last executing test programs:

2.38122758s ago: executing program 0 (id=3639):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000046cc7000800180001ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0xa1ffffff, 0x3}, {0x14, 0x19, {0x5, 0x1000, 0x0, 0x7000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x44040)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r7, 0xda409aa40cc3acf1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x60, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0xe, 0x0, 0x4293, 0x9, 0x4]}, @NL80211_ATTR_FRAME={0x3a, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xc}, @broadcast, @broadcast, @initial, {0xd, 0x4}}, @tdls_chsw_resp={0xc, 0x6, {0x37, {0x65, 0x12, {@initial, @device_a, @device_b}}, {0x68, 0x4, {0xffff, 0x2}}}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40801}, 0x883)
sendmsg$sock(r3, &(0x7f0000000880)={&(0x7f0000000400)=@rc={0x1f, @none, 0xc}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)="23d10007a8fc3ca4e374f7a704ccf557c1a0db1311ed2d403528b34848cff769e0d9e6210e131c2990a0f7c2c24ad1b373a559c17e649121f5cb6020d62824e605f599e11fbd721a1775a8f5a73cdb9a48daa29c6e312bf0fa0175ba6d95ceba112479bd2bb40ac828e7e22c4e83381cc715e73c19df594564c5cca8abbe276dbddbc4243c8f0bd486eaabcd1c7299adac8a59b267c37f5f8bb477e48dfa2a966d681e391072f5e01cc8ef4ddcf4cf9fe0f69f798e163b01343238b9fedc3be319d522322abc54a36f3cf3651ed090ad", 0xd0}, {&(0x7f00000006c0)="36430c6d5c1fa32a4ffae98782aba80125adfd3f1436fc5a083ac152569c48adadaa2bdeb41964fd3a515ca22c2eef63ddbde3811a6cd19ad102ca259cb49cecc0c23fa41a9f43e80d8a8fee05e1963ce5249934de27171e88e63433f87f4047111998dc4b2edc80781af38751", 0x6d}, {&(0x7f0000000740)="386a5dac7d3986ce13f11b0da5bb00c6215c345a6906c95635d23848e7d0551a688719abd5cca0a5ea49a80f9a28c76f84331aef595e2c62fdcd1fd45046b89dc03762696b5b48e129caecc5c40ec9847907505af78e506c33baa416c1ff21464b81d4ee5eed815d2089681537ace33da07a96e7f0f64a1f87", 0x79}], 0x3, &(0x7f0000000800)=[@mark={{0x14, 0x1, 0x24, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xb}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x60}, 0x8000)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6040, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20)
r10 = socket$kcm(0x10, 0x2, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040)
sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73229c52bbea23870200000079d3c7a519afc7d2dff1cc9fe1b9bd41c5d0b4f2d04979d68cc3471637e69740313dd0f31448193bd26131968d5f790e1429b24ba01f24670353dc73659f4a40f9972fa07c53e4c92d84f3394d5ead33881c01ec616a7a5d6f7ef1c656", 0x96}], 0x1}, 0x20048020)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000300000000000008000a00", @ANYRES32=0x0, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="081c000002000000"], 0x50}}, 0x0)

1.794482655s ago: executing program 0 (id=3646):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x1c, 0x43, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="0500"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x70, &(0x7f0000000100)}, 0x1c)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_to_team\x00', 0x1000})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xff, 0x9})
pwritev(r8, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r7, 0x100000000)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000001740)={'sit0\x00', &(0x7f0000001640)={'syztnl1\x00', <r10=>0x0, 0x700, 0x20, 0x7, 0x4, {{0x2d, 0x4, 0x1, 0x16, 0xb4, 0x68, 0x0, 0xf8, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@noop, @cipso={0x86, 0x2c, 0x0, [{0x1, 0x5, "188f27"}, {0x1, 0x8, "92f4921ba303"}, {0x7, 0xa, "ad0150f9096afbf1"}, {0x6, 0x4, "57a4"}, {0x7, 0xb, "b4f6e2d3c50e6407ce"}]}, @cipso={0x86, 0x15, 0x3, [{0x4, 0xd, "c5cf906d6d203f68e0942a"}, {0x0, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x76, 0x1, 0x8, [{@loopback, 0x8}, {@multicast2, 0x8d5cf4d}, {@empty, 0xb03}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@local, 0x8}, {@broadcast, 0x6}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xc7, [@private=0xa010101, @local, @remote, @empty, @private=0xa010102, @broadcast, @rand_addr=0x64010101, @loopback]}]}}}}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000ea7b18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000030000008510000007000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x893e, 0xd5, &(0x7f0000001540)=""/213, 0x41000, 0x11, '\x00', r10, 0x25, r8, 0x8, &(0x7f0000001780)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000017c0)={0x0, 0x2, 0x1, 0x5cb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6)

1.490724485s ago: executing program 1 (id=3649):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
sendfile(r2, r2, &(0x7f0000000040)=0x8000000000000000, 0x9)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x10, 0x1}]}]}}, &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)

1.489951514s ago: executing program 0 (id=3650):
socket(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
readv(r7, &(0x7f0000000100), 0x0)
close(0x3)
write$cgroup_int(r8, &(0x7f0000000140), 0xfffffdef)
close(0x4)
r9 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$alg(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffff0, &(0x7f0000000600), 0x30, 0x40010844}, 0x88f0)
sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe}}}, 0x24}}, 0x0)
recvmmsg(r9, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000340)=""/58, 0x3a}], 0x2}, 0x101}], 0x1, 0x60, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r11, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x13, 0xfd}, 0x8)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x10)

751.402623ms ago: executing program 2 (id=3652):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f00000004c0)={0x2, 0x4e22, @multicast1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000480)="3e314cfc204b39401b3c77c0b48c", 0x0, 0xae8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0)

750.305816ms ago: executing program 2 (id=3653):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
close(0x4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012cbd7000fedbdf2b95b1925500e2ff0b009900880c000002"], 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x811)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000305ffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1501000000000100240012ce09000100626f6e00000008000900037a89c4"], 0x44}}, 0x28000000)

680.662515ms ago: executing program 2 (id=3654):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) (async)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4)
recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}}], 0x1, 0x40002142, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000004c0)={0x6, 'veth0_vlan\x00', {0x2}, 0x4})
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a240040c6827400060a0b04000000000000000002000000040004800900010073797a30000000001400000011000100"/76], 0x4c}}, 0x4048010)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x2100000000000000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x18, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x8000) (async)
sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x8000)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x11)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18)
connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18)
sendmmsg(r6, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) (async)
sendmmsg(r6, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4)
recvmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/70, 0x46}], 0x1, &(0x7f0000000340)=""/39, 0x27}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4) (async)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4)
sendmmsg$inet(r4, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="d2a534b308834d054586feb5c9428624db4b878120e41be144acec28b091f1237c91d74cf1ce0c17632e8dce6ac8c6822c2382fc3ac7c89f2d955bc265df5364df0d56866c920de52e29535b686bb2b4e7e485", 0x53}, {&(0x7f0000000a00)="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", 0x53f}], 0x2}}], 0x2, 0x40) (async)
sendmmsg$inet(r4, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="d2a534b308834d054586feb5c9428624db4b878120e41be144acec28b091f1237c91d74cf1ce0c17632e8dce6ac8c6822c2382fc3ac7c89f2d955bc265df5364df0d56866c920de52e29535b686bb2b4e7e485", 0x53}, {&(0x7f0000000a00)="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", 0x53f}], 0x2}}], 0x2, 0x40)
socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0)

571.59942ms ago: executing program 0 (id=3655):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x12, r2, 0x3fab000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

570.778984ms ago: executing program 1 (id=3656):
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000080))
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.swap.events\x00', 0x0, 0x0)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_ifreq(r2, 0x891d, &(0x7f0000000180)={'veth1_to_bond\x00', @ifru_settings={0x6, 0x6, @fr_pvc_info=&(0x7f0000000140)={0x3ff, 'batadv0\x00'}}})
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044080}, 0xc880)
recvmsg(r2, &(0x7f00000016c0)={&(0x7f00000002c0)=@caif=@util, 0x80, &(0x7f0000001580)=[{&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f0000000440)=""/206, 0xce}, {&(0x7f0000000540)=""/43, 0x2b}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4, &(0x7f00000015c0)=""/238, 0xee}, 0x62)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001700)={<r3=>0x0, 0x1, 0x1, [0x2, 0x2, 0x2f0, 0x6, 0x2], [0x6, 0xffffffffffffffff, 0x1, 0x8, 0x0, 0x5, 0x5, 0x4800, 0xd30a, 0xb4, 0x6, 0x3ff, 0x9, 0x1, 0xc, 0x8, 0x4, 0x7, 0x8, 0x3346, 0xd5, 0x7037836e, 0xc27, 0x3, 0x1, 0x2, 0x4, 0x7, 0x4, 0x6, 0xb, 0x19c, 0x1ff, 0x1, 0x6e, 0xfe4, 0x80000000, 0x100000001, 0x26, 0x8, 0x0, 0x3e46, 0x0, 0x9, 0x8, 0x9, 0x10, 0x0, 0x0, 0x10001, 0x704c, 0x2, 0x3, 0x9, 0x3, 0x0, 0x8, 0x6, 0x8000, 0x1, 0x1011, 0xfa, 0x4, 0x1, 0x0, 0x3, 0x57, 0x7, 0x4, 0x3, 0x7, 0x8, 0x5, 0x2, 0x4, 0x0, 0x5, 0x49, 0x6, 0x7, 0x5, 0x9, 0x4710, 0xffffffff, 0x2, 0x9, 0x9, 0xf, 0x3, 0x0, 0x1, 0x6f8, 0x4, 0x1, 0x8, 0x1, 0x7, 0x74f5, 0xff, 0x2, 0x1, 0xc, 0x5b, 0x97, 0x9, 0x1, 0x401, 0x1, 0x9714, 0x2, 0x4, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x5, 0x4, 0xfff, 0x2, 0x207]})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001b40)={r3, "c66fe3d1524efb66387e67e8cec3a48a"})
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000002b40)={@rand_addr=' \x01\x00'}, 0x14)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002b80)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
r4 = accept$packet(r1, &(0x7f0000002bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002c00)=0x14)
getsockname$packet(r4, &(0x7f0000002c40)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002c80)=0x14)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000002dc0)={<r6=>r0, &(0x7f0000002cc0)='batadv0\x00', 0x20000, &(0x7f0000002d00)={@align=0x8001, {0x401, 0x100, 0xd, 0x4658}}, 0x0, &(0x7f0000002d40), &(0x7f0000002d80)=0x6})
clock_gettime(0x0, &(0x7f0000002e00)={<r7=>0x0, <r8=>0x0})
sendmsg$can_bcm(r6, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x4, 0x102, 0x6, {r7, r8/1000+10000}, {0x0, 0xea60}, {0x3}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "ac3e1c388e184736"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x91)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003100)={0x2, <r9=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000003180)={0x1b, 0xf, &(0x7f0000002f40)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000002fc0)='GPL\x00', 0x5, 0x5c, &(0x7f0000003000)=""/92, 0x40f00, 0x20, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000003080)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000030c0)={0x2, 0xb, 0x8, 0xadd1}, 0x10, r9, r1, 0x3, 0x0, &(0x7f0000003140)=[{0x1, 0x1, 0x2, 0xc}, {0x5, 0x4, 0xb, 0x2}, {0x2, 0x4, 0x8, 0x1}], 0x10, 0x1}, 0x94)
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000003300)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x3c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20041)
getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000003340), &(0x7f0000003380)=0x8)
tee(r6, r0, 0x3, 0x8)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000033c0)="ef4f2821422ca9badd8e14cf72c4de8322ea67b132f0b147f37684c943fd7603a014b993dbeecaee26c536a0f0d9727c2083bc987523c6a92ab2f0d4ce8576c6676b5b34079c3723c32eb89d7d5a1b55c24d7d29a6b92a111f1e0f440a05788297212034eb6e524802664f19fc628dd5575005e5df3ba60e078335514e4fb17b7a2583f0337b1a6369f318f2ae36ff078282e8c93420398e73350e51a0828e3b275bff7309d1d6b5db5652e46240984c68fae35f1af67fb5c36308939a3e9c0af54013325bd9bd7383a6b12b0fe16386ff2be0ecb92468fcbdda4f150792e1ba4329cec5ab1c101b2a7f1fc6e233d7e7e3f2d37feb29f1a089a2e3123a1bfa7c")
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000035c0)=r9, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003680)=@bpf_lsm={0x1d, 0xe, &(0x7f00000034c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x1, 0x0, 0x0, 0x7fff, 0x2fd00ff1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff6e9, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000003540)='syzkaller\x00', 0x168, 0x36, &(0x7f0000003580)=""/54, 0x41000, 0x2, '\x00', r5, 0x1b, r10, 0x8, &(0x7f0000003600)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000003640)={0x1, 0xe, 0x4, 0x6}, 0x10, r9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000003740)={'virt_wifi0\x00', {0x2, 0x4e21, @broadcast}})
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000003780))
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f00000038c0)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003880)={&(0x7f0000003800)={0x74, 0x3, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffff800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x340}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x10000000)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000003980), 0x8)

501.035781ms ago: executing program 1 (id=3657):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x44}}, 0x4000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
openat$cgroup_freezer_state(r4, &(0x7f00000003c0), 0x2, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000440)='nr0\x00') (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000400)) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) (async)
unshare(0x24020400)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000000000007b0000000085538a57170000009500004c645fd6a5"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044090}, 0x0)

499.653945ms ago: executing program 0 (id=3658):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r0}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002f00), r3)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0xffffffffffffffbd, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x9, 0x1ff, 0x8000, 0x400}}]}, 0x2c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYRESDEC, @ANYRES64=0x0, @ANYRES32=r3, @ANYRES32=r0], 0x48)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1f, 0x0, 0x0, {0x5}}, [], {0x14, 0x3e9}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x0, 0x20, 0x0, [{@private}, {@dev}]}})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x48}}, 0x0)

447.361192ms ago: executing program 1 (id=3659):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @private1, 0x4}, 0x1c)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r1, 0x17}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="f6185f", 0x3}], 0x1}, 0x4) (async)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r1, 0x17}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="f6185f", 0x3}], 0x1}, 0x4)

379.654646ms ago: executing program 2 (id=3660):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x5, 0x1, 0xb1, 0x0, 0x12, 0xda, 0xb1, 0x4c, 0x9, 0x1, 0x2, 0x7, 0x29, 0x48}, 0xe)
shutdown(r0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040), 0x10)
listen(r3, 0x0)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080), 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r6=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r6, 0xd}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r7=>r6, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r7, @in={{0x2, 0x4e20, @empty}}, 0xa, 0x310, 0x8, 0x1ff, 0x2, 0xfff, 0x8}, &(0x7f0000000400)=0x9c)
r8 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4c}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0)

295.945609ms ago: executing program 2 (id=3661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000005940)=[{{&(0x7f0000000340)=@ll={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001c00)=[{&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f0000000480)=""/54, 0x36}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/219, 0xdb}, {&(0x7f00000017c0)=""/181, 0xb5}, {&(0x7f0000001880)=""/64, 0x40}, {&(0x7f00000018c0)=""/243, 0xf3}, {&(0x7f00000019c0)=""/55, 0x37}, {&(0x7f0000001a40)=""/166, 0xa6}, {&(0x7f0000001b00)=""/229, 0xe5}], 0xa, &(0x7f0000001cc0)=""/186, 0xba}, 0x7ffffffd}, {{&(0x7f0000001d80)=@alg, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)}, {&(0x7f0000001f40)=""/87, 0x57}], 0x3, &(0x7f0000002000)=""/186, 0xba}, 0x4}, {{&(0x7f00000020c0)=@nl=@unspec, 0x80, &(0x7f0000003b80)=[{&(0x7f0000006d00)=""/4110, 0x100e}], 0x1, &(0x7f0000003bc0)=""/27, 0x1b}, 0x3}, {{&(0x7f0000003c00)=@ax25={{0x3, @bcast}, [@rose, @bcast, @remote, @remote, @null, @netrom, @netrom, @null]}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003c80)=""/8, 0x8}, {&(0x7f0000003cc0)=""/129, 0x81}, {&(0x7f0000003d80)=""/245, 0xf5}, {&(0x7f0000003e80)=""/251, 0xfb}, {&(0x7f0000003f80)=""/92, 0x5c}, {&(0x7f0000004000)=""/255, 0xff}, {&(0x7f0000004100)=""/145, 0x91}], 0x7, &(0x7f0000004240)=""/73, 0x49}, 0xdd}, {{&(0x7f00000042c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004340)=""/52, 0x34}], 0x1, &(0x7f00000043c0)=""/20, 0x14}, 0x916}, {{&(0x7f0000004400)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004600)=[{&(0x7f0000004480)=""/252, 0xfc}, {&(0x7f0000004580)=""/10, 0xa}, {&(0x7f00000045c0)}], 0x3}, 0x97c9}, {{&(0x7f0000004640)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000006c80)=[{&(0x7f00000046c0)=""/74, 0x4a}, {&(0x7f0000004740)=""/106, 0x6a}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000004840)=""/183, 0xb7}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/238, 0xee}, {&(0x7f0000000240)=""/94, 0x5e}], 0x7, &(0x7f0000004940)=""/4087, 0xff7}, 0x3}], 0x7, 0x2000, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @xdp={0x2c, 0xd, r1, 0x7}, @llc={0x1a, 0x20, 0xa, 0x9, 0x2, 0x7f, @random="06bed48d98d8"}, @tipc=@nameseq={0x1e, 0x1, 0x9aeb99513bf7fb54, {0x40, 0x1, 0x3}}, 0xe6a, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)='erspan0\x00', 0x5409, 0x5, 0x2a3})
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000229bdff030000df25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c0000800000000800010074000000080000002c0005801400028008000200040000000800010001000000140002800800020010000000080001"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4008c50)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x4000084)

181.13735ms ago: executing program 1 (id=3662):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_VENDOR(r1, 0x0, 0x40)
socket(0x400000000010, 0x8080d, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xc, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1aaa7}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x7}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xdb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)
socket$inet6_udp(0xa, 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000006, 0x10010, r0, 0x6dae3000)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0xffffffff, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {0x40000}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0xfffffffa}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xe68}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

60.806772ms ago: executing program 2 (id=3663):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000200000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_pressure(r3, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) (async)
write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) (async)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084)
clock_gettime(0x0, &(0x7f0000000340)) (async)
clock_gettime(0x0, &(0x7f0000000340)={<r8=>0x0, <r9=>0x0})
recvmmsg(r6, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r8, r9+60000000}) (async)
recvmmsg(r6, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r8, r9+60000000})
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r11 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r11, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$AUDIT_TTY_GET(r11, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$phonet(0x23, 0x2, 0x1)

1.192882ms ago: executing program 0 (id=3664):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0010010900010073797a310000000024040000000000000000010063740000140002800800014000000001080002400000000b0900020073797a3200000000140000001100010000000000000000000200000a"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

0s ago: executing program 1 (id=3665):
r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
accept4$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x800)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000034000000060a010400000000000000000100000008000b400000000018000480140001800b000100657874686472000004000280140000001100010000000000000000000700000a30d154eefbe063bc364a4bb10f0e1558af7b796affffff0e613f7ab86cbdc2d2f61a44fdb1db9e02b854170d077f4a4504a67d568a41f6982c31825591d7ff787a54cf63858e3e2af40f7d0278ac9b8d14f8153243916849dac75741dcea729fa126cfb76cfcf6c8787d50f6245746f09b4a2b3f8b579e690121b1e5a2bdda53df7c7b2a8a06b531acb0f591f793b4"], 0xa8}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="180000000414"], 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x20000844)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004810}, 0x4800)
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048005}, 0x50)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x800)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="12894a3236caea4790d5b24c25b1d559bbd7c42121eb02f1f3e3d599eeac6283469e846605ed5e1ea97f21de2d6b26471349106f8bb783b68486ec0cf519b97c128b79dca3121ba086293b7dd71c20a70d137ec96565e5371952895e4c2ac2ee5b0ee6f9db218baa9c7e0966399bd24c7802c5e8e3b0c58e7977dffc2680800000000000000099874ddbfeb438721d2e284327023000c53af8860dff48c24f6ac4c0866b628e0b91f22d3ffccafa9031bdb94ac37479f77de77268492af0ba0765b9d2eda0e81ade3fe0ee66f1c9bc4f94bf9da170d0d6aa06dd6353da66bf1a79cf5568648bdcbee3fcfca9e32924c73cd7"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000900))
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r6 = socket(0x11, 0x2, 0x10001)
recvfrom(r6, 0x0, 0x0, 0x40010100, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f1, 0x6}, {0x10007, 0x30000080}]}})
sendmsg$TIPC_NL_BEARER_SET(r5, 0x0, 0x4040140)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r7, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd, 0x5d}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc7d}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x20e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xac0}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x1)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500))
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40408c0}, 0x2400c000)

kernel console output (not intermixed with test programs):

e_link_sd+0xc0/0x110
[  216.961457][T13792]  device_add_class_symlinks+0x1cf/0x240
[  216.961474][T13792]  device_add+0x475/0xbb0
[  216.961489][T13792]  wiphy_register+0x1dc5/0x2dc0
[  216.961513][T13792]  ? __pfx_wiphy_register+0x10/0x10
[  216.961526][T13792]  ? __pfx_netdev_run_todo+0x10/0x10
[  216.961542][T13792]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  216.961560][T13792]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  216.961579][T13792]  ieee80211_register_hw+0x3d82/0x4a70
[  216.961606][T13792]  ? ieee80211_register_hw+0x1931/0x4a70
[  216.961665][T13792]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  216.961700][T13792]  ? __asan_memset+0x22/0x50
[  216.961714][T13792]  ? __hrtimer_setup+0x1b7/0x260
[  216.961727][T13792]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  216.961745][T13792]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  216.961780][T13792]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  216.961792][T13792]  ? kstrndup+0xbf/0x160
[  216.961818][T13792]  hwsim_new_radio_nl+0xf6a/0x1c00
[  216.961847][T13792]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  216.961867][T13792]  ? rcu_is_watching+0x15/0xb0
[  216.961882][T13792]  ? trace_kmalloc+0x2a/0xf0
[  216.961902][T13792]  ? __nla_parse+0x40/0x60
[  216.961923][T13792]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  216.961936][T13792]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  216.961954][T13792]  genl_family_rcv_msg_doit+0x22a/0x330
[  216.961971][T13792]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  216.961993][T13792]  ? bpf_lsm_capable+0x9/0x20
[  216.962004][T13792]  ? security_capable+0x7e/0x2c0
[  216.962045][T13792]  genl_rcv_msg+0x61c/0x7a0
[  216.962062][T13792]  ? __pfx_genl_rcv_msg+0x10/0x10
[  216.962074][T13792]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  216.962098][T13792]  netlink_rcv_skb+0x232/0x4b0
[  216.962114][T13792]  ? __pfx_genl_rcv_msg+0x10/0x10
[  216.962128][T13792]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  216.962154][T13792]  ? down_read+0x270/0x2e0
[  216.962164][T13792]  ? genl_rcv+0xd/0x40
[  216.962178][T13792]  genl_rcv+0x28/0x40
[  216.962188][T13792]  netlink_unicast+0x75c/0x8e0
[  216.962210][T13792]  netlink_sendmsg+0x813/0xb40
[  216.962232][T13792]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.962249][T13792]  ? aa_sock_msg_perm+0xf1/0x1b0
[  216.962265][T13792]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  216.962282][T13792]  ____sys_sendmsg+0x972/0x9f0
[  216.962299][T13792]  ? __might_fault+0xaf/0x130
[  216.962318][T13792]  ? __pfx_____sys_sendmsg+0x10/0x10
[  216.962341][T13792]  ? import_iovec+0x73/0xa0
[  216.962359][T13792]  ___sys_sendmsg+0x2a5/0x360
[  216.962373][T13792]  ? __lock_acquire+0x6b5/0x2cf0
[  216.962389][T13792]  ? __pfx____sys_sendmsg+0x10/0x10
[  216.962410][T13792]  ? futex_wait+0x2a2/0x390
[  216.962443][T13792]  ? __fget_files+0x2a/0x420
[  216.962457][T13792]  ? __fget_files+0x3a0/0x420
[  216.962477][T13792]  __x64_sys_sendmsg+0x1bd/0x2a0
[  216.962494][T13792]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  216.962516][T13792]  ? rcu_is_watching+0x15/0xb0
[  216.962536][T13792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.962550][T13792]  do_syscall_64+0x15f/0xf80
[  216.962565][T13792]  ? trace_irq_disable+0x3b/0x140
[  216.962585][T13792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.962596][T13792] RIP: 0033:0x7fe68899ce59
[  216.962609][T13792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.962619][T13792] RSP: 002b:00007fe6898e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  216.962665][T13792] RAX: ffffffffffffffda RBX: 00007fe688c16090 RCX: 00007fe68899ce59
[  216.962673][T13792] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  216.962681][T13792] RBP: 00007fe688a32d6f R08: 0000000000000000 R09: 0000000000000000
[  216.962688][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.962695][T13792] R13: 00007fe688c16128 R14: 00007fe688c16090 R15: 00007ffc5f29a058
[  216.962717][T13792]  </TASK>
[  217.135843][T13794] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  217.193195][ T5448] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  217.196842][ T5448] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  217.209481][ T5448] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  217.212726][ T5448] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  217.225839][ T5448] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  217.231998][ T5448] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  217.255261][ T5448] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  217.261264][ T5448] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  217.520478][T13829] netlink: 'syz.1.2173': attribute type 1 has an invalid length.
[  217.540829][T13829] bond18: (slave bridge18): Enslaving as a backup interface with an up link
[  218.072510][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  218.078645][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  218.081269][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  218.084408][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  218.087237][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  218.090031][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  218.093138][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  218.095839][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  218.291100][T13896] netlink: 'syz.0.2182': attribute type 1 has an invalid length.
[  218.358786][T13896] bond20: (slave vxcan5): The slave device specified does not support setting the MAC address
[  218.380693][T13896] bond20: (slave vxcan5): Error -95 calling set_mac_address
[  218.485632][T13908] bond20: (slave bridge9): Enslaving as an active interface with a down link
[  218.547884][T13924] geneve1: Caught tx_queue_len zero misconfig
[  218.626239][T13937] __nla_validate_parse: 25 callbacks suppressed
[  218.626251][T13937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2189'.
[  218.699221][T13943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2190'.
[  219.394319][T13957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2192'.
[  219.420524][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'.
[  219.428739][T13951] geneve1: left promiscuous mode
[  219.435342][T13951] bond17: left promiscuous mode
[  219.437460][T13951] erspan2: left promiscuous mode
[  219.439207][T13951] bond17: left allmulticast mode
[  219.442316][T13951] erspan2: left allmulticast mode
[  219.444652][T13951] bond20: left promiscuous mode
[  219.447763][T13951] bridge13: left promiscuous mode
[  219.450961][T13951] bond20: left allmulticast mode
[  219.452818][T13951] bridge13: left allmulticast mode
[  219.454765][T13951] ip6tnl5: left allmulticast mode
[  219.457281][T13951] ip6gretap2: left promiscuous mode
[  219.459075][T13951] ip6gretap2: left allmulticast mode
[  219.597396][   T56] block nbd6: Receive control failed (result -32)
[  219.631114][T13976] vlan4: entered allmulticast mode
[  219.634230][T13976] bond0: entered allmulticast mode
[  219.636312][T13976] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2199'.
[  219.658211][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2200'.
[  219.668531][T13976]  (unregistering): (slave 07): Releasing backup interface
[  219.675352][T13976]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.680462][T13976]  (unregistering): Released all slaves
[  219.714356][T13981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2201'.
[  219.775029][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2203'.
[  219.874066][T13995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2205'.
[  219.908913][T14000] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2206'.
[  220.008560][T14006] netlink: 'syz.0.2208': attribute type 32 has an invalid length.
[  220.029093][T14006] bond22: Setting coupled_control to off (0)
[  220.303118][T14031] netlink: 'syz.1.2214': attribute type 2 has an invalid length.
[  220.327831][T14033] netlink: 'syz.1.2215': attribute type 3 has an invalid length.
[  220.345655][   T56] block nbd7: Receive control failed (result -32)
[  220.355556][T14033] nbd: nbd1 already in use
[  220.495016][T14050] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  220.820326][T14063] netlink: 'syz.0.2225': attribute type 3 has an invalid length.
[  220.830029][T14063] netlink: 'syz.0.2225': attribute type 2 has an invalid length.
[  220.957739][T14066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.964462][T14066] syzkaller0: entered promiscuous mode
[  220.973158][T14066] syzkaller0: entered allmulticast mode
[  220.990178][T14066] tipc: Resetting bearer <eth:syzkaller0>
[  221.010826][T14066] mac80211_hwsim hwsim2 wlan0: Caught tx_queue_len zero misconfig
[  221.026210][T14065] tipc: Resetting bearer <eth:syzkaller0>
[  221.065027][T14065] tipc: Disabling bearer <eth:syzkaller0>
[  221.116727][T14063] infiniband syz0: set down
[  221.119376][T14063] infiniband syz0: added ipvlan1
[  221.135989][T14063] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  221.143475][T14063] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  221.150766][T14063] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  221.156815][T14071] netlink: 'syz.1.2228': attribute type 10 has an invalid length.
[  221.177349][T14063] RDS/IB: syz0: added
[  221.182004][T14063] smc: adding ib device syz0 with port count 1
[  221.190030][T14063] smc:    ib device syz0 port 1 has no pnetid
[  221.331805][T14079] netlink: 'syz.1.2231': attribute type 1 has an invalid length.
[  221.336023][T14080] netlink: 'syz.1.2231': attribute type 1 has an invalid length.
[  221.339189][T14079] netlink: 'syz.1.2231': attribute type 1 has an invalid length.
[  221.345748][T14080] netlink: 'syz.1.2231': attribute type 1 has an invalid length.
[  221.409274][T14082] nbd: must specify a device to reconfigure
[  221.498985][T14086] openvswitch: netlink: Flow key attribute not present in set flow.
[  221.504162][T14086] netem: invalid attributes len -1
[  221.506380][T14086] netem: change failed
[  221.612371][T14092] openvswitch: netlink: Flow key attr not present in new flow.
[  221.851924][T14119] : entered promiscuous mode
[  222.016287][T14132] syzkaller0: entered promiscuous mode
[  222.022968][T14132] syzkaller0: entered allmulticast mode
[  222.230901][T14149] team_slave_0 (unregistering): left promiscuous mode
[  222.233384][T14149] team_slave_0 (unregistering): left allmulticast mode
[  222.236541][T14149] team0: Port device team_slave_0 removed
[  222.697934][T14163] tunl0: Caught tx_queue_len zero misconfig
[  223.260886][T14185] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  223.316758][T14201] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  223.344628][T14201] openvswitch: netlink: Flow actions attr not present in new flow.
[  223.832753][T14220] sctp: [Deprecated]: syz.2.2274 (pid 14220) Use of int in max_burst socket option.
[  223.832753][T14220] Use struct sctp_assoc_value instead
[  224.041143][T14232] bond23: (slave bridge12): Enslaving as a backup interface with an up link
[  224.054118][T14241] __nla_validate_parse: 170 callbacks suppressed
[  224.054132][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2277'.
[  224.612837][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2291'.
[  224.616913][T14280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2291'.
[  224.740331][T14287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2293'.
[  224.762881][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2294'.
[  224.906606][T14304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2297'.
[  224.934123][T14306] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  224.937231][T14306] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  225.004326][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2300'.
[  225.106179][T14324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2303'.
[  225.242635][T14331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2303'.
[  225.446453][T14341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2306'.
[  225.898977][T14353] team0: left allmulticast mode
[  225.901178][T14353] team_slave_1: left allmulticast mode
[  225.906775][T14353] bridge5: left allmulticast mode
[  225.908956][T14353] geneve1: left allmulticast mode
[  225.911166][T14353] team0: left promiscuous mode
[  225.913856][T14353] team_slave_1: left promiscuous mode
[  225.916279][T14353] bridge5: left promiscuous mode
[  225.918415][T14353] geneve1: left promiscuous mode
[  225.920949][T14353] bridge0: port 1(team0) entered disabled state
[  225.951508][T14353] team0: Port device team_slave_1 removed
[  225.965727][T14353] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  225.978807][T14354] vlan0: entered promiscuous mode
[  226.056812][T14361] syzkaller0: entered promiscuous mode
[  226.059114][T14361] syzkaller0: entered allmulticast mode
[  226.259081][T14374] tipc: Bearer <ib:lo>: already 2 bearers with priority 10
[  226.266370][T14374] tipc: Bearer <ib:lo>: trying with adjusted priority
[  226.269290][T14374] tipc: Enabling of bearer <ib:lo> rejected, max 3 bearers permitted
[  226.413727][T14381] xt_hashlimit: max too large, truncated to 1048576
[  226.429145][T14386] IPVS: set_ctl: invalid protocol: 89 224.0.0.2:20002
[  226.495557][T14391] syzkaller0: entered promiscuous mode
[  226.498360][T14391] syzkaller0: entered allmulticast mode
[  226.807312][T14400] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  226.811131][T14400] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  227.099992][T14413] validate_nla: 137 callbacks suppressed
[  227.100006][T14413] netlink: 'syz.1.2324': attribute type 1 has an invalid length.
[  227.140198][T14413] 8021q: adding VLAN 0 to HW filter on device bond19
[  227.285280][T14427] netlink: 'syz.1.2329': attribute type 8 has an invalid length.
[  227.387081][T14434] syzkaller1: entered promiscuous mode
[  227.389219][T14434] syzkaller1: entered allmulticast mode
[  228.226426][T14462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  228.235573][T14463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  228.381728][T14473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.481456][T14476] netlink: 'syz.1.2342': attribute type 4 has an invalid length.
[  228.494828][T14477] netlink: 'syz.1.2342': attribute type 4 has an invalid length.
[  228.503460][T14476] netlink: 'syz.1.2342': attribute type 4 has an invalid length.
[  228.576354][T14472] tipc: Disabling bearer <eth:syzkaller0>
[  228.817323][T14495] sctp: [Deprecated]: syz.0.2346 (pid 14495) Use of int in max_burst socket option deprecated.
[  228.817323][T14495] Use struct sctp_assoc_value instead
[  228.818210][T14493] netlink: 'syz.1.2345': attribute type 1 has an invalid length.
[  228.958839][T14499] veth18: entered allmulticast mode
[  229.142615][T14508] __nla_validate_parse: 10 callbacks suppressed
[  229.142628][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2350'.
[  229.215556][T14510] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  229.250241][T14510] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  229.771759][T14542] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2359'.
[  229.775563][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2359'.
[  229.876342][T14545] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2360'.
[  229.929698][T14547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'.
[  230.040942][T14552] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2363'.
[  230.047428][T14552] sctp: [Deprecated]: syz.1.2363 (pid 14552) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.047428][T14552] Use struct sctp_sack_info instead
[  230.121675][T14554] tap0: tun_chr_ioctl cmd 1074025677
[  230.124970][T14554] tap0: linktype set to 778
[  230.208699][T14564] netlink: 'syz.2.2366': attribute type 2 has an invalid length.
[  230.221039][T14564] netlink: 'syz.2.2366': attribute type 2 has an invalid length.
[  230.230893][T14564] netlink: 'syz.2.2366': attribute type 2 has an invalid length.
[  230.233947][T14564] netlink: 'syz.2.2366': attribute type 2 has an invalid length.
[  230.294593][T14569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'.
[  230.313327][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2367'.
[  230.332780][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2367'.
[  230.554135][T14584] pimreg: entered allmulticast mode
[  230.560103][T14584] pimreg: left allmulticast mode
[  230.961594][T14604] syzkaller0: entered promiscuous mode
[  230.964236][T14604] syzkaller0: entered allmulticast mode
[  230.968588][T14604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.970971][T14605] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.015423][T14604] tipc: Resetting bearer <eth:syzkaller0>
[  232.744422][T14604] tipc: Disabling bearer <eth:syzkaller0>
[  232.895505][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2381'.
[  232.931014][T14636] validate_nla: 61 callbacks suppressed
[  232.931031][T14636] netlink: 'syz.2.2383': attribute type 1 has an invalid length.
[  232.951650][T14636] bond23: entered promiscuous mode
[  232.955413][T14636] 8021q: adding VLAN 0 to HW filter on device bond23
[  232.970753][T14636] macvtap2: entered allmulticast mode
[  233.000499][T14636] bond23: (slave bridge16): making interface the new active one
[  233.003795][T14636] bridge16: entered promiscuous mode
[  233.007569][T14636] bond23: (slave bridge16): Enslaving as an active interface with an up link
[  233.297348][T14661] netlink: 'syz.0.2392': attribute type 13 has an invalid length.
[  233.300081][T14661] netlink: 'syz.0.2392': attribute type 17 has an invalid length.
[  233.364316][T14661] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  233.383571][T14663] netlink: 'syz.2.2393': attribute type 13 has an invalid length.
[  234.111070][T14683] netlink: 'syz.1.2400': attribute type 4 has an invalid length.
[  234.249462][T14699] openvswitch: netlink: IPv4 tun info is not correct
[  234.249492][T14700] openvswitch: netlink: IPv4 tun info is not correct
[  234.294285][T14703] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  234.298562][T14703] pim6reg1: entered promiscuous mode
[  234.300242][T14703] pim6reg1: entered allmulticast mode
[  234.333976][T14706] __nla_validate_parse: 4 callbacks suppressed
[  234.333988][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2407'.
[  234.431579][T14718] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2409'.
[  234.563281][T14730] xt_hashlimit: size too large, truncated to 1048576
[  234.624166][T14738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2415'.
[  234.647268][T14742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2416'.
[  234.652806][T14742] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2416'.
[  234.730694][T14746] ip6gre2: entered promiscuous mode
[  234.732654][T14746] ip6gre2: entered allmulticast mode
[  235.529568][T14756] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2420'.
[  235.587545][T14761] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2422'.
[  235.634807][T14762] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2421'.
[  235.751333][   T34] audit: type=1800 audit(1778901093.816:7): pid=14770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2425" name="memory.events" dev="tmpfs" ino=4016 res=0 errno=0
[  235.936288][T14783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2428'.
[  236.013585][T14786] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2429'.
[  236.064872][T14788] tipc: Invalid UDP bearer configuration
[  236.064898][T14788] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  236.071299][T14788] netlink: 'syz.2.2430': attribute type 10 has an invalid length.
[  236.074465][T14788] dummy0: entered promiscuous mode
[  236.237838][T14792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.248275][T14792] syzkaller0: entered promiscuous mode
[  236.250068][T14792] syzkaller0: entered allmulticast mode
[  236.272616][T14792] tipc: Resetting bearer <eth:syzkaller0>
[  236.275927][T14791] tipc: Resetting bearer <eth:syzkaller0>
[  236.296629][T14791] tipc: Disabling bearer <eth:syzkaller0>
[  236.368816][T14814] syzkaller1: entered promiscuous mode
[  236.370859][T14814] syzkaller1: entered allmulticast mode
[  236.468393][T14822] vlan3: entered allmulticast mode
[  236.470222][T14822] bond0: entered allmulticast mode
[  236.659905][T14852] IPVS: rr: FWM 3 0x00000003 - no destination available
[  236.728392][T14856] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  236.789454][T14863] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  236.801195][T14862] mac80211_hwsim hwsim4 wlan0: Caught tx_queue_len zero misconfig
[  236.955690][T14867] netlink: 'syz.1.2447': attribute type 1 has an invalid length.
[  237.022905][T14867] 8021q: adding VLAN 0 to HW filter on device bond21
[  237.035206][T14867] bond20: (slave bond21): making interface the new active one
[  237.047475][T14867] bond20: (slave bond21): Enslaving as an active interface with an up link
[  237.322895][T14888] netlink: 'syz.1.2452': attribute type 13 has an invalid length.
[  237.435243][T14894] netlink: 'syz.2.2455': attribute type 10 has an invalid length.
[  237.438186][T14894] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  237.588887][T14912] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  237.635097][T14919] netlink: 'syz.1.2462': attribute type 1 has an invalid length.
[  237.691520][T14919] bond23: entered promiscuous mode
[  237.694260][T14919] 8021q: adding VLAN 0 to HW filter on device bond23
[  237.708559][T14939] bond0: Unable to set up delay as MII monitoring is disabled
[  237.887322][T14957] syzkaller0: entered promiscuous mode
[  237.889073][T14957] syzkaller0: entered allmulticast mode
[  237.925608][T14962] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  237.974086][T14966] hsr0: entered promiscuous mode
[  238.122867][T14973] ip6erspan1: entered allmulticast mode
[  238.693404][T14998] netlink: 'syz.0.2480': attribute type 1 has an invalid length.
[  238.715525][T14998] bond24: entered promiscuous mode
[  238.720506][T14998] 8021q: adding VLAN 0 to HW filter on device bond24
[  238.860626][ T5448] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  238.867550][ T5448] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  238.870222][ T5448] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  238.873328][ T5448] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  239.675130][T15015] dvmrp6: left allmulticast mode
[  239.727230][T15014] __nla_validate_parse: 19 callbacks suppressed
[  239.727250][T15014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2485'.
[  239.737052][T15018] nbd: must specify a device to reconfigure
[  239.806892][T15021] syzkaller1: tun_chr_ioctl cmd 1074025677
[  239.808896][T15021] syzkaller1: Linktype set failed because interface is up
[  240.036403][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2489'.
[  240.040271][T15028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2489'.
[  240.461907][T15056] netlink: 'syz.0.2495': attribute type 2 has an invalid length.
[  240.470131][T15056] netlink: 'syz.0.2495': attribute type 10 has an invalid length.
[  240.474722][T15056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2495'.
[  240.507046][T15058] netlink: 'syz.0.2496': attribute type 12 has an invalid length.
[  240.598119][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2496'.
[  240.724197][T15075] netlink: 'syz.0.2500': attribute type 21 has an invalid length.
[  240.728906][T15075] netlink: 'syz.0.2500': attribute type 1 has an invalid length.
[  240.732729][T15075] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2500'.
[  241.147092][T15089] IPVS: ip_vs_edit_dest(): server weight less than zero
[  241.157036][T15089] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2504'.
[  241.163084][T15089] netlink: 'syz.2.2504': attribute type 21 has an invalid length.
[  241.166193][T15089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2504'.
[  241.269874][T15093] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  241.276461][T15093] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  241.674445][T15097] netlink: 'syz.0.2507': attribute type 1 has an invalid length.
[  241.752845][T15101] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2508'.
[  241.872770][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'.
[  241.973152][T15114] netlink: 'syz.0.2512': attribute type 4 has an invalid length.
[  241.978294][T15114] netlink: 'syz.0.2512': attribute type 4 has an invalid length.
[  242.245985][T15128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.625975][T15150] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  242.628535][T15150] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  242.802593][T15161] dummy0: left promiscuous mode
[  242.845742][T15161] bond24: (slave dummy0): making interface the new active one
[  242.849911][T15161] bond24: (slave dummy0): Enslaving as an active interface with an up link
[  242.854772][T15157] bond24: entered promiscuous mode
[  242.857025][T15157] dummy0: entered promiscuous mode
[  242.861883][T15157] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  242.868509][T15155] bond24: left promiscuous mode
[  242.870998][T15155] dummy0: left promiscuous mode
[  242.979983][T15173] bond25: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  242.980773][T15170] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  242.989475][T15173] 8021q: adding VLAN 0 to HW filter on device bond25
[  242.989784][   T13] bond25: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  243.108790][T15182] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  243.114358][ T5448] bond25: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  243.447682][T15198] IPVS: persistence engine module ip_vs_pe_ not found
[  243.470873][T15202] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  243.979933][T15228] validate_nla: 3 callbacks suppressed
[  243.979945][T15228] netlink: 'syz.2.2546': attribute type 1 has an invalid length.
[  243.986397][T15228] netlink: 'syz.2.2546': attribute type 1 has an invalid length.
[  243.990302][T15228] IPVS: set_ctl: invalid protocol: 98 172.20.20.22:20004
[  244.357485][T15244] netlink: 'syz.2.2550': attribute type 1 has an invalid length.
[  244.428808][T15247] netlink: 'syz.0.2551': attribute type 11 has an invalid length.
[  244.439588][T15248] bond26: (slave vxcan3): The slave device specified does not support setting the MAC address
[  244.443400][T15248] bond26: (slave vxcan3): Error -95 calling set_mac_address
[  244.496009][T15244] bond26: (slave gretap1): making interface the new active one
[  244.509873][T15244] bond26: (slave gretap1): Enslaving as an active interface with an up link
[  244.554473][T15244] bond26: (slave bridge17): Enslaving as an active interface with a down link
[  244.846620][T15266] __nla_validate_parse: 14 callbacks suppressed
[  244.846633][T15266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2554'.
[  244.856643][T15266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2554'.
[  245.089526][T15287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2559'.
[  245.126757][T15289] openvswitch: netlink: Flow key attr not present in new flow.
[  245.295628][T15303] netlink: 'syz.2.2562': attribute type 1 has an invalid length.
[  245.308514][T15303] 8021q: adding VLAN 0 to HW filter on device bond27
[  245.332962][T15303] vlan4: entered promiscuous mode
[  245.335134][T15303] bond27: entered promiscuous mode
[  245.337503][T15303] vlan4: entered allmulticast mode
[  245.339799][T15303] bond27: entered allmulticast mode
[  245.344407][T15303] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2562'.
[  245.545654][T15313] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2566'.
[  245.549389][T15313] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2566'.
[  245.720803][T15322] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2569'.
[  245.724759][T15322] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2569'.
[  245.728285][T15322] netlink: 'syz.2.2569': attribute type 5 has an invalid length.
[  245.731585][T15322] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2569'.
[  245.769827][T15324] tipc: Can't bind to reserved service type 1
[  245.779557][T15324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2570'.
[  246.040903][T15345] TC_ACT_REPEAT abuse ?
[  246.370615][T15362] netlink: 'syz.2.2581': attribute type 1 has an invalid length.
[  246.479142][T15374] tun0: tun_chr_ioctl cmd 1074025672
[  246.480924][T15374] tun0: ignored: set checksum disabled
[  246.485833][T15374] netlink: 'syz.1.2584': attribute type 1 has an invalid length.
[  246.490196][T15374] netlink: 'syz.1.2584': attribute type 1 has an invalid length.
[  246.521447][T15374] bond24: entered promiscuous mode
[  246.527774][T15374] bond24: entered allmulticast mode
[  246.531031][T15374] 8021q: adding VLAN 0 to HW filter on device bond24
[  246.563502][T15379] netlink: 'syz.0.2585': attribute type 1 has an invalid length.
[  247.129521][T15403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  247.148373][T15403] ip6gre4: entered allmulticast mode
[  247.151587][T15403] team0: Device ip6gre4 is of different type
[  247.194107][T15410] batadv0: entered promiscuous mode
[  247.196768][T15410] batadv0: left promiscuous mode
[  247.378735][T15427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.018901][T15459] netlink: 'syz.1.2607': attribute type 1 has an invalid length.
[  248.032709][T15459] 8021q: adding VLAN 0 to HW filter on device bond25
[  248.044731][T15459] bond25 (unregistering): Released all slaves
[  248.858010][T15507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.918889][T15513] dvmrp0: entered allmulticast mode
[  249.104346][T15525] batadv1: entered promiscuous mode
[  249.336440][T15543] syzkaller0: entered promiscuous mode
[  249.338198][T15543] syzkaller0: entered allmulticast mode
[  251.741073][T15558] xt_hashlimit: size too large, truncated to 1048576
[  252.178365][T15575] validate_nla: 2 callbacks suppressed
[  252.178376][T15575] netlink: 'syz.2.2634': attribute type 10 has an invalid length.
[  252.186423][T15575] __nla_validate_parse: 21 callbacks suppressed
[  252.186434][T15575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2634'.
[  252.231152][T15577] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.2635'.
[  252.515782][T15603] erspan2: entered promiscuous mode
[  252.518052][T15603] erspan2: entered allmulticast mode
[  252.559457][T15605] xt_HMARK: spi-set and port-set can't be combined
[  252.901990][T15612] geneve1: Caught tx_queue_len zero misconfig
[  252.910203][T15615] netlink: 'syz.1.2643': attribute type 29 has an invalid length.
[  253.099372][T15632] bridge15: entered promiscuous mode
[  253.331650][T15652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2654'.
[  253.374001][T15654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2655'.
[  253.377252][T15654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2655'.
[  253.419308][T15658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2656'.
[  253.469015][T15664] syzkaller0: entered promiscuous mode
[  253.470904][T15664] syzkaller0: entered allmulticast mode
[  253.584282][T15671] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  253.587377][T15671] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  253.658395][T15673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2661'.
[  253.811586][T15677] netlink: 'syz.2.2662': attribute type 2 has an invalid length.
[  253.815272][T15677] netlink: 'syz.2.2662': attribute type 2 has an invalid length.
[  254.232613][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'.
[  254.236915][T15679] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2663'.
[  254.299667][T15685] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  254.349672][T15688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2666'.
[  254.525947][T15702] netlink: 'syz.2.2668': attribute type 4 has an invalid length.
[  254.597589][T15707] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  254.600784][T15707] CPU: 0 UID: 0 PID: 15707 Comm: syz.2.2669 Not tainted syzkaller #0 PREEMPT(full) 
[  254.600803][T15707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.600811][T15707] Call Trace:
[  254.600816][T15707]  <TASK>
[  254.600822][T15707]  dump_stack_lvl+0xe8/0x150
[  254.600843][T15707]  sysfs_warn_dup+0x8e/0xa0
[  254.600859][T15707]  sysfs_do_create_link_sd+0xc0/0x110
[  254.600878][T15707]  device_add_class_symlinks+0x1cf/0x240
[  254.600896][T15707]  device_add+0x475/0xbb0
[  254.600914][T15707]  wiphy_register+0x1dc5/0x2dc0
[  254.600944][T15707]  ? __pfx_wiphy_register+0x10/0x10
[  254.600962][T15707]  ? __pfx_netdev_run_todo+0x10/0x10
[  254.600980][T15707]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  254.600999][T15707]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  254.601020][T15707]  ieee80211_register_hw+0x3d82/0x4a70
[  254.601049][T15707]  ? ieee80211_register_hw+0x1931/0x4a70
[  254.601084][T15707]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  254.601105][T15707]  ? __asan_memset+0x22/0x50
[  254.601119][T15707]  ? __hrtimer_setup+0x1b7/0x260
[  254.601134][T15707]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  254.601152][T15707]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  254.601185][T15707]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  254.601229][T15707]  ? kstrndup+0xbf/0x160
[  254.601270][T15707]  hwsim_new_radio_nl+0xf6a/0x1c00
[  254.601302][T15707]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  254.601323][T15707]  ? rcu_is_watching+0x15/0xb0
[  254.601340][T15707]  ? trace_kmalloc+0x2a/0xf0
[  254.601362][T15707]  ? __nla_parse+0x40/0x60
[  254.601384][T15707]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  254.601397][T15707]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  254.601415][T15707]  genl_family_rcv_msg_doit+0x22a/0x330
[  254.601433][T15707]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  254.601456][T15707]  ? bpf_lsm_capable+0x9/0x20
[  254.601467][T15707]  ? security_capable+0x7e/0x2c0
[  254.601484][T15707]  genl_rcv_msg+0x61c/0x7a0
[  254.601500][T15707]  ? __pfx_genl_rcv_msg+0x10/0x10
[  254.601512][T15707]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  254.601532][T15707]  netlink_rcv_skb+0x232/0x4b0
[  254.601547][T15707]  ? __pfx_genl_rcv_msg+0x10/0x10
[  254.601560][T15707]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  254.601588][T15707]  ? down_read+0x270/0x2e0
[  254.601599][T15707]  ? genl_rcv+0xd/0x40
[  254.601612][T15707]  genl_rcv+0x28/0x40
[  254.601624][T15707]  netlink_unicast+0x75c/0x8e0
[  254.601647][T15707]  netlink_sendmsg+0x813/0xb40
[  254.601671][T15707]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.601690][T15707]  ? aa_sock_msg_perm+0xf1/0x1b0
[  254.601708][T15707]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  254.601727][T15707]  ____sys_sendmsg+0x972/0x9f0
[  254.601744][T15707]  ? __might_fault+0xaf/0x130
[  254.601764][T15707]  ? __pfx_____sys_sendmsg+0x10/0x10
[  254.601787][T15707]  ? import_iovec+0x73/0xa0
[  254.601808][T15707]  ___sys_sendmsg+0x2a5/0x360
[  254.601848][T15707]  ? __lock_acquire+0x6b5/0x2cf0
[  254.601866][T15707]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.601887][T15707]  ? futex_wait+0x2a2/0x390
[  254.601923][T15707]  ? __fget_files+0x2a/0x420
[  254.601936][T15707]  ? __fget_files+0x3a0/0x420
[  254.601958][T15707]  __x64_sys_sendmsg+0x1bd/0x2a0
[  254.601978][T15707]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  254.602001][T15707]  ? rcu_is_watching+0x15/0xb0
[  254.602022][T15707]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.602038][T15707]  do_syscall_64+0x15f/0xf80
[  254.602052][T15707]  ? trace_irq_disable+0x3b/0x140
[  254.602073][T15707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.602084][T15707] RIP: 0033:0x7f8e1c39ce59
[  254.602096][T15707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.602105][T15707] RSP: 002b:00007f8e1d282028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.602119][T15707] RAX: ffffffffffffffda RBX: 00007f8e1c615fa0 RCX: 00007f8e1c39ce59
[  254.602127][T15707] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  254.602134][T15707] RBP: 00007f8e1c432d6f R08: 0000000000000000 R09: 0000000000000000
[  254.602141][T15707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.602147][T15707] R13: 00007f8e1c616038 R14: 00007f8e1c615fa0 R15: 00007fff5257bfc8
[  254.602166][T15707]  </TASK>
[  254.808891][T15712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.917226][T15726] policy can only be matched on NF_INET_PRE_ROUTING
[  254.917245][T15726] unable to load match
[  255.006364][T15732] netlink: 'syz.2.2674': attribute type 1 has an invalid length.
[  255.029301][T15732] bond28: (slave vxcan3): The slave device specified does not support setting the MAC address
[  255.034306][T15732] bond28: (slave vxcan3): Error -95 calling set_mac_address
[  255.311346][T15754] syzkaller1: entered promiscuous mode
[  255.313408][T15754] syzkaller1: entered allmulticast mode
[  255.561930][T15769] bond29: entered promiscuous mode
[  255.567772][T15769] 8021q: adding VLAN 0 to HW filter on device bond29
[  255.606725][T15769] 8021q: adding VLAN 0 to HW filter on device bond29
[  255.609268][T15769] bond29: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  255.613055][T15769] bond29: (slave ip6gre3): Error -95 calling set_mac_address
[  255.950233][T15792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.953680][T15792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.956810][T15792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.987138][T15789] syzkaller0: entered promiscuous mode
[  255.997583][T15789] syzkaller0: entered allmulticast mode
[  256.178265][T15807] tunl0: Caught tx_queue_len zero misconfig
[  256.180602][T15807] netem: change failed
[  256.268792][T15811] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  256.271942][T15811] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  257.143824][T15840] gtp0: entered promiscuous mode
[  257.145632][T15840] gtp0: entered allmulticast mode
[  257.224646][T15842] __nla_validate_parse: 21 callbacks suppressed
[  257.224658][T15842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2704'.
[  257.268212][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2704'.
[  257.272638][T15842] team_slave_1: entered promiscuous mode
[  257.363213][T15856] netlink: 'syz.2.2709': attribute type 1 has an invalid length.
[  257.367712][T15856] netlink: 'syz.2.2709': attribute type 2 has an invalid length.
[  257.370811][T15860] netlink: 'syz.0.2708': attribute type 10 has an invalid length.
[  257.375471][T15856] pim6reg99999991: entered allmulticast mode
[  257.379649][T15861] netlink: 'syz.2.2709': attribute type 1 has an invalid length.
[  257.382774][T15860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2708'.
[  257.386030][T15861] netlink: 'syz.2.2709': attribute type 2 has an invalid length.
[  257.436617][T15868] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2711'.
[  257.562906][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2711'.
[  257.584935][T15883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2714'.
[  257.591957][T15883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2714'.
[  257.607639][T15886] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  257.760655][T15900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2719'.
[  257.765517][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'.
[  257.777498][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'.
[  257.811750][T15914] block nbd8: Unsupported socket: should be TCP or UNIX.
[  257.884753][T15916] bond27: option fail_over_mac: invalid value (127)
[  257.889471][T15916] bond27 (unregistering): Released all slaves
[  258.041564][T15921] syzkaller0: entered promiscuous mode
[  258.043963][T15921] syzkaller0: entered allmulticast mode
[  258.276751][T15923] netlink: 'syz.1.2727': attribute type 1 has an invalid length.
[  259.536610][T15930] vlan5: entered promiscuous mode
[  260.482766][T15958] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  260.527079][T15960] bridge24: entered promiscuous mode
[  260.529497][T15960] bridge24: entered allmulticast mode
[  260.548864][T15960] team0: Port device bridge24 added
[  260.552458][T15961] bridge0: port 1(team0) entered blocking state
[  260.556872][T15961] bridge0: port 1(team0) entered disabled state
[  260.561294][T15961] team0: entered allmulticast mode
[  260.584194][T15961] team0: left allmulticast mode
[  260.797623][T15985] xt_hashlimit: size too large, truncated to 1048576
[  260.908496][T15993] ip6gre2: entered promiscuous mode
[  260.910167][T15993] ip6gre2: entered allmulticast mode
[  260.974198][T15998] xt_socket: unknown flags 0x4
[  261.129156][T16011] netlink: 'syz.0.2751': attribute type 2 has an invalid length.
[  261.149108][T16009] bond31: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  261.154990][T16009] bond31 (unregistering): Released all slaves
[  261.170173][T16015] syzkaller0: entered promiscuous mode
[  261.171986][T16015] syzkaller0: entered allmulticast mode
[  261.267410][T16021] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  261.327847][T16028] veth14: entered allmulticast mode
[  261.517377][T16043] lo: Caught tx_queue_len zero misconfig
[  261.699236][T16061] netlink: 'syz.2.2766': attribute type 1 has an invalid length.
[  261.708092][T16066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.727516][T16068] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  261.734475][T16068] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  261.836479][T16078] ip6tnl0: Caught tx_queue_len zero misconfig
[  261.846949][T16078] bond24: (slave dummy0): Releasing active interface
[  261.880215][T16080] netlink: 'syz.0.2772': attribute type 1 has an invalid length.
[  261.921003][T16080] 8021q: adding VLAN 0 to HW filter on device bond27
[  261.971197][T16088] tc action pedit 'at' offset 6 out of bounds
[  261.980095][T16088] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  262.094362][T16095] netlink: 'syz.0.2776': attribute type 1 has an invalid length.
[  262.136055][T16095] bond28: (slave vxcan1): The slave device specified does not support setting the MAC address
[  262.140558][T16095] bond28: (slave vxcan1): Error -95 calling set_mac_address
[  262.193524][T16101] bond28: (slave bridge17): Enslaving as an active interface with a down link
[  262.240037][T16105] __nla_validate_parse: 13 callbacks suppressed
[  262.240048][T16105] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.2780'.
[  262.247088][T16105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2780'.
[  262.291630][T16111] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2782'.
[  262.489888][T16119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2785'.
[  262.537839][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2787'.
[  262.540744][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2787'.
[  262.544239][T16126] netlink: 58 bytes leftover after parsing attributes in process `syz.1.2787'.
[  262.584153][T16126] team0 (unregistering): Port device bond2 removed
[  262.591194][T16126] team0 (unregistering): Port device bridge24 removed
[  262.792866][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2792'.
[  262.944627][T16153] 8021q: adding VLAN 0 to HW filter on device 
[  262.986917][T16153] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  262.991469][T16153] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  263.000778][T16153] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  263.294994][T16170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2797'.
[  263.540871][T16187] bond29 (unregistering): Released all slaves
[  263.617601][T16191] validate_nla: 5 callbacks suppressed
[  263.617612][T16191] netlink: 'syz.2.2801': attribute type 10 has an invalid length.
[  263.621826][T16191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2801'.
[  263.659585][T16193] netlink: 'syz.0.2803': attribute type 29 has an invalid length.
[  263.669393][T16193] netlink: 'syz.0.2803': attribute type 29 has an invalid length.
[  263.676670][T16193] netlink: 'syz.0.2803': attribute type 29 has an invalid length.
[  263.695068][T16193] netlink: 'syz.0.2803': attribute type 29 has an invalid length.
[  263.697738][T16193] netlink: 'syz.0.2803': attribute type 29 has an invalid length.
[  263.700299][T16193] netlink: 'syz.0.2803': attribute type 29 has an invalid length.
[  263.703070][T16193] netlink: 'syz.0.2803': attribute type 29 has an invalid length.
[  263.705684][T16193] netlink: 'syz.0.2803': attribute type 29 has an invalid length.
[  263.708349][T16193] netlink: 'syz.0.2803': attribute type 29 has an invalid length.
[  264.639280][T16216] lo: Caught tx_queue_len zero misconfig
[  264.821196][T16222] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  265.197913][T16255] 8021q: adding VLAN 0 to HW filter on device bond25
[  265.249214][T16208] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  265.321170][T16260] 8021q: adding VLAN 0 to HW filter on device bond31
[  265.344021][T16260] bond31: (slave gretap2): making interface the new active one
[  265.350333][T16260] bond31: (slave gretap2): Enslaving as an active interface with an up link
[  265.537085][T16266] syzkaller0: entered promiscuous mode
[  265.540378][T16266] syzkaller0: entered allmulticast mode
[  265.568667][T16266] bond0: Device is already in use.
[  265.785881][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.788596][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.794585][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.802897][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.331383][T16317] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  266.452418][ T5002] Bluetooth: hci1: command 0x0406 tx timeout
[  266.501825][T16335] 8021q: adding VLAN 0 to HW filter on device bond26
[  267.427677][T16355] xt_hashlimit: invalid rate
[  267.438492][T16355] __nla_validate_parse: 71 callbacks suppressed
[  267.438503][T16355] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2846'.
[  267.705163][T16358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2847'.
[  267.852907][T16361] 8021q: adding VLAN 0 to HW filter on device bond27
[  267.904996][T16364] 8021q: adding VLAN 0 to HW filter on device bond32
[  267.957516][T16371] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2850'.
[  267.975686][T16371] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2850'.
[  268.320131][T16384] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  268.327435][T16384] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  268.541625][T16401] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2858'.
[  268.556202][T16401] syzkaller0: entered promiscuous mode
[  268.558515][T16401] syzkaller0: entered allmulticast mode
[  268.568978][T16401] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2858'.
[  268.633148][T16399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.644283][T16398] tipc: Resetting bearer <eth:syzkaller0>
[  268.698972][T16398] tipc: Disabling bearer <eth:syzkaller0>
[  268.769892][T16408] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2860'.
[  268.801444][T16408] validate_nla: 54 callbacks suppressed
[  268.801464][T16408] netlink: 'syz.2.2860': attribute type 1 has an invalid length.
[  268.807889][T16408] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2860'.
[  268.928302][T16410] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2861'.
[  268.957507][T16410] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2861'.
[  268.976154][T16413] sit5: entered promiscuous mode
[  269.045259][T16416] openvswitch: netlink: Multiple metadata blocks provided
[  269.126403][T16422] 8021q: adding VLAN 0 to HW filter on device bond29
[  269.131960][T16422] bond29: entered promiscuous mode
[  269.135430][T16422] bond29: entered allmulticast mode
[  269.141935][T16422] 8021q: adding VLAN 0 to HW filter on device bond29
[  269.146146][T16422] team0: Port device bond29 added
[  269.148410][T16423] team_slave_1: entered promiscuous mode
[  269.159581][T16423] team_slave_1: entered allmulticast mode
[  269.163396][T16423] bond29: (slave team_slave_1): Enslaving as an active interface with an up link
[  269.207945][T16429] netlink: 'syz.1.2868': attribute type 1 has an invalid length.
[  269.233271][T16429] 8021q: adding VLAN 0 to HW filter on device bond28
[  269.250318][T16431] netlink: 'syz.0.2867': attribute type 30 has an invalid length.
[  269.260194][T16431] netlink: 'syz.0.2867': attribute type 30 has an invalid length.
[  269.294919][T16429] vlan7: entered promiscuous mode
[  269.297575][T16429] bond28: entered promiscuous mode
[  269.300055][T16429] vlan7: entered allmulticast mode
[  269.302938][T16429] bond28: entered allmulticast mode
[  269.360830][T16437] netlink: 'syz.0.2869': attribute type 7 has an invalid length.
[  269.736687][T16444] syzkaller1: tun_chr_ioctl cmd 1074025677
[  269.739595][T16444] syzkaller1: linktype set to 769
[  270.026508][T16470] 8021q: VLANs not supported on nlmon0
[  270.262918][T16480] xt_CT: You must specify a L4 protocol and not use inversions on it
[  270.308129][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  270.311498][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  270.317332][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  270.324686][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  270.761593][T16496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  270.764218][T16496] IPv6: NLM_F_CREATE should be set when creating new route
[  270.766740][T16496] IPv6: NLM_F_CREATE should be set when creating new route
[  271.264237][T16519] netlink: 'syz.2.2890': attribute type 13 has an invalid length.
[  271.379136][T16534] netlink: 'syz.0.2894': attribute type 1 has an invalid length.
[  271.398959][T16534] bond30: entered promiscuous mode
[  271.401090][T16534] bond30: entered allmulticast mode
[  271.403653][T16534] 8021q: adding VLAN 0 to HW filter on device bond30
[  271.413816][T16534] erspan2: entered allmulticast mode
[  271.423041][T16534] bond30: (slave erspan2): making interface the new active one
[  271.425757][T16534] erspan2: entered promiscuous mode
[  271.434087][T16534] bond30: (slave erspan2): Enslaving as an active interface with an up link
[  271.476451][T16534] syz.0.2894 (16534) used greatest stack depth: 17720 bytes left
[  271.847410][T16550] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  272.071467][T16552] pim6reg: entered allmulticast mode
[  272.194381][T16551] pim6reg: left allmulticast mode
[  272.447696][T16563] netlink: 'syz.1.2902': attribute type 4 has an invalid length.
[  272.481868][T16565] __nla_validate_parse: 16 callbacks suppressed
[  272.481932][T16565] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2903'.
[  272.529858][T16567] netlink: 'syz.0.2904': attribute type 21 has an invalid length.
[  272.534805][T16567] netlink: 'syz.0.2904': attribute type 6 has an invalid length.
[  272.537342][T16567] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2904'.
[  272.576187][T16569] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2905'.
[  272.686785][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2906'.
[  272.699394][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2906'.
[  272.935722][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2914'.
[  272.942182][T16599] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.982679][T16599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2914'.
[  272.994278][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2915'.
[  273.059460][T16606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2918'.
[  273.133665][T16614] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2919'.
[  274.094020][T16646] netlink: 'syz.2.2930': attribute type 2 has an invalid length.
[  274.217847][T16649] bond33: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  274.236807][T16649] bond33: (slave lo): Enslaving as an active interface with an up link
[  274.243805][T16649] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  274.429234][T16662] netlink: 'syz.1.2935': attribute type 10 has an invalid length.
[  274.491751][T16664] netlink: 'syz.1.2935': attribute type 10 has an invalid length.
[  274.755866][T16662] nbd8: detected capacity change from 0 to 63
[  274.762946][ T8381] block nbd8: Receive control failed (result -104)
[  274.769110][   T55] block nbd8: Receive control failed (result -32)
[  275.443396][T16722] xt_hashlimit: overflow, try lower: 6/0
[  275.445794][T16722] netlink: 'syz.1.2953': attribute type 1 has an invalid length.
[  275.471151][T16724] netlink: 'syz.1.2954': attribute type 1 has an invalid length.
[  275.507584][T16726]  (unregistering): Released all slaves
[  276.361550][T16774] bond29: entered promiscuous mode
[  276.367788][T16774] 8021q: adding VLAN 0 to HW filter on device bond29
[  276.421286][T16774] bond29 (unregistering): Released all slaves
[  276.593077][T16783] netlink: 'syz.2.2969': attribute type 13 has an invalid length.
[  276.607861][T16783] netlink: 'syz.2.2969': attribute type 13 has an invalid length.
[  276.619054][T16783] netlink: 'syz.2.2969': attribute type 13 has an invalid length.
[  276.629822][T16783] netlink: 'syz.2.2969': attribute type 13 has an invalid length.
[  276.637262][T16783] netlink: 'syz.2.2969': attribute type 13 has an invalid length.
[  277.759526][ T7706] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.771222][ T7706] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.777232][ T7706] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.780660][ T7706] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.999646][T16818] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.011055][T16818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.048289][T16834] __nla_validate_parse: 29 callbacks suppressed
[  278.048300][T16834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2978'.
[  278.057778][T16818] team_slave_1: left promiscuous mode
[  278.074916][T16818] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  278.080313][ T7706] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.084306][ T7706] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.107979][ T7706] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.110683][ T7706] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.190617][T16836] 8021q: adding VLAN 0 to HW filter on device team0
[  278.195776][T16836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.223865][T16836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  278.227281][T16836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  278.231595][T16836] hsr0: left promiscuous mode
[  278.234861][T16836] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  278.546970][T16849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2984'.
[  278.617219][T16849] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2984'.
[  278.624191][T16849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2984'.
[  278.703284][T16858] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  278.706520][T16858] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  278.774985][T16864] only policy match revision 0 supported
[  278.774999][T16864] unable to load match
[  278.781574][T16865] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  278.941001][T16861] 8021q: VLANs not supported on gre0
[  279.330279][T16879] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2991'.
[  279.400437][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2992'.
[  279.425283][T16885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2992'.
[  279.537817][T16891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2993'.
[  279.617492][T16897] validate_nla: 70 callbacks suppressed
[  279.617505][T16897] netlink: 'syz.1.2994': attribute type 4 has an invalid length.
[  279.628249][T16896] netlink: 'syz.1.2994': attribute type 4 has an invalid length.
[  279.631748][T16896] netlink: 'syz.1.2994': attribute type 4 has an invalid length.
[  280.312626][T16914] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2997'.
[  280.319423][T16914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  280.725969][T16922] syzkaller1: entered allmulticast mode
[  280.805456][T16927] netlink: 'syz.2.3000': attribute type 1 has an invalid length.
[  280.827661][T16927] workqueue: Failed to create a rescuer kthread for wq "bond34": -EINTR
[  280.968509][T16933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3001'.
[  281.196089][T16939] nbd: must specify an index to disconnect
[  281.274243][T16944] 8021q: VLANs not supported on ip6tnl0
[  281.463187][T16958] netlink: 'syz.0.3005': attribute type 1 has an invalid length.
[  281.610997][T16958] macvlan2: entered promiscuous mode
[  281.613765][T16958] macvlan2: entered allmulticast mode
[  281.617018][T16958] bond31: entered promiscuous mode
[  281.619792][T16958] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  281.642582][T16958] bond31: left promiscuous mode
[  281.961781][T16968] macvtap3: entered promiscuous mode
[  281.966497][T16968] macvtap3: entered allmulticast mode
[  281.969050][T16968] veth1_vlan: entered allmulticast mode
[  282.004657][T16969] macvtap4: entered promiscuous mode
[  282.010740][T16969] macvtap4: entered allmulticast mode
[  282.753079][T16981] xfrm1: entered allmulticast mode
[  283.104569][T16985] __nla_validate_parse: 4 callbacks suppressed
[  283.104589][T16985] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3014'.
[  283.131698][T17006] netlink: 'syz.2.3018': attribute type 1 has an invalid length.
[  283.220335][T17006] 8021q: adding VLAN 0 to HW filter on device bond34
[  283.237004][T17007] bond34: (slave veth19): Enslaving as an active interface with a down link
[  283.250834][T17019] bridge0: Device is already in use.
[  283.414456][T17024] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3023'.
[  283.433882][T17026] bond36: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  283.437803][T17026] bond36 (unregistering): Released all slaves
[  283.448271][T17024] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3023'.
[  283.491556][T17031] netlink: 'syz.0.3025': attribute type 1 has an invalid length.
[  283.505115][T17031] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3025'.
[  283.510768][T17031] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3025'.
[  283.516443][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'.
[  283.521324][T17031] netlink: 'syz.0.3025': attribute type 1 has an invalid length.
[  283.527678][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3024'.
[  283.531158][T17031] netlink: 'syz.0.3025': attribute type 8 has an invalid length.
[  283.534668][T17031] netlink: 606 bytes leftover after parsing attributes in process `syz.0.3025'.
[  283.546284][T17029] workqueue: Failed to create a rescuer kthread for wq "bond36": -EINTR
[  283.836114][T17057] netlink: 'syz.1.3029': attribute type 4 has an invalid length.
[  283.843823][T17057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3029'.
[  285.098978][T17090] nbd: nbd2 already in use
[  285.105044][T17090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3037'.
[  285.128821][T17091] bond36: (slave vcan1): The slave device specified does not support setting the MAC address
[  285.134223][T17091] bond36: (slave vcan1): Error -95 calling set_mac_address
[  285.227682][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x132
[  285.378044][T17115] syzkaller1: entered promiscuous mode
[  285.380257][T17115] syzkaller1: entered allmulticast mode
[  288.082314][T17095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  288.159902][T17122] __nla_validate_parse: 2 callbacks suppressed
[  288.159914][T17122] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3042'.
[  288.176151][T17122] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3042'.
[  288.205640][T17124] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.3044'.
[  288.214106][T17124] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.3044'.
[  288.264084][T17131] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3043'.
[  288.268060][T17130] netlink: 'syz.0.3045': attribute type 10 has an invalid length.
[  288.293837][T17130] tap0: tun_chr_ioctl cmd 1074025677
[  288.300345][T17130] tap0: linktype set to 773
[  288.510303][T17142] bridge19: the hash_elasticity option has been deprecated and is always 16
[  289.179935][T17165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3054'.
[  289.424456][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'.
[  289.429010][T17181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3058'.
[  289.511237][T17183] sctp: [Deprecated]: syz.2.3059 (pid 17183) Use of int in max_burst socket option.
[  289.511237][T17183] Use struct sctp_assoc_value instead
[  289.693028][T17190] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3061'.
[  289.696520][T17190] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3061'.
[  289.733482][T17191] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002
[  289.796635][T17191] macsec4: entered promiscuous mode
[  289.799017][T17191] virt_wifi0: entered promiscuous mode
[  289.891153][T17203] netlink: 'syz.2.3066': attribute type 13 has an invalid length.
[  290.583368][T17233] netlink: 'syz.1.3073': attribute type 7 has an invalid length.
[  293.970139][T17247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  294.061608][T17275] ipvlan1: Caught tx_queue_len zero misconfig
[  294.175166][T17280] ip6gre3: entered promiscuous mode
[  294.182212][T17280] ip6gre3: entered allmulticast mode
[  294.351781][T17291] __nla_validate_parse: 5 callbacks suppressed
[  294.351870][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3085'.
[  294.580600][T17303] netlink: 'syz.0.3090': attribute type 7 has an invalid length.
[  294.585963][T17303] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3090'.
[  294.846348][T17315] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3094'.
[  294.944705][T17320] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3095'.
[  294.948423][T17320] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3095'.
[  294.951968][T17320] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3095'.
[  294.986438][T17322] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.3096'.
[  295.115897][T17322] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  295.118923][T17322] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  295.467552][T17331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3097'.
[  295.482822][T17331] netlink: 'syz.2.3097': attribute type 10 has an invalid length.
[  295.485936][T17331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3097'.
[  295.706223][T17345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.708794][T17345] syzkaller0: entered promiscuous mode
[  295.710595][T17345] syzkaller0: entered allmulticast mode
[  295.729894][T17345] tipc: Resetting bearer <eth:syzkaller0>
[  295.746917][T17345] tipc: Disabling bearer <eth:syzkaller0>
[  295.773375][T17347] netlink: 'syz.1.3102': attribute type 10 has an invalid length.
[  295.832630][T17349] netlink: 'syz.1.3102': attribute type 10 has an invalid length.
[  296.004798][T17358] netlink: 'syz.2.3105': attribute type 4 has an invalid length.
[  296.007237][T17358] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3105'.
[  296.032264][T17347] nbd9: detected capacity change from 0 to 63
[  296.038446][ T8381] block nbd9: Receive control failed (result -104)
[  296.041271][   T55] block nbd9: Receive control failed (result -32)
[  296.202004][T17364] hma(kX: entered promiscuous mode
[  296.206945][T17364] netlink: 'syz.1.3106': attribute type 1 has an invalid length.
[  296.534832][T17385] sctp: [Deprecated]: syz.1.3111 (pid 17385) Use of int in max_burst socket option.
[  296.534832][T17385] Use struct sctp_assoc_value instead
[  296.787547][T17401] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  296.945517][T17408] bond29: entered promiscuous mode
[  296.947596][T17408] 8021q: adding VLAN 0 to HW filter on device bond29
[  297.047222][T17414] xt_addrtype: ipv6 does not support BROADCAST matching
[  297.163177][T17414] netlink: 'syz.2.3119': attribute type 58 has an invalid length.
[  297.448477][T17428] tipc: New replicast peer: 0.0.0.0
[  297.455606][T17428] tipc: Enabled bearer <udp:syz2>, priority 10
[  297.496129][T17428] tipc: New replicast peer: 224.0.0.1
[  297.683245][T17437] netlink: 'syz.1.3126': attribute type 1 has an invalid length.
[  300.200467][ T8672] tipc: Node number set to 1071077899
[  300.203439][T17454] __nla_validate_parse: 23 callbacks suppressed
[  300.203449][T17454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3131'.
[  300.348387][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'.
[  300.349277][T17475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3135'.
[  300.361713][T17477] gretap0: entered promiscuous mode
[  300.381374][T17477] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3136'.
[  300.391653][T17475] block nbd2: NBD_DISCONNECT
[  300.393433][T17475] block nbd2: Send disconnect failed -32
[  300.395207][T17475] block nbd2: shutting down sockets
[  300.420554][T17477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3136'.
[  300.531446][T17482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3136'.
[  300.577927][T17483] netlink: 'syz.2.3138': attribute type 1 has an invalid length.
[  300.771905][T17490] xt_CT: You must specify a L4 protocol and not use inversions on it
[  300.777079][T17490] netlink: 'syz.1.3140': attribute type 21 has an invalid length.
[  300.790165][T17490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3140'.
[  301.064842][T17495] netlink: 'syz.1.3141': attribute type 4 has an invalid length.
[  301.078461][T17495] netlink: 'syz.1.3141': attribute type 4 has an invalid length.
[  301.409065][T17495] virt_wifi0: left promiscuous mode
[  301.427153][ T5448] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.431848][ T5448] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.464281][ T5448] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.466923][ T5448] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.529284][T17505] netem: change failed
[  301.533897][T17505] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  301.558790][T17502] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3143'.
[  301.638558][T17508] netlink: 'syz.0.3146': attribute type 4 has an invalid length.
[  301.641073][T17508] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3146'.
[  301.717319][T17516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3148'.
[  302.012351][T17535] sit0: entered promiscuous mode
[  302.059148][T17541] netlink: 'syz.1.3150': attribute type 12 has an invalid length.
[  302.433846][T17551] lo: Caught tx_queue_len zero misconfig
[  302.534518][T17555] netlink: 'syz.2.3158': attribute type 4 has an invalid length.
[  302.597225][T17555] netlink: 'syz.2.3158': attribute type 30 has an invalid length.
[  302.600574][T17555] netlink: 'syz.2.3158': attribute type 30 has an invalid length.
[  302.666340][T17561] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  302.669171][T17561] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  302.672952][T17561] veth0_virt_wifi: entered allmulticast mode
[  302.676044][T17561] veth0_virt_wifi: entered promiscuous mode
[  302.678384][T17561] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  302.680748][T17561] bridge0: port 1(veth0_virt_wifi) entered listening state
[  302.721000][T17563] syzkaller0: entered promiscuous mode
[  302.723112][T17563] syzkaller0: entered allmulticast mode
[  302.727077][T17563] team_slave_1: Caught tx_queue_len zero misconfig
[  302.952315][T17572] tunl0: entered promiscuous mode
[  302.960118][T17572] netlink: 'syz.0.3164': attribute type 4 has an invalid length.
[  303.055840][T17578] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  303.261358][T17583] 8021q: adding VLAN 0 to HW filter on device bond37
[  303.293699][T17583] bond37: (slave veth23): Enslaving as an active interface with a down link
[  303.640459][T17602] veth23: entered allmulticast mode
[  303.761499][T17602] bond30: entered promiscuous mode
[  303.765951][T17602] bond30: entered allmulticast mode
[  303.917832][T17623] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  304.160009][T17643] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  304.416114][T14931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.421848][T14931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.143908][T17671] block nbd2: server does not support multiple connections per device.
[  305.151892][T17671] block nbd2: shutting down sockets
[  305.179058][  T232] block nbd8: Connection timed out, retrying (0/2 alive)
[  305.181972][  T232] block nbd8: Connection timed out, retrying (0/2 alive)
[  305.185564][  T232] block nbd8: Connection timed out, retrying (0/2 alive)
[  305.188480][  T232] block nbd8: Connection timed out, retrying (0/2 alive)
[  305.191215][  T232] block nbd8: Dead connection, failed to find a fallback
[  305.194314][  T232] block nbd8: shutting down sockets
[  305.196808][  T232] blk_print_req_error: 138 callbacks suppressed
[  305.196816][  T232] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  305.203522][  T232] buffer_io_error: 138 callbacks suppressed
[  305.203532][  T232] Buffer I/O error on dev nbd8, logical block 3, async page read
[  305.208345][  T232] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  305.211303][  T232] Buffer I/O error on dev nbd8, logical block 2, async page read
[  305.214459][  T232] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  305.217979][  T232] Buffer I/O error on dev nbd8, logical block 1, async page read
[  305.220938][  T232] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  305.225562][  T232] Buffer I/O error on dev nbd8, logical block 0, async page read
[  305.228851][ T6552] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  305.232662][ T6552] Buffer I/O error on dev nbd8, logical block 0, async page read
[  305.235998][ T6552] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  305.239543][ T6552] Buffer I/O error on dev nbd8, logical block 1, async page read
[  305.242504][ T6552] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  305.245514][ T6552] Buffer I/O error on dev nbd8, logical block 2, async page read
[  305.247985][ T6552] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  305.251069][ T6552] Buffer I/O error on dev nbd8, logical block 3, async page read
[  305.254566][ T6552] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  305.258159][ T6552] Buffer I/O error on dev nbd8, logical block 0, async page read
[  305.260759][ T6552] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  305.264059][ T6552] Buffer I/O error on dev nbd8, logical block 1, async page read
[  305.267730][ T6552] ldm_validate_partition_table(): Disk read failed.
[  305.270684][ T6552] Dev nbd8: unable to read RDB block 0
[  305.273707][ T6552]  nbd8: unable to read partition table
[  305.280455][ T6552] ldm_validate_partition_table(): Disk read failed.
[  305.283522][ T6552] Dev nbd8: unable to read RDB block 0
[  305.287776][ T6552]  nbd8: unable to read partition table
[  305.390590][T17678] __nla_validate_parse: 24 callbacks suppressed
[  305.390601][T17678] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3195'.
[  305.492848][T17684] bond0: Caught tx_queue_len zero misconfig
[  305.588637][T17696] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3198'.
[  305.681829][T17700] vlan6: entered promiscuous mode
[  305.685420][T17700] bridge0: entered promiscuous mode
[  305.744769][T17709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3198'.
[  305.750798][T17709] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3198'.
[  308.474713][T17686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  308.634179][T17750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3204'.
[  308.651360][T17750] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3204'.
[  308.941170][T14933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.949145][T14933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.021823][T17775] validate_nla: 8 callbacks suppressed
[  309.021841][T17775] netlink: 'syz.0.3210': attribute type 7 has an invalid length.
[  309.029506][T17775] netlink: 'syz.0.3210': attribute type 8 has an invalid length.
[  309.035537][T17776] netlink: 'syz.0.3210': attribute type 7 has an invalid length.
[  309.039308][T17776] netlink: 'syz.0.3210': attribute type 8 has an invalid length.
[  309.138321][T17782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3211'.
[  309.195590][T17773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3208'.
[  309.207102][T17782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3211'.
[  309.284705][T17792] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3212'.
[  309.567690][T17807] netlink: 'syz.0.3216': attribute type 13 has an invalid length.
[  309.575730][T17807] netlink: 'syz.0.3216': attribute type 17 has an invalid length.
[  309.614800][T17807] tunl0: left promiscuous mode
[  309.620381][T17807] gretap0: left promiscuous mode
[  309.650464][T17807] 8021q: adding VLAN 0 to HW filter on device team0
[  309.658653][T17807] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.689400][T17807] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  309.693957][T17807] veth1_vlan: left promiscuous mode
[  309.698535][T17807] vlan0: left promiscuous mode
[  309.701121][T17807] veth1_vlan: entered promiscuous mode
[  309.724790][T17807] 8021q: adding VLAN 0 to HW filter on device team1
[  309.728637][T17807] 8021q: adding VLAN 0 to HW filter on device team2
[  309.731956][T17807] 8021q: adding VLAN 0 to HW filter on device bond1
[  309.740915][T17807] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  309.749196][T17807] 8021q: adding VLAN 0 to HW filter on device bond2
[  309.798543][T17807] 8021q: adding VLAN 0 to HW filter on device bond3
[  309.806865][T17807] 8021q: adding VLAN 0 to HW filter on device bond4
[  309.843496][T17807] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  309.847702][T17807] 8021q: adding VLAN 0 to HW filter on device bond5
[  309.851380][T17807] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  309.861683][T17807] 8021q: adding VLAN 0 to HW filter on device bond6
[  309.866864][T17807] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  309.871331][T17807] 8021q: adding VLAN 0 to HW filter on device bond7
[  309.875889][T17807] 8021q: adding VLAN 0 to HW filter on device bond8
[  309.880335][T17807] 8021q: adding VLAN 0 to HW filter on device bond9
[  309.884897][T17807] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  309.890639][T17807] 8021q: adding VLAN 0 to HW filter on device bond10
[  309.900599][T17807] 8021q: adding VLAN 0 to HW filter on device bond11
[  309.904314][T17807] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  309.958818][T11542] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  309.963336][    T9] syz0: Port: 1 Link ACTIVE
[  309.965803][T11542] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.970143][T11542] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  309.978210][T11542] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.019705][T11542] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  310.022779][T11542] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.025933][T11542] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  310.029018][T11542] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.329630][T17819] sit0: left promiscuous mode
[  310.600200][T17819] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  310.831464][T17819] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  310.837783][T17819] bond23: left promiscuous mode
[  310.841674][T17819] bridge16: left promiscuous mode
[  310.843713][T17819] macvtap2: left allmulticast mode
[  310.846017][T17819] ip6gre2: left promiscuous mode
[  310.848259][T17819] ip6gre2: left allmulticast mode
[  310.850535][T17819] vlan3: left allmulticast mode
[  310.854204][T17819] bond0: left allmulticast mode
[  310.856342][T17819] vlan4: left promiscuous mode
[  310.858162][T17819] bond27: left promiscuous mode
[  310.860415][T17819] vlan4: left allmulticast mode
[  310.862934][T17819] bond27: left allmulticast mode
[  310.865364][T17819] veth14: left allmulticast mode
[  310.867695][T17819] sit5: left promiscuous mode
[  310.885007][T17819] veth1_vlan: left allmulticast mode
[  310.887523][T17819] macvtap3: left promiscuous mode
[  310.889714][T17819] macvtap3: left allmulticast mode
[  310.894690][T17819] xfrm1: left allmulticast mode
[  311.201719][T17845] __nla_validate_parse: 5 callbacks suppressed
[  311.201740][T17845] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3228'.
[  311.402473][T17863] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3229'.
[  311.534182][T17872] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  311.545213][T17872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3232'.
[  311.615387][T17876] netlink: 'syz.0.3234': attribute type 3 has an invalid length.
[  311.618904][T17876] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3234'.
[  311.623641][T17878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3232'.
[  311.629710][T17876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'.
[  311.634051][T17878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3232'.
[  311.714032][T17884] syzkaller0: entered promiscuous mode
[  311.715945][T17884] syzkaller0: entered allmulticast mode
[  311.793033][T17888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  312.716339][T17918] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3244'.
[  312.837685][T17923] xt_hashlimit: size too large, truncated to 1048576
[  312.967947][T17923] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3247'.
[  312.971325][T17923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  313.013254][   T64] wlan1: Trigger new scan to find an IBSS to join
[  313.068865][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3245'.
[  313.085353][T17924] macsec0: entered promiscuous mode
[  313.266433][T17940] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  313.273474][T17921] macsec0: left promiscuous mode
[  313.620629][T17963] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  313.628498][T17963] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  313.889925][T17972] netlink: 'syz.0.3258': attribute type 11 has an invalid length.
[  313.898321][T17972] netlink: 'syz.0.3258': attribute type 5 has an invalid length.
[  313.904025][T17973] netlink: 'syz.1.3259': attribute type 1 has an invalid length.
[  313.996062][T17974] bond31: (slave vxcan1): The slave device specified does not support setting the MAC address
[  314.000468][T17974] bond31: (slave vxcan1): Error -95 calling set_mac_address
[  314.017932][T17981] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  314.308271][T17979] bond31: (slave vxcan1): The slave device specified does not support setting the MAC address
[  314.326401][T17979] bond31: (slave vxcan1): Error -95 calling set_mac_address
[  314.355952][T17986] netem: incorrect ge model size
[  314.360665][T17986] netem: change failed
[  314.373409][T17992] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  314.377486][T17992] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.495140][T17992] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  314.506064][T17992] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.535148][T17998] validate_nla: 1 callbacks suppressed
[  314.535208][T17998] netlink: 'syz.2.3264': attribute type 4 has an invalid length.
[  314.547555][T17996] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  314.580090][T17992] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  314.590578][T17992] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.644732][T17992] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  314.654231][T17992] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.778305][ T5448] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  314.781861][ T5448] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.797451][ T5448] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  314.803329][ T5448] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.821980][ T5448] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  314.826763][ T5448] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.841533][ T5448] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  314.849308][ T5448] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.118521][T18022] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  315.126646][T18022] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  315.556552][T18046] netlink: 'syz.1.3279': attribute type 10 has an invalid length.
[  315.604960][T18046] tap0: tun_chr_ioctl cmd 1074025677
[  315.608456][T18046] tap0: linktype set to 773
[  315.676619][T18053] netlink: 'syz.0.3283': attribute type 3 has an invalid length.
[  315.693695][T18053] netlink: 'syz.0.3283': attribute type 1 has an invalid length.
[  316.055867][T14932] wlan1: Trigger new scan to find an IBSS to join
[  316.180285][T18064] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  316.235348][T18068] netlink: 'syz.2.3290': attribute type 1 has an invalid length.
[  316.266589][T18068] 8021q: adding VLAN 0 to HW filter on device bond38
[  316.277971][T18068] vlan6: entered promiscuous mode
[  316.280074][T18068] bond38: entered promiscuous mode
[  316.282690][T18068] vlan6: entered allmulticast mode
[  316.284668][T18068] bond38: entered allmulticast mode
[  316.285699][T18071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.288626][T18068] __nla_validate_parse: 12 callbacks suppressed
[  316.288638][T18068] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3290'.
[  316.300250][T18068] 8021q: adding VLAN 0 to HW filter on device batadv1
[  316.306720][T18068] bond38: (slave batadv1): making interface the new active one
[  316.310801][T18068] batadv1: entered promiscuous mode
[  316.313044][T18068] batadv1: entered allmulticast mode
[  316.315683][T18068] bond38: (slave batadv1): Enslaving as an active interface with an up link
[  316.382989][T18071] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  316.525297][T18082] IPVS: sh: FWM 3 0x00000003 - no destination available
[  316.538078][T18085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'.
[  316.846002][T18098] netlink: 'syz.0.3296': attribute type 12 has an invalid length.
[  316.984326][T14931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.303838][T18118] vlan8: entered promiscuous mode
[  317.305588][T18118] veth18: entered promiscuous mode
[  317.450940][T18121] netlink: 'syz.1.3303': attribute type 1 has an invalid length.
[  317.493530][T18121] 8021q: adding VLAN 0 to HW filter on device bond32
[  317.521546][T18121] bond32: (slave veth23): Enslaving as an active interface with a down link
[  317.564561][T18124] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3304'.
[  317.603389][T18125] bond32: (slave veth25): Enslaving as an active interface with a down link
[  320.113727][T18106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  320.235929][T18135] netlink: 'syz.2.3308': attribute type 12 has an invalid length.
[  320.349741][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3308'.
[  320.357111][T18140] macsec0: entered promiscuous mode
[  320.361375][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3308'.
[  320.425854][T18140] macsec0 (unregistering): left promiscuous mode
[  320.481621][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3310'.
[  320.495719][T18157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3310'.
[  320.798418][T18172] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  320.906337][T18177] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3318'.
[  320.909859][T18177] netlink: 'syz.1.3318': attribute type 1 has an invalid length.
[  320.914918][T18177] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3318'.
[  321.011743][T18182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3319'.
[  321.064071][T18195] netlink: 'syz.2.3323': attribute type 13 has an invalid length.
[  321.067194][T18194] netlink: 'syz.2.3323': attribute type 13 has an invalid length.
[  321.121704][T18203] netlink: 'syz.0.3324': attribute type 4 has an invalid length.
[  321.249235][T18213] bond39: entered promiscuous mode
[  321.251618][T18213] 8021q: adding VLAN 0 to HW filter on device bond39
[  321.265121][T18213] bond39 (unregistering): Released all slaves
[  321.295740][T18215] __nla_validate_parse: 4 callbacks suppressed
[  321.295753][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3325'.
[  321.305775][T18215] netlink: 'syz.0.3325': attribute type 8 has an invalid length.
[  321.441007][T18225] lo: Caught tx_queue_len zero misconfig
[  321.444892][T18225] netem: incorrect gi model size
[  321.449915][T18225] netem: change failed
[  321.505484][T18231] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3332'.
[  321.508492][T18231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3332'.
[  321.513313][T18231] netlink: 'syz.1.3332': attribute type 1 has an invalid length.
[  321.589236][T18235] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  321.705005][T18243] netlink: 'syz.1.3337': attribute type 12 has an invalid length.
[  321.718634][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3337'.
[  321.721953][T18243] macsec0: entered promiscuous mode
[  321.726035][T18243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3337'.
[  321.731003][T18243] macsec0 (unregistering): left promiscuous mode
[  321.808044][T18247] netlink: 'syz.2.3339': attribute type 58 has an invalid length.
[  321.910357][T18249] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3340'.
[  321.914688][T18249] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3340'.
[  322.124525][T18259] netlink: 'syz.0.3342': attribute type 1 has an invalid length.
[  322.128101][T18259] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.131577][T18257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3344'.
[  322.181561][T18265] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3345'.
[  322.570195][T18284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3348'.
[  322.696388][T18291] xt_cgroup: invalid path, errno=-2
[  323.343834][T18312] gretap3: left allmulticast mode
[  323.345953][T18312] bond15: left promiscuous mode
[  323.348018][T18312] gretap4: left allmulticast mode
[  323.350158][T18312] bond18: left promiscuous mode
[  323.351779][T18312] bond18: left allmulticast mode
[  323.355181][T18312] bridge8: left promiscuous mode
[  323.359699][T18312] bond19: left promiscuous mode
[  323.369138][T18312] vlan4: left allmulticast mode
[  323.372101][T18312] bond0: left allmulticast mode
[  323.389685][T18312] ip6erspan1: left allmulticast mode
[  323.393861][T18312] bond24: left promiscuous mode
[  323.403578][T18312] bridge15: left promiscuous mode
[  323.408593][T18312] gtp0: left promiscuous mode
[  323.410472][T18312] gtp0: left allmulticast mode
[  323.421181][T18312] bond29: left promiscuous mode
[  323.424261][T18312] team_slave_1: left promiscuous mode
[  323.428790][T18312] bond29: left allmulticast mode
[  323.430649][T18312] team_slave_1: left allmulticast mode
[  323.434190][T18312] bond30: left promiscuous mode
[  323.436049][T18312] erspan2: left promiscuous mode
[  323.438181][T18312] bond30: left allmulticast mode
[  323.442538][T18312] erspan2: left allmulticast mode
[  323.469566][T11542] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  323.478104][    T9] syz0: Port: 1 Link DOWN
[  323.481376][T11542] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.490173][T11542] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  323.494510][T11542] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.503724][T11542] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  323.508424][T11542] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.514609][T11542] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  323.518500][T11542] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.743698][T18335] syzkaller0: entered promiscuous mode
[  323.746213][T18335] syzkaller0: entered allmulticast mode
[  323.825080][T18341] syzkaller1: entered promiscuous mode
[  323.829355][T18341] syzkaller1: entered allmulticast mode
[  323.949227][T18346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.956534][T18346] syzkaller0: entered promiscuous mode
[  323.958756][T18346] syzkaller0: entered allmulticast mode
[  323.982208][T18346] veth0: Caught tx_queue_len zero misconfig
[  323.991244][T18346] tipc: Resetting bearer <eth:syzkaller0>
[  323.996092][T18345] tipc: Resetting bearer <eth:syzkaller0>
[  324.020101][T18345] tipc: Disabling bearer <eth:syzkaller0>
[  324.265493][T18356] syzkaller0: entered promiscuous mode
[  324.269328][T18356] syzkaller0: entered allmulticast mode
[  324.710750][T18375] netlink: 'syz.2.3376': attribute type 11 has an invalid length.
[  325.930327][T18409] syzkaller0: entered promiscuous mode
[  325.932217][T18409] syzkaller0: entered allmulticast mode
[  326.195097][T18431] netlink: 'syz.0.3385': attribute type 1 has an invalid length.
[  326.197701][T18431] netlink: 'syz.0.3385': attribute type 2 has an invalid length.
[  326.200200][T18431] netlink: 'syz.0.3385': attribute type 1 has an invalid length.
[  326.292908][  T232] block nbd9: Connection timed out, retrying (0/2 alive)
[  326.295411][  T232] block nbd9: Connection timed out, retrying (0/2 alive)
[  326.297587][  T232] block nbd9: Connection timed out, retrying (0/2 alive)
[  326.299843][  T232] block nbd9: Connection timed out, retrying (0/2 alive)
[  326.302589][  T232] block nbd9: Dead connection, failed to find a fallback
[  326.305022][  T232] block nbd9: shutting down sockets
[  326.306661][  T232] blk_print_req_error: 138 callbacks suppressed
[  326.306668][  T232] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  326.311798][  T232] buffer_io_error: 138 callbacks suppressed
[  326.311807][  T232] Buffer I/O error on dev nbd9, logical block 3, async page read
[  326.316628][  T232] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  326.320219][  T232] Buffer I/O error on dev nbd9, logical block 2, async page read
[  326.322917][  T232] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  326.325776][  T232] Buffer I/O error on dev nbd9, logical block 1, async page read
[  326.328234][  T232] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  326.331011][  T232] Buffer I/O error on dev nbd9, logical block 0, async page read
[  326.333671][ T9365] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  326.336827][ T9365] Buffer I/O error on dev nbd9, logical block 0, async page read
[  326.340455][ T9365] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  326.344308][ T9365] Buffer I/O error on dev nbd9, logical block 1, async page read
[  326.347101][ T9365] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  326.349943][ T9365] Buffer I/O error on dev nbd9, logical block 2, async page read
[  326.352687][ T9365] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  326.355801][ T9365] Buffer I/O error on dev nbd9, logical block 3, async page read
[  326.358854][ T9365] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  326.364317][ T9365] Buffer I/O error on dev nbd9, logical block 0, async page read
[  326.366977][ T9365] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  326.369906][ T9365] Buffer I/O error on dev nbd9, logical block 1, async page read
[  326.374704][ T9365] ldm_validate_partition_table(): Disk read failed.
[  326.377647][ T9365] Dev nbd9: unable to read RDB block 0
[  326.381346][ T9365]  nbd9: unable to read partition table
[  326.425910][ T9365] ldm_validate_partition_table(): Disk read failed.
[  326.428869][ T9365] Dev nbd9: unable to read RDB block 0
[  326.431443][ T9365]  nbd9: unable to read partition table
[  326.483652][T18439] bond2: entered allmulticast mode
[  326.487299][T18439] vcan1: entered allmulticast mode
[  326.493669][T18439] __nla_validate_parse: 19 callbacks suppressed
[  326.493678][T18439] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3395'.
[  326.523352][T18439] netlink: 'syz.0.3395': attribute type 21 has an invalid length.
[  326.526550][T18439] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3395'.
[  326.529706][T18439] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3395'.
[  326.552876][T18441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3396'.
[  326.588225][T18443] syzkaller0: entered promiscuous mode
[  326.590465][T18443] syzkaller0: entered allmulticast mode
[  326.707755][T18451] 8021q: VLANs not supported on nlmon0
[  326.905466][T18460] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3402'.
[  326.916028][T18460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3402'.
[  326.923619][T18460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3402'.
[  327.139302][T18465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3403'.
[  327.246821][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3400'.
[  327.247056][T18457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3400'.
[  327.543022][T18471] openvswitch: netlink: Flow actions attr not present in new flow.
[  327.571314][T18471] netlink: 'syz.1.3404': attribute type 1 has an invalid length.
[  327.579308][T18471] netlink: 'syz.1.3404': attribute type 3 has an invalid length.
[  327.805478][T18482] xt_bpf: check failed: parse error
[  327.904420][T18494] netlink: 'syz.2.3410': attribute type 1 has an invalid length.
[  327.908176][T18494] netlink: 'syz.2.3410': attribute type 2 has an invalid length.
[  328.466236][T18515] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  328.600457][T18519] pim6reg: left allmulticast mode
[  328.605699][T18519] bridge0: left allmulticast mode
[  328.711715][T18521] gtp1: entered promiscuous mode
[  328.719818][T18521] gtp1: entered allmulticast mode
[  329.171209][T18556] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  329.187414][T18556] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  329.195458][T18556] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  329.199846][T18556] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  329.210252][T18556] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  329.215511][T18556] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  329.228695][T18561] netlink: 'syz.2.3425': attribute type 160 has an invalid length.
[  329.505434][T18573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  330.102520][T18612] lo speed is unknown, defaulting to 1000
[  330.107916][T18612] lo speed is unknown, defaulting to 1000
[  330.110960][T18612] lo speed is unknown, defaulting to 1000
[  330.457137][T18612] infiniband sqz0: set down
[  330.459220][T18629] netlink: 'syz.2.3441': attribute type 1 has an invalid length.
[  330.461462][T18612] infiniband sqz0: added lo
[  330.470613][ T5024] lo speed is unknown, defaulting to 1000
[  330.493946][T18612] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  330.503572][T18612] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  330.510362][T18622] vlan6: left promiscuous mode
[  330.514302][T18622] bond38: left promiscuous mode
[  330.516015][T18612] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  330.519126][T18622] batadv1: left promiscuous mode
[  330.527405][T18622] vlan6: left allmulticast mode
[  330.537790][T18622] bond38: left allmulticast mode
[  330.542307][T18622] batadv1: left allmulticast mode
[  330.546444][T18612] RDS/IB: sqz0: added
[  330.550890][T18612] smc: adding ib device sqz0 with port count 1
[  330.559890][T18612] smc:    ib device sqz0 port 1 has no pnetid
[  330.630912][T18624] bond32: (slave vcan2): refused to change device type
[  330.678465][ T5429] lo speed is unknown, defaulting to 1000
[  330.686339][T18612] lo speed is unknown, defaulting to 1000
[  330.943473][T18612] lo speed is unknown, defaulting to 1000
[  331.044674][T18643] pim6reg1: entered allmulticast mode
[  331.204375][T18612] lo speed is unknown, defaulting to 1000
[  331.570255][ T5448] nci: nci_rsp_packet: unsupported rsp opcode 0xf15
[  331.636839][T18665] __nla_validate_parse: 25 callbacks suppressed
[  331.636857][T18665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3448'.
[  331.703964][T18668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3449'.
[  331.747234][T18665] bond33: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  331.758704][T18665] bond33 (unregistering): Released all slaves
[  331.845580][T18659] lo speed is unknown, defaulting to 1000
[  332.356571][T18681] netlink: 'syz.0.3452': attribute type 58 has an invalid length.
[  332.359491][T18681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3452'.
[  334.480261][T18655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  334.598334][T18692] netlink: 'syz.0.3456': attribute type 1 has an invalid length.
[  334.610330][T18692] bond33: entered promiscuous mode
[  334.614344][T18692] 8021q: adding VLAN 0 to HW filter on device bond33
[  334.654803][T18692] ipvlan6: entered allmulticast mode
[  334.656670][T18692] bond33: entered allmulticast mode
[  334.670108][T18692] bond33: (slave bridge24): making interface the new active one
[  334.673314][T18692] bridge24: entered promiscuous mode
[  334.675102][T18692] bridge24: entered allmulticast mode
[  334.677816][T18692] bond33: (slave bridge24): Enslaving as an active interface with an up link
[  334.845474][T18709] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3458'.
[  334.859444][T18709] netlink: 'syz.0.3458': attribute type 3 has an invalid length.
[  334.862369][T18709] netlink: 'syz.0.3458': attribute type 3 has an invalid length.
[  334.875873][T18713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3462'.
[  334.911041][T18716] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3463'.
[  335.095077][T18728] syzkaller0: entered promiscuous mode
[  335.096882][T18728] syzkaller0: entered allmulticast mode
[  336.899882][T18751] bond0: Caught tx_queue_len zero misconfig
[  336.951833][T18749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3470'.
[  336.981903][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3472'.
[  336.990540][T18759] sch_tbf: peakrate 7340785173952954545 is lower than or equals to rate 11208202924562138941 !
[  337.013099][T18757] xt_l2tp: invalid flags combination: 8
[  337.019878][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3472'.
[  337.029214][T18757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3472'.
[  337.058338][T18762] netlink: 12596 bytes leftover after parsing attributes in process `syz.1.3475'.
[  337.141558][T18769] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3476'.
[  337.186616][T18772] netlink: 'syz.2.3473': attribute type 1 has an invalid length.
[  337.390394][T18776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3478'.
[  337.416221][T18776] netlink: 'syz.0.3478': attribute type 1 has an invalid length.
[  337.996499][T18783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'.
[  337.999363][T18783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'.
[  338.016221][T18783] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  338.018525][T18783] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  338.021084][T18783] tipc: Resetting bearer <eth:syzkaller0>
[  338.024479][T18784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'.
[  338.201949][T18788] netlink: 'syz.1.3483': attribute type 11 has an invalid length.
[  338.490336][T18793] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  338.946150][   T64] tipc: Resetting bearer <eth:syzkaller0>
[  338.993015][T18826] netlink: 'syz.1.3493': attribute type 1 has an invalid length.
[  339.011510][T18826] 8021q: adding VLAN 0 to HW filter on device bond33
[  339.018579][T18826] netlink: 'syz.1.3493': attribute type 1 has an invalid length.
[  339.034290][T18826] 8021q: adding VLAN 0 to HW filter on device bond34
[  339.037896][T18826] netlink: 'syz.1.3493': attribute type 1 has an invalid length.
[  339.050807][T18826] 8021q: adding VLAN 0 to HW filter on device bond35
[  339.053852][T18826] netlink: 'syz.1.3493': attribute type 1 has an invalid length.
[  339.069244][T18826] 8021q: adding VLAN 0 to HW filter on device bond36
[  339.075761][T18826] netlink: 'syz.1.3493': attribute type 1 has an invalid length.
[  339.091099][T18826] 8021q: adding VLAN 0 to HW filter on device bond37
[  339.094609][T18826] netlink: 'syz.1.3493': attribute type 1 has an invalid length.
[  339.116126][T18826] 8021q: adding VLAN 0 to HW filter on device bond38
[  339.549243][T18840] lo speed is unknown, defaulting to 1000
[  339.776878][T18841] syzkaller1: entered promiscuous mode
[  339.778896][T18841] syzkaller1: entered allmulticast mode
[  340.767641][T18888] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  340.779142][T18888] vxcan0: entered allmulticast mode
[  340.797283][T18890] syzkaller1: entered promiscuous mode
[  340.799185][T18890] syzkaller1: entered allmulticast mode
[  340.910715][T18898] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  341.149614][T18912] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  341.158741][T18912] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  341.169725][T18911] netlink: 'syz.0.3517': attribute type 58 has an invalid length.
[  341.331911][T18915] netlink: 'syz.0.3517': attribute type 1 has an invalid length.
[  341.378511][T18917] bond34: (slave bond_slave_1): Device is not bonding slave
[  341.381531][T18917] bond34: option active_slave: invalid value (bond_slave_1)
[  341.393328][T18917] bond34 (unregistering): Released all slaves
[  341.740157][T18934] 8021q: adding VLAN 0 to HW filter on device bond40
[  341.748386][T18934] bond39: (slave bond40): making interface the new active one
[  341.751230][T18934] bond39: (slave bond40): Enslaving as an active interface with an up link
[  341.977330][T18949] __nla_validate_parse: 16 callbacks suppressed
[  341.977344][T18949] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3527'.
[  341.986874][T18949] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3527'.
[  342.027175][T18952] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3529'.
[  342.214823][T18966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3532'.
[  342.241925][T18952] bridge0: Device is already in use.
[  342.404298][T18969] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3533'.
[  342.430028][T18971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.889261][T18993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3539'.
[  342.895474][T18993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3539'.
[  343.224542][T19006] bridge24: entered promiscuous mode
[  343.226442][T19006] bridge24: entered allmulticast mode
[  343.256625][T19008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.260266][T19008] validate_nla: 1 callbacks suppressed
[  343.260274][T19008] netlink: 'syz.2.3544': attribute type 6 has an invalid length.
[  343.366411][T19017] sctp: [Deprecated]: syz.0.3545 (pid 19017) Use of struct sctp_assoc_value in delayed_ack socket option.
[  343.366411][T19017] Use struct sctp_sack_info instead
[  343.434374][T19019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3545'.
[  343.565139][T19022] netlink: 'syz.2.3548': attribute type 1 has an invalid length.
[  343.597127][T19024] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3549'.
[  343.608775][T19024] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  343.618486][T19024] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  343.626103][T19024] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  343.642828][T19024] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  343.690153][T19024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3549'.
[  345.870196][T19056] Cannot find set identified by id 0 to match
[  345.900720][T19058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  346.834975][T19033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  346.838697][T19038] nbd: must specify an index to disconnect
[  347.065034][T19077] netlink: 'syz.1.3565': attribute type 32 has an invalid length.
[  347.067936][T19077] netlink: 'syz.1.3565': attribute type 32 has an invalid length.
[  347.120711][T19080] __nla_validate_parse: 5 callbacks suppressed
[  347.120723][T19080] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3567'.
[  347.417174][T19099] 8021q: VLANs not supported on ip6gre0
[  347.687186][ T5620] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  347.704525][ T5620] CPU: 0 UID: 0 PID: 5620 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  347.704543][ T5620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  347.704548][ T5620] Call Trace:
[  347.704552][ T5620]  <TASK>
[  347.704558][ T5620]  dump_stack_lvl+0xe8/0x150
[  347.704575][ T5620]  dump_header+0xd3/0x4c0
[  347.704591][ T5620]  oom_kill_process+0x3ab/0x970
[  347.704603][ T5620]  out_of_memory+0x106c/0x1410
[  347.704613][ T5620]  ? try_charge_memcg+0xbb9/0x1570
[  347.704628][ T5620]  ? __pfx___mutex_lock+0x10/0x10
[  347.704645][ T5620]  ? __pfx_out_of_memory+0x10/0x10
[  347.704653][ T5620]  ? do_raw_spin_unlock+0x4d/0x210
[  347.704669][ T5620]  try_charge_memcg+0xc77/0x1570
[  347.704687][ T5620]  ? __pfx_try_charge_memcg+0x10/0x10
[  347.704696][ T5620]  ? percpu_ref_tryget+0x15/0x180
[  347.704715][ T5620]  ? charge_memcg+0x23/0x2b0
[  347.704726][ T5620]  charge_memcg+0x1a2/0x2b0
[  347.704737][ T5620]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  347.704746][ T5620]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  347.704758][ T5620]  __swap_cache_prepare_and_add+0xdc/0x700
[  347.704771][ T5620]  ? page_rmappable_folio+0x9a/0x170
[  347.704788][ T5620]  swap_cache_alloc_folio+0xf1/0x240
[  347.704798][ T5620]  swap_cluster_readahead+0x523/0x670
[  347.704809][ T5620]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  347.704823][ T5620]  ? get_vma_policy+0x27b/0x3c0
[  347.704836][ T5620]  swapin_readahead+0x196/0xc50
[  347.704846][ T5620]  ? swap_table_get+0x1e/0x260
[  347.704857][ T5620]  ? __pfx_swapin_readahead+0x10/0x10
[  347.704866][ T5620]  ? swap_table_get+0x1e/0x260
[  347.704874][ T5620]  ? swap_table_get+0x1e/0x260
[  347.704880][ T5620]  ? swap_table_get+0x1e/0x260
[  347.704888][ T5620]  ? swap_table_get+0x216/0x260
[  347.704897][ T5620]  ? swap_cache_get_folio+0x2e4/0x2f0
[  347.704908][ T5620]  do_swap_page+0x555/0x5120
[  347.704920][ T5620]  ? __pte_offset_map+0x29/0x240
[  347.704931][ T5620]  ? __pte_offset_map+0x29/0x240
[  347.704943][ T5620]  ? do_swap_page+0x128/0x5120
[  347.704951][ T5620]  ? __pfx_do_swap_page+0x10/0x10
[  347.704960][ T5620]  ? __pte_offset_map+0x1ae/0x240
[  347.704974][ T5620]  ? pte_offset_map_rw_nolock+0xea/0x160
[  347.704988][ T5620]  handle_mm_fault+0x12d4/0x3170
[  347.705010][ T5620]  ? handle_mm_fault+0xee/0x3170
[  347.705027][ T5620]  ? __pfx_handle_mm_fault+0x10/0x10
[  347.705037][ T5620]  ? lock_vma_under_rcu+0x45a/0x500
[  347.705072][ T5620]  do_user_addr_fault+0xa73/0x1340
[  347.705093][ T5620]  ? rcu_is_watching+0x15/0xb0
[  347.705107][ T5620]  ? trace_page_fault_user+0x84/0x1e0
[  347.705155][ T5620]  exc_page_fault+0x6a/0xc0
[  347.705175][ T5620]  asm_exc_page_fault+0x26/0x30
[  347.705186][ T5620] RIP: 0033:0x7f8e1c35d68e
[  347.705198][ T5620] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  347.705210][ T5620] RSP: 002b:00007fff5257c2a8 EFLAGS: 00010246
[  347.705224][ T5620] RAX: 0000000000000000 RBX: 0000555593940500 RCX: 00007f8e1c35d68e
[  347.705232][ T5620] RDX: 00007fff5257c300 RSI: 0000000000000000 RDI: 0000000000000000
[  347.705238][ T5620] RBP: 00007fff5257c36c R08: 0000000000000000 R09: 0000000000000000
[  347.705247][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  347.705253][ T5620] R13: 00000000000927c0 R14: 0000000000054c68 R15: 00007fff5257c3c0
[  347.705274][ T5620]  </TASK>
[  347.705280][ T5620] memory: usage 307200kB, limit 307200kB, failcnt 2267
[  347.856085][T19101] netlink: 'syz.1.3571': attribute type 8 has an invalid length.
[  347.858578][T19101] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.3571'.
[  347.955831][ T5620] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0
[  347.960289][ T5620] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[  347.974285][ T5620] Memory cgroup stats for /syz2:
[  347.974352][ T5620] cache 0
[  347.983532][ T5620] rss 0
[  347.984928][ T5620] rss_huge 0
[  347.989596][ T5620] shmem 0
[  347.990843][ T5620] mapped_file 0
[  347.999890][ T5620] dirty 0
[  348.004809][ T5620] writeback 0
[  348.009277][ T5620] workingset_refault_anon 4
[  348.013999][ T5620] workingset_refault_file 14
[  348.021519][ T5620] swap 200704
[  348.028007][ T5620] swapcached 245760
[  348.034552][ T5620] pgpgin 169072
[  348.036171][ T5620] pgpgout 169066
[  348.037725][ T5620] pgfault 263224
[  348.043161][ T5620] pgmajfault 5
[  348.044594][ T5620] inactive_anon 24576
[  348.054037][ T5620] active_anon 0
[  348.060356][ T5620] inactive_file 0
[  348.075832][ T5620] active_file 0
[  348.090394][ T5620] unevictable 0
[  348.103593][ T5620] hierarchical_memory_limit 314572800
[  348.119311][ T5620] hierarchical_memsw_limit 9223372036854771712
[  348.127840][ T5620] total_cache 0
[  348.130450][ T5620] total_rss 0
[  348.137262][ T5620] total_rss_huge 0
[  348.147143][ T5620] total_shmem 0
[  348.151942][ T5620] total_mapped_file 0
[  348.162748][ T5620] total_dirty 0
[  348.168824][ T5620] total_writeback 0
[  348.186494][ T5620] total_workingset_refault_anon 4
[  348.190566][ T5620] total_workingset_refault_file 14
[  348.203069][ T5620] total_swap 200704
[  348.211988][ T5620] total_swapcached 245760
[  348.220432][ T5620] total_pgpgin 169072
[  348.224072][ T5620] total_pgpgout 169066
[  348.226888][ T5620] total_pgfault 263224
[  348.229439][ T5620] total_pgmajfault 5
[  348.231417][ T5620] total_inactive_anon 24576
[  348.238425][ T5620] total_active_anon 0
[  348.241402][ T5620] total_inactive_file 0
[  348.245268][ T5620] total_active_file 0
[  348.247437][ T5620] total_unevictable 0
[  348.250135][ T5620] anon_cost 0
[  348.251860][ T5620] file_cost 0
[  348.253865][ T5620] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3566,pid=19078,uid=0
[  348.264419][T19106] syzkaller0: entered promiscuous mode
[  348.265429][ T5620] Memory cgroup out of memory: Killed process 19078 (syz.2.3566) total-vm:102292kB, anon-rss:1312kB, file-rss:23136kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  348.278148][T19106] syzkaller0: entered allmulticast mode
[  348.293152][T19106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.383949][T19105] tipc: Resetting bearer <eth:syzkaller0>
[  348.495730][T19105] tipc: Disabling bearer <eth:syzkaller0>
[  349.251950][T19126] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3574'.
[  349.735473][T19139] netlink: 'syz.2.3580': attribute type 1 has an invalid length.
[  350.035242][T19134] lo speed is unknown, defaulting to 1000
[  350.169874][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3583'.
[  350.484907][T19151] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  350.513348][T19145] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  350.523151][T19145] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  350.539483][T19145] tipc: Resetting bearer <eth:syzkaller0>
[  350.646911][T19145] x_tables: duplicate underflow at hook 1
[  350.770034][T19156] netlink: 'syz.0.3587': attribute type 13 has an invalid length.
[  350.974395][T19160] tipc: Resetting bearer <eth:syzkaller0>
[  351.011550][T19160] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  351.019607][T19164] 8021q: VLANs not supported on vcan0
[  351.198975][T19170] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  351.264676][T19176] tipc: Resetting bearer <eth:syzkaller0>
[  351.370668][T19178] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3593'.
[  352.087657][T19194] netlink: 'syz.0.3599': attribute type 1 has an invalid length.
[  352.110616][T19194] bond34: entered promiscuous mode
[  352.113768][T19194] 8021q: adding VLAN 0 to HW filter on device bond34
[  352.303320][T19201] bond34: (slave bridge25): making interface the new active one
[  352.308773][T19201] bridge25: entered promiscuous mode
[  352.315866][T19201] bond34: (slave bridge25): Enslaving as an active interface with an up link
[  352.524371][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3602'.
[  352.556881][T19213] netlink: 'syz.2.3602': attribute type 1 has an invalid length.
[  352.557656][T19215] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3603'.
[  352.565645][T19215] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3603'.
[  352.620399][T19213] 8021q: adding VLAN 0 to HW filter on device bond42
[  352.786118][T19224] xfrm0: Caught tx_queue_len zero misconfig
[  352.947754][T19235] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3607'.
[  352.964604][T19235] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3607'.
[  353.026000][T19237] ipip2: entered promiscuous mode
[  353.099736][T19241] erspan0: entered promiscuous mode
[  353.105255][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3609'.
[  353.267396][T19246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3610'.
[  353.323355][T19248] netlink: 364 bytes leftover after parsing attributes in process `syz.1.3612'.
[  353.379482][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3613'.
[  353.451103][T19258] syzkaller0: entered promiscuous mode
[  353.456686][T19258] syzkaller0: entered allmulticast mode
[  353.525836][T19263] netlink: 'syz.2.3615': attribute type 1 has an invalid length.
[  353.593725][T19265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3616'.
[  353.638035][T19265] ip6gre3: entered promiscuous mode
[  353.639929][T19265] ip6gre3: entered allmulticast mode
[  354.371747][T19280] : entered promiscuous mode
[  354.384521][T19280] openvswitch: : Dropping previously announced user features
[  354.420754][T19274] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  354.424532][T19274] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  354.447564][T19274] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  354.451738][T19274] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  354.654107][T19289] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  354.666332][T19289] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  354.670006][T19289] veth0_virt_wifi: entered allmulticast mode
[  354.673820][T19289] veth0_virt_wifi: entered promiscuous mode
[  354.768696][T19293] vlan8: entered promiscuous mode
[  354.819779][T19301] nbd: must specify an index to disconnect
[  354.843508][T19304] nbd: must specify an index to disconnect
[  355.177744][T19324] netlink: 'syz.1.3635': attribute type 1 has an invalid length.
[  355.203708][T19324] bond41 (unregistering): Released all slaves
[  355.225982][T19326] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4
[  355.352989][T19331] 8021q: adding VLAN 0 to HW filter on device team0
[  355.360762][T19331] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.407251][T19331] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  355.531413][T19344] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  355.837366][T19367] netlink: 'syz.2.3642': attribute type 3 has an invalid length.
[  355.844364][T19367] netlink: 'syz.2.3642': attribute type 3 has an invalid length.
[  355.916793][T19367] pim6reg1: entered promiscuous mode
[  355.919198][T19367] pim6reg1: entered allmulticast mode
[  356.243639][T19387] netlink: 'syz.1.3648': attribute type 13 has an invalid length.
[  356.290123][   T34] audit: type=1800 audit(1778901214.356:8): pid=19385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3646" name="memory.events" dev="tmpfs" ino=5729 res=0 errno=0
[  357.188296][T19405] netlink: 'syz.2.3654': attribute type 1 has an invalid length.
[  357.456145][   T34] audit: type=1107 audit(1778901215.526:9): pid=19420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  357.692682][T19433] __nla_validate_parse: 12 callbacks suppressed
[  357.692693][T19433] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3661'.
[  357.702759][T19433] netlink: 'syz.2.3661': attribute type 2 has an invalid length.
[  357.809945][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3662'.
[  357.814095][T19435] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  357.912857][T19439] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3664'.
[  357.938917][T19437] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] SMP KASAN PTI
[  357.942637][T19437] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f]
[  357.945750][T19437] CPU: 0 UID: 0 PID: 19437 Comm: syz.2.3663 Not tainted syzkaller #0 PREEMPT(full) 
[  357.948761][T19437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  357.952666][T19437] RIP: 0010:kernel_sock_shutdown+0x47/0x70
[  357.955076][T19437] Code: 53 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 f7 53 be f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 da 53 be f8 4d 8b 1f 4c 89 f7 89
[  357.961085][T19437] RSP: 0018:ffffc900045ff0a8 EFLAGS: 00010202
[  357.962986][T19437] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff8881a8f93b00
[  357.965641][T19437] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888118ecb040
[  357.968129][T19437] RBP: 0000000000000002 R08: ffff888101391dab R09: 1ffff110202723b5
[  357.970694][T19437] R10: dffffc0000000000 R11: ffffed10202723b6 R12: dffffc0000000000
[  357.973488][T19437] R13: dffffc0000000000 R14: ffff888118ecb040 R15: 0000000000000068
[  357.976340][T19437] FS:  00007f8e1d2826c0(0000) GS:ffff88818dc8a000(0000) knlGS:0000000000000000
[  357.979243][T19437] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  357.981276][T19437] CR2: 00007fe68974da08 CR3: 0000000029f2e000 CR4: 00000000000006f0
[  357.983731][T19437] Call Trace:
[  357.984919][T19437]  <TASK>
[  357.985896][T19437]  udp_tunnel_sock_release+0x6f/0x80
[  357.987812][T19437]  rxe_net_del+0x121/0x2e0
[  357.989310][T19437]  rxe_dellink+0x15/0x20
[  357.990834][T19437]  nldev_dellink+0x304/0x3d0
[  357.992694][T19437]  ? __pfx_nldev_dellink+0x10/0x10
[  357.994931][T19437]  ? apparmor_capable+0x126/0x170
[  357.996720][T19437]  ? bpf_lsm_capable+0x9/0x20
[  357.998189][T19437]  ? security_capable+0x7e/0x2c0
[  357.999723][T19437]  ? __pfx_nldev_dellink+0x10/0x10
[  358.001353][T19437]  rdma_nl_rcv+0x6d1/0xa10
[  358.002671][T19437]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  358.004215][T19437]  ? netlink_deliver_tap+0x2e/0x1b0
[  358.005862][T19437]  ? netlink_deliver_tap+0x2e/0x1b0
[  358.007504][T19437]  netlink_unicast+0x75c/0x8e0
[  358.008978][T19437]  netlink_sendmsg+0x813/0xb40
[  358.010748][T19437]  ? __pfx_netlink_sendmsg+0x10/0x10
[  358.012466][T19437]  ? aa_sock_msg_perm+0xf1/0x1b0
[  358.014196][T19437]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  358.015974][T19437]  ____sys_sendmsg+0x972/0x9f0
[  358.017479][T19437]  ? __might_fault+0xaf/0x130
[  358.019034][T19437]  ? __pfx_____sys_sendmsg+0x10/0x10
[  358.020896][T19437]  ? import_iovec+0x73/0xa0
[  358.022592][T19437]  ___sys_sendmsg+0x2a5/0x360
[  358.024480][T19437]  ? __lock_acquire+0x6b5/0x2cf0
[  358.026763][T19437]  ? __pfx____sys_sendmsg+0x10/0x10
[  358.028584][T19437]  ? futex_wait+0x2a2/0x390
[  358.029968][T19437]  ? __fget_files+0x2a/0x420
[  358.031388][T19437]  ? __fget_files+0x3a0/0x420
[  358.032821][T19437]  __x64_sys_sendmsg+0x1bd/0x2a0
[  358.034349][T19437]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  358.035984][T19437]  ? rcu_is_watching+0x15/0xb0
[  358.037504][T19437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.039385][T19437]  do_syscall_64+0x15f/0xf80
[  358.040820][T19437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.042729][T19437] RIP: 0033:0x7f8e1c39ce59
[  358.044368][T19437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  358.052432][T19437] RSP: 002b:00007f8e1d282028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  358.056076][T19437] RAX: ffffffffffffffda RBX: 00007f8e1c615fa0 RCX: 00007f8e1c39ce59
[  358.059124][T19437] RDX: 0000000000000004 RSI: 0000200000004680 RDI: 000000000000000d
[  358.061698][T19437] RBP: 00007f8e1c432d6f R08: 0000000000000000 R09: 0000000000000000
[  358.064334][T19437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  358.067389][T19437] R13: 00007f8e1c616038 R14: 00007f8e1c615fa0 R15: 00007fff5257bfc8
[  358.070122][T19437]  </TASK>
[  358.071331][T19437] Modules linked in:
[  358.073827][T19437] ---[ end trace 0000000000000000 ]---
[  358.100325][T19437] RIP: 0010:kernel_sock_shutdown+0x47/0x70
[  358.103472][T19437] Code: 53 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 f7 53 be f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 da 53 be f8 4d 8b 1f 4c 89 f7 89
[  358.104307][T19440] smc: removing ib device syz0
[  358.109535][T19437] RSP: 0018:ffffc900045ff0a8 EFLAGS: 00010202
[  358.109548][T19437] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff8881a8f93b00
[  358.109554][T19437] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888118ecb040
[  358.109559][T19437] RBP: 0000000000000002 R08: ffff888101391dab R09: 1ffff110202723b5
[  358.123475][T19437] R10: dffffc0000000000 R11: ffffed10202723b6 R12: dffffc0000000000
[  358.126020][T19437] R13: dffffc0000000000 R14: ffff888118ecb040 R15: 0000000000000068
[  358.128769][T19437] FS:  00007f8e1d2826c0(0000) GS:ffff88818dc8a000(0000) knlGS:0000000000000000
[  358.131984][T19437] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  358.135035][T19437] CR2: 00007f210fa4f0d7 CR3: 0000000029f2e000 CR4: 00000000000006f0
[  358.137913][T19437] Kernel panic - not syncing: Fatal exception
[  358.140905][T19437] Kernel Offset: disabled
[  358.142328][T19437] Rebooting in 86400 seconds..
