last executing test programs:

5.488344854s ago: executing program 0 (id=1170):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="3c0012800b000100626174616476"], 0x64}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

5.164547866s ago: executing program 0 (id=1172):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, r1, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2001}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20048844)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32)
r4 = socket(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=<r6=>0x0)
sendmsg$IPSET_CMD_DEL(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x130, 0xa, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xc7}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4a}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xff}}]}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa4}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x80000000}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x48000) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
writev(r7, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b690007e03dd6446ce8880000000000", 0x11}, {&(0x7f0000000200)="b7", 0x1}, {&(0x7f0000000100)="cc8b9b2251a9d92e1fc45219ba008fed80a21fc2912949782b436e3ca180e832c6243f930621bbba0cbadc46f61224cde3f74496f6f477ab786e0ad0438d809e1301fadc7412e8fb00af52e0dd514f2e6bf63dcb21370b7b21e65b38be5815", 0x5f}, {&(0x7f0000000540)="0e37b90261e76309b1cac9fade2e9c7d97027847ae3dd4c8ad9bacdc9eb40588f815d4a7290ec85ec1d6e62099c8862720d7231bfc91e78093bec7882a6db8419c6df7296622b23d8d5f7d7d1d196ad5aaba08a8731c748a", 0x58}], 0x4)
bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r6, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) (async, rerun: 64)
sendto(r2, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) (async, rerun: 64)
close(r3)

5.049738367s ago: executing program 0 (id=1174):
unshare(0x62040200) (async)
unshare(0x62040200)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xa0, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x5, 0x84) (async)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)})
bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) (async)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) (async)
sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a003000", @ANYRES16], 0xb8}}, 0x4000)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000000)=0x4fd0, 0x4)

4.389305268s ago: executing program 0 (id=1176):
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1a, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100))
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async)
bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) (async)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) (async)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c)
r11 = socket(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)

3.529864808s ago: executing program 0 (id=1186):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5) (async)
socket$unix(0x1, 0x2, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10) (async)
write(r6, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
r7 = socket$kcm(0x11, 0x3, 0x0) (async)
r8 = socket(0x400000000010, 0x3, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc)

1.700479645s ago: executing program 1 (id=1199):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="f888837a845d705f04c2777ea24d880cab1e9f294fb3d6160481a9f262276a628dc9ecc162a616c225ca3d8d11f9bf7d6f2ffeaaa9ebc3894d4614278c97cef97cdf7462f6d60a48cadad5da82f28e092ad3f637817c9458133f357f9e5ab66ea5fa10bfc0e6aed1b8d9d5f2ca692bf563037730ba798230a16d1f75644445d236e2e13b362f112a2741beff89f148fe0d7ab54f846b8b65fd23480bcab0b5892b12eec4e2183890800b0269a3ab1788cf378a512b5a35cffe0b1d1d5ae25b4c0ef4fc0abdf3ebccea7704e196940677d1eb6216ce03af67b71c859af53c1793bed3f9c127efdbe5ae7d2f2f727868cb69dd09cc1adc8e13fbbe714565500142")
r1 = socket$packet(0x11, 0x2, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000871006001c001a80180005801400"], 0x3c}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan0\x00', 0x200})

1.620112181s ago: executing program 1 (id=1200):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0)

1.619232933s ago: executing program 1 (id=1201):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB='.\x00\x00'], 0x20) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="ffff00", @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000000000000000000000000000000000000000015000000e3de3d7b07a37df3513bfc4cd07ec3ee777de774fc000000"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x24004004) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
r9 = socket(0x400000000010, 0x3, 0x0) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64)
recvmsg$unix(r12, &(0x7f0000000280)={&(0x7f0000000600), 0x6e, &(0x7f00000005c0), 0x0, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x12110) (async, rerun: 64)
r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000850000002700"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async)
r15 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r15, 0x29, 0x18, &(0x7f0000000040), 0x4)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="050000000000000000000000f365063cf37bddf9c2ceb5a341e3c928ee370253", @ANYRES32, @ANYRES64=0x0], 0x10)
r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000a28afe8f756bb4ca785a6de5dfb5d448a33a41bc01b77cf46fcdea5804ae6941e60af859f9c516b9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r16}, 0x38)

830.233239ms ago: executing program 2 (id=1206):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x43002, 0x829}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc4}}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8)
recvmmsg(r0, &(0x7f0000003e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=""/253, 0xfd}}, {{&(0x7f0000002840)=@tipc=@name, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002740)=""/246, 0xf6}, {&(0x7f0000002900)=""/119, 0x77}, {&(0x7f0000003d40)=""/22, 0x16}], 0x3, &(0x7f0000002980)=""/193, 0xc1}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/253, 0xfd}, {&(0x7f0000003b80)=""/215, 0xd7}, {&(0x7f0000003c80)=""/166, 0xa6}], 0x4, &(0x7f0000003ec0)=""/91, 0x5b}}], 0x3, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x43002, 0x829}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc4}}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) (async)
recvmmsg(r0, &(0x7f0000003e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=""/253, 0xfd}}, {{&(0x7f0000002840)=@tipc=@name, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002740)=""/246, 0xf6}, {&(0x7f0000002900)=""/119, 0x77}, {&(0x7f0000003d40)=""/22, 0x16}], 0x3, &(0x7f0000002980)=""/193, 0xc1}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/253, 0xfd}, {&(0x7f0000003b80)=""/215, 0xd7}, {&(0x7f0000003c80)=""/166, 0xa6}], 0x4, &(0x7f0000003ec0)=""/91, 0x5b}}], 0x3, 0x0, 0x0) (async)

750.318ms ago: executing program 1 (id=1207):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0xfffe, 0x2}, 0x4)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={<r3=>0x0, 0x43, "d486dd5274ede489bf3de4b3b7bc3c765d14b478d20306b67b3faca993d3277cfedc4b6370327725ad5272aee9a7e7490c16b742a7ee2a453b132563776ad37e008fea"}, &(0x7f0000000200)=0x4b)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={r2, 0x0, 0xb, 0xffff, 0x400, 0x2, 0xff, 0x1000, {r3, @in={{0x2, 0x4e20, @empty}}, 0x200, 0x5, 0x5, 0x7fffffff, 0x5}}, &(0x7f0000000380)=0xb0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x8000)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0)

748.580146ms ago: executing program 2 (id=1208):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
ppoll(0x0, 0x0, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x40000, 0x1}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x40000, 0x1}, 0x20)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000300)={'veth0_virt_wifi\x00', {0x2, 0x0, @multicast2}})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60009c00", @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf250700000008000500ffffffff0a0004007770616e3300000008000100010000000c001700010055555555555508000500020000000c0017000203aaaaaaaaaaaae3fd0100030000000800050000000000"], 0x60}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) (async)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000b40)=ANY=[@ANYBLOB="8400", @ANYRES16=r5, @ANYBLOB="000329bd7000fcdbdf250200000014000600fc0000000000974b768ddb69ce610000000000000000000108000c000300000014000500fe88000000e20000000000000000010107000100e240000014000500fe8000000000000000000000000000bb0d0401006e6c3830323135340000000014000500ff0100"/130], 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) (async)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000b40)=ANY=[@ANYBLOB="8400", @ANYRES16=r5, @ANYBLOB="000329bd7000fcdbdf250200000014000600fc0000000000974b768ddb69ce610000000000000000000108000c000300000014000500fe88000000e20000000000000000010107000100e240000014000500fe8000000000000000000000000000bb0d0401006e6c3830323135340000000014000500ff0100"/130], 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000)
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0xfffffffc, @mcast2, 0x1}, 0x1c)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f00000005c0)}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f00000005c0)}, 0x10)
sendmmsg$inet(r4, &(0x7f000000a080)=[{{&(0x7f0000006000)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x4004040)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000340)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x1}}, 0x10)
bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10)
ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000680)={<r8=>r0, &(0x7f0000000540)='\x00', 0x300, &(0x7f0000000580)={@_ha_fsid={[0x66]}, {0x6446, 0x262, 0x30bb}}, 0x3, 0x0, &(0x7f0000000640)=0x6})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="020000000000000000000000000000e1ffffff00f1278295e424eda7ad23bf92889323364f54958dabc2442fbcbe3b5531a7ca9168bb5c87ed81c83a15a33f411ec31465704b89cc212c329c14b765c5befe9143e35ed01c06c4ea871974dee40ecdb9abbb037991afedb3edae731eed8149398d89ef539e52ef46fa48275cf2c7bfbfc5ad20c07f3b02cc0589d54ac6931b59b17d77df0f18dd346c418faaf4128d9f193ea04c92", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000300"/28], 0x50) (async)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="020000000000000000000000000000e1ffffff00f1278295e424eda7ad23bf92889323364f54958dabc2442fbcbe3b5531a7ca9168bb5c87ed81c83a15a33f411ec31465704b89cc212c329c14b765c5befe9143e35ed01c06c4ea871974dee40ecdb9abbb037991afedb3edae731eed8149398d89ef539e52ef46fa48275cf2c7bfbfc5ad20c07f3b02cc0589d54ac6931b59b17d77df0f18dd346c418faaf4128d9f193ea04c92", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000300"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xd, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000400000000000000020800008510000009000000852000000400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000020000008500000006000000950000000000000012ed1fab8ba6b06e963eb197ba1d20bb4eaf78a8e3fae318aa52852cd501a5e764cc754c8ba85403d791a74e060d0f9f2639ed2e558a1c9eb9ed2387dfc854cb90e77e4cc334969eb2f9f5c5946be38b4cd1152d71a45dd6fcd1aa2895e613cb9b664e2e62e9af1b909eca0be51500000000000000"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x2d, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0x2, 0x7fff, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000003c0)=[r9], &(0x7f0000000840)=[{0x5, 0x1, 0x0, 0x5}, {0x3, 0x5, 0xf, 0x7}, {0x0, 0x5, 0x2, 0x9}], 0x10, 0x401}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xd, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000400000000000000020800008510000009000000852000000400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000020000008500000006000000950000000000000012ed1fab8ba6b06e963eb197ba1d20bb4eaf78a8e3fae318aa52852cd501a5e764cc754c8ba85403d791a74e060d0f9f2639ed2e558a1c9eb9ed2387dfc854cb90e77e4cc334969eb2f9f5c5946be38b4cd1152d71a45dd6fcd1aa2895e613cb9b664e2e62e9af1b909eca0be51500000000000000"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x2d, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0x2, 0x7fff, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000003c0)=[r9], &(0x7f0000000840)=[{0x5, 0x1, 0x0, 0x5}, {0x3, 0x5, 0xf, 0x7}, {0x0, 0x5, 0x2, 0x9}], 0x10, 0x401}, 0x94)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000100", @ANYRES16=0x0, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) (async)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000100", @ANYRES16=0x0, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000a00)=<r10=>0x0)
sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="579c28bd7000fcdbdf251200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYBLOB="080015000200000008000100", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x20000000)
sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x8006}}}, 0x10, 0x0}, 0x0) (async)
sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x8006}}}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000a51800009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94)

746.52698ms ago: executing program 1 (id=1209):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r5=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000b40)={r5, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000000)=""/31, &(0x7f00000000c0)=0x1f)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c880}, 0x40004)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc8, 0x355a, 0x401}}}}]}, 0x44}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x2, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}]}, &(0x7f0000000080)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000b40)={r5, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000000)=""/31, &(0x7f00000000c0)=0x1f) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c880}, 0x40004) (async)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc8, 0x355a, 0x401}}}}]}, 0x44}}, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) (async)

649.303527ms ago: executing program 2 (id=1210):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
unshare(0x20000400)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020500030a0000000000000000190000030006000000000002004e2164010100000000000000000002000100000004d5000008010000000003000500cd00000002"], 0x50}, 0x1, 0x7}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0xfffffff9, 0x800, 0x8000000, 0xb}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a000100779bd2c0409e08a6020000060012"], 0x2c}, 0x1, 0x0, 0x0, 0x60080c1}, 0x0)
setsockopt$sock_linger(r3, 0x1, 0xd, 0x0, 0x0)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x2010, r7, 0x28779000)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x43339d41532428b}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x847c4242ece2dad0}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000440)={0x834, r8, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x28, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x5, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x2}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0x10}, {0x0, 0x2}, {0x2, 0x1}, {0x2, 0x4}, {0x5, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x5}, {0x7, 0x9}, {0x4}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xfffc, 0x4, 0x3, 0x2, 0x8, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x8d, 0x9, 0x7, 0x8, 0x7, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x3}, {0x3, 0xa}, {0x6, 0x7}, {0x4, 0x6}, {0x3}, {0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x8}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0x4}, {0x7, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x2}, {0x4, 0x5}, {0x1, 0x8}, {0x3, 0x1}, {0x3, 0x7}, {0x5}, {0x7, 0x4}, {0x1, 0x5}, {0x6, 0x7}, {0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x3}, {0x7, 0x9}, {0x4, 0x8}, {0x2, 0x5}, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0xa}, {0x2, 0x5}, {0x1, 0x8}, {0x3, 0x2}, {0x6, 0x9}, {0x5, 0x9}, {0x2}, {0x6, 0x2}, {0x0, 0x2}, {0x2, 0x8}, {0x2, 0x8}, {0x6, 0x2}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x101, 0xe2b, 0x1000, 0x2, 0xa, 0x3ff, 0x8000]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x0, 0xe1, 0x1, 0x4, 0x7, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xdf, 0x8, 0x73a4, 0x2, 0x2, 0x1, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0xfff9, 0x0, 0xfffa, 0x100, 0xea72, 0xa73]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x3}, {0x5, 0x9}, {0x5, 0xa}, {0x0, 0x2}, {0x1, 0xa}, {0x2, 0x3}, {0x7, 0x1}, {0x1, 0x2}, {0x5, 0x8}, {0x2, 0x9}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x7}, {0x7, 0x8}, {0x0, 0x5}, {0x6, 0x1}, {0x5, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x9}, {0x7, 0x1}, {}, {0x2, 0x7}, {}, {0x4, 0x7}, {0x7}, {0x1, 0x5}, {0x0, 0x7}, {}, {0x2, 0x9}, {0x1, 0x1}, {0x4}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0xa}, {0x4, 0x1}, {0x7, 0x7}, {0x5, 0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x3, 0x9}, {0x1, 0x8}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x1}, {0x6, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x2}, {0x0, 0x5}, {0x2, 0x4}, {0x5, 0x5}, {0x0, 0x8}, {0x6, 0x4}, {0x7, 0x3}, {0x5, 0x6}, {0x5, 0x3}, {0x6, 0x1}, {0x2}, {0x1, 0x5}, {0x2, 0x9}, {0x3, 0x7}, {0x4, 0x9}, {0x4, 0x3}, {0x3, 0x9}, {0x7, 0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x8001, 0x5, 0xe, 0xfffc, 0x3, 0x9]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x7ff, 0x6, 0xfffa, 0x8000, 0x2, 0x4a]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x2, 0x1}, {0x1, 0x1}, {0x7}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x76, 0x6, 0x5, 0x12, 0x36, 0x16, 0x4, 0x36, 0x4, 0x12, 0x3, 0x9, 0x5, 0x4, 0x24, 0x4, 0xb, 0x60, 0xc, 0x12, 0xc, 0x2, 0x24, 0x30, 0x0, 0xc, 0x0, 0x36, 0x18]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x24, 0x6c, 0x6c, 0x3c]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x9}, {0x7, 0x6}, {0x0, 0xa}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x5, 0x12, 0xc, 0x36, 0x6c, 0xb, 0x18, 0x19, 0x1b]}]}]}, @NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x7f, 0x758e, 0xffff, 0x5, 0x2, 0x81, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0xffff, 0x4, 0x18, 0x4, 0x9, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x413e, 0x1, 0xfff, 0x0, 0x7, 0xa17, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x2, 0x4, 0x24, 0x4, 0x3, 0x48, 0x48, 0x18, 0x4, 0x6c, 0x16, 0x0, 0x6c, 0xb, 0x30, 0x1, 0x30, 0x60, 0x9, 0xc, 0x2, 0x48, 0x2, 0x2, 0x12, 0x6c, 0x27]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x3ff, 0x800, 0x0, 0x1, 0x7, 0x7]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x6, 0x2}, {0x7, 0x7}, {0x7, 0x9}, {0x2, 0x4}, {0x3, 0x1}, {0x1, 0x8}, {0x2, 0x7}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {0x7, 0x5}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0x4}, {}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x3}, {0x6, 0x3}, {0x0, 0x5}, {0x2}, {0x4, 0x8}, {0x5, 0xa}, {0x5, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x7, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x5, 0x6}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0xa}, {0x3, 0x2}, {0x1, 0x9}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5e, 0x9, 0xd, 0x51, 0x3, 0x9, 0x1, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x8}, {0x6, 0x4}, {0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x6, 0x8}, {0x6, 0x3}, {0x7}, {0x5, 0x2}, {0x1, 0x4}, {0x1, 0x6}, {0x2, 0x2}, {}, {0x2, 0xa}, {}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x4, 0x9}, {0x2}, {0x7, 0x5}, {0x0, 0x7}, {0x3}, {0x1, 0x2}, {0x2, 0xa}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0x1}, {0x0, 0x8}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x0, 0xf0, 0x800, 0x3, 0xc85, 0x8, 0xd73]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xce43, 0x2, 0x38b, 0x81, 0x6055, 0x8000, 0x2, 0x59b9]}}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x54b2, 0x4, 0x100, 0x8001, 0x0, 0x6, 0xf, 0x7]}}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x7}, {0x7, 0xa}, {0x3, 0x6}, {0x4, 0x4}, {0x6, 0x9}, {0x5, 0x1}, {0x6, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0x6}, {}, {0x1, 0x5}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x8}, {0x2, 0x8}, {0x4, 0x7}, {0x0, 0x6}, {}, {0x7, 0x1}, {0x1, 0x7}, {0x3, 0x8}, {0x3, 0x3}, {0x1}, {0x6, 0x6}, {0x6, 0x8}, {0x1, 0x2}, {0x1}, {0x4, 0x7}, {0x3, 0x4}, {0x4, 0x3}, {0x0, 0x9}, {0x0, 0xa}, {0x5, 0x1}, {0x4, 0x9}, {0x7, 0x6}, {}, {0x1}, {0x6, 0x2}, {0x2, 0x3}, {0x0, 0x8}, {0x7, 0xa}, {0x0, 0x5}, {0x2, 0x4}, {0x7, 0x3}, {}, {0x3, 0x5}, {0x1, 0x2}, {}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x3}, {0x6, 0x6}, {0x2}, {0x1, 0x6}, {0x2, 0x6}, {0x0, 0x4}, {0x2, 0x8}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x5, 0x3}, {0x3}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x0, 0x0, 0x36, 0x12, 0x0, 0x36, 0xb, 0x2437782ea3c0d271, 0xc, 0x60, 0x1, 0x6, 0x3, 0x3, 0x30, 0x48, 0x4, 0x6c, 0x4, 0x2, 0x18, 0x66, 0x1, 0x1b, 0x36, 0x18, 0x6, 0x1, 0x30, 0x30, 0xc, 0x3]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x6c, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xa, 0x4, 0x5, 0x101, 0x3b3, 0x8, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x7, 0x2730, 0x3, 0x0, 0x8, 0x4c]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0xe, 0x3, 0x5, 0x76, 0x1, 0x6, 0x30, 0x9, 0x6c, 0x22, 0x12, 0x24, 0x3, 0x48, 0x1, 0xb, 0x36, 0x2, 0x9, 0xb, 0x48, 0x9, 0x12, 0x30, 0x9, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x71]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x24, 0x30, 0x24, 0x5, 0x3, 0x9, 0x1b, 0x38, 0x36, 0x9, 0x5, 0x6, 0x16, 0xb, 0xc, 0xc, 0x6, 0x12, 0x2, 0xb, 0xb, 0x4, 0x5, 0x2, 0x60, 0xc, 0x3, 0xc, 0x18, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe3, 0x200, 0xc, 0x7ff, 0x7, 0x5, 0x4, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x3, 0x4}, {0x0, 0x8}, {0x4, 0x9}, {0x5, 0x1}, {0x6, 0x1}, {0x6}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x1}, {0x6, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x2}, {0x6, 0x2}, {0x7, 0x1}, {0x6, 0x5}, {0x5, 0x3}, {0x5, 0x5}, {0x0, 0x7}, {0x7, 0x1}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x9}, {0x1, 0x3}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe3, 0x10, 0x6fa, 0x2, 0x7fff, 0x7fff, 0x7, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x10, 0x4, 0x2, 0x80, 0xc3e6, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x210, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1e4c, 0x7, 0x1, 0xff, 0x8, 0x3ff, 0xe42f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x7, 0xa, 0x200, 0x100, 0x6, 0x4, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x30, 0xb, 0x60, 0x9, 0x60, 0x36, 0xb, 0x36, 0x2, 0x4, 0x36, 0x1, 0x5, 0x5, 0xc, 0x30, 0xc, 0x60, 0x2, 0xb, 0x6c, 0x1c, 0x1b, 0x2, 0x6, 0x18, 0x16, 0x5, 0x28, 0x2, 0x6c]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0x2, 0xb, 0x18, 0x16, 0x24, 0x36, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x9, 0x0, 0x21f3, 0x9d1e, 0x992, 0x200]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x4, 0x9, 0x6, 0x800, 0x5, 0x7, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x4, 0x7804f18ceed863cf, 0xb, 0x24, 0x2, 0x0, 0x9, 0x16, 0x2, 0xc, 0x24, 0x36, 0x6, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x9, 0x2, 0x5, 0x48, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x9, 0x6, 0x48, 0x9, 0xb, 0x30, 0x1, 0x60, 0x30, 0x36, 0x3, 0xb, 0x60]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x24, 0x6c, 0x1b, 0x1, 0x2, 0x9]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x6}, {0x6, 0x2}, {0x1, 0xa}, {0x6}, {}, {0x1, 0x5}, {0x4, 0x5}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0xa}, {0x3, 0xa}, {0x3, 0xa}, {0x2}, {0x5, 0x8}, {0x4}, {0x4, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {0x3, 0x8}, {}, {0x5, 0x1}, {0x7, 0x9}, {0x4, 0x3}, {0x3, 0x4}, {0x7, 0x1}, {0x3, 0x8}, {0x3, 0x5}, {0x1, 0x2}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x5}, {0x4, 0x9}, {0x7, 0x4}, {0x4, 0x9}, {0x0, 0x4}, {0x7}, {0x4, 0x3}, {0x3, 0x9}, {0x6, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x8, 0x83, 0x1, 0x7, 0x7, 0x7]}}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x100, 0x9, 0x0, 0x1, 0x4, 0x9]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x2, 0x6}, {0x6, 0x3}, {0x2, 0x9}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x4, 0x1, 0x18, 0x1, 0x70, 0x48, 0x4, 0x48, 0x24, 0xb, 0x18, 0x1b, 0x2, 0x1d, 0x2, 0x18, 0x24, 0x24, 0xb, 0x18, 0x3, 0x4, 0x48, 0x16, 0x2, 0x9, 0x3, 0x16, 0x48, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x24, 0xc, 0x12, 0xb, 0x9, 0x36, 0x3, 0xc, 0x12, 0x30, 0x2, 0x6]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0xb, 0x70, 0x5, 0x1, 0x12, 0x3, 0x2, 0x1, 0x18, 0x6, 0x2, 0x36, 0x24, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x12a, 0x7, 0x4, 0xb, 0x0, 0x8001, 0x9, 0x1c]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0xa}, {0x6, 0x6}, {0x3, 0x6}, {0x4, 0x7}, {0x4, 0x5}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0xa}, {0x4, 0x1}, {0x1, 0x2}, {}, {0x7, 0x3}, {0x7, 0x3}, {0x0, 0x9}, {0x6, 0x9}, {0x5, 0x4}, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x2}, {}, {0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x2, 0x9}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x6}, {0x7, 0x1}, {0x6, 0x3}, {0x2, 0x7}, {0x1, 0x4}, {0x1, 0x2}, {0x6, 0x5}, {0x7, 0xa}, {0x6, 0x1}, {0x7, 0x8}, {0x2, 0x6}, {0x5, 0xa}, {0x1, 0x4}, {0x5, 0x8}, {0x3, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x6c, 0x9]}]}]}, @NL80211_ATTR_TX_RATES={0xc8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8000, 0xef, 0x7, 0xb5b, 0xf60, 0x2, 0x7]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9323, 0x5, 0x9, 0x8, 0x9, 0x8, 0x2a]}}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0x24, 0xc, 0x1, 0x24, 0x0, 0x36, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x7, 0x1, 0xfd, 0x71, 0x1, 0x6, 0xfeff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x0, 0xd, 0xc2c7, 0x9, 0x3, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf801, 0x1000, 0x4, 0x7, 0x0, 0x6, 0x7, 0xf5c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0xf34f, 0x0, 0xffff, 0x0, 0xfffd, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x834}, 0x1, 0x0, 0x0, 0x48014}, 0x0)

644.117015ms ago: executing program 1 (id=1211):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read(r1, &(0x7f00000002c0)=""/16, 0x10)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8801, 0x0)
socket(0x17, 0x80000, 0x7)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xfffb, 0x2}, 0x6)
setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4)
recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88fb4500002c0000000410119078640108000000142100004e200018907804000000ea450000c500000000000000"], 0x0)
sendmmsg$inet6(r4, &(0x7f0000007240), 0x0, 0x1c000)
pselect6(0x40, &(0x7f0000000a80)={0x2, 0x5, 0x0, 0x9, 0x3, 0x1, 0x8, 0xfffffffffffffff5}, &(0x7f00000003c0)={0xa, 0x1, 0x10000000000b, 0x1, 0x1000000000e, 0x7fff, 0xfffffffffffff2e0, 0x7}, 0x0, 0x0, 0x0)
shutdown(r4, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000b8ee00000114000400fe8000000000000000000000000000aa0c00028004000100"], 0x98}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r5)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="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", @ANYRES8], 0xd4}, 0x1, 0x0, 0x0, 0x20001010}, 0x40010)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, &(0x7f0000001080)={{0x2c, @multicast2, 0x2, 0x0, 'fo\x00', 0x1d, 0x0, 0x5d}, {@private=0xa010101, 0x2, 0x2000, 0x7ffffff, 0x0, 0x20104}}, 0x44)
getsockopt$inet_tcp_int(r7, 0x6, 0x0, 0x0, &(0x7f0000000040))
r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000000240)={r2, &(0x7f0000000140)='/dev/rfkilL\xd0', 0x24ba40, &(0x7f0000000180)={@_ha_fsid={[0xb594, 0x8bf]}, {0x6b9d, 0x401, 0x8, 0x3}}, 0x7fffffff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x10000006})
socket$inet6_icmp(0xa, 0x2, 0x3a)

579.477856ms ago: executing program 2 (id=1212):
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_ifreq(r6, 0x89fd, &(0x7f0000000100)={'bond0\x00', @ifru_names='ipvlan0\x00'})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20008850}, 0xc010)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x56, 0xff, r10}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006)
recvfrom$inet6(r5, 0x0, 0x0, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x4000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r9}, 0x8)
mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0)
socket(0x10, 0x803, 0x0)

499.888857ms ago: executing program 2 (id=1213):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
ppoll(0x0, 0x0, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x40000, 0x1}, 0x20)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000300)={'veth0_virt_wifi\x00', {0x2, 0x0, @multicast2}})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x3400c884)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000b40)=ANY=[@ANYBLOB="8400", @ANYRES16=r5, @ANYBLOB="000329bd7000fcdbdf250200000014000600fc0000000000974b768ddb69ce610000000000000000000108000c000300000014000500fe88000000e20000000000000000010107000100e240000014000500fe8000000000000000000000000000bb0d0401006e6c3830323135340000000014000500ff0100"/130], 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000)
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1}, 0x1c)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
sendmmsg$inet(r4, &(0x7f000000a080)=[{{&(0x7f0000006000)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x4004040)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x2, 0x1}}, 0x10)
bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10)
ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000680)={<r8=>r0, &(0x7f0000000540)='\x00', 0x300, &(0x7f0000000580)={@_ha_fsid={[0x66]}, {0x6446, 0x262, 0x30bb}}, 0x3, 0x0, &(0x7f0000000640)=0x6})
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}]}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @flow_dissector, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0x2, 0x7fff, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000800)=[r9], &(0x7f0000000840)=[{0x1, 0x1, 0xb, 0x5}, {0x3, 0x5, 0xf, 0x7}, {0x0, 0x5, 0x2, 0x9}], 0x10, 0x3ff}, 0x94)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000004c0)=<r10=>0x0)
sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x3c, 0x0, 0x7a79edecac229c57, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x20000000)
sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x8006}}}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000a51800009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94)

399.785363ms ago: executing program 2 (id=1214):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000c00000000010000000100000506000000010000000200"], 0x0, 0x58, 0x0, 0xa}, 0x28)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000000), 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
r6 = bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="030000000400000026"], 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=<r7=>0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002"], 0x68}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r8, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0], <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x8, 0x0, 0x0}}, 0x10)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xf, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x8, 0x4, 0x1, 0x1, 0x4}, @alu={0x0, 0x1, 0xd, 0x7, 0xb, 0x50, 0xfffffffffffffff0}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x80, 0xd1, &(0x7f00000007c0)=""/209, 0x40f00, 0x15, '\x00', r9, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x7, 0xb, 0x502}, 0x10, r10, r0, 0x1, 0x0, &(0x7f0000000940)=[{0x0, 0x4, 0x7, 0x3}], 0x10, 0x9}, 0x94)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0x3, 0x1c}, 0xc)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00'}, 0x18)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r15, 0x40305828, &(0x7f0000000000)={0x0, 0x3})
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b70000000090db6a9c0970be59f1805e00000085000000"], &(0x7f0000000440)='GPL\x00', 0xfffffe01, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, r12, 0x5, &(0x7f0000000b00)=[r4, r4, r4, 0x1, r13, r14, r6, r15, r6], &(0x7f0000000b40)=[{0x5, 0x3, 0x10, 0x1}, {0x3, 0x5, 0x6, 0xc}, {0x5, 0x4, 0x5, 0x3}, {0x3, 0x3, 0x2, 0x9}, {0x3, 0x5, 0x4, 0x5}], 0x10, 0x2ad}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0600000004000000fd0f00000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d037e6ec0ec5eb1fb38c9ba2ef7aa5308ddcfae51b68de696d8cf396067cbe05a99626617501efc19caefa93bb2b44bbb65a6677842a44e31f223e1dc26f0d3445a0c2a3a47152aba1e2933c08193d4d2831c8087fb136da7b472f866ace23d3bac26521cb5a6b9ea12ebe9e2ec6574cec415b02706edc3d43eecdccb688cb54a7953f88609252060e5ba99fab6b86a7c148c7e85fd8aa9e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$netlink(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES32=r7], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0)

0s ago: executing program 0 (id=1215):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40)
r1 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000018000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @local, 0xfffffdfa}, 0x1c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$sock(r2, &(0x7f000000a380)=[{{&(0x7f0000004880)=@generic={0x0, "1700e385ea88fd92ac8e089d9f7b147d98ad1c1fd6b55a08a78a2a5d979963e6c9ae6c42dfd246f56f8db67d7f0fc2e71a2fd3b83eaaf73ac8d856f4d3b9d9af79cfc4fe6a0d0013cc0b9d923faee4dae4a30824c20cbb94f27a16ab142035ebe07751b0a2598694d31195003e26438c3a8cb9060cc60cb04579882e159e"}, 0x80, &(0x7f0000004940)=[{&(0x7f0000004900)="ae26d44332e4e7195db8a177b7e901ac16a1deba80b2808bfded37953b95437c4778", 0x22}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004d80)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}}], 0x2, 0x0)
recvfrom(r3, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000140))
sendto$inet6(r1, 0x0, 0x0, 0x24008014, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e800000019000f002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aa"], 0xe8}}, 0x1000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44197' (ED25519) to the list of known hosts.
syzkaller login: [   48.830133][ T5542] cgroup: Unknown subsys name 'net'
[   48.960596][ T5542] cgroup: Unknown subsys name 'cpuset'
[   48.967848][ T5542] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.512160][ T5542] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.133924][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.138281][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.141724][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.145593][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.149001][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.153326][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.155630][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.166037][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.169337][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.170713][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.171900][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.174734][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.179116][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.193937][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.197211][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.682089][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.685054][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.687848][ T5609] bridge_slave_0: entered allmulticast mode
[   54.691016][ T5609] bridge_slave_0: entered promiscuous mode
[   54.695932][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.698399][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.700806][ T5609] bridge_slave_1: entered allmulticast mode
[   54.703350][ T5609] bridge_slave_1: entered promiscuous mode
[   54.744172][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.747087][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.749554][ T5613] bridge_slave_0: entered allmulticast mode
[   54.752131][ T5613] bridge_slave_0: entered promiscuous mode
[   54.755494][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.758629][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.761573][ T5613] bridge_slave_1: entered allmulticast mode
[   54.764629][ T5613] bridge_slave_1: entered promiscuous mode
[   54.772816][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.790462][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.794702][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.807301][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.839900][ T5609] team0: Port device team_slave_0 added
[   54.843442][ T5613] team0: Port device team_slave_0 added
[   54.857297][ T5609] team0: Port device team_slave_1 added
[   54.860292][ T5613] team0: Port device team_slave_1 added
[   54.905891][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.909124][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.919340][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.925005][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.927478][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.935347][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.943616][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.946466][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.955922][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.960421][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.963260][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.973248][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.999263][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.002261][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.005139][ T5617] bridge_slave_0: entered allmulticast mode
[   55.009113][ T5617] bridge_slave_0: entered promiscuous mode
[   55.014621][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.017417][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.019661][ T5617] bridge_slave_1: entered allmulticast mode
[   55.022810][ T5617] bridge_slave_1: entered promiscuous mode
[   55.048714][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.053374][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.085197][ T5613] hsr_slave_0: entered promiscuous mode
[   55.088302][ T5613] hsr_slave_1: entered promiscuous mode
[   55.103179][ T5609] hsr_slave_0: entered promiscuous mode
[   55.105881][ T5609] hsr_slave_1: entered promiscuous mode
[   55.108300][ T5609] debugfs: 'hsr0' already exists in 'hsr'
[   55.110290][ T5609] Cannot create hsr debugfs directory
[   55.114101][ T5617] team0: Port device team_slave_0 added
[   55.123517][ T5617] team0: Port device team_slave_1 added
[   55.155451][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.158153][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.166070][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.178110][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.180424][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.188586][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.265456][ T5617] hsr_slave_0: entered promiscuous mode
[   55.267934][ T5617] hsr_slave_1: entered promiscuous mode
[   55.270214][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   55.272242][ T5617] Cannot create hsr debugfs directory
[   55.407041][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.415070][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.418058][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.424860][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.435628][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.439915][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.449532][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.453865][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.498586][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.501229][ T5613] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.503818][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.506137][ T5613] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.512073][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.518952][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.522570][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.529940][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.538759][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.545090][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.549187][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.553793][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.570123][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.573498][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.644884][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.651477][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.655230][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.661814][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.664980][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.670268][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.673793][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.678094][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.734097][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.765594][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   55.779568][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.781821][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.792910][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.795942][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.810935][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.832134][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.851967][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   55.858990][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   55.866070][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.868418][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.875111][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.877478][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.891450][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.893879][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.899405][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.901963][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.198218][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.209894][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.242063][ T5609] veth0_vlan: entered promiscuous mode
[   56.254468][ T5609] veth1_vlan: entered promiscuous mode
[   56.277998][ T5620] Bluetooth: hci0: command tx timeout
[   56.280254][ T5618] Bluetooth: hci1: command tx timeout
[   56.280402][ T5615] Bluetooth: hci2: command tx timeout
[   56.287515][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.291071][ T5613] veth0_vlan: entered promiscuous mode
[   56.304757][ T5613] veth1_vlan: entered promiscuous mode
[   56.327340][ T5609] veth0_macvtap: entered promiscuous mode
[   56.337769][ T5609] veth1_macvtap: entered promiscuous mode
[   56.364071][ T5613] veth0_macvtap: entered promiscuous mode
[   56.374430][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.382861][ T5617] veth0_vlan: entered promiscuous mode
[   56.385541][ T5613] veth1_macvtap: entered promiscuous mode
[   56.394803][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.414729][ T5617] veth1_vlan: entered promiscuous mode
[   56.419361][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.423279][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.427344][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.430277][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.450156][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.471234][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.485476][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.494456][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.505963][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.514199][ T5617] veth0_macvtap: entered promiscuous mode
[   56.523843][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.545046][ T5617] veth1_macvtap: entered promiscuous mode
[   56.551737][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.561312][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.585529][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.604688][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.614982][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.623431][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.635796][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.639898][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.653075][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.656578][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.663760][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.668086][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.731124][ T5609] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.738592][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.741824][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.743789][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.751277][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.776074][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.780435][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.949321][ T5727] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   57.154227][ T5743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4'.
[   57.781029][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.783896][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.803668][ T5755] Zero length message leads to an empty skb
[   57.852516][ T5727] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.861026][ T5727] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.940040][ T5477] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.943448][ T5477] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.949348][ T5477] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.953255][ T5477] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.004498][ T5762] Bluetooth: MGMT ver 1.23
[   58.087282][ T5766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8'.
[   58.090977][ T5768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8'.
[   58.346623][ T5618] Bluetooth: hci1: command tx timeout
[   58.349157][ T5620] Bluetooth: hci0: command tx timeout
[   58.351130][   T55] Bluetooth: hci2: command tx timeout
[   58.436542][ T5784] syzkaller0: entered promiscuous mode
[   58.443702][ T5784] syzkaller0: entered allmulticast mode
[   58.624300][   T33] IPVS: starting estimator thread 0...
[   58.722136][ T5800] warning: `syz.0.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.725763][ T5800] netlink: 112 bytes leftover after parsing attributes in process `syz.0.18'.
[   58.727703][ T5797] IPVS: using max 80 ests per chain, 192000 per kthread
[   58.877414][ T5812] batadv_slave_0: entered promiscuous mode
[   58.883749][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'.
[   58.890967][ T5811] batadv_slave_0: left promiscuous mode
[   59.065095][ T5825] syz_tun: entered allmulticast mode
[   59.077253][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'.
[   59.117218][ T5825] syz_tun (unregistering): left allmulticast mode
[   59.130255][ T5824] netlink: 116 bytes leftover after parsing attributes in process `syz.2.24'.
[   59.150915][ T5824] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   60.027109][ T5615] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   60.372957][ T5849] vxcan0: tx drop: invalid da for name 0x0000000000000001
[   60.429046][ T5620] Bluetooth: hci1: command tx timeout
[   60.429047][ T5615] Bluetooth: hci0: command tx timeout
[   60.430945][ T5618] Bluetooth: hci2: command 0x040f tx timeout
[   60.437588][ T5858] netlink: 'syz.0.36': attribute type 5 has an invalid length.
[   60.442940][ T5859] netlink: 44 bytes leftover after parsing attributes in process `syz.1.35'.
[   60.449597][ T5859] netlink: 43 bytes leftover after parsing attributes in process `syz.1.35'.
[   60.453826][ T5859] netlink: 'syz.1.35': attribute type 5 has an invalid length.
[   60.459198][ T5859] netlink: 43 bytes leftover after parsing attributes in process `syz.1.35'.
[   60.489340][ T5857] netlink: 'syz.2.30': attribute type 3 has an invalid length.
[   60.513243][ T5861] vlan2: entered allmulticast mode
[   60.515130][ T5861] bond0: entered allmulticast mode
[   60.518728][ T5861] bond_slave_0: entered allmulticast mode
[   60.522830][ T5861] bond_slave_1: entered allmulticast mode
[   60.854853][ T5886] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[   60.927236][ T5887] netlink: 'syz.0.43': attribute type 4 has an invalid length.
[   61.568504][   T10] IPVS: starting estimator thread 0...
[   61.668771][ T5907] IPVS: using max 82 ests per chain, 196800 per kthread
[   61.736126][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.879103][   T12] IPVS: stop unused estimator thread 0...
[   62.079240][ T5933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.128473][ T5933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.506609][ T5620] Bluetooth: hci2: command 0x040f tx timeout
[   62.506613][ T5615] Bluetooth: hci1: command tx timeout
[   62.516788][ T5615] Bluetooth: hci0: command tx timeout
[   62.540946][ T5946] netlink: 'syz.2.57': attribute type 1 has an invalid length.
[   63.218344][ T5970] netlink: 'syz.0.62': attribute type 13 has an invalid length.
[   63.225090][ T5970] netlink: 'syz.0.62': attribute type 17 has an invalid length.
[   63.229221][ T5971] bond0: (slave bond_slave_1): Releasing backup interface
[   63.495981][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.507020][ T5970] 8021q: adding VLAN 0 to HW filter on device team0
[   63.519753][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.563280][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.567829][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.578020][ T5970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.581562][ T5970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.600166][ T5970] veth1_vlan: left promiscuous mode
[   63.608827][ T5970] veth0_vlan: left promiscuous mode
[   63.618152][ T5970] veth0_vlan: entered promiscuous mode
[   63.655617][ T5970] veth1_vlan: entered promiscuous mode
[   63.684897][ T5970] veth1_macvtap: left promiscuous mode
[   63.689764][ T5970] veth0_macvtap: left promiscuous mode
[   63.694050][ T5970] veth0_macvtap: entered promiscuous mode
[   63.707249][ T5970] veth1_macvtap: entered promiscuous mode
[   63.713936][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.735124][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.752536][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.771142][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.798727][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.801401][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.824955][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.827493][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.913017][ T5722] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.920521][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   63.939137][ T5722] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.945531][ T5722] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.959985][ T5722] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.985517][ T5989] syzkaller0: entered promiscuous mode
[   63.994739][ T5989] syzkaller0: entered allmulticast mode
[   64.040033][ T6003] __nla_validate_parse: 5 callbacks suppressed
[   64.040044][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'.
[   64.069969][ T6003] veth3: entered allmulticast mode
[   64.155676][ T6006] syz_tun: entered allmulticast mode
[   64.161352][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'.
[   64.180130][ T6006] syz_tun (unregistering): left allmulticast mode
[   64.244168][ T6011] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621
[   64.250044][ T6011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.69'.
[   64.320927][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'.
[   64.367479][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.70'.
[   64.481906][ T6025] tipc: Started in network mode
[   64.487818][ T6025] tipc: Node identity ca12dbf3dfee, cluster identity 4711
[   64.491403][ T6025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.494941][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'.
[   64.532122][ T6026] tipc: Disabling bearer <eth:syzkaller0>
[   64.590972][ T5615] Bluetooth: hci2: command 0x040f tx timeout
[   64.696133][ T6039] erspan0: entered promiscuous mode
[   64.780724][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.792557][ T6044] bridge_slave_0 (unregistering): left allmulticast mode
[   64.800440][ T6044] bridge_slave_0 (unregistering): left promiscuous mode
[   64.803781][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.701583][ T6098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.80'.
[   65.709676][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'.
[   65.819035][ T6115] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.960188][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'.
[   66.000696][ T6123] bond1: entered promiscuous mode
[   66.005054][ T6123] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.250031][ T6132] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[   66.345098][ T6134] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   66.350126][ T6134] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   66.355936][ T6134] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   66.364295][ T6134] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   66.372067][ T6134] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   66.427898][ T6137] smbdirect: ib_dev[syz1] removed
[   66.830387][ T6151] netlink: 36 bytes leftover after parsing attributes in process `syz.1.92'.
[   67.121466][ T6159] IPVS: persistence engine module ip_vs_pe_ not found
[   67.131671][ T6161] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[   67.241948][   T34] audit: type=1804 audit(1778605976.158:2): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.96" name="/newroot/31/cgroup.controllers" dev="tmpfs" ino=178 res=1 errno=0
[   67.260923][   T34] audit: type=1800 audit(1778605976.168:3): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.96" name="cgroup.controllers" dev="tmpfs" ino=178 res=0 errno=0
[   67.291997][ T6166] x_tables: duplicate underflow at hook 1
[   67.295211][ T6167] x_tables: duplicate underflow at hook 1
[   67.430149][ T6169] netlink: 'syz.0.97': attribute type 3 has an invalid length.
[   67.453149][ T6169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.607236][ T6173] netlink: 'syz.2.98': attribute type 2 has an invalid length.
[   67.633585][ T6173] netlink: 'syz.2.98': attribute type 1 has an invalid length.
[   67.758903][ T6176] bond2 (unregistering): Released all slaves
[   68.992095][ T6199] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[   69.000820][ T6199] bond2 (unregistering): Released all slaves
[   69.191647][ T6210] xt_CT: You must specify a L4 protocol and not use inversions on it
[   69.239743][ T6219] __nla_validate_parse: 1 callbacks suppressed
[   69.239755][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'.
[   69.324642][ T6224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.110'.
[   69.372044][ T6208] syzkaller0: entered promiscuous mode
[   69.376298][ T6208] syzkaller0: entered allmulticast mode
[   69.523906][ T6229] netlink: 'syz.1.112': attribute type 10 has an invalid length.
[   69.579207][ T6230] netlink: 'syz.1.112': attribute type 10 has an invalid length.
[   70.320580][ T6233] netlink: 52 bytes leftover after parsing attributes in process `syz.2.113'.
[   70.750796][ T6229] team0: Port device dummy0 added
[   70.764228][ T6230] team0: Port device dummy0 removed
[   70.769019][ T6230] dummy0: entered allmulticast mode
[   70.772118][ T6230] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   70.787113][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.790491][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.901977][ T6242] ieee802154 phy0 wpan0: encryption failed: -22
[   71.325511][ T6271] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.400683][ T6271] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.434784][ T6273] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   71.447079][ T6273] tipc: Started in network mode
[   71.451613][ T6273] tipc: Node identity ac14140f, cluster identity 4711
[   71.455185][ T6273] tipc: New replicast peer: 172.20.20.170
[   71.458682][ T6273] tipc: Enabled bearer <udp:syz2>, priority 10
[   71.484226][ T6271] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.540695][ T6271] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.623397][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.640131][ T5722] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.654596][ T5722] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.673152][ T5722] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.123979][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.134768][ T6283] bridge_slave_0 (unregistering): left allmulticast mode
[   72.138167][ T6283] bridge_slave_0 (unregistering): left promiscuous mode
[   72.141374][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.251347][  T798] bridge0: entered promiscuous mode
[   72.320653][ T6296] netlink: 52 bytes leftover after parsing attributes in process `syz.0.130'.
[   72.326013][ T6297] netlink: 76 bytes leftover after parsing attributes in process `syz.0.130'.
[   72.340766][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.359719][ T6297] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.362096][ T6297] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.382587][ T6297] netlink: 52 bytes leftover after parsing attributes in process `syz.0.130'.
[   72.394852][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.578816][  T798] tipc: Node number set to 2886997007
[   73.337533][ T6329] openvswitch: netlink: Flow key attribute not present in set flow.
[   73.473717][ T6335] netlink: 'syz.2.141': attribute type 1 has an invalid length.
[   73.493379][ T6335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.141'.
[   73.502337][ T6335] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.524339][ T6335] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.538940][ T6335] bond2: (slave geneve2): making interface the new active one
[   73.542440][ T6335] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   73.545239][ T5722] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[   73.551624][ T5722] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[   73.559505][ T5722] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[   73.566155][ T5722] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[   73.805858][  T798] IPVS: starting estimator thread 0...
[   73.906375][ T6347] IPVS: using max 80 ests per chain, 192000 per kthread
[   74.203053][ T6364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.149'.
[   74.274013][ T6364] bridge0: port 1(veth0_virt_wifi) entered blocking state
[   74.281506][ T6364] bridge0: port 1(veth0_virt_wifi) entered disabled state
[   74.285513][ T6364] veth0_virt_wifi: entered allmulticast mode
[   74.289049][ T6364] veth0_virt_wifi: entered promiscuous mode
[   74.727869][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'.
[   74.735391][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'.
[   74.745056][ T6378] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   74.751426][ T6376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.153'.
[   75.184570][ T6393] netlink: 228 bytes leftover after parsing attributes in process `syz.0.161'.
[   75.292085][ T6402] netlink: 68 bytes leftover after parsing attributes in process `syz.1.160'.
[   75.312120][   T56] block nbd0: Receive control failed (result -32)
[   75.501774][ T6410] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.530763][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.164'.
[   75.733156][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'.
[   75.744122][ T6420] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.750322][ T6427] netlink: 'syz.1.168': attribute type 1 has an invalid length.
[   75.769160][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.848681][ T6429] bond1: (slave veth3): Enslaving as an active interface with a down link
[   75.880524][ T6433] lo: entered allmulticast mode
[   75.895578][ T6427] bond0: (slave dummy0): Releasing backup interface
[   75.900953][ T6427] dummy0: left allmulticast mode
[   75.904641][ T6427] bond1: (slave dummy0): making interface the new active one
[   75.909246][ T6427] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   75.934587][ T6427] netlink: 'syz.1.168': attribute type 10 has an invalid length.
[   75.937716][ T6427] netlink: 40 bytes leftover after parsing attributes in process `syz.1.168'.
[   75.958691][ T6433] dvmrp8: entered allmulticast mode
[   75.960621][ T6427] dummy0: entered promiscuous mode
[   75.963533][ T6427] bond1: (slave dummy0): Releasing active interface
[   76.044489][ T6428] lo: left allmulticast mode
[   76.194104][ T6446] bond3: option fail_over_mac: invalid value (127)
[   76.201411][ T6446] bond3 (unregistering): Released all slaves
[   76.223030][ T6447] netlink: 76 bytes leftover after parsing attributes in process `syz.1.170'.
[   76.226962][ T6447] netlink: 76 bytes leftover after parsing attributes in process `syz.1.170'.
[   76.437362][ T6453] netlink: 'syz.1.172': attribute type 16 has an invalid length.
[   76.443279][ T6453] netlink: 'syz.1.172': attribute type 17 has an invalid length.
[   76.456693][ T6456] netlink: 'syz.2.173': attribute type 2 has an invalid length.
[   76.471487][ T6453] dummy0: left promiscuous mode
[   76.492638][ T6453] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.554375][ T6453] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   76.590603][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.593019][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.744272][ T5723] team_slave_0: entered promiscuous mode
[   76.747021][ T5723] team_slave_1: entered promiscuous mode
[   76.755395][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[   76.827032][   T12] batman_adv: batadv_iv_ogm_emit: mesh interface switch for queued OGM
[   77.178946][ T6474] veth0: entered promiscuous mode
[   77.182910][ T6473] veth0: left promiscuous mode
[   77.225543][ T6478] Bluetooth: MGMT ver 1.23
[   77.235402][ T6476] netlink: 'syz.1.176': attribute type 5 has an invalid length.
[   77.499221][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.573899][ T6491] bond3: entered promiscuous mode
[   77.577933][ T5722] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.585027][ T5722] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.600112][ T5722] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.614338][ T5722] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.673096][ T6502] netlink: 'syz.2.183': attribute type 1 has an invalid length.
[   77.680820][ T6502] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[   78.122685][ T6533] netlink: 'syz.2.191': attribute type 1 has an invalid length.
[   78.390802][ T6560] openvswitch: netlink: ct_state flags 010000e0 unsupported
[   79.430940][ T6608] netlink: 'syz.1.206': attribute type 13 has an invalid length.
[   79.435437][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.439062][ T6608] netlink: 'syz.1.206': attribute type 17 has an invalid length.
[   79.497142][ T6604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.511611][ T6604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.739257][ T6608] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.744947][ T6608] 8021q: adding VLAN 0 to HW filter on device team0
[   79.755618][ T6608] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.788182][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.790835][ T6608] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.811573][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.822523][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.834289][ T6608] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   79.853500][ T5722] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.857731][ T5722] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.866089][ T5722] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.870778][ T5722] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.901319][ T6632] __nla_validate_parse: 11 callbacks suppressed
[   79.901329][ T6632] netlink: 44 bytes leftover after parsing attributes in process `syz.2.209'.
[   79.908151][ T6632] netlink: 35 bytes leftover after parsing attributes in process `syz.2.209'.
[   79.911330][ T6632] netlink: 'syz.2.209': attribute type 5 has an invalid length.
[   79.913851][ T6632] netlink: 'syz.2.209': attribute type 6 has an invalid length.
[   79.916950][ T6632] netlink: 35 bytes leftover after parsing attributes in process `syz.2.209'.
[   80.083056][   T33] IPVS: starting estimator thread 0...
[   80.125727][ T6651] netlink: 276 bytes leftover after parsing attributes in process `syz.2.212'.
[   80.186709][ T6649] IPVS: using max 80 ests per chain, 192000 per kthread
[   80.280162][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'.
[   80.305525][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'.
[   80.311038][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'.
[   80.311363][ T6667] 8021q: adding VLAN 0 to HW filter on device bond6
[   80.317628][ T6667] netlink: 'syz.2.218': attribute type 8 has an invalid length.
[   80.317740][ T6662] syzkaller0: entered promiscuous mode
[   80.321965][ T6662] syzkaller0: entered allmulticast mode
[   80.331770][ T6667] bond6 (unregistering): Released all slaves
[   80.416021][ T6679] netlink: 'syz.0.221': attribute type 6 has an invalid length.
[   80.418862][ T6679] netlink: 128 bytes leftover after parsing attributes in process `syz.0.221'.
[   80.497430][ T6679] netlink: 52 bytes leftover after parsing attributes in process `syz.0.221'.
[   80.500681][ T6679] netlink: 76 bytes leftover after parsing attributes in process `syz.0.221'.
[   80.511301][ T6679] bridge0: left promiscuous mode
[   80.738195][ T6716] netlink: 'syz.0.232': attribute type 11 has an invalid length.
[   80.794263][ T6724] netlink: 'syz.2.235': attribute type 1 has an invalid length.
[   80.822276][ T6719] Cannot find set identified by id 0 to match
[   81.090072][ T6749] sctp: [Deprecated]: syz.2.240 (pid 6749) Use of struct sctp_assoc_value in delayed_ack socket option.
[   81.090072][ T6749] Use struct sctp_sack_info instead
[   81.097659][ T6752] xt_TCPMSS: Only works on TCP SYN packets
[   81.144982][ T6754] netlink: 'syz.2.242': attribute type 1 has an invalid length.
[   81.165873][ T6754] bond6: entered promiscuous mode
[   81.167970][ T6754] bond6: entered allmulticast mode
[   81.170046][ T6754] 8021q: adding VLAN 0 to HW filter on device bond6
[   81.182070][ T6754] bridge2: entered promiscuous mode
[   81.183841][ T6754] bridge2: entered allmulticast mode
[   81.185843][ T6754] bond6: (slave bridge2): Enslaving as a backup interface with an up link
[   81.222937][ T6752] veth0_virt_wifi: left allmulticast mode
[   81.224988][ T6752] veth0_virt_wifi: left promiscuous mode
[   81.227511][ T6752] bridge0: port 1(veth0_virt_wifi) entered disabled state
[   81.231185][ T6752] bridge_slave_1: left allmulticast mode
[   81.233530][ T6752] bridge_slave_1: left promiscuous mode
[   81.235406][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.276895][ T5722] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   81.288783][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.291082][ T6758] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.293520][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.295823][ T6758] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.310924][ T6758] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   81.355185][ T6760] sctp: [Deprecated]: syz.2.244 (pid 6760) Use of struct sctp_assoc_value in delayed_ack socket option.
[   81.355185][ T6760] Use struct sctp_sack_info instead
[   81.360936][ T6760] sctp: [Deprecated]: syz.2.244 (pid 6760) Use of struct sctp_assoc_value in delayed_ack socket option.
[   81.360936][ T6760] Use struct sctp_sack_info instead
[   81.373908][ T6760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.387289][ T5477] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   81.910816][ T6789] netlink: 'syz.0.248': attribute type 16 has an invalid length.
[   82.912657][ T6811] bond0: (slave bond_slave_0): Releasing backup interface
[   82.921128][ T6811] team0: Port device team_slave_0 removed
[   82.931757][ T6811] team0: Port device team_slave_1 removed
[   82.934594][ T6811] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.948989][ T6811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   82.962833][ T6820] netlink: 'syz.1.259': attribute type 10 has an invalid length.
[   82.969615][ T6818] netlink: zone id is out of range
[   82.976048][ T6818] netlink: zone id is out of range
[   82.978207][ T6818] netlink: zone id is out of range
[   82.979948][ T6818] netlink: zone id is out of range
[   82.999660][ T6820] team0: Port device dummy0 added
[   83.005525][ T6823] veth0: entered promiscuous mode
[   83.153052][ T6820] veth0: left promiscuous mode
[   83.546535][    C0] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96
[   83.622118][ T6844] nbd: must specify a device to reconfigure
[   83.705652][ T6848] net_ratelimit: 341 callbacks suppressed
[   83.705668][ T6848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.495167][ T6894] block nbd1: Unsupported socket: should be TCP or UNIX.
[   85.013099][ T6918] __nla_validate_parse: 21 callbacks suppressed
[   85.013109][ T6918] netlink: 184020 bytes leftover after parsing attributes in process `syz.2.285'.
[   85.045093][ T6920] netlink: 32 bytes leftover after parsing attributes in process `syz.2.286'.
[   85.050130][ T6920] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[   85.053489][ T6920] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   85.162391][ T6922] netlink: 'syz.1.287': attribute type 1 has an invalid length.
[   85.191800][ T6922] bond2: (slave veth5): Enslaving as an active interface with a down link
[   85.204874][ T6922] bond2: (slave veth7): Enslaving as an active interface with a down link
[   85.209732][ T6922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.287'.
[   85.214639][ T6922] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.245159][ T6928] netlink: 'syz.1.288': attribute type 4 has an invalid length.
[   85.249622][ T6929] netlink: 'syz.1.288': attribute type 4 has an invalid length.
[   85.263532][ T6928] netlink: 'syz.1.288': attribute type 4 has an invalid length.
[   85.571275][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'.
[   85.574281][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'.
[   85.632197][ T6950] netlink: 64 bytes leftover after parsing attributes in process `syz.0.293'.
[   85.731789][ T6959] netlink: 212320 bytes leftover after parsing attributes in process `syz.2.295'.
[   86.148563][ T6981] openvswitch: netlink: Invalid VLAN frame
[   86.210100][ T6987] netlink: 132 bytes leftover after parsing attributes in process `syz.0.302'.
[   86.727891][ T7026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.311'.
[   86.989177][   T31] cfg80211: failed to load regulatory.db
[   87.135115][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'.
[   87.421707][ T7056] xt_hashlimit: size too large, truncated to 1048576
[   87.423931][ T7056] xt_hashlimit: invalid interval
[   87.518671][ T7079] netlink: 'syz.2.322': attribute type 1 has an invalid length.
[   87.526865][ T7079] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[   87.564100][ T7085] netlink: 'syz.2.323': attribute type 3 has an invalid length.
[   87.703017][ T7097] ip6t_REJECT: ECHOREPLY is not supported
[   88.079715][ T7127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.083982][ T7127] batadv_slave_0: entered promiscuous mode
[   88.087520][ T7127] batadv_slave_0: entered allmulticast mode
[   88.117728][ T7129] syzkaller0: left promiscuous mode
[   88.119944][ T7129] syzkaller0: left allmulticast mode
[   88.124030][ T7127] syzkaller0: entered promiscuous mode
[   88.125824][ T7127] syzkaller0: entered allmulticast mode
[   88.208650][ T7131] sctp: [Deprecated]: syz.1.338 (pid 7131) Use of struct sctp_assoc_value in delayed_ack socket option.
[   88.208650][ T7131] Use struct sctp_sack_info instead
[   88.267875][ T7132] netlink: 'syz.1.338': attribute type 1 has an invalid length.
[   88.559523][ T7153] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[   88.568624][ T7153] netlink: 'syz.2.342': attribute type 1 has an invalid length.
[   88.789329][ T7160] tipc: Invalid UDP bearer configuration
[   88.789371][ T7160] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   89.297464][ T7179] syzkaller0: entered promiscuous mode
[   89.301019][ T7179] syzkaller0: entered allmulticast mode
[   89.445207][ T7193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.460599][ T7193] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.841137][ T7223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.884221][ T7225] batadv0: entered promiscuous mode
[   89.888360][ T7225] batadv0: left promiscuous mode
[   90.022343][ T7237] __nla_validate_parse: 15 callbacks suppressed
[   90.022353][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'.
[   90.049086][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.052643][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'.
[   90.056879][ T5666] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.065583][ T5666] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.071123][ T5666] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.119256][ T7239] netlink: 128 bytes leftover after parsing attributes in process `syz.1.368'.
[   90.126090][ T7242] netlink: 'syz.2.369': attribute type 8 has an invalid length.
[   90.170534][ T7245] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   90.244878][ T7250] bond3: option min_links: invalid value (18446744073709551612)
[   90.254680][ T7250] bond3: option min_links: allowed values 0 - 2147483647
[   90.260184][ T7250] bond3 (unregistering): Released all slaves
[   90.357140][ T7256] netlink: 'syz.0.373': attribute type 1 has an invalid length.
[   90.605921][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'.
[   90.613907][ T7275] erspan0: left promiscuous mode
[   90.627706][ T7275] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.630838][ T7275] 8021q: adding VLAN 0 to HW filter on device team0
[   90.635083][ T7275] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.654438][ T7275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   90.660768][ T7275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.668636][ T7275] veth1_vlan: left promiscuous mode
[   90.671070][ T7275] veth0_vlan: left promiscuous mode
[   90.673514][ T7275] veth0_vlan: entered promiscuous mode
[   90.677660][ T7275] veth1_vlan: entered promiscuous mode
[   90.682829][ T7275] veth1_macvtap: left promiscuous mode
[   90.685363][ T7275] veth0_macvtap: left promiscuous mode
[   90.688475][ T7275] veth0_macvtap: entered promiscuous mode
[   90.691017][ T7275] veth1_macvtap: entered promiscuous mode
[   90.698417][ T7275] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.701473][ T7275] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.704632][ T7275] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.708436][ T7275] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.711187][ T7275] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   90.735184][ T5477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.744569][ T5477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.753264][ T5477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.755258][ T7281] netlink: 'syz.0.379': attribute type 1 has an invalid length.
[   90.774310][ T7281] bond2: entered promiscuous mode
[   90.777509][ T7281] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.782445][ T5477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.784225][ T7281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.379'.
[   90.790866][ T7281] bond2: entered allmulticast mode
[   90.801192][ T7281] bond2: (slave bridge0): making interface the new active one
[   90.803688][ T7281] bridge0: entered promiscuous mode
[   90.805516][ T7281] bridge0: entered allmulticast mode
[   90.808213][ T7281] bond2: (slave bridge0): Enslaving as an active interface with an up link
[   90.919313][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'.
[   91.012590][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[   91.016170][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[   91.072201][ T7306] openvswitch: netlink: Flow actions attr not present in new flow.
[   91.072223][ T7307] openvswitch: netlink: Flow actions attr not present in new flow.
[   91.082181][ T7305] syzkaller0: entered promiscuous mode
[   91.084081][ T7305] syzkaller0: entered allmulticast mode
[   91.099482][ T7305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.103745][ T7304] tipc: Resetting bearer <eth:syzkaller0>
[   91.119497][ T7304] tipc: Disabling bearer <eth:syzkaller0>
[   91.391409][ T7324] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   91.435443][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'.
[   91.469476][ T7332] netlink: 148 bytes leftover after parsing attributes in process `syz.1.393'.
[   91.910060][ T7399] xt_ipcomp: unknown flags 1D
[   92.792339][ T7417] netlink: 'syz.0.408': attribute type 1 has an invalid length.
[   92.827780][ T7417] bond3: (slave bridge1): Enslaving as a backup interface with an up link
[   92.839547][ T7417] macvlan2: entered promiscuous mode
[   92.841759][ T7417] macvlan2: entered allmulticast mode
[   92.844477][ T7417] bond3: entered promiscuous mode
[   92.846761][ T7417] bridge1: entered promiscuous mode
[   92.850935][ T7417] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   92.854800][ T7417] bond3: left promiscuous mode
[   92.857211][ T7417] bridge1: left promiscuous mode
[   93.007190][ T7421] netlink: 'syz.1.409': attribute type 11 has an invalid length.
[   93.014792][ T7421] netlink: 'syz.1.409': attribute type 23 has an invalid length.
[   93.101998][ T7428] Bluetooth: MGMT ver 1.23
[   93.419665][   T34] audit: type=1800 audit(1778606002.338:4): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.411" name="memory.events" dev="tmpfs" ino=702 res=0 errno=0
[   96.177680][ T7431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   96.224353][ T7450] __nla_validate_parse: 13 callbacks suppressed
[   96.224366][ T7450] netlink: 32 bytes leftover after parsing attributes in process `syz.0.416'.
[   96.338360][ T7459] openvswitch: netlink: Flow actions attr not present in new flow.
[   96.397174][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'.
[   96.403035][ T7467] netlink: 'syz.2.423': attribute type 6 has an invalid length.
[   96.863370][ T7494] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   96.877712][ T7494] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   97.025971][ T7513] netlink: 760 bytes leftover after parsing attributes in process `syz.2.436'.
[   97.035246][ T7515] netlink: 'syz.1.435': attribute type 1 has an invalid length.
[   97.049769][ T7515] 8021q: adding VLAN 0 to HW filter on device bond3
[   97.249285][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'.
[   97.742516][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'.
[   98.258404][ T7562] netlink: 104 bytes leftover after parsing attributes in process `syz.2.447'.
[   98.349936][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'.
[   98.357849][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'.
[   98.361972][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'.
[   98.521518][ T7571] netlink: 'syz.0.450': attribute type 4 has an invalid length.
[   98.526152][ T7571] netlink: 'syz.0.450': attribute type 4 has an invalid length.
[   98.947655][ T7530] Set syz1 is full, maxelem 65536 reached
[   99.177496][ T7593] batman_adv: batadv0: Adding interface: gretap2
[   99.180047][ T7593] batman_adv: batadv0: The MTU of interface gretap2 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.189284][ T7593] batman_adv: batadv0: Interface activated: gretap2
[   99.319052][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.458'.
[   99.335777][ T7601] bond0: entered promiscuous mode
[   99.337848][ T7601] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.348494][ T7601] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.350782][ T7601] bond0: (slave vti0): The slave device specified does not support setting the MAC address
[   99.354321][ T7601] bond0: (slave vti0): Error -95 calling set_mac_address
[   99.477607][ T5666] bond0 (unregistering): Released all slaves
[  102.425112][ T7613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  102.634203][ T7652] __nla_validate_parse: 1 callbacks suppressed
[  102.634217][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'.
[  102.642783][ T7652] netlink: 164 bytes leftover after parsing attributes in process `syz.1.469'.
[  102.652453][ T7652] openvswitch: netlink: Flow actions attr not present in new flow.
[  102.821488][ T7667] netlink: 'syz.2.472': attribute type 11 has an invalid length.
[  103.010786][ T7681] bridge3: entered promiscuous mode
[  103.013367][ T7681] bridge3: entered allmulticast mode
[  103.020359][ T7681] team0: Port device bridge3 added
[  103.025477][ T7681] bridge0: port 3(team0) entered blocking state
[  103.030129][ T7681] bridge0: port 3(team0) entered disabled state
[  103.034010][ T7681] team0: entered allmulticast mode
[  103.036001][ T7681] team_slave_0: entered allmulticast mode
[  103.038530][ T7681] team_slave_1: entered allmulticast mode
[  103.047361][ T7681] team0: left allmulticast mode
[  103.049061][ T7681] team_slave_0: left allmulticast mode
[  103.051037][ T7681] team_slave_1: left allmulticast mode
[  103.193600][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'.
[  103.198075][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'.
[  103.766165][ T7699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.481'.
[  103.770894][ T7699] block nbd1: Unsupported socket: should be TCP or UNIX.
[  104.071572][ T7704] netlink: 'syz.2.484': attribute type 1 has an invalid length.
[  104.127278][ T7704] 8021q: adding VLAN 0 to HW filter on device bond7
[  104.175904][ T7704] netlink: 14 bytes leftover after parsing attributes in process `syz.2.484'.
[  104.189165][ T7711] bond7: (slave veth9): Enslaving as an active interface with a down link
[  104.844011][ T7748] xt_l2tp: v2 doesn't support IP mode
[  104.875505][ T7749] gretap0: entered promiscuous mode
[  104.885826][ T7749] vlan2: entered promiscuous mode
[  104.980948][ T7757] netlink: 'syz.2.498': attribute type 1 has an invalid length.
[  105.045857][ T7758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.498'.
[  105.051483][ T7761] netlink: 32 bytes leftover after parsing attributes in process `syz.1.499'.
[  105.101982][ T7757] bond8: (slave gretap3): making interface the new active one
[  105.104771][ T7765] netlink: 'syz.1.501': attribute type 10 has an invalid length.
[  105.108926][ T7765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.501'.
[  105.115826][ T7757] bond8: (slave gretap3): Enslaving as an active interface with an up link
[  105.136831][ T7765] team0: Port device geneve1 added
[  105.139535][ T5666] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.145639][ T5666] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.150316][ T5666] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.159289][ T5666] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.269182][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'.
[  105.279407][ T7767] bond0: option lp_interval: invalid value (18446744072228063333)
[  105.282885][ T7767] bond0: option lp_interval: allowed values 1 - 2147483647
[  105.525839][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.559780][ T7790] netlink: 'syz.1.508': attribute type 13 has an invalid length.
[  105.562878][ T7790] netlink: 'syz.1.508': attribute type 17 has an invalid length.
[  105.594005][ T7789] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.757331][ T7790] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.765061][ T7790] 8021q: adding VLAN 0 to HW filter on device team0
[  105.777806][ T7790] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.810573][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.817958][ T7790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  105.822058][ T7790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.831027][ T7790] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  105.838820][ T5666] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.842227][ T5666] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.847076][ T5666] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.855712][ T5666] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.868341][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.870695][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.907640][ T5666] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.914605][ T5666] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.949982][ T7795] bond4: entered allmulticast mode
[  105.952097][ T5666] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.954957][ T5666] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.981045][ T7795] macvlan2: entered promiscuous mode
[  105.992195][ T7795] macvlan2: entered allmulticast mode
[  105.993720][   T34] audit: type=1804 audit(1778606014.908:5): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.511" name="/newroot/196/cgroup.controllers" dev="tmpfs" ino=1027 res=1 errno=0
[  105.998094][ T7795] bond4: (slave macvlan2): Opening slave failed
[  106.007352][   T34] audit: type=1800 audit(1778606014.908:6): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.511" name="cgroup.controllers" dev="tmpfs" ino=1027 res=0 errno=0
[  106.351739][ T7820] x_tables: duplicate underflow at hook 3
[  106.355439][ T7820] netlink: 'syz.1.517': attribute type 4 has an invalid length.
[  106.401601][ T7830] netlink: 'syz.1.520': attribute type 1 has an invalid length.
[  107.969838][ T7851] netlink: 'syz.2.524': attribute type 12 has an invalid length.
[  107.972856][ T7851] __nla_validate_parse: 4 callbacks suppressed
[  107.972865][ T7851] netlink: 132 bytes leftover after parsing attributes in process `syz.2.524'.
[  108.029385][ T7858] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  108.032517][ T7859] netlink: 100 bytes leftover after parsing attributes in process `syz.2.525'.
[  108.035926][ T7860] netlink: 100 bytes leftover after parsing attributes in process `syz.2.525'.
[  108.190204][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'.
[  108.242392][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'.
[  108.259801][ T7879] netlink: 68 bytes leftover after parsing attributes in process `syz.0.530'.
[  108.278288][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.532'.
[  108.288966][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.532'.
[  108.300646][ T7885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.532'.
[  108.316795][ T7885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.532'.
[  108.469150][ T7894] bond5: option mode: invalid value (254)
[  108.474242][ T7894] bond5 (unregistering): Released all slaves
[  108.500055][ T7897] netlink: 'syz.2.535': attribute type 1 has an invalid length.
[  108.563914][ T7907] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.570293][ T7907] netpci0: tun_chr_ioctl cmd 1074025678
[  108.572273][ T7907] netpci0: group set to 0
[  109.675169][ T7935] netlink: 'syz.0.547': attribute type 1 has an invalid length.
[  109.694761][ T7935] 8021q: adding VLAN 0 to HW filter on device bond4
[  109.710996][ T7936] veth7: entered promiscuous mode
[  109.716742][ T7936] bond4: (slave veth7): Enslaving as an active interface with an up link
[  110.112103][ T7965] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  110.214045][ T7976] netlink: 'syz.2.553': attribute type 1 has an invalid length.
[  110.249208][ T7976] netlink: 'syz.2.553': attribute type 10 has an invalid length.
[  110.367193][ T7988] netlink: 'syz.2.554': attribute type 2 has an invalid length.
[  110.370695][ T7988] lo: entered allmulticast mode
[  110.613298][ T8005] xt_ecn: cannot match TCP bits for non-tcp packets
[  110.615907][ T8005] netlink: 'syz.2.556': attribute type 1 has an invalid length.
[  110.632522][ T8005] 8021q: adding VLAN 0 to HW filter on device bond9
[  110.690306][ T8011] 8021q: VLANs not supported on vxcan0
[  110.964958][ T8027] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  110.970603][ T8027] syzkaller0: entered promiscuous mode
[  110.973238][ T8027] syzkaller0: entered allmulticast mode
[  111.054562][ T8032] netlink: 'syz.1.563': attribute type 10 has an invalid length.
[  111.132737][ T8036] can: request_module (can-proto-4) failed.
[  111.350267][ T8059] syzkaller0: entered promiscuous mode
[  111.353456][ T8059] syzkaller0: entered allmulticast mode
[  111.382728][ T8062] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  111.476750][ T8064] can: request_module (can-proto-0) failed.
[  111.487662][ T8069] veth0: entered promiscuous mode
[  111.490678][ T8069] veth0: left promiscuous mode
[  111.531127][ T8071] netlink: 'syz.0.575': attribute type 11 has an invalid length.
[  111.560406][ T8074] syzkaller0: entered promiscuous mode
[  111.563651][ T8074] syzkaller0: entered allmulticast mode
[  111.789358][ T8089] bond5: entered promiscuous mode
[  111.791917][ T8089] bond5: entered allmulticast mode
[  111.832441][ T8103] netlink: 'syz.0.582': attribute type 32 has an invalid length.
[  111.839726][ T8103] netlink: 'syz.0.582': attribute type 32 has an invalid length.
[  111.843615][ T8103] netlink: 'syz.0.582': attribute type 32 has an invalid length.
[  111.915144][ T8107] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  112.476711][ T8139] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  112.482237][ T8139] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  112.725245][ T8150] syzkaller0: left promiscuous mode
[  112.727183][ T8150] syzkaller0: left allmulticast mode
[  113.289305][ T8173] __nla_validate_parse: 21 callbacks suppressed
[  113.289318][ T8173] netlink: 51 bytes leftover after parsing attributes in process `syz.0.604'.
[  113.471720][ T8183] sctp: [Deprecated]: syz.0.606 (pid 8183) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.471720][ T8183] Use struct sctp_sack_info instead
[  113.536854][ T5076] hsr0: entered promiscuous mode
[  113.542420][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'.
[  113.643464][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'.
[  113.739791][ T8193] netlink: 'syz.1.610': attribute type 11 has an invalid length.
[  113.807445][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'.
[  113.983208][ T8201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.613'.
[  114.164616][ T8204] syzkaller0: entered promiscuous mode
[  114.166856][ T8204] syzkaller0: entered allmulticast mode
[  114.177644][ T8204] tipc: Trying to set illegal importance in message
[  114.235946][ T8207] netlink: 200 bytes leftover after parsing attributes in process `syz.1.615'.
[  114.438853][ T8233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.621'.
[  114.448699][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.621'.
[  114.488505][ T8235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.589537][ T8249] netlink: 88 bytes leftover after parsing attributes in process `syz.1.625'.
[  114.815432][ T8096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  114.933775][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.628'.
[  114.980806][ T8262] veth9: entered allmulticast mode
[  114.995668][ T8262] bond6 (unregistering): Released all slaves
[  115.438311][ T8295] validate_nla: 65 callbacks suppressed
[  115.438324][ T8295] netlink: 'syz.0.637': attribute type 1 has an invalid length.
[  115.457026][ T8295] 8021q: adding VLAN 0 to HW filter on device bond6
[  115.462126][ T8295] IPv6: NLM_F_CREATE should be specified when creating new route
[  115.476631][ T8295] veth9: entered allmulticast mode
[  115.483388][ T8295] bond6: (slave veth9): Enslaving as an active interface with a down link
[  115.496046][ T8295] bond6 (unregistering): (slave veth9): Releasing active interface
[  115.502625][ T8295] bond6 (unregistering): Released all slaves
[  116.147757][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.318621][ T8311] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.084661][ T8363] netlink: 'syz.2.651': attribute type 13 has an invalid length.
[  117.267448][ T8372] netlink: 'syz.1.652': attribute type 1 has an invalid length.
[  117.354296][ T5615] Bluetooth: hci2: link tx timeout
[  117.360100][ T5615] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.408419][ T5620] Bluetooth: hci2: link tx timeout
[  117.411543][ T5620] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.438892][ T5620] Bluetooth: hci2: link tx timeout
[  117.441163][ T5620] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.450507][ T5620] Bluetooth: hci2: link tx timeout
[  117.453923][ T5620] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.461453][ T8387] netlink: 'syz.1.654': attribute type 13 has an invalid length.
[  117.665064][ T5620] Bluetooth: hci2: link tx timeout
[  117.668689][ T5620] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.784821][ T8419] netlink: 'syz.1.663': attribute type 1 has an invalid length.
[  117.795506][ T8419] netlink: 'syz.1.663': attribute type 2 has an invalid length.
[  117.843641][ T8422] Cannot find set identified by id 65534 to match
[  118.107729][ T5620] Bluetooth: hci2: link tx timeout
[  118.109622][ T5620] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.508904][ T5620] Bluetooth: hci2: link tx timeout
[  118.511129][ T5620] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.544777][ T8474] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  118.704132][ T8476] __nla_validate_parse: 12 callbacks suppressed
[  118.704149][ T8476] netlink: 44 bytes leftover after parsing attributes in process `syz.1.675'.
[  118.713059][ T8476] netlink: 43 bytes leftover after parsing attributes in process `syz.1.675'.
[  118.717191][ T8476] netlink: 'syz.1.675': attribute type 5 has an invalid length.
[  118.720643][ T8476] netlink: 43 bytes leftover after parsing attributes in process `syz.1.675'.
[  118.781799][ T8482] netlink: 'syz.1.678': attribute type 21 has an invalid length.
[  118.788250][ T8482] netlink: 128 bytes leftover after parsing attributes in process `syz.1.678'.
[  118.791673][ T8482] netlink: 'syz.1.678': attribute type 4 has an invalid length.
[  118.794888][ T8482] netlink: 'syz.1.678': attribute type 3 has an invalid length.
[  118.797725][ T8482] netlink: 3 bytes leftover after parsing attributes in process `syz.1.678'.
[  118.815105][ T8486] netlink: 52 bytes leftover after parsing attributes in process `syz.2.677'.
[  118.828886][ T8485] netlink: 80 bytes leftover after parsing attributes in process `syz.0.679'.
[  118.937189][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.680'.
[  119.024188][ T8492] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  119.027786][ T8492] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  119.079082][ T5620] Bluetooth: hci2: link tx timeout
[  119.081734][ T5620] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.386537][ T5620] Bluetooth: hci2: command 0x040f tx timeout
[  119.685575][ T8501] netlink: 228 bytes leftover after parsing attributes in process `syz.2.682'.
[  119.690846][ T8501] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.682'.
[  120.701831][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.704332][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.713658][ T8536] team_slave_0: left promiscuous mode
[  120.717220][ T8536] team_slave_1: left promiscuous mode
[  120.833378][ T8536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.944969][ T5666] nci: nci_rsp_packet: unknown rsp opcode 0x606
[  121.018018][ T8536] batman_adv: batadv0: Interface deactivated: gretap2
[  121.023272][ T8553] validate_nla: 2 callbacks suppressed
[  121.023283][ T8553] netlink: 'syz.0.694': attribute type 1 has an invalid length.
[  121.046131][ T5666] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.051441][ T5666] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  121.097026][ T5666] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.100061][ T5666] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  121.128240][ T8554] 8021q: adding VLAN 0 to HW filter on device bond7
[  121.139124][ T8554] bond6: (slave bond7): making interface the new active one
[  121.142562][ T8554] bond6: (slave bond7): Enslaving as an active interface with an up link
[  121.147088][ T5666] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.151003][ T5666] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  121.154094][ T5666] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.157049][ T5666] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  121.167372][ T8553] bond6: (slave gretap2): Enslaving as a backup interface with an up link
[  121.172312][ T8553] 8021q: adding VLAN 0 to HW filter on device bond6
[  121.586988][ T8545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  121.691547][ T8569] netlink: 'syz.0.697': attribute type 1 has an invalid length.
[  121.897819][ T8583] netlink: 'syz.1.701': attribute type 1 has an invalid length.
[  121.925725][ T8583] gretap2: entered allmulticast mode
[  121.933783][ T8583] bond6: (slave gretap2): making interface the new active one
[  121.939139][ T8583] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  122.602868][ T8540] Set syz1 is full, maxelem 65536 reached
[  122.772737][ T8629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.787158][ T8629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.962964][ T8634] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  123.466045][ T8655] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.541414][ T8660] ip6tnl1: entered allmulticast mode
[  123.551432][ T5666] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  123.560567][ T8655] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.575116][ T8662] batadv0: entered promiscuous mode
[  123.579050][ T8662] gretap0: entered promiscuous mode
[  123.583978][ T8662] hsr1: entered allmulticast mode
[  123.585733][ T8662] batadv0: entered allmulticast mode
[  123.589715][ T8662] gretap0: entered allmulticast mode
[  123.633927][ T8666] netlink: 'syz.0.724': attribute type 1 has an invalid length.
[  123.729763][ T8678] netlink: 'syz.0.726': attribute type 1 has an invalid length.
[  123.831142][ T8691] openvswitch: netlink: VXLAN extension 51 out of range max 1
[  123.902608][ T8689] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.908033][ T8689] 8021q: adding VLAN 0 to HW filter on device team0
[  123.917614][ T8689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.951232][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.959573][ T8689] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  123.969813][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.972795][ T6087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.009126][ T8701] __nla_validate_parse: 7 callbacks suppressed
[  124.009145][ T8701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.734'.
[  124.115958][ T8710] openvswitch: netlink: Flow actions attr not present in new flow.
[  124.131037][ T8707] xt_hashlimit: size too large, truncated to 1048576
[  124.256043][ T8716] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  124.261513][ T8716] bond10 (unregistering): Released all slaves
[  124.284375][ T8717] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  124.295996][ T8717] bond10 (unregistering): Released all slaves
[  124.298877][ T8716] netlink: 'syz.2.738': attribute type 1 has an invalid length.
[  124.302463][ T8716] netlink: 'syz.2.738': attribute type 2 has an invalid length.
[  124.305977][ T8716] netlink: 'syz.2.738': attribute type 1 has an invalid length.
[  124.413630][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'.
[  124.846042][ T8740] netlink: 'syz.1.744': attribute type 1 has an invalid length.
[  124.854427][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'.
[  124.890063][ T8742] netlink: 'syz.1.745': attribute type 1 has an invalid length.
[  124.909608][ T8742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.745'.
[  124.926122][ T8742] bond7: (slave gretap3): making interface the new active one
[  124.931690][ T8742] bond7: (slave gretap3): Enslaving as an active interface with an up link
[  124.946978][ T8742] macvlan2: entered promiscuous mode
[  124.948923][ T8742] macvlan2: entered allmulticast mode
[  124.951205][ T8742] bond7: entered promiscuous mode
[  124.953181][ T8742] gretap3: entered promiscuous mode
[  124.955838][ T8742] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  124.961628][ T8742] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  124.974419][ T8742] bond7: left promiscuous mode
[  124.977423][ T8742] gretap3: left promiscuous mode
[  124.993023][ T8745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.173981][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.751'.
[  125.210614][ T8766] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  125.218836][ T8766] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  125.258949][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'.
[  125.269248][ T7619] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.272716][ T7619] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.278863][ T7619] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.285419][ T7619] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.367734][ T8780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.401843][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'.
[  125.409616][ T7619] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.409691][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'.
[  125.419714][ T7619] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.431402][ T7619] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.435444][ T7619] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.527415][ T8780] 8021q: adding VLAN 0 to HW filter on device bond8
[  125.564653][ T8780] vlan5: entered allmulticast mode
[  125.568267][ T8780] bond8: entered allmulticast mode
[  125.594388][ T8797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.761'.
[  125.755819][ T8797] netlink: 248 bytes leftover after parsing attributes in process `syz.0.761'.
[  125.929788][ T8809] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  126.082265][ T8827] validate_nla: 2 callbacks suppressed
[  126.082276][ T8827] netlink: 'syz.2.770': attribute type 21 has an invalid length.
[  126.219814][ T8836] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  126.491129][ T8852] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.554991][ T8852] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.586848][ T7619] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.591773][ T7619] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.596055][ T7619] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.599063][ T7619] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.123971][ T7619] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  127.135546][ T7619] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  127.146850][ T7619] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  127.150844][ T7619] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  127.262725][ T8869] netlink: 'syz.0.781': attribute type 10 has an invalid length.
[  127.310975][ T8873] netlink: 'syz.2.782': attribute type 30 has an invalid length.
[  127.447857][ T8888] netlink: 'syz.0.785': attribute type 1 has an invalid length.
[  127.461130][ T8888] bond9: entered promiscuous mode
[  127.463227][ T8888] 8021q: adding VLAN 0 to HW filter on device bond9
[  127.542630][ T8895] tc_dump_action: action bad kind
[  127.552641][ T8894] tc_dump_action: action bad kind
[  127.628743][ T8905] SET target dimension over the limit!
[  127.700222][ T8910] SET target dimension over the limit!
[  127.756471][ T8914] xt_limit: Overflow, try lower: 28676/2147483648
[  127.978586][ T8928] netlink: 'syz.0.798': attribute type 9 has an invalid length.
[  128.661122][ T8956] netlink: 'syz.2.808': attribute type 1 has an invalid length.
[  128.698188][ T8956] bond10: entered promiscuous mode
[  128.700255][ T8956] 8021q: adding VLAN 0 to HW filter on device bond10
[  128.705092][ T8956] bond10: entered allmulticast mode
[  128.715835][ T8956] bond10: (slave bridge4): making interface the new active one
[  128.720283][ T8956] bridge4: entered promiscuous mode
[  128.722152][ T8956] bridge4: entered allmulticast mode
[  128.727109][ T8956] bond10: (slave bridge4): Enslaving as an active interface with an up link
[  128.754376][ T8962] openvswitch: netlink: Unknown nsh attribute 0
[  128.843585][ T8968] netlink: 'syz.2.812': attribute type 4 has an invalid length.
[  128.849580][ T8968] netlink: 'syz.2.812': attribute type 8 has an invalid length.
[  128.852746][ T8968] netlink: 'syz.2.812': attribute type 1 has an invalid length.
[  128.856045][ T8968] NCSI netlink: No device for ifindex 0
[  128.863213][ T8968] xt_hashlimit: size too large, truncated to 1048576
[  128.868445][ T8968] xt_hashlimit: max too large, truncated to 1048576
[  128.929226][ T8968] ipt_REJECT: TCP_RESET invalid for non-tcp
[  129.109926][ T8993] __nla_validate_parse: 25 callbacks suppressed
[  129.109937][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'.
[  129.122205][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'.
[  129.147648][ T8996] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  129.261413][ T9005] netlink: 660 bytes leftover after parsing attributes in process `syz.0.820'.
[  129.293738][ T9010] netlink: 68 bytes leftover after parsing attributes in process `syz.0.821'.
[  129.304472][ T9010] syzkaller0: entered promiscuous mode
[  129.307315][ T9010] syzkaller0: entered allmulticast mode
[  129.609792][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'.
[  129.705555][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.826'.
[  129.725126][ T9030] netlink: 156 bytes leftover after parsing attributes in process `syz.1.827'.
[  129.728380][ T9030] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  129.857110][ T9043] tipc: Failed to remove unknown binding: 66,0,0/0:3823405811/3823405813
[  129.862180][ T9043] tipc: Failed to remove unknown binding: 66,0,0/0:3823405811/3823405812
[  129.872574][ T9043] tipc: Failed to remove unknown binding: 66,0,0/0:3823405811/3823405813
[  129.877754][ T9043] tipc: Failed to remove unknown binding: 66,0,0/0:3823405811/3823405812
[  129.984352][ T9050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  130.041618][ T9054] Cannot find set identified by id 65534 to match
[  130.155492][ T9054] netlink: 104 bytes leftover after parsing attributes in process `syz.0.834'.
[  130.161976][ T9054] netlink: 132 bytes leftover after parsing attributes in process `syz.0.834'.
[  130.171866][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.836'.
[  130.175355][ T9069] netlink: 'syz.2.836': attribute type 1 has an invalid length.
[  130.308349][ T9079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.952700][ T9091] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  130.969957][ T9092] syzkaller0: entered promiscuous mode
[  130.979816][ T9088] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:21
[  130.982345][ T9092] syzkaller0: entered allmulticast mode
[  131.008990][ T9088] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:21
[  131.101448][ T9102] ipt_rpfilter: unknown options
[  131.103614][ T9101] ipt_rpfilter: unknown options
[  131.295840][ T9129] netlink: 'syz.2.853': attribute type 4 has an invalid length.
[  131.304980][ T9129] netlink: 'syz.2.853': attribute type 4 has an invalid length.
[  131.459101][ T9152] netlink: 'syz.2.856': attribute type 13 has an invalid length.
[  131.462597][ T9154] netlink: 'syz.2.856': attribute type 13 has an invalid length.
[  131.468088][ T9152] netlink: 'syz.2.856': attribute type 11 has an invalid length.
[  131.468471][ T9154] netlink: 'syz.2.856': attribute type 11 has an invalid length.
[  131.502983][ T9154] netlink: 'syz.2.856': attribute type 32 has an invalid length.
[  131.505536][ T9152] netlink: 'syz.2.856': attribute type 32 has an invalid length.
[  131.532449][ T9154] bond11: Setting coupled_control to off (0)
[  131.549772][ T9158] bond10: entered promiscuous mode
[  131.551764][ T9158] 8021q: adding VLAN 0 to HW filter on device bond10
[  131.571210][ T9152] bond12: Setting coupled_control to off (0)
[  131.612702][ T9160] 8021q: adding VLAN 0 to HW filter on device bond10
[  131.616761][ T9170] xt_bpf: check failed: parse error
[  131.621810][ T9160] bond10: (slave sit2): The slave device specified does not support setting the MAC address
[  131.634219][ T9160] bond10: (slave sit2): Error -95 calling set_mac_address
[  131.767233][ T9183] netlink: 'syz.2.861': attribute type 29 has an invalid length.
[  131.975855][ T9205] openvswitch: netlink: IP tunnel dst address not specified
[  131.975877][ T9207] openvswitch: netlink: IP tunnel dst address not specified
[  131.982211][ T9205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.985508][ T9209] netlink: 'syz.2.868': attribute type 1 has an invalid length.
[  132.012602][ T9209] vti0: entered promiscuous mode
[  132.148245][ T9221] nbd: must specify at least one socket
[  132.989198][ T9240] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  133.688440][ T9273] Unsupported ieee802154 address type: 0
[  133.781376][ T9290] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  133.834274][ T9294] sctp: [Deprecated]: syz.1.892 (pid 9294) Use of struct sctp_assoc_value in delayed_ack socket option.
[  133.834274][ T9294] Use struct sctp_sack_info instead
[  133.927092][ T9303] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  134.077856][ T9316] syzkaller1: entered allmulticast mode
[  134.224187][ T9322] bond0: entered promiscuous mode
[  134.227721][ T9322] bond_slave_0: entered promiscuous mode
[  134.230304][ T9322] bond_slave_1: entered promiscuous mode
[  134.233644][ T9322] batadv0: entered promiscuous mode
[  134.237521][ T9322] debugfs: 'hsr0' already exists in 'hsr'
[  134.239921][ T9322] Cannot create hsr debugfs directory
[  134.242402][ T9322] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  134.247147][ T9322] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  134.256501][ T9322] bond0: left promiscuous mode
[  134.259591][ T9322] bond_slave_0: left promiscuous mode
[  134.263741][ T9322] bond_slave_1: left promiscuous mode
[  134.267671][ T9322] batadv0: left promiscuous mode
[  134.303155][ T9326] 8021q: adding VLAN 0 to HW filter on device bond11
[  134.319509][ T9326] bond11: (slave veth11): Enslaving as an active interface with a down link
[  134.334928][ T9326] bond11: (slave veth13): Enslaving as an active interface with a down link
[  134.340869][ T9326] bond11: entered allmulticast mode
[  134.490263][ T9336] bond9: entered promiscuous mode
[  134.492545][ T9336] 8021q: adding VLAN 0 to HW filter on device bond9
[  134.511293][ T9336] bond9: (slave bridge4): making interface the new active one
[  134.514290][ T9336] bridge4: entered promiscuous mode
[  134.518614][ T9336] bond9: (slave bridge4): Enslaving as an active interface with an up link
[  134.534858][ T9336] bond9: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  134.544082][ T9336] bond9: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  134.631917][ T9351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.844498][ T9375] __nla_validate_parse: 59 callbacks suppressed
[  134.844515][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'.
[  134.851149][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'.
[  134.950802][ T9383] netlink: 172 bytes leftover after parsing attributes in process `syz.2.915'.
[  134.955038][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'.
[  134.964827][ T9383] openvswitch: netlink: Flow key attr not present in new flow.
[  135.079462][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'.
[  135.269017][ T9408] bond12: (slave bridge3): making interface the new active one
[  135.273680][ T9408] bond12: (slave bridge3): Enslaving as an active interface with an up link
[  135.286098][ T9408] bond12: (slave bridge4): Enslaving as an active interface with a down link
[  135.322971][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.327859][ T9409] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.355585][ T9409] batadv_slave_0: left promiscuous mode
[  135.357680][ T9409] batadv_slave_0: left allmulticast mode
[  135.359992][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.367900][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.387352][ T9409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  135.395263][ T9409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  135.400886][ T9409] veth1_vlan: left promiscuous mode
[  135.404669][ T9409] veth0_vlan: left promiscuous mode
[  135.408030][ T9409] veth0_vlan: entered promiscuous mode
[  135.415504][ T9409] veth1_vlan: entered promiscuous mode
[  135.430571][ T9409] veth1_macvtap: left promiscuous mode
[  135.433024][ T9409] veth0_macvtap: left promiscuous mode
[  135.437800][ T9409] veth0_macvtap: entered promiscuous mode
[  135.442533][ T9409] veth1_macvtap: entered promiscuous mode
[  135.460444][ T9409] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  135.465442][ T9409] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  135.487894][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.490473][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.498823][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.501102][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.532538][ T7619] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.536614][ T7619] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.547900][ T7619] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.552631][ T7619] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.783192][ T9427] netlink: 156 bytes leftover after parsing attributes in process `syz.2.928'.
[  135.786045][ T9427] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  136.336966][ T9433] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  137.133656][ T9445] netlink: 64 bytes leftover after parsing attributes in process `syz.1.933'.
[  137.193582][ T9447] sctp: [Deprecated]: syz.1.934 (pid 9447) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.193582][ T9447] Use struct sctp_sack_info instead
[  137.520682][ T9450] netlink: 'syz.2.935': attribute type 11 has an invalid length.
[  138.131860][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'.
[  138.204153][ T9476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.940'.
[  138.252646][ T9480] validate_nla: 12 callbacks suppressed
[  138.252662][ T9480] netlink: 'syz.1.942': attribute type 1 has an invalid length.
[  138.292169][ T9480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.942'.
[  138.401715][ T9485] netlink: 'syz.1.943': attribute type 12 has an invalid length.
[  138.480496][ T9495] sctp: [Deprecated]: syz.1.946 (pid 9495) Use of int in max_burst socket option deprecated.
[  138.480496][ T9495] Use struct sctp_assoc_value instead
[  138.497217][ T9498] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20001
[  138.595407][ T9501] netlink: 'syz.1.948': attribute type 4 has an invalid length.
[  138.600896][ T9501] netlink: 'syz.1.948': attribute type 4 has an invalid length.
[  138.723162][ T9511] netlink: 'syz.1.951': attribute type 1 has an invalid length.
[  138.741777][ T9511] 8021q: adding VLAN 0 to HW filter on device bond11
[  139.460104][ T9528] netlink: 'syz.0.957': attribute type 21 has an invalid length.
[  139.464335][ T9528] IPv6: NLM_F_CREATE should be specified when creating new route
[  139.468322][ T9529] netlink: 'syz.0.957': attribute type 21 has an invalid length.
[  139.469479][ T9528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  139.474081][ T9528] IPv6: NLM_F_CREATE should be set when creating new route
[  139.476435][ T9528] IPv6: NLM_F_CREATE should be set when creating new route
[  139.478681][ T9528] IPv6: NLM_F_CREATE should be set when creating new route
[  139.481760][ T9529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  139.530415][ T9533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.809008][ T9560] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  139.812792][ T9560] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.870774][ T9563] __nla_validate_parse: 9 callbacks suppressed
[  139.870784][ T9563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.966'.
[  139.915011][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'.
[  140.668989][ T9588] bond12: option lacp_active: invalid value (8)
[  140.672009][ T9588] bond12 (unregistering): Released all slaves
[  140.854405][ T9599] can: request_module (can-proto-0) failed.
[  140.950471][ T9618] ip6tnl3: entered allmulticast mode
[  140.960518][ T5666] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  140.963960][ T9608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.974349][ T9608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.989499][ T9608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.998438][ T9608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.003678][ T9608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.007983][ T9608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.016481][ T9608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.114257][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.979'.
[  141.203931][ T9628] bond0: entered promiscuous mode
[  141.205617][ T9628] bond_slave_0: entered promiscuous mode
[  141.207903][ T9628] bond_slave_1: entered promiscuous mode
[  141.210285][ T9628] batadv0: entered promiscuous mode
[  141.212410][ T9628] debugfs: 'hsr0' already exists in 'hsr'
[  141.214753][ T9628] Cannot create hsr debugfs directory
[  141.217580][ T9628] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  141.220951][ T9628] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  141.225321][ T9628] bond0: left promiscuous mode
[  141.227306][ T9628] bond_slave_0: left promiscuous mode
[  141.229528][ T9628] bond_slave_1: left promiscuous mode
[  141.231750][ T9628] batadv0: left promiscuous mode
[  141.313995][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'.
[  141.320516][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'.
[  141.363782][ T9641] tipc: Started in network mode
[  141.365464][ T9641] tipc: Node identity 6e706fe5d95d, cluster identity 4711
[  141.368234][ T9641] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.491377][ T9649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.987'.
[  141.514582][ T9651] sctp: [Deprecated]: syz.2.988 (pid 9651) Use of int in max_burst socket option deprecated.
[  141.514582][ T9651] Use struct sctp_assoc_value instead
[  141.569461][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'.
[  141.601991][ T9660] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  141.674296][ T9667] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.708897][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'.
[  141.711790][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.994'.
[  141.714567][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'.
[  141.717953][ T9669] netlink: 'syz.1.994': attribute type 6 has an invalid length.
[  141.800222][ T9672] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  141.808999][ T9672] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  142.366319][ T5677] tipc: Node number set to 3073208293
[  142.713948][ T9691] netlink: 'syz.0.1001': attribute type 1 has an invalid length.
[  142.751491][ T9691] 8021q: adding VLAN 0 to HW filter on device bond13
[  142.776888][ T9692] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.785779][ T9697] PKCS7: Unknown OID: [4] (bad)
[  142.789933][ T9697] PKCS7: Only support pkcs7_signedData type
[  143.398710][ T9712] netlink: 'syz.0.1008': attribute type 1 has an invalid length.
[  143.402982][ T9711] netlink: 'syz.0.1008': attribute type 1 has an invalid length.
[  143.764990][ T9746] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  143.889504][ T9751] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.062920][ T9770] netlink: 'syz.0.1022': attribute type 1 has an invalid length.
[  144.075734][ T9770] bond14 (unregistering): Released all slaves
[  144.785554][ T9779] netlink: 'syz.1.1024': attribute type 1 has an invalid length.
[  144.897527][ T9781] __nla_validate_parse: 9 callbacks suppressed
[  144.897537][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1025'.
[  145.386444][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  145.694432][ T9798] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1028'.
[  145.776610][ T9799] bond0: entered promiscuous mode
[  145.778339][ T9799] bond_slave_0: entered promiscuous mode
[  145.780320][ T9799] bond_slave_1: entered promiscuous mode
[  145.782843][ T9799] batadv0: entered promiscuous mode
[  145.785062][ T9799] debugfs: 'hsr0' already exists in 'hsr'
[  145.808467][ T9799] Cannot create hsr debugfs directory
[  145.817072][ T9799] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  145.823899][ T9799] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  145.832352][ T9799] bond0: left promiscuous mode
[  145.835204][ T9799] bond_slave_0: left promiscuous mode
[  145.839404][ T9799] bond_slave_1: left promiscuous mode
[  145.844376][ T9799] batadv0: left promiscuous mode
[  145.896819][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1029'.
[  145.999465][ T9805] IPv6: NLM_F_CREATE should be specified when creating new route
[  146.002190][ T9805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  146.004489][ T9805] IPv6: NLM_F_CREATE should be set when creating new route
[  146.006949][ T9805] IPv6: NLM_F_CREATE should be set when creating new route
[  146.009471][ T9805] IPv6: NLM_F_CREATE should be set when creating new route
[  146.055882][ T9807] xt_TPROXY: Can be used only with -p tcp or -p udp
[  146.460335][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'.
[  146.474079][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1038'.
[  146.479000][ T9850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.545987][ T9852] syzkaller0: entered promiscuous mode
[  146.548673][ T9852] syzkaller0: entered allmulticast mode
[  146.553447][ T9852] tipc: Resetting bearer <eth:syzkaller0>
[  146.576084][ T9852] tipc: Resetting bearer <eth:syzkaller0>
[  146.802777][ T9858] netlink: 'syz.0.1041': attribute type 1 has an invalid length.
[  147.489873][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'.
[  147.906701][ T9852] tipc: Disabling bearer <eth:syzkaller0>
[  147.911744][ T9858] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  147.984132][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'.
[  148.011938][ T9881] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1046'.
[  148.014827][ T9881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1046'.
[  148.157678][ T9897] net_ratelimit: 1 callbacks suppressed
[  148.157688][ T9897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.174588][ T9897] syzkaller0: entered promiscuous mode
[  148.186872][ T9897] syzkaller0: entered allmulticast mode
[  148.229133][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'.
[  148.279987][ T9910] netlink: 'syz.2.1054': attribute type 36 has an invalid length.
[  149.382010][ T9943] netlink: 'syz.2.1062': attribute type 9 has an invalid length.
[  149.589920][ T9969] tipc: New replicast peer: 255.255.255.255
[  149.592935][ T9969] tipc: Enabled bearer <udp:syz2>, priority 10
[  149.686075][ T9971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.802935][ T9984] netlink: 'syz.1.1073': attribute type 1 has an invalid length.
[  149.805503][ T9984] netlink: 'syz.1.1073': attribute type 4 has an invalid length.
[  150.110396][T10005] xt_hashlimit: size too large, truncated to 1048576
[  150.299688][T10009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.303044][T10009] syzkaller0: entered promiscuous mode
[  150.305315][T10009] syzkaller0: entered allmulticast mode
[  150.328709][T10009] tipc: Resetting bearer <eth:syzkaller0>
[  150.420004][T10015] __nla_validate_parse: 15 callbacks suppressed
[  150.420015][T10015] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1082'.
[  150.511390][T10018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1083'.
[  150.514903][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1083'.
[  150.754427][T10020] 8021q: adding VLAN 0 to HW filter on device team0
[  150.760565][T10020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.783466][T10020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.791116][T10020] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  150.801176][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.803734][ T6267] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.864015][T10020] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1084'.
[  151.119728][T10008] tipc: Resetting bearer <eth:syzkaller0>
[  151.133236][T10008] tipc: Disabling bearer <eth:syzkaller0>
[  151.419799][T10040] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1090'.
[  151.432380][T10040] 5n: entered promiscuous mode
[  152.264089][T10046] netlink: 'syz.0.1092': attribute type 13 has an invalid length.
[  152.328867][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1093'.
[  152.354744][T10048] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  152.360447][T10048] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.364842][T10049] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  152.370039][T10049] syzkaller0: entered promiscuous mode
[  152.372341][T10049] syzkaller0: entered allmulticast mode
[  152.551820][T10081] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1101'.
[  152.618761][T10075] ipt_rpfilter: unknown options
[  152.699728][T10087] TCP: TCP_TX_DELAY enabled
[  152.905123][T10093] netlink: 'syz.0.1105': attribute type 1 has an invalid length.
[  153.596910][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'.
[  153.697826][T10109] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001
[  153.700954][T10109] IPVS: sh: FWM 3 0x00000003 - no destination available
[  153.703969][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  153.710597][T10109] netlink: 'syz.1.1110': attribute type 4 has an invalid length.
[  153.713969][T10109] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1110'.
[  154.826435][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  155.179091][T10133] netlink: 'syz.2.1118': attribute type 10 has an invalid length.
[  155.182266][T10133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1118'.
[  155.201346][T10133] team0: Port device geneve1 added
[  156.330496][T10174] : renamed from lo (while UP)
[  156.428089][T10185] __nla_validate_parse: 2 callbacks suppressed
[  156.428100][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'.
[  156.450919][T10174] netlink: 'syz.2.1128': attribute type 2 has an invalid length.
[  156.454131][T10174] netlink: 'syz.2.1128': attribute type 2 has an invalid length.
[  156.481146][T10191] netlink: 'syz.1.1132': attribute type 21 has an invalid length.
[  156.484060][T10191] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1132'.
[  156.487710][T10191] netlink: 'syz.1.1132': attribute type 4 has an invalid length.
[  156.490480][T10191] netlink: 'syz.1.1132': attribute type 3 has an invalid length.
[  156.493180][T10191] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1132'.
[  156.525391][T10193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  156.560973][T10195] batadv0: entered promiscuous mode
[  156.563332][T10195] batadv0: left promiscuous mode
[  156.636946][T10197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1135'.
[  156.644329][T10197] veth1_to_team: entered promiscuous mode
[  156.649323][T10197] gretap0: entered promiscuous mode
[  156.660992][T10197] debugfs: 'hsr0' already exists in 'hsr'
[  156.667968][T10197] Cannot create hsr debugfs directory
[  156.677876][T10197] hsr0: entered promiscuous mode
[  156.840358][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'.
[  156.843560][T10205] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1137'.
[  156.898793][T10210] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1138'.
[  156.902284][T10210] openvswitch: netlink: Flow key attr not present in new flow.
[  156.905421][T10210] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1138'.
[  156.942791][T10215] netlink: 'syz.2.1139': attribute type 12 has an invalid length.
[  157.004382][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'.
[  157.007743][T10215] macsec0: entered promiscuous mode
[  157.011948][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1139'.
[  157.016086][T10215] veth1_macvtap: left promiscuous mode
[  157.022778][T10215] macsec0 (unregistering): left promiscuous mode
[  157.478467][T10251] bond13: option arp_validate: invalid value (18446744073709551613)
[  157.482033][T10251] bond13 (unregistering): Released all slaves
[  157.588239][T10257] netlink: 'syz.0.1149': attribute type 20 has an invalid length.
[  157.633901][T10260] netlink: 'syz.2.1150': attribute type 4 has an invalid length.
[  157.640025][T10261] netlink: 'syz.2.1150': attribute type 4 has an invalid length.
[  157.643864][T10255] syzkaller1: entered promiscuous mode
[  157.646155][T10255] syzkaller1: entered allmulticast mode
[  157.829204][T10270] xt_ecn: cannot match TCP bits for non-tcp packets
[  157.874272][T10282] tipc: Enabled bearer <eth:vlan0>, priority 0
[  157.903425][T10282] bond14: entered promiscuous mode
[  157.906721][T10282] 8021q: adding VLAN 0 to HW filter on device bond14
[  157.939370][T10287] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  157.965304][T10282] bond14: (slave bridge5): making interface the new active one
[  157.969767][T10282] bridge5: entered promiscuous mode
[  157.973975][T10282] bridge5: left promiscuous mode
[  158.111669][T10311] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  158.217918][T10320] nbd: nbd64 already in use
[  158.550893][T10332] mac80211_hwsim hwsim5 wlan1: Caught tx_queue_len zero misconfig
[  158.561416][T10333] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  158.816062][T10350] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.822431][T10350] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.886387][T10350] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.899230][T10350] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.922791][T10350] bond1: left promiscuous mode
[  158.932549][T10350] bond3: left promiscuous mode
[  158.940965][T10350] bond6: left promiscuous mode
[  158.949882][T10350] bridge2: left promiscuous mode
[  158.952234][T10350] bond6: left allmulticast mode
[  158.954199][T10350] bridge2: left allmulticast mode
[  158.957241][T10350] bridge3: left allmulticast mode
[  158.961814][T10350] bond10: left promiscuous mode
[  158.969969][T10350] bridge4: left promiscuous mode
[  158.974691][T10350] bond10: left allmulticast mode
[  158.979804][T10350] bridge4: left allmulticast mode
[  158.985441][T10350] vti0: left promiscuous mode
[  158.988843][T10350] ip6tnl3: left allmulticast mode
[  159.021455][ T5666] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.030087][ T5675] tipc: Node number set to 368892915
[  159.035160][ T5666] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.044484][ T5666] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.051660][ T5666] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.350410][T10358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.354648][T10358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.368887][T10358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  159.438834][T10358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.444553][T10358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.448616][T10358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  159.553038][T10358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.557542][T10358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.561624][T10358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  159.651351][T10358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.657822][T10358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.669583][T10358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  159.840702][T10389] bond13 (unregistering): Released all slaves
[  159.887490][ T5666] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.894550][ T5666] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  159.898701][ T5666] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  159.926526][ T5666] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.932755][ T5666] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  159.937123][ T5666] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  159.954990][ T5666] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.965697][ T5666] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  159.976355][ T5666] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  160.000568][ T5666] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  160.004750][ T5666] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  160.009950][ T5666] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  160.768035][T10414] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.906813][T10418] validate_nla: 5 callbacks suppressed
[  160.906824][T10418] netlink: 'syz.1.1190': attribute type 3 has an invalid length.
[  161.135872][T10435] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.139012][T10435] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.167407][T10428] netlink: 'syz.2.1193': attribute type 10 has an invalid length.
[  162.407364][T10467] syzkaller1: entered promiscuous mode
[  162.410060][T10467] syzkaller1: entered allmulticast mode
[  162.558544][T10473] __nla_validate_parse: 28 callbacks suppressed
[  162.558554][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'.
[  162.587956][T10473] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1204'.
[  162.640561][T10475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.735185][T10475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.021720][T10498] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  163.062711][   T34] audit: type=1804 audit(1778606071.978:7): pid=10505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1212" name="/newroot/407/cgroup.controllers" dev="tmpfs" ino=2096 res=1 errno=0
[  163.081118][   T34] audit: type=1800 audit(1778606071.978:8): pid=10505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1212" name="cgroup.controllers" dev="tmpfs" ino=2096 res=0 errno=0
[  163.178715][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'.
[  163.182415][T10511] netlink: 'syz.1.1211': attribute type 1 has an invalid length.
[  163.711794][T10518] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1215'.
[  163.886104][T10502] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  163.889095][T10502] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  163.904716][T10502] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  163.907917][T10502] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  164.003859][T10502] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  164.009118][T10502] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  164.012739][T10502] CPU: 0 UID: 0 PID: 10502 Comm: syz.1.1211 Not tainted syzkaller #0 PREEMPT(full) 
[  164.016662][T10502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.021091][T10502] RIP: 0010:klist_remove+0x156/0x340
[  164.023290][T10502] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd de 90 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be de 90 f6 49 8b 44 24 58 48 89 44 24 08
[  164.029348][T10502] RSP: 0018:ffffc9000425f820 EFLAGS: 00010202
[  164.031399][T10502] RAX: 000000000000000b RBX: ffff88816d821d80 RCX: 0000000000000000
[  164.034076][T10502] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  164.036594][T10502] RBP: ffffc9000425f920 R08: ffffffff90174cc3 R09: 1ffffffff202e998
[  164.039044][T10502] R10: dffffc0000000000 R11: fffffbfff202e999 R12: 0000000000000000
[  164.041602][T10502] R13: 1ffff1102254150c R14: ffff888112a0a860 R15: dffffc0000000000
[  164.044423][T10502] FS:  00007f98eba5c6c0(0000) GS:ffff88818dc87000(0000) knlGS:0000000000000000
[  164.047477][T10502] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.049513][T10502] CR2: 0000559a7330e048 CR3: 00000001104e2000 CR4: 00000000000006f0
[  164.051983][T10502] Call Trace:
[  164.053067][T10502]  <TASK>
[  164.054028][T10502]  ? __pfx_klist_remove+0x10/0x10
[  164.055738][T10502]  ? kobject_move+0x5de/0x720
[  164.057616][T10502]  ? __pfx_kobject_move+0x10/0x10
[  164.059601][T10502]  ? do_raw_spin_unlock+0x4d/0x210
[  164.061288][T10502]  ? get_device_parent+0x366/0x3a0
[  164.062991][T10502]  device_move+0x193/0x730
[  164.064558][T10502]  hci_conn_del_sysfs+0xb8/0x1a0
[  164.066194][T10502]  hci_conn_del+0xc36/0x1230
[  164.067904][T10502]  hci_conn_hash_flush+0x191/0x260
[  164.069764][T10502]  hci_dev_close_sync+0x821/0x10e0
[  164.071663][T10502]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  164.073609][T10502]  ? do_raw_spin_lock+0x12b/0x2f0
[  164.075359][T10502]  hci_dev_do_close+0x30/0xc0
[  164.076963][T10502]  hci_rfkill_set_block+0x1f4/0x290
[  164.078689][T10502]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  164.080601][T10502]  rfkill_set_block+0x1a4/0x4e0
[  164.082226][T10502]  rfkill_fop_write+0x461/0x5a0
[  164.083945][T10502]  ? apparmor_file_permission+0x1f4/0x300
[  164.085975][T10502]  ? __pfx_rfkill_fop_write+0x10/0x10
[  164.087798][T10502]  ? security_file_permission+0x30/0x260
[  164.089741][T10502]  ? rw_verify_area+0x255/0x4d0
[  164.091875][T10502]  ? __pfx_rfkill_fop_write+0x10/0x10
[  164.094107][T10502]  vfs_write+0x29a/0xb90
[  164.095900][T10502]  ? __pfx_vfs_write+0x10/0x10
[  164.097915][T10502]  ? __fget_files+0x2a/0x420
[  164.099860][T10502]  ? __fget_files+0x2a/0x420
[  164.101831][T10502]  ? __fget_files+0x3a0/0x420
[  164.103867][T10502]  ? __fget_files+0x2a/0x420
[  164.105792][T10502]  ksys_write+0x150/0x270
[  164.107601][T10502]  ? __pfx_ksys_write+0x10/0x10
[  164.109639][T10502]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.112166][T10502]  do_syscall_64+0x15f/0xf80
[  164.114115][T10502]  ? trace_irq_disable+0x3b/0x140
[  164.116233][T10502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.118719][T10502] RIP: 0033:0x7f98eab9cdd9
[  164.120583][T10502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.127436][T10502] RSP: 002b:00007f98eba5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  164.130513][T10502] RAX: ffffffffffffffda RBX: 00007f98eae15fa0 RCX: 00007f98eab9cdd9
[  164.133640][T10502] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006
[  164.136802][T10502] RBP: 00007f98eac32d69 R08: 0000000000000000 R09: 0000000000000000
[  164.139353][T10502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.141985][T10502] R13: 00007f98eae16038 R14: 00007f98eae15fa0 R15: 00007ffd646388a8
[  164.144723][T10502]  </TASK>
[  164.145901][T10502] Modules linked in:
[  164.148674][T10502] ---[ end trace 0000000000000000 ]---
[  164.155431][T10502] RIP: 0010:klist_remove+0x156/0x340
[  164.159155][T10502] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd de 90 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be de 90 f6 49 8b 44 24 58 48 89 44 24 08
[  164.168056][T10502] RSP: 0018:ffffc9000425f820 EFLAGS: 00010202
[  164.170194][T10502] RAX: 000000000000000b RBX: ffff88816d821d80 RCX: 0000000000000000
[  164.172936][T10502] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  164.178518][T10502] RBP: ffffc9000425f920 R08: ffffffff90174cc3 R09: 1ffffffff202e998
[  164.181515][T10502] R10: dffffc0000000000 R11: fffffbfff202e999 R12: 0000000000000000
[  164.184270][T10502] R13: 1ffff1102254150c R14: ffff888112a0a860 R15: dffffc0000000000
[  164.187706][T10502] FS:  00007f98eba5c6c0(0000) GS:ffff88818dc87000(0000) knlGS:0000000000000000
[  164.191085][T10502] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.195311][T10502] CR2: 0000559a732fc950 CR3: 00000001104e2000 CR4: 00000000000006f0
[  164.199651][T10502] Kernel panic - not syncing: Fatal exception
[  164.203191][T10502] Kernel Offset: disabled
[  164.205205][T10502] Rebooting in 86400 seconds..
