has an invalid length.
[  135.909226][ T9714] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1289'.
[  135.914289][ T9712] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1288'.
[  135.976191][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1292'.
[  135.979112][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1292'.
[  136.021678][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'.
[  136.024677][ T9728] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1294'.
[  136.129825][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'.
[  136.229918][ T9753] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1303'.
[  136.232833][ T9753] netlink: 'syz.0.1303': attribute type 1 has an invalid length.
[  136.258742][ T9747] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.1299'.
[  136.261952][ T9747] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  136.345635][ T9766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.406772][ T9766] netlink: 'syz.1.1307': attribute type 8 has an invalid length.
[  136.607623][ T9789] netlink: 'syz.0.1315': attribute type 83 has an invalid length.
[  136.801105][ T9808] lo speed is unknown, defaulting to 1000
[  136.804727][ T9808] lo speed is unknown, defaulting to 1000
[  136.989800][ T9821] netlink: 'syz.0.1326': attribute type 13 has an invalid length.
[  137.323530][ T9836] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  137.326998][ T9836] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  137.339101][ T9838] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  137.343809][ T9837] IPVS: stopping backup sync thread 9838 ...
[  137.815089][ T9842] x_tables: duplicate underflow at hook 1
[  137.844255][ T9844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.885241][ T9844] netlink: 'syz.0.1335': attribute type 8 has an invalid length.
[  138.160653][ T9851] netlink: 'syz.2.1337': attribute type 11 has an invalid length.
[  138.163930][ T9851] netlink: 'syz.2.1337': attribute type 11 has an invalid length.
[  138.167348][ T9851] netlink: 'syz.2.1337': attribute type 11 has an invalid length.
[  138.251770][   T33] audit: type=1107 audit(1752768763.794:5): pid=9859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+џ-'
[  138.293391][ T9864] x_tables: duplicate underflow at hook 3
[  138.443026][ T9882] syz_tun: tun_net_xmit 1510
[  138.444919][ T9882] syz_tun: tun_net_xmit 1510
[  138.446393][ T9882] syz_tun: tun_net_xmit 1510
[  138.448106][ T9882] syz_tun: tun_net_xmit 1510
[  138.452415][ T9882] syz_tun: tun_net_xmit 1510
[  138.455581][ T9882] syz_tun: tun_net_xmit 1510
[  138.457299][ T9882] syz_tun: tun_net_xmit 1510
[  138.458840][ T9882] syz_tun: tun_net_xmit 1510
[  138.460803][ T9882] syz_tun: tun_net_xmit 1510
[  138.462295][ T9882] syz_tun: tun_net_xmit 1510
[  138.463881][ T9882] syz_tun: tun_net_xmit 1510
[  138.465879][ T9882] syz_tun: tun_net_xmit 1510
[  138.467789][ T9882] syz_tun: tun_net_xmit 1510
[  138.473080][ T9882] syz_tun: tun_net_xmit 694
[  138.529124][ T9889] netlink: 'syz.2.1352': attribute type 1 has an invalid length.
[  138.548287][ T9889] 8021q: adding VLAN 0 to HW filter on device bond6
[  138.556152][ T9889] ipvlan3: entered allmulticast mode
[  138.557951][ T9889] bond6: entered allmulticast mode
[  138.566910][ T9889] bond6: (slave gretap3): making interface the new active one
[  138.569378][ T9889] gretap3: entered allmulticast mode
[  138.572242][ T9889] bond6: (slave gretap3): Enslaving as an active interface with an up link
[  138.693199][ T9909] xt_l2tp: invalid flags combination: 4
[  138.748866][ T9916] delete_channel: no stack
[  138.837453][ T9924] netlink: 'syz.2.1364': attribute type 1 has an invalid length.
[  138.857032][ T9926] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.898036][ T9926] netlink: 'syz.0.1365': attribute type 8 has an invalid length.
[  140.005793][ T9967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.047703][ T9967] netlink: 'syz.0.1381': attribute type 8 has an invalid length.
[  140.750646][T10005] netlink: 'syz.1.1394': attribute type 83 has an invalid length.
[  140.824305][T10009] netlink: 'syz.1.1396': attribute type 7 has an invalid length.
[  140.833392][T10009] : entered promiscuous mode
[  140.902852][T10018] __nla_validate_parse: 19 callbacks suppressed
[  140.902863][T10018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1399'.
[  141.049258][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'.
[  141.139028][T10040] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.202938][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'.
[  141.211292][T10040] netlink: 'syz.0.1405': attribute type 8 has an invalid length.
[  141.415826][T10062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1411'.
[  141.433973][T10062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1411'.
[  141.437694][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1413'.
[  141.502251][T10070] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1416'.
[  141.532376][T10075] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1419'.
[  141.562285][T10078] netlink: 'syz.2.1420': attribute type 2 has an invalid length.
[  141.573081][T10078] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1420'.
[  141.591620][T10080] syzkaller1: entered promiscuous mode
[  141.596972][T10080] syzkaller1: entered allmulticast mode
[  141.629250][T10085] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  141.662715][T10089] netlink: 'syz.2.1423': attribute type 29 has an invalid length.
[  141.666535][T10089] netlink: 'syz.2.1423': attribute type 29 has an invalid length.
[  141.669462][T10089] netlink: 'syz.2.1423': attribute type 29 has an invalid length.
[  141.673156][T10089] netlink: 'syz.2.1423': attribute type 29 has an invalid length.
[  141.677492][T10089] netlink: 'syz.2.1423': attribute type 29 has an invalid length.
[  141.690140][T10089] netlink: 'syz.2.1423': attribute type 29 has an invalid length.
[  141.803150][T10102] nbd: must specify a size in bytes for the device
[  141.806134][T10106] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1426'.
[  141.885221][T10108] syz_tun: tun_net_xmit 62
[  142.347979][T10134] xt_hashlimit: invalid rate
[  142.389918][T10142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.437936][T10164] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  143.477817][T10168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.629234][T10178] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[  143.632478][T10178] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  144.624905][T10199] openvswitch: netlink: Message has 16 unknown bytes.
[  144.659061][T10203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.522540][T10224] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  145.574234][T10224] batadv_slave_0: entered promiscuous mode
[  145.742747][T10233] netem: change failed
[  145.802110][T10237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.837699][T10243] lo speed is unknown, defaulting to 1000
[  145.840508][T10243] lo speed is unknown, defaulting to 1000
[  145.931927][T10249] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  146.796575][T10272] __nla_validate_parse: 12 callbacks suppressed
[  146.796588][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'.
[  146.852595][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'.
[  146.945276][T10276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1485'.
[  147.053648][T10284] validate_nla: 38 callbacks suppressed
[  147.053659][T10284] netlink: 'syz.2.1488': attribute type 2 has an invalid length.
[  147.085607][T10287] netlink: 'syz.0.1489': attribute type 2 has an invalid length.
[  147.093101][T10287] : entered promiscuous mode
[  147.123386][T10290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.164510][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1490'.
[  147.169442][T10290] netlink: 'syz.0.1490': attribute type 8 has an invalid length.
[  148.208198][T10314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1496'.
[  148.349656][T10319] pim6reg: entered allmulticast mode
[  148.383593][T10321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.416329][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'.
[  148.421094][T10321] netlink: 'syz.0.1498': attribute type 8 has an invalid length.
[  148.945516][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'.
[  149.251591][T10355] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1509'.
[  149.308495][T10360] xt_hashlimit: overflow, try lower: 6/0
[  149.310561][T10361] xt_hashlimit: overflow, try lower: 6/0
[  149.352151][T10363] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1512'.
[  149.453491][T10370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1513'.
[  150.251786][T10372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.293783][T10372] netlink: 'syz.0.1516': attribute type 8 has an invalid length.
[  150.597246][T10395] mac80211_hwsim hwsim5 ": renamed from wlan0
[  151.451973][T10453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.488043][T10453] netlink: 'syz.0.1535': attribute type 8 has an invalid length.
[  151.831428][T10458] syzkaller1: entered promiscuous mode
[  151.833260][T10458] syzkaller1: entered allmulticast mode
[  152.549671][T10483] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.585753][T10483] __nla_validate_parse: 2 callbacks suppressed
[  152.585763][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1544'.
[  152.596564][T10483] netlink: 'syz.0.1544': attribute type 8 has an invalid length.
[  152.945981][T10491] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1546'.
[  152.949093][T10491] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1546'.
[  153.597302][T10509] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1552'.
[  153.870195][T10525] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.916040][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'.
[  153.921173][T10525] netlink: 'syz.0.1557': attribute type 8 has an invalid length.
[  154.056640][T10532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1559'.
[  154.059460][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'.
[  154.078344][T10532] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  154.246940][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1562'.
[  154.326944][T10550] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  154.361589][T10552] netlink: 'syz.2.1565': attribute type 1 has an invalid length.
[  154.364712][T10552] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1565'.
[  154.441134][T10557] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1567'.
[  154.616999][T10566] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[  154.654701][T10568] x_tables: duplicate underflow at hook 2
[  154.681596][T10573] SET target dimension over the limit!
[  154.685846][T10573] SET target dimension over the limit!
[  154.813524][T10588] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  154.917223][T10595] x_tables: duplicate underflow at hook 1
[  154.932117][T10596] netlink: 'syz.2.1580': attribute type 4 has an invalid length.
[  154.984482][T10603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.986075][T10601] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  155.044781][T10603] netlink: 'syz.2.1582': attribute type 8 has an invalid length.
[  155.052804][T10607] syz_tun: left allmulticast mode
[  155.536503][T10635] netlink: 'syz.0.1589': attribute type 1 has an invalid length.
[  155.554716][T10635] 8021q: adding VLAN 0 to HW filter on device bond2
[  155.571032][T10635] veth7: entered promiscuous mode
[  155.575382][T10635] bond2: (slave veth7): Enslaving as an active interface with a down link
[  155.579587][T10635] erspan0: entered allmulticast mode
[  155.583236][T10635] bond2: (slave erspan0): making interface the new active one
[  155.586957][T10635] erspan0: entered promiscuous mode
[  155.588823][T10635] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  155.884152][T10659] ipt_ECN: cannot use operation on non-tcp rule
[  156.038056][T10673] netlink: 'syz.0.1600': attribute type 9 has an invalid length.
[  156.068389][T10681] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.110369][T10681] netlink: 'syz.2.1601': attribute type 8 has an invalid length.
[  156.144228][T10687] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  156.244587][T10692] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  156.276699][T10694] lo: entered allmulticast mode
[  156.278426][T10694] lo: left allmulticast mode
[  156.287087][T10694] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  156.291300][T10694] team0: Device ipvlan0 is already an upper device of the team interface
[  156.473954][T10704] openvswitch: netlink: IP tunnel dst address not specified
[  156.503214][T10704] xt_bpf: check failed: parse error
[  157.086037][T10750] lo speed is unknown, defaulting to 1000
[  157.088507][T10750] lo speed is unknown, defaulting to 1000
[  157.188020][T10758] IPVS: stopping master sync thread 6130 ...
[  157.206798][ T5218] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  157.213754][ T5218] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  157.216299][ T5218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  157.218910][ T5218] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  157.222424][ T5218] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  157.260523][T10764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.298695][T10759] lo speed is unknown, defaulting to 1000
[  157.304321][T10759] lo speed is unknown, defaulting to 1000
[  157.320618][T10768] netlink: 'syz.2.1627': attribute type 8 has an invalid length.
[  157.487408][T10759] chnl_net:caif_netlink_parms(): no params data found
[  157.537670][T10759] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.540214][T10759] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.542640][T10759] bridge_slave_0: entered allmulticast mode
[  157.545543][T10759] bridge_slave_0: entered promiscuous mode
[  157.548699][T10759] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.554356][T10759] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.556612][T10759] bridge_slave_1: entered allmulticast mode
[  157.559263][T10759] bridge_slave_1: entered promiscuous mode
[  157.587245][T10759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.592102][T10759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.612810][T10759] team0: Port device team_slave_0 added
[  157.616190][T10759] team0: Port device team_slave_1 added
[  157.641186][T10759] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.643342][T10759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.651245][T10759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.655669][T10759] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.657743][T10759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.665767][T10759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.694339][T10759] hsr_slave_0: entered promiscuous mode
[  157.697057][T10759] hsr_slave_1: entered promiscuous mode
[  157.756896][T10787] syz_tun: entered allmulticast mode
[  157.773438][T10784] syz_tun: left allmulticast mode
[  157.809401][T10759] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  157.815479][T10759] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  157.823089][T10759] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  157.831912][T10759] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  157.854855][T10759] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.856999][T10759] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.859669][T10759] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.861920][T10759] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.918759][T10759] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.928724][ T9707] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.933750][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.945272][T10759] 8021q: adding VLAN 0 to HW filter on device team0
[  157.955336][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.957626][ T9707] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.965238][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.967462][ T9707] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.081317][T10759] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.119462][T10759] veth0_vlan: entered promiscuous mode
[  158.125533][T10759] veth1_vlan: entered promiscuous mode
[  158.150755][T10759] veth0_macvtap: entered promiscuous mode
[  158.156597][T10759] veth1_macvtap: entered promiscuous mode
[  158.173947][T10759] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.185094][T10759] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.191333][T10759] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.194054][T10759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.196996][T10759] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.205247][T10759] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.217240][T10812] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  158.225968][T10812] __nla_validate_parse: 31 callbacks suppressed
[  158.225978][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'.
[  158.231770][T10812] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  158.234200][T10812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.288910][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.292254][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.313746][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.316277][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.440269][T10821] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.495143][T10828] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.503567][T10828] netlink: 'syz.3.1639': attribute type 8 has an invalid length.
[  158.522443][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1638'.
[  158.545681][T10833] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1640'.
[  158.565967][T10835] netlink: 'syz.2.1641': attribute type 1 has an invalid length.
[  158.568309][T10835] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1641'.
[  158.618855][T10835] xt_CT: No such helper "snmp"
[  158.711121][T10845] xt_CT: You must specify a L4 protocol and not use inversions on it
[  158.736196][T10850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.759614][T10850] netlink: 'syz.0.1647': attribute type 8 has an invalid length.
[  159.023263][T10864] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1652'.
[  159.122762][T10880] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1656'.
[  159.125982][T10880] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1656'.
[  159.169620][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1657'.
[  159.178367][T10883] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1657'.
[  159.195826][T10888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1658'.
[  159.241086][ T5218] Bluetooth: hci3: command tx timeout
[  159.413613][T10897] netlink: 'syz.3.1661': attribute type 3 has an invalid length.
[  159.416048][T10897] netlink: 'syz.3.1661': attribute type 3 has an invalid length.
[  159.529378][T10914] xt_TPROXY: Can be used only with -p tcp or -p udp
[  159.609386][T10926] openvswitch: netlink: Missing valid actions attribute.
[  159.619734][T10926] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.674053][T10933] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  159.804179][T10938] veth1_macvtap: entered promiscuous mode
[  159.962970][T10947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.002467][T10947] netlink: 'syz.2.1675': attribute type 8 has an invalid length.
[  160.561672][T10963] netlink: 'syz.3.1679': attribute type 1 has an invalid length.
[  160.574916][T10963] veth3: entered promiscuous mode
[  160.823557][T10968] bridge5: the hash_elasticity option has been deprecated and is always 16
[  160.826364][T10968] bridge5: entered allmulticast mode
[  160.951910][T10981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.956863][T10981] netlink: 'syz.3.1687': attribute type 8 has an invalid length.
[  161.158393][T10998] tipc: Started in network mode
[  161.160578][T10998] tipc: Node identity ee5b70c9edfa, cluster identity 4711
[  161.163550][T10998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.204618][T10998] syzkaller0: entered promiscuous mode
[  161.206286][T10998] syzkaller0: entered allmulticast mode
[  161.208472][T10998] tipc: Resetting bearer <eth:syzkaller0>
[  161.215766][T10997] tipc: Resetting bearer <eth:syzkaller0>
[  161.272270][T11002] netlink: 'syz.2.1696': attribute type 8 has an invalid length.
[  161.312530][ T5218] Bluetooth: hci3: command tx timeout
[  162.093628][T10997] tipc: Disabling bearer <eth:syzkaller0>
[  162.211663][T11019] netem: change failed
[  162.218793][T11019] tipc: Enabled bearer <udp:s>, priority 10
[  162.314972][T11024] netlink: 'syz.2.1703': attribute type 8 has an invalid length.
[  163.212763][  T788] tipc: Node number set to 60911817
[  163.255705][T11063] bridge_slave_1: left allmulticast mode
[  163.257639][T11063] bridge_slave_1: left promiscuous mode
[  163.259760][T11063] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.263522][T11063] net_ratelimit: 2 callbacks suppressed
[  163.263531][T11063] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  163.383651][T11069] __nla_validate_parse: 9 callbacks suppressed
[  163.383662][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1715'.
[  163.391355][ T5218] Bluetooth: hci3: command tx timeout
[  163.418631][T11072] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.426355][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1716'.
[  163.627035][T11077] team0: Port device gtp1 added
[  163.779300][T11087] IPv6: addrconf: prefix option has invalid lifetime
[  163.811531][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1722'.
[  163.814264][T11091] validate_nla: 1 callbacks suppressed
[  163.814271][T11091] netlink: 'syz.3.1722': attribute type 1 has an invalid length.
[  163.823355][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1722'.
[  163.826227][T11092] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  163.833019][T11095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1723'.
[  163.877578][T11099] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  163.901287][T11099] netlink: 'syz.3.1724': attribute type 10 has an invalid length.
[  163.910389][T11099] mac80211_hwsim hwsim14 wlan1: left allmulticast mode
[  163.951532][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'.
[  163.954282][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1727'.
[  163.956975][T11105] netlink: 'syz.0.1727': attribute type 14 has an invalid length.
[  163.985029][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1729'.
[  163.987739][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1729'.
[  164.031002][T11113] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1731'.
[  164.302739][   T60] IPVS: starting estimator thread 0...
[  164.389947][T11132] IPVS: using max 61 ests per chain, 146400 per kthread
[  164.546657][T11149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.609766][T11149] netlink: 'syz.2.1742': attribute type 8 has an invalid length.
[  165.097457][T11161] ip6gre1: entered promiscuous mode
[  165.349132][T11179] netlink: 'syz.3.1752': attribute type 39 has an invalid length.
[  165.470750][ T5218] Bluetooth: hci3: command tx timeout
[  165.500053][T11186] netlink: 'syz.3.1754': attribute type 11 has an invalid length.
[  165.569234][T11183] lo speed is unknown, defaulting to 1000
[  165.585058][T11183] lo speed is unknown, defaulting to 1000
[  165.758253][T11209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.763333][T11209] netlink: 'syz.0.1759': attribute type 8 has an invalid length.
[  165.838523][T11222] netlink: 'syz.3.1761': attribute type 8 has an invalid length.
[  165.847546][T11222] netlink: 'syz.3.1761': attribute type 16 has an invalid length.
[  165.851690][T11222] netlink: 'syz.3.1761': attribute type 17 has an invalid length.
[  165.861751][T11222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  165.868289][T11223] netlink: 'syz.3.1761': attribute type 8 has an invalid length.
[  166.011386][ T5894] syz_tun: tun_net_xmit 90
[  166.242182][ T5894] syz_tun: tun_net_xmit 90
[  166.416435][T11274] macsec1: entered promiscuous mode
[  166.420044][T11274] macsec1: entered allmulticast mode
[  166.590751][T11293] bridge_slave_0: default FDB implementation only supports local addresses
[  166.680408][T11305] syzkaller0: entered promiscuous mode
[  166.682113][T11305] syzkaller0: entered allmulticast mode
[  166.688020][T11305] xt_hashlimit: size too large, truncated to 1048576
[  166.705539][ T5841] erspan0: left promiscuous mode
[  166.837095][T11328] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.978787][T11340] netlink: 'syz.0.1796': attribute type 11 has an invalid length.
[  167.056838][T11351] bond0: Master is either lo or non-ether device
[  167.155361][T11357] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  167.215825][T11367] bridge0: port 2(syz_tun) entered blocking state
[  167.218017][T11367] bridge0: port 2(syz_tun) entered disabled state
[  167.220638][T11367] syz_tun: entered allmulticast mode
[  167.224414][T11367] syz_tun: entered promiscuous mode
[  167.229020][T11367] bridge0: port 2(syz_tun) entered blocking state
[  167.231303][T11367] bridge0: port 2(syz_tun) entered forwarding state
[  167.771702][T11401] bond0: option ad_select: unable to set because the bond device is up
[  167.870788][T11411] nftables ruleset with unbound set
[  167.966955][T11414] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  167.970757][T11414] team0: Device ipvlan2 is already an upper device of the team interface
[  168.010893][T11415] batadv_slave_1: entered promiscuous mode
[  168.116506][T11412] batadv_slave_1: left promiscuous mode
[  168.166175][T11419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.369682][T11424] block nbd0: server does not support multiple connections per device.
[  168.376100][T11424] block nbd0: shutting down sockets
[  168.491927][T11440] __nla_validate_parse: 20 callbacks suppressed
[  168.491941][T11440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1828'.
[  168.507133][T11442] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  168.536664][T11444] C: renamed from team_slave_0
[  168.540731][T11444] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1830'.
[  168.612845][T11453] pimreg: entered allmulticast mode
[  168.621151][T11453] pimreg: left allmulticast mode
[  168.920295][T11476] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1841'.
[  169.013026][T11477] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  169.036408][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1843'.
[  169.065647][T11484] syzkaller0: entered promiscuous mode
[  169.067449][T11484] syzkaller0: entered allmulticast mode
[  169.078724][T11485] tap0: tun_chr_ioctl cmd 1074025676
[  169.080499][T11485] tap0: owner set to 0
[  169.081958][T11485] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1843'.
[  169.740965][T11496] lo speed is unknown, defaulting to 1000
[  169.744746][T11496] lo speed is unknown, defaulting to 1000
[  170.992291][T11507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.996344][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1850'.
[  171.008817][T11507] validate_nla: 5 callbacks suppressed
[  171.008826][T11507] netlink: 'syz.3.1850': attribute type 8 has an invalid length.
[  171.132544][T11520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1853'.
[  171.212309][T11525] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1858'.
[  171.215806][T11525] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  171.254541][T11531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.258455][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1861'.
[  171.264822][T11531] netlink: 'syz.3.1861': attribute type 8 has an invalid length.
[  171.281801][T11533] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1862'.
[  171.378626][T11542] xt_CT: You must specify a L4 protocol and not use inversions on it
[  171.533155][T11552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.573996][T11552] netlink: 'syz.2.1869': attribute type 8 has an invalid length.
[  172.096449][T11570] gtp2: entered promiscuous mode
[  172.193278][T11579] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  172.195903][T11579] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.198539][T11579] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.201349][T11579] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  172.207107][T11579] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.210061][T11579] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.212887][T11579] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.215510][T11579] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.425895][T11595] nbd: must specify a size in bytes for the device
[  172.543533][T11609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.554476][T11609] netlink: 'syz.3.1888': attribute type 8 has an invalid length.
[  172.605079][T11613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.618058][T11613] netlink: 'syz.3.1890': attribute type 8 has an invalid length.
[  172.899404][T11642] x_tables: unsorted underflow at hook 2
[  172.929248][T11644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.971015][T11644] netlink: 'syz.2.1897': attribute type 8 has an invalid length.
[  172.983908][T11648] bond0: option arp_all_targets: invalid value (18446744073709551613)
[  173.038423][T11653] netlink: 'syz.3.1900': attribute type 1 has an invalid length.
[  173.041338][T11653] netlink: 'syz.3.1900': attribute type 3 has an invalid length.
[  173.171310][T11668] xt_connbytes: Forcing CT accounting to be enabled
[  173.173685][T11668] x_tables: ip_tables: ah match: only valid for protocol 51
[  173.299307][T11675] netlink: 'syz.3.1907': attribute type 29 has an invalid length.
[  173.371900][T11680] veth1_macvtap: left promiscuous mode
[  174.071328][T11685] __nla_validate_parse: 23 callbacks suppressed
[  174.071340][T11685] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1911'.
[  174.278362][T11700] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.286581][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1916'.
[  174.292959][T11700] netlink: 'syz.0.1916': attribute type 8 has an invalid length.
[  174.668062][T11713] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1921'.
[  174.753670][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1922'.
[  174.756499][T11718] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1922'.
[  174.810372][T11718] bond7: entered promiscuous mode
[  174.812409][T11718] bond7: entered allmulticast mode
[  174.814582][T11718] 8021q: adding VLAN 0 to HW filter on device bond7
[  175.234777][T11729] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1925'.
[  175.424462][T11746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.429964][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1930'.
[  175.846978][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1940'.
[  175.901354][T11785] x_tables: duplicate underflow at hook 1
[  175.905049][T11788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1943'.
[  175.905068][T11789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1943'.
[  175.935388][T11788] IPv6: Can't replace route, no match found
[  179.164828][T11820] validate_nla: 6 callbacks suppressed
[  179.164840][T11820] netlink: 'syz.0.1952': attribute type 4 has an invalid length.
[  179.239117][T11828] __nla_validate_parse: 2 callbacks suppressed
[  179.239133][T11828] netlink: 724 bytes leftover after parsing attributes in process `syz.0.1952'.
[  179.243945][T11828] netlink: 83 bytes leftover after parsing attributes in process `syz.0.1952'.
[  179.280180][T11833] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  179.306209][T11837] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.315787][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'.
[  179.322297][T11837] netlink: 'syz.0.1958': attribute type 8 has an invalid length.
[  179.343193][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1956'.
[  179.506083][T11853] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1965'.
[  179.515527][T11846] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1962'.
[  179.580061][T11860] raw_sendmsg: syz.2.1967 forgot to set AF_INET. Fix it!
[  179.617075][T11864] xt_TCPMSS: Only works on TCP SYN packets
[  179.726101][T11876] netlink: 'syz.3.1973': attribute type 3 has an invalid length.
[  179.728657][T11876] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1973'.
[  179.763422][T11881] netlink: 'syz.3.1974': attribute type 6 has an invalid length.
[  179.812228][T11885] dvmrp0: entered allmulticast mode
[  179.856026][T11890] netlink: 'syz.3.1977': attribute type 4 has an invalid length.
[  179.864862][T11890] netlink: 'syz.3.1977': attribute type 4 has an invalid length.
[  179.872082][T11893] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  179.915816][T11896] lo speed is unknown, defaulting to 1000
[  179.918495][T11896] lo speed is unknown, defaulting to 1000
[  179.954921][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'.
[  180.424619][T11917] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode
[  180.427510][T11917] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  180.435523][T11917] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1987'.
[  180.525971][T11922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.532012][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1989'.
[  180.536611][T11922] netlink: 'syz.0.1989': attribute type 8 has an invalid length.
[  180.547731][T11924] netlink: 'syz.3.1990': attribute type 2 has an invalid length.
[  180.768358][T11941] netlink: 'syz.3.1996': attribute type 14 has an invalid length.
[  180.804275][T11943] netlink: 'syz.2.1997': attribute type 1 has an invalid length.
[  181.413014][T11985] lo speed is unknown, defaulting to 1000
[  181.415670][T11985] lo speed is unknown, defaulting to 1000
[  181.783557][T12015] 8021q: adding VLAN 0 to HW filter on device bond3
[  181.793386][T12015] vlan0: entered allmulticast mode
[  181.794926][T12015] geneve1: entered allmulticast mode
[  181.801774][T12015] bond3: (slave vlan0): making interface the new active one
[  181.805101][T12015] bond3: (slave vlan0): Enslaving as an active interface with an up link
[  181.845127][T12021] : entered promiscuous mode
[  181.909418][T12027] syz_tun: tun_net_xmit 32
[  181.914404][T12029] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  182.718360][T12049] ip6gre2: entered allmulticast mode
[  182.816764][T12053] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.820156][T12053] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.868552][T12053] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.873215][T12053] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.951755][T12053] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.955085][T12053] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.015150][T12053] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.018422][T12053] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.096683][T12053] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  183.099448][T12053] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.107774][T12053] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.118913][T12053] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.131618][T12053] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.134505][T12053] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.147260][T12053] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.152630][T12053] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.160594][T12070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.166095][T12071] syzkaller0: entered promiscuous mode
[  183.176147][T12071] syzkaller0: entered allmulticast mode
[  183.192121][T12071] tipc: Resetting bearer <eth:syzkaller0>
[  183.195953][T12069] tipc: Resetting bearer <eth:syzkaller0>
[  183.209946][T12069] tipc: Disabling bearer <eth:syzkaller0>
[  183.367489][T12086] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  183.377234][T12086] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  183.417021][T12094] xt_bpf: check failed: parse error
[  183.421649][T12094] ------------[ cut here ]------------
[  183.423621][T12094] WARNING: CPU: 1 PID: 12094 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0
[  183.426595][T12094] Modules linked in:
[  183.428331][T12094] CPU: 1 UID: 0 PID: 12094 Comm: syz.0.2044 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  183.433351][T12094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.436306][T12094] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[  183.438134][T12094] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 f5 8b 00 cc e8 f2 ee db f6 90 0f 0b 90 eb e1 e8 e7 ee db f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[  183.444330][T12094] RSP: 0018:ffffc900045f6ff0 EFLAGS: 00010287
[  183.446143][T12094] RAX: ffffffff8ae43d59 RBX: ffff88810f30c000 RCX: 0000000000080000
[  183.448442][T12094] RDX: ffffc90003a6a000 RSI: 000000000000037d RDI: 000000000000037e
[  183.451240][T12094] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ae43873
[  183.453541][T12094] R10: dffffc0000000000 R11: ffffed1021e61831 R12: 1ffff11021e6180a
[  183.455839][T12094] R13: ffff88803a950e40 R14: 0000000000000001 R15: ffffffff8ae43873
[  183.458159][T12094] FS:  00007fdcbeb7e6c0(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[  183.461775][T12094] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.463689][T12094] CR2: 0000200000007380 CR3: 000000002a332000 CR4: 00000000000006f0
[  183.466054][T12094] Call Trace:
[  183.467189][T12094]  <TASK>
[  183.468141][T12094]  rate_control_rate_init_all_links+0x109/0x1a0
[  183.472188][T12094]  sta_apply_auth_flags+0x1c2/0x400
[  183.473831][T12094]  sta_apply_parameters+0xe4b/0x15b0
[  183.475491][T12094]  ieee80211_add_station+0x424/0x6a0
[  183.477133][T12094]  rdev_add_station+0x108/0x290
[  183.478647][T12094]  nl80211_new_station+0x1723/0x1b40
[  183.480813][T12094]  ? __pfx_nl80211_new_station+0x10/0x10
[  183.482545][T12094]  ? netdev_run_todo+0xe1d/0xea0
[  183.484096][T12094]  ? nl80211_pre_doit+0x4f1/0x930
[  183.485655][T12094]  genl_family_rcv_msg_doit+0x215/0x300
[  183.487369][T12094]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  183.489244][T12094]  ? bpf_lsm_capable+0x9/0x20
[  183.491313][T12094]  ? security_capable+0x7e/0x2e0
[  183.492801][T12094]  genl_rcv_msg+0x60e/0x790
[  183.494135][T12094]  ? __pfx_genl_rcv_msg+0x10/0x10
[  183.495588][T12094]  ? ref_tracker_free+0x63a/0x7d0
[  183.497072][T12094]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  183.498639][T12094]  ? __pfx_nl80211_new_station+0x10/0x10
[  183.500435][T12094]  ? __pfx_nl80211_post_doit+0x10/0x10
[  183.502097][T12094]  ? __pfx_ref_tracker_free+0x10/0x10
[  183.503689][T12094]  netlink_rcv_skb+0x208/0x470
[  183.505103][T12094]  ? __pfx_genl_rcv_msg+0x10/0x10
[  183.506602][T12094]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  183.508205][T12094]  ? down_read+0x1ad/0x2e0
[  183.509647][T12094]  genl_rcv+0x28/0x40
[  183.510828][T12094]  netlink_unicast+0x75c/0x8e0
[  183.512251][T12094]  netlink_sendmsg+0x805/0xb30
[  183.513723][T12094]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.515398][T12094]  ? aa_sock_msg_perm+0x94/0x160
[  183.516842][T12094]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  183.518424][T12094]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.520180][T12094]  __sock_sendmsg+0x21c/0x270
[  183.521592][T12094]  ____sys_sendmsg+0x505/0x830
[  183.523080][T12094]  ? __pfx_____sys_sendmsg+0x10/0x10
[  183.524671][T12094]  ? import_iovec+0x74/0xa0
[  183.526056][T12094]  ___sys_sendmsg+0x21f/0x2a0
[  183.527471][T12094]  ? __pfx____sys_sendmsg+0x10/0x10
[  183.529024][T12094]  ? __fget_files+0x2a/0x420
[  183.530602][T12094]  ? __fget_files+0x3a0/0x420
[  183.532038][T12094]  __x64_sys_sendmsg+0x19b/0x260
[  183.533484][T12094]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  183.535129][T12094]  ? rcu_is_watching+0x15/0xb0
[  183.536584][T12094]  ? do_syscall_64+0xbe/0x3b0
[  183.538008][T12094]  do_syscall_64+0xfa/0x3b0
[  183.539355][T12094]  ? lockdep_hardirqs_on+0x9c/0x150
[  183.541035][T12094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.542786][T12094]  ? exc_page_fault+0x9f/0xf0
[  183.544206][T12094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.545959][T12094] RIP: 0033:0x7fdcbdd8e929
[  183.547267][T12094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.553009][T12094] RSP: 002b:00007fdcbeb7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.555546][T12094] RAX: ffffffffffffffda RBX: 00007fdcbdfb5fa0 RCX: 00007fdcbdd8e929
[  183.558021][T12094] RDX: 0000000000008050 RSI: 0000200000007380 RDI: 0000000000000006
[  183.560516][T12094] RBP: 00007fdcbde10ca1 R08: 0000000000000000 R09: 0000000000000000
[  183.562916][T12094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.565330][T12094] R13: 0000000000000000 R14: 00007fdcbdfb5fa0 R15: 00007ffd149d8548
[  183.567736][T12094]  </TASK>
[  183.568708][T12094] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  183.570934][T12094] CPU: 1 UID: 0 PID: 12094 Comm: syz.0.2044 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  183.574602][T12094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.577488][T12094] Call Trace:
[  183.578471][T12094]  <TASK>
[  183.579320][T12094]  dump_stack_lvl+0x99/0x250
[  183.580714][T12094]  ? __asan_memcpy+0x40/0x70
[  183.582129][T12094]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.583665][T12094]  ? __pfx__printk+0x10/0x10
[  183.585023][T12094]  panic+0x2db/0x790
[  183.586212][T12094]  ? __pfx_panic+0x10/0x10
[  183.587556][T12094]  __warn+0x31b/0x4b0
[  183.588724][T12094]  ? rate_control_rate_init+0x64a/0x6e0
[  183.590371][T12094]  ? rate_control_rate_init+0x64a/0x6e0
[  183.592038][T12094]  report_bug+0x2be/0x4f0
[  183.593318][T12094]  ? rate_control_rate_init+0x64a/0x6e0
[  183.594932][T12094]  ? rate_control_rate_init+0x64a/0x6e0
[  183.596639][T12094]  ? rate_control_rate_init+0x64c/0x6e0
[  183.598282][T12094]  handle_bug+0x84/0x160
[  183.599521][T12094]  exc_invalid_op+0x1a/0x50
[  183.600860][T12094]  asm_exc_invalid_op+0x1a/0x20
[  183.602330][T12094] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[  183.604144][T12094] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 f5 8b 00 cc e8 f2 ee db f6 90 0f 0b 90 eb e1 e8 e7 ee db f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[  183.609758][T12094] RSP: 0018:ffffc900045f6ff0 EFLAGS: 00010287
[  183.611601][T12094] RAX: ffffffff8ae43d59 RBX: ffff88810f30c000 RCX: 0000000000080000
[  183.613887][T12094] RDX: ffffc90003a6a000 RSI: 000000000000037d RDI: 000000000000037e
[  183.616244][T12094] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ae43873
[  183.618666][T12094] R10: dffffc0000000000 R11: ffffed1021e61831 R12: 1ffff11021e6180a
[  183.620965][T12094] R13: ffff88803a950e40 R14: 0000000000000001 R15: ffffffff8ae43873
[  183.623260][T12094]  ? rate_control_rate_init+0x163/0x6e0
[  183.625043][T12094]  ? rate_control_rate_init+0x163/0x6e0
[  183.626729][T12094]  ? rate_control_rate_init+0x649/0x6e0
[  183.628367][T12094]  rate_control_rate_init_all_links+0x109/0x1a0
[  183.630271][T12094]  sta_apply_auth_flags+0x1c2/0x400
[  183.631784][T12094]  sta_apply_parameters+0xe4b/0x15b0
[  183.633335][T12094]  ieee80211_add_station+0x424/0x6a0
[  183.634890][T12094]  rdev_add_station+0x108/0x290
[  183.636421][T12094]  nl80211_new_station+0x1723/0x1b40
[  183.638052][T12094]  ? __pfx_nl80211_new_station+0x10/0x10
[  183.639746][T12094]  ? netdev_run_todo+0xe1d/0xea0
[  183.641278][T12094]  ? nl80211_pre_doit+0x4f1/0x930
[  183.642816][T12094]  genl_family_rcv_msg_doit+0x215/0x300
[  183.644510][T12094]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  183.646353][T12094]  ? bpf_lsm_capable+0x9/0x20
[  183.647793][T12094]  ? security_capable+0x7e/0x2e0
[  183.649322][T12094]  genl_rcv_msg+0x60e/0x790
[  183.650681][T12094]  ? __pfx_genl_rcv_msg+0x10/0x10
[  183.652173][T12094]  ? ref_tracker_free+0x63a/0x7d0
[  183.653628][T12094]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  183.655205][T12094]  ? __pfx_nl80211_new_station+0x10/0x10
[  183.656855][T12094]  ? __pfx_nl80211_post_doit+0x10/0x10
[  183.658448][T12094]  ? __pfx_ref_tracker_free+0x10/0x10
[  183.659995][T12094]  netlink_rcv_skb+0x208/0x470
[  183.661364][T12094]  ? __pfx_genl_rcv_msg+0x10/0x10
[  183.662879][T12094]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  183.664420][T12094]  ? down_read+0x1ad/0x2e0
[  183.665734][T12094]  genl_rcv+0x28/0x40
[  183.666958][T12094]  netlink_unicast+0x75c/0x8e0
[  183.668353][T12094]  netlink_sendmsg+0x805/0xb30
[  183.669784][T12094]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.671345][T12094]  ? aa_sock_msg_perm+0x94/0x160
[  183.672843][T12094]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  183.674369][T12094]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.675893][T12094]  __sock_sendmsg+0x21c/0x270
[  183.677306][T12094]  ____sys_sendmsg+0x505/0x830
[  183.678779][T12094]  ? __pfx_____sys_sendmsg+0x10/0x10
[  183.680345][T12094]  ? import_iovec+0x74/0xa0
[  183.681688][T12094]  ___sys_sendmsg+0x21f/0x2a0
[  183.683130][T12094]  ? __pfx____sys_sendmsg+0x10/0x10
[  183.684696][T12094]  ? __fget_files+0x2a/0x420
[  183.686145][T12094]  ? __fget_files+0x3a0/0x420
[  183.687556][T12094]  __x64_sys_sendmsg+0x19b/0x260
[  183.689159][T12094]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  183.690758][T12094]  ? rcu_is_watching+0x15/0xb0
[  183.692163][T12094]  ? do_syscall_64+0xbe/0x3b0
[  183.693560][T12094]  do_syscall_64+0xfa/0x3b0
[  183.694898][T12094]  ? lockdep_hardirqs_on+0x9c/0x150
[  183.696491][T12094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.698321][T12094]  ? exc_page_fault+0x9f/0xf0
[  183.699703][T12094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.701452][T12094] RIP: 0033:0x7fdcbdd8e929
[  183.702788][T12094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.708370][T12094] RSP: 002b:00007fdcbeb7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.710789][T12094] RAX: ffffffffffffffda RBX: 00007fdcbdfb5fa0 RCX: 00007fdcbdd8e929
[  183.713105][T12094] RDX: 0000000000008050 RSI: 0000200000007380 RDI: 0000000000000006
[  183.715485][T12094] RBP: 00007fdcbde10ca1 R08: 0000000000000000 R09: 0000000000000000
[  183.717905][T12094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.720317][T12094] R13: 0000000000000000 R14: 00007fdcbdfb5fa0 R15: 00007ffd149d8548
[  183.722664][T12094]  </TASK>
[  183.724186][T12094] Kernel Offset: disabled
[  183.725555][T12094] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:13:29  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff99af0a20 RBX=ffffffff8e13f160 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888108495640 RBP=ffffffff8172aae5 RSP=ffffc900083b6e08
R8 =0000000000000000 R9 =0000000000000001 R10=ffffc900083b7058 R11=ffffffff81ad03a0
R12=0000000000000002 R13=ffffffff8e13f160 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819e4271 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbbe0f9f440 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=7269642065676e61 68632074276e6163 XMM01=2e36312e3627206f 742079726f746365
XMM02=2d72656c6c616b7a 79732d3563722d30 XMM03=6337393934386337 34672d3935313030
XMM04=2779747269642d36 3836633739393438 XMM05=633734672d393531 30302d72656c6c61
XMM06=6b7a79732d356372 2d302e36312e3627 XMM07=206f742079726f74 6365726964206567
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000001082f RDI=0000000000010830 RBP=00000000000003f8 RSP=ffffc900045f6790
R8 =ffff888021488237 R9 =1ffff11004291046 R10=dffffc0000000000 R11=ffffffff85460dc0
R12=dffffc0000000000 R13=ffffffff99aee8c1 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdcbeb7e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000007380 CR3=000000002a332000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fdcbeaed100 00007fdcbdf86440 XMM05=00007fdcbdf86458 00007fdcbdf864a0
XMM06=00007fdcbdf86498 00007fdcbdf86490 XMM07=00007fdcbdf86488 00007fdcbdf86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fdcbde11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
