last executing test programs:

3.549087778s ago: executing program 0 (id=641):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x14, 0x3, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x200080c0}, 0x20000080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x6, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5e}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48809}, 0x40800)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000000)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r7, 0x18000000000002a0, 0xff1f, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@nested={0x8, 0x2, 0x0, 0x1, [@generic="1c912a79"]}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32], 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x14, 0x3, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x200080c0}, 0x20000080) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x6, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5e}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48809}, 0x40800) (async)
socket(0x10, 0x3, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000000) (async)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r7, 0x18000000000002a0, 0xff1f, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@nested={0x8, 0x2, 0x0, 0x1, [@generic="1c912a79"]}]}, 0x1c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32], 0x44}}, 0x0) (async)

3.388398945s ago: executing program 0 (id=643):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000001200)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, {[@fragment={0x6}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, "ab9400", 0xf08, 0x2f, 0xb9e02c7ea3376920, @mcast2, @mcast2, [@dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "471c193e445fffa682333b6ea5d9758e49d1f56a2cacf058c91036aa2a98b0af004e6f5acbbab33a8a5a9112f348b1a0089ddf5d100402cf846849a5c61cd7554140293b1191985ab08825ff716bc3ec7c318469d1e246d1c2b6f9ac2da9fa05bbc052fd2c1e07394a280e009667ed6f989d69942944973c6d558feda3d1c3358d50dff7bdd2c1fb8021ade354c814396f3fc7c17209d79e6c4952e91a6ec461a7cc945887c3bce662f5449d7b817758d7db37c9b2d74a1e7f0e05c28fce1ed8803f1e214667d299c1bd9653c497bea87774d74ebc16b76bee5c7e6ba19f460cafc8a531b56ea9d086e7f82153806b9840ec4fa711abb32a8728e81b51406040e0c274c260aa9b0b468d88f95b045258ddd448a48b987951e70d75bba7371694f1fb2b1957b4954fb807f86d7c7781697c2304a26e879a066a81d9b4f9ad82632a90632f737b44dc95d5b56a4acfdca287e039c5ebe808b5d585eda8c1543dbc5bf1b6bfc52c5ff2a947bce2327ccfeccfc2ba9df17ea126da5c4bbb54018d4f8277939acd67cd26ce4173968cfb747b74d61eb69503dea36f616de641ed0755b2e37f14dc9a8d86bab92acdfcbb93bed1d4344f2fd9c539d5fda77cbae2bedb79e05fc03e64e253b03bd8ac170e54ee380314727c60a3bc1d689b989710dd0f9a418f90637db3aae7034a9b83e8c843ba835c6a500ae43e840688d0801a882ffb94b7a77bd2314217aac52d296d169395c0b3dc7339a389354e1e4ff0746e6b2e3fc0149a36e75eafc20d51812e984faeecb52ad9b89288bacf21c152290ff2f6781dc761a3e50d88a8b4da3e65782fa959d583c718cf64d09d330c381ae123bea01e7d25eb8f8be911f3928237e3878e505be36bb6852903dff1e77be22ccf3b3e1c8658a5b92c816c6f3f0306a196ec62d5a39ecf36528f18e639b26351b6bc9d1230482e5d8e2c9561de5204d98487364c50f7236c503db3665876f6c04f7f23d1606d36120f62e3fd3de4a7525678e3748905d5a14fa840297c7dda43e13e18fad1453d5c24ddcb4bef61ab494d4f620201993b1b20f339ec6409474a6f104edbe42e0df14633c9a40352f773600b335e6a7ec6f0b0511c6d55fb484696d3b3e2fa4346d26446cba1e2e7ae1de5df058e7c2b52a1d6bb2d2daff1c73a4718541d6b9882891870b3f17442bdc250de45202f7314cd6c3670c3061b9ea658f21e1c362d622316f158968f118a72bef80745a9159f3c77985ecd9bca98ccd482b96ab39701053e30fb4d6d5efc4ba8f33fe18b0df2ab24ad5b2169ed8569cc264f91481fe3accc27448231088f05d996f562fd1950e43313193d23338fc134753ef5127d57161597f99598d546e290123ac1c3df0f5ded6cad9f523e71f7d5ce0b7d41f0d2fc6f911bd6b578f156b7b85dcf90d423e1cb854bb18ddc6801fc30ce76df9c27c1d5d91e06e9209d061b43449d0abdf346c644db465ee610d3ed406af49cce6119a1ec2ac9846350367f99e7255e5be602f0cce16439f3c5beb7276f96f2f9dffc88da05c8b197b90bf4ca75be6d767dc10d1ff883728fcaecbde596ed9b01a456e417fb9ded7431323b19a6fa8f6fd0ec596410a887037ff6a0feb81ce0dffdfdec39a5b04ec962e87bc038e4436b2a8ac00e51bca0976eef42211107422ff30034cc62355fcf65b51325fcd25861ee487c695b51ba4be9b3c47ab47388e9a8dcce4507acbf5b16164f85d12161c8038019f589e0117a02161dcf2fc01968983bde59dceda258e008e337a3af1c1127258b8877558918caa71355ca8d17be32b10d61e72a0391b6ed88327d1f6d030877fe893f777de0e0ec863f15a50b40d003a9a941182a0639674bd0b4f4f9716fb1c2e115a6465fa731759793b86a9bb70ae0bb18d0c5e53c120d192a71302d15fff0c2c76ad1f9e1281c42a659ed7b67c4f4d7c3fcd56a022bf8f043006c61f254a80184519935bbc805eefba13ed54234322506f28f362065d6a68c35473280d4b8196754a11604a901cfdea47dc6f442fa73ffc6fe5e59bece8741407a57fd5f36a5906951fe75bea732413200bb85053ad500ea6245bea8abccbf5e8927261f752c12a2765827ea9908f084b862ce41b11443f73f0ec6aa095db1bbce0b14bce8397b45da28c2ac2f33c8ecce00bdf34cd00aa95d181ea33e08b7c8a768a365c4279e0b5d9352eb62c628909cc4191e0ff81fd84cc4c371ffc000d8841a9ebe70574993579cfd0e35574ef6e4cc6edf42deb8cb1e38b55fead366238d8d7d83902c6da5ad2ee63843db90090d57eeebd90ec9b08a6ffffd6c60e0b017e0c22d08cf1e22e2e63df06b62e5e0cfcd7b9441d2ca09b4e96c3b61ed1459fc24d83301148940e554f4d78c453c7e2f262f09aebee218ec5a22f874768e4c1afa870262f2f67155c94b17a36475dd421eaee27632427ede8330b1d74d2cd1a2d0a7de694a7d87ede13b5ea664e89f3d872512581adc606cd841a2abd2ed34efe3ec8e4f03d1e38fadfd08cb1b65f4eac10c48894b6fda1440ddd5d22b06214dbd483a5da821c4f447cce31df27c40b14f4471abccd35e6673aaa17133e78a589f45331399d930534edae0402e811a411d557c184c44ebec37a4e146d8076a070cf1f967ba3341e4e8e0c8b4b4617ee2bf3e8ae478567137641b6f6bc1fafd0d15cfed74198646906b5b853c8206ebf1e7e46bd74ae848281c4d89c02057de523e7e3e75567811685c1be1d2f5a57ff5b32fb8ef19e44f25226701f1b6b66cac452620cb7529b411cd833e3b1ad07bc781be7cda26eeccdb57f44308e765e13f357356e3fb83dcb4994b369fd3ee6aa6e405da03703c0dbd0e47110533992fd2be5bde2cbf6f7e777082427189766afbe426e6014ec9d041e96bcc900d5bdf4be72142ed1ab4c1d88afe8408145e06ddd3c2820f5d928309b3ef77afdd500568d76eb99ebd6f4ab78d5e43aa61b8a0ec27e1f6475691183e19f9e43ef1e94f2656da3eb693921f13aee4d4140fc4d56ac5ff3ec97163915a028c1ed16c7d08e6862503b18283b30489507e35945197c22733dee593f1d20a53dc5a463d5b8a058fa555c220de3fe5252a83e10f163babc01ec11c2e2197491ebb06b43919320c7237c0e55cbf927e0b5aaadd81c0c4c49a30ff2f9426b32311cbf09e1bcbe75c89aec74cf848d1b2194760a6edc734aebac9b429ae0438c620d4ad23b42deb8f7f1806ee8db02261b1e6d35742b1c85602c8099c0ed85cd89969f7b9ffd5906483e788d9f8c01e998c000f3005ea9efef9ca977530999344093bd6d234e500d784b22ccc8de58065451196dc977d8e8c8deac7d47b1ddc23f82f09159796a883d8b530fa193a20c53c22c5ffa3e5d411329f6489266ea75ff184b7ff1b301293b3ff5de6eb3658d826e6aa114eac2e572bf7d0d085e1e927af2bc1b21d1eaa37075a4778bec44521e5341c89c7589ca85b0cbda1060bca778906705be8791e479cb9867b4f6f06802ae76fba15b8fbf14bfd1b393bcef6f7997ac66bd87fcdda9387a519b5dbb61f7f970772a406bdce40f48511344070ed00a20880fdcc19732df83f0ba1bf6c94e201a7a2c833239ebf380720d3ddd644c8b3d78a0eae5d0d7d22937fc5c3e9295cd7a412897b9c1123ffc1aec8c49c768ed008f795e62ad47250ad92f90d4d2c903fdba9c19f8ce5dd5eb69c099ba28eac5717c975c7504ce86b168744f9944ca63ba1938c02918ca9bfb77fc4e97c093108b3d35b8330bc32758c7f3ee746315e758ccb5e220de655350eba786e400bc89e958862541506c6e4958d3fd0987686f2d6236abd0bd118fea29e09d6025f1ac9730e72177ef28399c25134261f785b5e1b7f20bde4e347da83f8dfe0c9080d48b9dc371d9e81174faf9ebcefd3804718b05bbd6f41f40e726d390b87e60afbdadd45cd2f0c4d7495b6a6f074259518838317973877d991ef156d2d39098b50e8b6e1bbfb4096d5801d64e0655be19f7390594ad273f83e7c5128a579e6faf44c76bfdd70d726c0ea4cb9f69976b5beee76f5bec995e49d26795c9731d36d013d628fd7ac2f0bfde44c434d2bfc547480ae597b3e1e5214f108255fa0d22eb69df4a1691c6614743298af40e283090a4039b8bdf9822a86caeabd18d12c506d3448c1b15efa929881029ca0f8d4861d5f7a2d06f0e1a2f18db910ab1bf391a690086eb91341e38649f8bbd8299c3e81e0c816f34629b191e722e9bfdb8610fd135d36b0335198e2a4c06e2f37b9efeeb85a07896674c979e720347fa61782ac09cacd7967a7484e55ea2bfd50a9cb3e1863a59e6ad867593237bdb2baebaf9c88df6b91b5801393186a64dd33ba3472c0a3cb99b7ed8c93f1b95832d75df45c65df69d818ad0680e39606045c996691fcbf1bc69b3f171a46fc81fa66877758c76f73c1d83cc3dddd321b1c03c6b56fa9e02bc3fa4bef43050420202370c5074c0abd08d94c9b75a871cee948ca2e055ab07e1c062e8a1435e06073dc5911d91237ce9fe8cdf47a345de4ca65febc8f48de09603e44d7f14e1e0c37428680dd3428f0f4563dc90e0714fe0a40689acc472394704b9feba33ec9bca45533cd4635b3249a24025c271e6661d0060de48689debb58be19a6cef15f39dd6f42828d8440bc5b9e6d3aae0f745f05181c9d74832c358b8438bf46f0f4f302ffafc395b226d5bd1c5d5b011c846be3d133470db70800297699c8ee17104945a73cc77c2c9cdae9383904dc428f76480558a40c0dc19cd9190dbb78ed1da18eea6694406f428c4ad3e8b4add1ececf520fc9ffbdbde06ac39b2ceb2f24b6054268f179d258a9b260490216f6169e5867c050f3898a555907bd18b18c6d11748cf43bf7b7b1a8eeef32cee7560eed7faea9218ff4f08f69835cd6b1af390f4159ed300faf2d8b5b5904a42bb3e926b383496fb018c8da32e13a952bb172d749edc6e1e38c1e88db1d75f141d3bed099f275e3d0e7fed711d1c4e882612dc7f33fc567a19ce4a901a5350b128d08eff31b1f660e108b146ac3d415ec86820207bf9a9c32d7df1e648cc68bf093faccc1c9e3e31a45ec81a1ce6ceef43240543476ae1305a6beeb8337a0e7c6dae864081fe962b7fd63326415e01b2ebfc770f1c5f8704add7da3a0380625c1162191af137b6a5ada314e0f7233b41e6e58f9ea7e1cf9927da4770bc2d4c45e71d5728930f5a02d740f124521490231229b99cbce370627517017e6d3d82526faecdd573e135d5bc3b96e1292e0b473471e2e93e8162eadf6fc2caced5f9aa494d0eadf8dc5442a9da1d9caf007f8e47c05eb38fa8f99e480c49957c7bae1efb2ce516bd690b7379e83f0493df617449fd9c61e6f9393750464e8d59eb10c8bc84"}]}, @hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000080), 0x0}, 0x20)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="900000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f9a25f0500000000600012800b000100697036746e6c00005000028006000f000000000008000100", @ANYRES32, @ANYBLOB="080014004b030000f6ff12004e21000008001400ffffffff080008003500000014000200fc00000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000)

3.089353823s ago: executing program 0 (id=648):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x25, 0x7, 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0xffffffffffffff8b, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0x0, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x8, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4811}, 0x40884)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r11)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000100)=ANY=[@ANYBLOB="14002000", @ANYRES16=r12, @ANYBLOB="01002cbd7000000000000c000000"], 0x14}}, 0x4040004)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x40000)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r15, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x53a8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
r17 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r16)
sendmsg$TIPC_CMD_ENABLE_BEARER(r16, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

1.571338303s ago: executing program 0 (id=651):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40850)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="a40000000000000000000000070000000186110000000002086403942df1410503cd8917d9ac1414bbac14140be0000002ac1e01017f0000018630000000020104e6ee00063faf03e3000508ade9050a68ae60776ab4c08a0711d065a90131e359bec60a1982137d3a09046ae67f4434a431ac1414aa000000060900000001000008ffffffff00000000ffffffff7fffffff6401010100000001ac14140c000000069404000000000000000000"], 0xa8}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)}}], 0x2, 0x4880)

1.569277142s ago: executing program 0 (id=652):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
close(r0)
socket(0x1e, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x6, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xda23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = getpid()
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x6e21, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xbfa6c1dfb8cc9f2d], 'wg2\x00', 'veth0_virt_wifi\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x0, 0x2, 0x4}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8000002, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0)
sendto$packet(r8, &(0x7f0000000400)="44c394f305916c4516999da208524ae54c13091b90007bd988b94800", 0x1c, 0x20044084, &(0x7f0000000300)={0x11, 0x0, r11, 0x1, 0xff, 0x6, @multicast}, 0x14)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r12=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r12, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)
sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000000)={'wpan0\x00'})

1.254432601s ago: executing program 2 (id=655):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={<r2=>0x0, 0x1dd}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x4}, &(0x7f00000002c0)=0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x71516}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xdc6a}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000001d711861000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x2)

1.253828603s ago: executing program 2 (id=656):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x184}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6a521}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24000050)

1.151660323s ago: executing program 2 (id=657):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x7, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4}}]}, 0x38}, 0x1, 0x7}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x1d00, @private1, 0x1}]}, &(0x7f0000000140)=0x10)
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000000))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "0e3f81a20e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r3], 0x7c}}, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000440)=0x875, 0x4)
r7 = socket$inet(0x2, 0xa, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x30, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b00340001800c0001007061796c6f616400240002800800024000000000080001400000000a080003400000000508000440000000020900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r10 = socket(0x2, 0x80805, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r11, 0x0)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r10, 0x84, 0x4, 0x0, &(0x7f00000000c0))
socket$tipc(0x1e, 0x5, 0x0)

1.031718502s ago: executing program 0 (id=658):
r0 = socket$tipc(0x1e, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0)
bind$tipc(r0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000008201", @ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0)

619.262164ms ago: executing program 1 (id=661):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaddf11c998560ddf}, 0x24040084)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}}, 0x20}, 0x1, 0x0, 0x0, 0x4040891}, 0x0)

617.141139ms ago: executing program 1 (id=662):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES8=0x0, @ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="b551d48a4c5a225a23eceaae92277ffd849a142bcaf6326396d43f6d0ff2fb45954e030031a0d3c39937bab677124a96d14888ac2b6d2705a70e44de96d472dc23e24896f1a6f52947f1fa297932aabf908097950b995c23c32fe54a1ccc9becf6b31826725755f54027760f90bd807c2d3d3bb36ac912c0eecd741731b64dc9b2453a9d157bf4f15dafeb3a1708d105c41a746312d5b04fb7000f6af5a7ae6806647fef2dbc4b4eaa4b1eb0e8598a5aeeb33e5adf138155ccf5eb32701d1714952e3f871704bff849cf38138b143172871922f9b4d0f3c4cfb757dd2544489bcefa2145b9ac81ef4d519a6b9722ffc03c97", @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='/'], 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=r1, 0x2f, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYRESHEX=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc884)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x8)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000040)={0x1100, 0x0, 0x8000000000000002, 0x10003})
r9 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001180)={'veth1_to_batadv\x00'})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a80000000001010400000000000000000a0000003c0001802cfb018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000000c001880080003400000000e080007400000000044000f80080003400000000608000240000000050800024000000006080002400000000308000340080002400000000108000140000000000800014000000004"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000002010500000000000000000003000003568e5d064ec3e6b045170e59bb9c5bbb3c346350cc6200104723af49e927ad6648de2508725469c34878418e1368e4bbd186528974c3e4c2f90c3655d8a1fdeb4a1c47adbae92e07f3c0775beb3e98976298467800e0f7bd48bee6aa6ec35bb925a2e79fa049877c608d61fe958cf7cf1f57c63becfde8da58db04005291c2a6000065a9e2e7c8d63913896d29c9fb1db387d140f4dbcb7c6368370560d5788b653f6b7dd4860bc93cf0"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, 0x0, 0x0)

481.720493ms ago: executing program 1 (id=663):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304000300000000ea0000000000", @ANYRES32=0x0, @ANYBLOB="0ce00000000000002400128009000100766c616e000000001400028006000100021000000600050088a80000"], 0x44}}, 0x24008850) (async)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304000300000000ea0000000000", @ANYRES32=0x0, @ANYBLOB="0ce00000000000002400128009000100766c616e000000001400028006000100021000000600050088a80000"], 0x44}}, 0x24008850)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0x8918, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000340)=0x8)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0) (async)
socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffffffffffdd2)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000600)={{0x3c, @loopback, 0x4e24, 0x4, 'sh\x00', 0x20, 0x8, 0x3a}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x4e23, 0x0, 0x1001, 0x9, 0x100}}, 0x44)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000088000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="090200000200000004009880"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xd0)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000400)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0xca, 0x6, 0x3ff, 0x0, 0x4, 0x800000, r12})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}}, 0x0)
socket$inet6(0xa, 0x4, 0x1) (async)
r13 = socket$inet6(0xa, 0x4, 0x1)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r14 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0)
sendto(r14, &(0x7f0000000080)="d83d34", 0x3, 0xe77aa745f6b9be3e, 0x0, 0x0) (async)
sendto(r14, &(0x7f0000000080)="d83d34", 0x3, 0xe77aa745f6b9be3e, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r13, 0x29, 0x37, &(0x7f0000000740)=ANY=[], 0xf8) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r13, 0x29, 0x37, &(0x7f0000000740)=ANY=[], 0xf8)

329.665646ms ago: executing program 1 (id=664):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002700)=ANY=[@ANYBLOB="f4030000", @ANYRES16=r2, @ANYBLOB="010027bd7080ffdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="b001028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004008000000008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000010040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f8ffffff080007000000000008000100", @ANYRES32=r4, @ANYBLOB="dc01028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004001000000008000600", @ANYRES32=r4, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400090000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB], 0x3f4}, 0x1, 0x400000000000000, 0x0, 0x98}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="4400000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000008003000008001b00000000000c001a800800028004000180080004"], 0x44}}, 0x0)

327.768392ms ago: executing program 2 (id=665):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0x1b, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x40000)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071124f000000000095"], 0x0, 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4044045)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r7)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x8000)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000700)={'wpan1\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x40, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xaaf6}]}, 0x40}}, 0x4004850)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4810)
sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r5)
socket$nl_route(0x10, 0x3, 0x0)

326.951249ms ago: executing program 1 (id=666):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, 0x0, &(0x7f0000000300)=0x35) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, 0x0, &(0x7f0000000300)=0x35)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x4) (async)
r5 = socket(0x10, 0x803, 0x4)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4008844}, 0x40000)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'tunl0\x00', <r9=>r7, 0x7800, 0x8000, 0x4, 0x2, {{0x21, 0x4, 0x3, 0x3f, 0x84, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast1, @broadcast, {[@generic={0x44, 0x11, "ab44627d43feb126a4600fc71f417f"}, @generic={0x44, 0x6, "fc9e8f71"}, @noop, @end, @timestamp_addr={0x44, 0x54, 0x6d, 0x1, 0x5, [{@broadcast, 0x80}, {@empty, 0x2}, {@private=0xa010100, 0x1ce}, {@empty, 0x40}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2d5}, {@loopback, 0x2}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@remote, 0x3}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r9, 0x29, 0xc1, 0x81, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x7800, 0x7, 0x734, 0x4}})

169.834208ms ago: executing program 2 (id=667):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000580000001c0a01000000000000000000010000000900010073797a3000000000090002"], 0xfc}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="18000000560001060200000000000000070000000024e300"], 0x18}], 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000003b80)={0x0, 0x28, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, r4, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffffffffffbc, &(0x7f0000000140)={&(0x7f0000002780)=ANY=[], 0x74}}, 0x4040880)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1)

168.127817ms ago: executing program 1 (id=668):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read(r0, &(0x7f0000000080)=""/4, 0x4) (async)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8801, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002100290100000400ffdb18b2120cc797098afd7acc62df250a0000000000000000000000080018004e204e24"], 0x24}}, 0x0) (async)
r3 = socket(0x22, 0x800, 0x6)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfffb, 0x2}, 0x6) (async)
setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x5336b4f8, @local, 0x9}, @in6={0xa, 0x4e24, 0x4, @private2, 0x5}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x48) (async)
recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88fb4500002c0000000410119078640108000000142100004e200018907804000000ea450000c500000000000000"], 0x0) (async)
sendmmsg$inet6(r5, &(0x7f0000007240), 0x0, 0x1c000)
pselect6(0x40, &(0x7f0000000a80)={0x2, 0x5, 0x0, 0x100000000, 0x6, 0x1, 0x100000000000003, 0xfffffffffffffffd}, &(0x7f00000003c0)={0x8, 0xa, 0x4, 0x800, 0x1000000000e, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0)
shutdown(r5, 0x0) (async)
socket$kcm(0x29, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000b8ee00000114000400fe8000000000000000000000000000aa0c00028004000100"], 0x98}}, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r6) (async)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="d4000021", @ANYRESHEX=r6, @ANYBLOB="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", @ANYRES8], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x40010)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x6, 0x9, &(0x7f0000001080)={{0x2c, @multicast2, 0x2, 0x0, 'fo\x00', 0x1d, 0x0, 0x5d}, {@private=0xa010101, 0x2, 0x2000, 0x7ffffff, 0x0, 0x20104}}, 0x44)
getsockopt$inet_tcp_int(r8, 0x6, 0x9, 0x0, &(0x7f0000000040)) (async)
r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r9, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000140)='/dev/rfkill\x00', 0x20b840, &(0x7f0000000180)={@_ha_fsid={[0xb594, 0x8bf]}, {0x6, 0x401, 0x2d6, 0x6}}, 0x7fffffff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x6}) (async)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300)=@int=0x7, 0x4) (async)
socket$inet6_icmp(0xa, 0x2, 0x3a)

0s ago: executing program 2 (id=669):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000002c0)=0x8)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_int(r3, 0x29, 0x3, 0x0, &(0x7f0000000080))
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:34883' (ED25519) to the list of known hosts.
syzkaller login: [   57.843318][ T5595] cgroup: Unknown subsys name 'net'
[   57.981009][ T5595] cgroup: Unknown subsys name 'cpuset'
[   57.987722][ T5595] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.780968][ T5595] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.405688][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.411249][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.414934][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.419191][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.422729][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.441704][ T4998] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.447117][ T4998] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.452363][ T4998] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.459246][ T4998] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.462849][ T4998] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.513603][ T4998] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.520624][ T4998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.525277][ T4998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.529277][ T4998] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.534636][ T4998] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.937156][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.939944][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.942186][ T5613] bridge_slave_0: entered allmulticast mode
[   64.944822][ T5613] bridge_slave_0: entered promiscuous mode
[   64.959162][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.961370][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.963526][ T5613] bridge_slave_1: entered allmulticast mode
[   64.966218][ T5613] bridge_slave_1: entered promiscuous mode
[   65.027224][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.042509][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.083130][ T5613] team0: Port device team_slave_0 added
[   65.094416][ T5613] team0: Port device team_slave_1 added
[   65.129286][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.132000][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.140549][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.161643][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.163792][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.172292][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.258261][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.260699][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.263575][ T5609] bridge_slave_0: entered allmulticast mode
[   65.266474][ T5609] bridge_slave_0: entered promiscuous mode
[   65.288189][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.290501][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.292844][ T5609] bridge_slave_1: entered allmulticast mode
[   65.296232][ T5609] bridge_slave_1: entered promiscuous mode
[   65.305033][ T5613] hsr_slave_0: entered promiscuous mode
[   65.307874][ T5613] hsr_slave_1: entered promiscuous mode
[   65.340585][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.343197][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.345526][ T5622] bridge_slave_0: entered allmulticast mode
[   65.348510][ T5622] bridge_slave_0: entered promiscuous mode
[   65.382625][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.385979][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.389152][ T5622] bridge_slave_1: entered allmulticast mode
[   65.392974][ T5622] bridge_slave_1: entered promiscuous mode
[   65.399223][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.421116][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.455790][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.483132][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.488626][ T5609] team0: Port device team_slave_0 added
[   65.523408][ T5609] team0: Port device team_slave_1 added
[   65.559699][ T5622] team0: Port device team_slave_0 added
[   65.575199][ T5622] team0: Port device team_slave_1 added
[   65.590331][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.592703][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.601060][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.613622][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.615841][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.624227][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.636864][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.640233][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.651207][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.678129][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.680284][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.690455][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.717843][ T5609] hsr_slave_0: entered promiscuous mode
[   65.720874][ T5609] hsr_slave_1: entered promiscuous mode
[   65.723660][ T5609] debugfs: 'hsr0' already exists in 'hsr'
[   65.725898][ T5609] Cannot create hsr debugfs directory
[   65.779278][ T5622] hsr_slave_0: entered promiscuous mode
[   65.781487][ T5622] hsr_slave_1: entered promiscuous mode
[   65.783504][ T5622] debugfs: 'hsr0' already exists in 'hsr'
[   65.785294][ T5622] Cannot create hsr debugfs directory
[   65.864117][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.872581][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.885842][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.893761][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.920705][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.926156][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.929368][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.933723][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.133377][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.147004][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.150788][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.158211][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.162222][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.169529][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.176114][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.184026][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.239921][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.277029][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.282902][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.294270][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.301533][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.310677][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   66.315890][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.322924][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.330891][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.336814][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.341765][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.344063][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.360715][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.362891][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.449000][ T5612] Bluetooth: hci0: command tx timeout
[   66.519414][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.527523][ T5612] Bluetooth: hci1: command tx timeout
[   66.562696][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[   66.568182][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.580918][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.583768][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.596377][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.597154][ T5612] Bluetooth: hci2: command tx timeout
[   66.598675][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.618580][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   66.642488][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.645286][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.652496][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.655305][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.721808][ T5609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.725117][ T5609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.903376][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.969480][ T5613] veth0_vlan: entered promiscuous mode
[   66.976096][ T5613] veth1_vlan: entered promiscuous mode
[   67.005879][ T5613] veth0_macvtap: entered promiscuous mode
[   67.011710][ T5613] veth1_macvtap: entered promiscuous mode
[   67.026021][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.038656][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.050057][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.062465][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.072850][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.085805][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.168216][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.174707][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.176076][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.190972][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.224993][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.228554][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.276440][ T5622] veth0_vlan: entered promiscuous mode
[   67.293284][ T5613] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.304373][ T5622] veth1_vlan: entered promiscuous mode
[   67.312613][ T5609] veth0_vlan: entered promiscuous mode
[   67.336277][ T5609] veth1_vlan: entered promiscuous mode
[   67.369185][ T5622] veth0_macvtap: entered promiscuous mode
[   67.388820][ T5622] veth1_macvtap: entered promiscuous mode
[   67.423349][ T5609] veth0_macvtap: entered promiscuous mode
[   67.431479][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.450131][ T5609] veth1_macvtap: entered promiscuous mode
[   67.457869][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.478725][ T5474] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.483061][ T5722] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   67.483197][ T5474] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.500734][ T5474] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.503741][ T5474] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.513076][ T5722] 8021q: VLANs not supported on gre0
[   67.520277][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.537331][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.551702][ T5722] Zero length message leads to an empty skb
[   67.570099][ T5474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.578362][ T5474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.614065][ T5474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.623831][ T5474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.668821][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.680938][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.759372][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.766247][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.806855][ T3347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.807334][ T5728] tipc: Started in network mode
[   67.811318][ T5728] tipc: Node identity e2b2e508f2df, cluster identity 4711
[   67.811558][ T3347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.814508][ T5728] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.848366][ T5728] syzkaller0: mtu greater than device maximum
[   67.867952][ T5727] tipc: Disabling bearer <eth:syzkaller0>
[   67.894722][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.900136][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.020990][ T5731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'.
[   68.173974][ T5742] netlink: 'syz.2.10': attribute type 3 has an invalid length.
[   68.180047][ T5742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'.
[   68.212021][ T5740] netlink: 'syz.0.1': attribute type 6 has an invalid length.
[   68.220359][ T5744] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11'.
[   68.220995][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   68.231268][ T5744] bond0: (slave geneve2): Enslaving as an active interface with an up link
[   68.243678][ T5740] dvmrp0: entered allmulticast mode
[   68.268909][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'.
[   68.274319][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'.
[   68.292669][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'.
[   68.300699][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'.
[   68.304007][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'.
[   68.308211][ T5750] syzkaller0: entered promiscuous mode
[   68.310033][ T5750] syzkaller0: entered allmulticast mode
[   68.312064][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'.
[   68.322632][ T5750] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET)
[   68.363503][ T5753] netlink: 'syz.1.14': attribute type 13 has an invalid length.
[   68.365988][ T5753] netlink: 'syz.1.14': attribute type 17 has an invalid length.
[   68.383702][ T5753] gretap0: refused to change device tx_queue_len
[   68.385830][ T5753] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   68.443082][ T5755] syz_tun: entered allmulticast mode
[   68.455565][ T5755] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[   68.463697][ T5755] warning: `syz.1.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.517119][ T5612] Bluetooth: hci0: command tx timeout
[   68.528709][ T5754] syz_tun: left allmulticast mode
[   68.596660][ T5612] Bluetooth: hci1: command tx timeout
[   68.686813][ T5612] Bluetooth: hci2: command tx timeout
[   69.249235][ T5763] netlink: 'syz.0.18': attribute type 2 has an invalid length.
[   69.295258][ T5765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.472931][ T5770] syzkaller0: entered promiscuous mode
[   69.475071][ T5770] syzkaller0: entered allmulticast mode
[   70.606535][ T5612] Bluetooth: hci0: command tx timeout
[   70.686515][ T5612] Bluetooth: hci1: command tx timeout
[   70.757630][ T5612] Bluetooth: hci2: command tx timeout
[   70.862554][ T5834] netlink: 'syz.0.32': attribute type 1 has an invalid length.
[   71.064877][ T5837] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[   71.076787][   T26] wlan1: Trigger new scan to find an IBSS to join
[   71.233026][ T5867] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   71.416618][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.420393][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.515151][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.523444][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.594107][ T5666] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.599183][ T5666] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.601978][ T5666] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.604843][ T5666] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.664913][ T5882] netlink: 'syz.1.40': attribute type 1 has an invalid length.
[   71.670433][ T5882] netlink: 'syz.1.40': attribute type 3 has an invalid length.
[   71.721082][ T5886] syz_tun: entered allmulticast mode
[   71.837479][ T5885] syz_tun: left allmulticast mode
[   71.876120][ T5893] ipip0: entered promiscuous mode
[   71.925149][ T5894] tipc: Started in network mode
[   71.930843][ T5894] tipc: Node identity 765855d45b08, cluster identity 4711
[   71.944443][ T5894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.953161][ T5894] syzkaller0: entered promiscuous mode
[   71.955621][ T5894] syzkaller0: entered allmulticast mode
[   71.976186][ T5894] tipc: Resetting bearer <eth:syzkaller0>
[   71.988773][ T5892] tipc: Resetting bearer <eth:syzkaller0>
[   72.013749][ T5892] tipc: Disabling bearer <eth:syzkaller0>
[   72.025335][ T5898] netlink: 'syz.0.47': attribute type 4 has an invalid length.
[   72.132147][ T5908] tipc: Started in network mode
[   72.133992][ T5908] tipc: Node identity 522182ec30bd, cluster identity 4711
[   72.137365][ T5908] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.310260][ T5914] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   72.315282][ T5914] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c)
[   72.565678][ T5919] macvlan2: entered promiscuous mode
[   72.567947][ T5919] macvlan2: entered allmulticast mode
[   72.677285][ T5612] Bluetooth: hci0: command tx timeout
[   72.757244][ T5612] Bluetooth: hci1: command tx timeout
[   72.800573][ T5929] syzkaller0: entered promiscuous mode
[   72.802323][ T5929] syzkaller0: entered allmulticast mode
[   72.836803][ T5612] Bluetooth: hci2: command tx timeout
[   72.937546][ T5904] tipc: Disabling bearer <eth:syzkaller0>
[   72.988345][ T5933] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[   73.158503][ T5942] netlink: 'syz.2.60': attribute type 1 has an invalid length.
[   73.202522][ T5944] veth3: entered promiscuous mode
[   73.211853][ T5947] Cannot find set identified by id 0 to match
[   73.216730][ T5947] __nla_validate_parse: 108 callbacks suppressed
[   73.216741][ T5947] netlink: 88 bytes leftover after parsing attributes in process `syz.0.61'.
[   73.309721][ T5949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.365143][ T5949] syzkaller0: entered promiscuous mode
[   73.368199][ T5949] syzkaller0: entered allmulticast mode
[   73.371198][ T5949] tipc: Resetting bearer <eth:syzkaller0>
[   73.381696][ T5953] syzkaller0: entered promiscuous mode
[   73.383585][ T5953] syzkaller0: entered allmulticast mode
[   73.414639][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'.
[   73.491384][ T5948] tipc: Resetting bearer <eth:syzkaller0>
[   74.039877][ T1109] wlan1: Trigger new scan to find an IBSS to join
[   74.550127][ T5948] tipc: Disabling bearer <eth:syzkaller0>
[   74.575029][ T5966] bridge_slave_0 (unregistering): left allmulticast mode
[   74.577747][ T5966] bridge_slave_0 (unregistering): left promiscuous mode
[   74.580699][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.600676][ T5686] tipc: Node number set to 1654424300
[   74.648456][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'.
[   74.737030][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'.
[   74.743093][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'.
[   74.743402][ T5973] pim6reg1: entered promiscuous mode
[   74.748902][ T5975] netlink: 'syz.0.70': attribute type 12 has an invalid length.
[   74.750146][ T5973] pim6reg1: entered allmulticast mode
[   74.767608][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'.
[   74.776561][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'.
[   74.779517][ T5975] netlink: 'syz.0.70': attribute type 12 has an invalid length.
[   74.819173][ T5666] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.824071][ T5666] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.828604][ T5666] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.831271][ T5666] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.983905][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'.
[   75.023943][ T5984] bond1: option xmit_hash_policy: invalid value (10)
[   75.037384][ T5984] bond1 (unregistering): Released all slaves
[   75.157397][ T6003] netlink: 68 bytes leftover after parsing attributes in process `syz.0.77'.
[   75.309800][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'.
[   75.411819][ T6017] syzkaller0: entered promiscuous mode
[   75.413955][ T6017] syzkaller0: entered allmulticast mode
[   75.420014][ T6019] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   75.808029][ T6023] netlink: 'syz.1.83': attribute type 6 has an invalid length.
[   76.357984][ T6021] netlink: 'syz.0.82': attribute type 1 has an invalid length.
[   76.563338][ T6036] netlink: 'syz.1.87': attribute type 1 has an invalid length.
[   76.616639][ T6036] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.667220][ T6036] bond1: (slave geneve3): making interface the new active one
[   76.679132][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[   76.683037][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[   76.685817][ T6036] bond1: (slave geneve3): Enslaving as an active interface with an up link
[   76.689953][ T5666] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   76.695017][ T5666] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   76.745141][ T5666] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   76.748076][ T5666] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   76.984616][ T6062] netlink: 'syz.1.92': attribute type 13 has an invalid length.
[   76.989229][ T6062] netlink: 'syz.1.92': attribute type 17 has an invalid length.
[   77.079426][   T26] wlan1: Trigger new scan to find an IBSS to join
[   77.235017][ T6062] netdevsim netdevsim1 netdevsim3: entered promiscuous mode
[   77.238286][ T6062] macvlan2: left promiscuous mode
[   77.240017][ T6062] macvlan2: left allmulticast mode
[   77.241889][ T6062] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[   77.245059][ T6062] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   77.253702][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.262370][ T6063] bridge_slave_1 (unregistering): left allmulticast mode
[   77.265269][ T6063] bridge_slave_1 (unregistering): left promiscuous mode
[   77.271096][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.415466][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   77.464262][ T6070] bridge0: port 1(syz_tun) entered blocking state
[   77.466548][ T6070] bridge0: port 1(syz_tun) entered disabled state
[   77.468661][ T6070] syz_tun: entered allmulticast mode
[   77.472717][ T6070] syz_tun: entered promiscuous mode
[   77.558204][ T6079] netlink: 'syz.0.97': attribute type 1 has an invalid length.
[   77.566160][ T6079] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   77.572100][ T6076] syzkaller0: entered promiscuous mode
[   77.586578][ T6076] syzkaller0: entered allmulticast mode
[   77.624983][ T5666] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x25
[   78.293806][ T6070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   78.302301][ T6099] netlink: 'syz.0.102': attribute type 1 has an invalid length.
[   78.308798][ T6099] __nla_validate_parse: 10 callbacks suppressed
[   78.308808][ T6099] netlink: 224 bytes leftover after parsing attributes in process `syz.0.102'.
[   78.528545][ T6112] ipt_rpfilter: unknown options
[   78.531952][ T6115] netlink: 112 bytes leftover after parsing attributes in process `syz.2.103'.
[   78.689846][ T6124] block nbd0: server does not support multiple connections per device.
[   78.697931][ T6124] block nbd0: shutting down sockets
[   80.047413][   T26] wlan1: Trigger new scan to find an IBSS to join
[   80.926857][   T26] wlan1: Creating new IBSS network, BSSID fa:89:a0:7f:fc:70
[   81.316513][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   81.545638][ T6117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   81.649805][ T6142] dvmrp0: left allmulticast mode
[   81.651555][ T6147] netlink: 'syz.1.111': attribute type 1 has an invalid length.
[   81.685278][ T6147] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.703583][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'.
[   81.739847][ T6152] team1: entered promiscuous mode
[   81.742476][ T6152] team1: entered allmulticast mode
[   81.744346][ T6152] 8021q: adding VLAN 0 to HW filter on device team1
[   81.791593][   T10] hid-generic 0005:046D:0A0E.0001: item fetching failed at offset 0/1
[   81.802506][   T10] hid-generic 0005:046D:0A0E.0001: probe with driver hid-generic failed with error -22
[   81.880521][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.116'.
[   82.429982][ T6193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.122'.
[   82.459496][ T6193] netlink: 'syz.1.122': attribute type 1 has an invalid length.
[   82.514481][ T6193] 8021q: adding VLAN 0 to HW filter on device bond3
[   82.578074][ T6201] netlink: 32 bytes leftover after parsing attributes in process `syz.0.126'.
[   82.586799][ T6201] batadv0: entered promiscuous mode
[   82.781200][ T6208] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7
[   82.849186][ T6210] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7
[   83.227865][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'.
[   83.276021][ T6216] pim6reg99999991: entered allmulticast mode
[   83.351364][ T6218] syzkaller1: entered promiscuous mode
[   83.354655][ T6218] syzkaller1: entered allmulticast mode
[   83.363765][ T6218] netlink: 'syz.2.132': attribute type 22 has an invalid length.
[   83.366852][ T6220] syz_tun: entered allmulticast mode
[   83.370366][ T6218] bond0: option ad_select: invalid value (16)
[   83.389021][ T6222] netlink: 52 bytes leftover after parsing attributes in process `syz.0.134'.
[   83.394613][   T27] wlan1: Selected IBSS BSSID fa:89:a0:7f:fc:70 based on configured SSID
[   83.473145][ T6219] syz_tun: left allmulticast mode
[   83.517144][ T6227] netlink: 'syz.2.136': attribute type 1 has an invalid length.
[   83.549498][ T6227] bond1: entered promiscuous mode
[   83.551745][ T6227] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.557560][ T6227] batadv_slave_0: entered promiscuous mode
[   83.562832][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'.
[   83.568108][ T6226] batadv_slave_0: left promiscuous mode
[   83.651554][ T6243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.140'.
[   83.729072][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'.
[   83.741804][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'.
[   83.741855][ T5666] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.750212][ T5666] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.753854][ T5666] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.762744][ T5666] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.927312][ T6259] netlink: 52 bytes leftover after parsing attributes in process `syz.2.143'.
[   83.977291][ T6265] netlink: 'syz.1.144': attribute type 4 has an invalid length.
[   84.024517][ T6269] netlink: 'syz.2.145': attribute type 1 has an invalid length.
[   84.075288][ T6269] netlink: 'syz.2.145': attribute type 1 has an invalid length.
[   84.104271][ T6269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   84.220005][ T6282] netlink: 277 bytes leftover after parsing attributes in process `syz.1.148'.
[   84.366482][ T6293] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.404847][ T6293] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.415230][ T6293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.425106][ T6296] Bluetooth: MGMT ver 1.23
[   84.600067][ T6293] netdevsim netdevsim1 netdevsim3: left promiscuous mode
[   84.619620][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.625896][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[   84.632111][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.638430][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[   84.644777][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.651330][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[   84.656676][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.663103][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[   84.707442][ T6304] netlink: 'syz.1.151': attribute type 11 has an invalid length.
[   84.783403][ T6306] : entered promiscuous mode
[   84.964546][ T6309] netlink: 264 bytes leftover after parsing attributes in process `syz.1.153'.
[   85.011125][ T6311] syzkaller0: entered promiscuous mode
[   85.014355][ T6311] syzkaller0: entered allmulticast mode
[   85.044853][ T6313] netlink: 'syz.2.156': attribute type 1 has an invalid length.
[   85.070919][ T6313] bond3: entered promiscuous mode
[   85.072774][ T6313] 8021q: adding VLAN 0 to HW filter on device bond3
[   85.085936][ T6316] macsec1: entered promiscuous mode
[   85.087993][ T6316] bridge0: entered promiscuous mode
[   85.101413][ T6313] netlink: 'syz.2.156': attribute type 13 has an invalid length.
[   85.153268][ T6313] veth3: entered promiscuous mode
[   85.156830][ T6313] veth3: entered allmulticast mode
[   85.163024][ T6313] bond3: (slave veth3): Enslaving as a backup interface with a down link
[   85.167550][ T6324] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.158'.
[   85.177149][ T6320] syzkaller1: entered promiscuous mode
[   85.181292][ T6320] syzkaller1: entered allmulticast mode
[   85.219634][ T6327] xt_hashlimit: invalid rate
[   85.489402][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.162'.
[   85.621760][ T6360] ip6gretap1: entered promiscuous mode
[   86.209669][ T6380] veth0_virt_wifi: entered allmulticast mode
[   86.289410][ T6385] netlink: 'syz.1.170': attribute type 10 has an invalid length.
[   86.296063][ T6385] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[   86.305371][ T6385] bridge0: port 2(netdevsim1) entered blocking state
[   86.311193][ T6385] bridge0: port 2(netdevsim1) entered disabled state
[   86.320616][ T6385] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[   86.437180][ T6393] netlink: 'syz.1.172': attribute type 1 has an invalid length.
[   86.445253][ T6390] bond1: invalid ARP target 0.0.0.0 specified for addition
[   86.449827][ T6390] bond1: option arp_ip_target: invalid value (0)
[   86.454392][ T6390] bond1 (unregistering): Released all slaves
[   86.495163][ T6393] 8021q: adding VLAN 0 to HW filter on device bond4
[   86.537167][ T6398] netlink: 'syz.2.173': attribute type 1 has an invalid length.
[   86.543347][ T6396] bond4: (slave geneve4): making interface the new active one
[   86.549051][ T6396] bond4: (slave geneve4): Enslaving as an active interface with an up link
[   86.554356][ T5666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.558693][ T5666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.584711][ T6398] 8021q: adding VLAN 0 to HW filter on device bond4
[   86.592065][ T5666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.603301][ T5666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.659859][ T6401] 8021q: adding VLAN 0 to HW filter on device bond4
[   86.664899][ T6401] bond4: (slave vcan1): The slave device specified does not support setting the MAC address
[   86.679101][ T6401] bond4: (slave vcan1): Error -95 calling set_mac_address
[   86.787503][ T6417] No such timeout policy "syz1"
[   86.795912][ T6410] 8021q: adding VLAN 0 to HW filter on device bond5
[   86.830712][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.833077][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.875566][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.880827][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.920197][   T33] cfg80211: failed to load regulatory.db
[   86.961663][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.968849][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.975063][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.978760][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.987977][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.995386][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.003000][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.010935][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.491409][ T6439] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   87.497986][ T5718] IPVS: starting estimator thread 0...
[   87.586843][ T6443] IPVS: using max 64 ests per chain, 153600 per kthread
[   87.592129][ T6448] netlink: 'syz.2.184': attribute type 11 has an invalid length.
[   87.644846][ T6452] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20004
[   87.675416][ T6456] netlink: 'syz.2.184': attribute type 11 has an invalid length.
[   87.733899][ T5666] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.743597][ T5666] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.755864][ T5666] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.764398][ T5666] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.902633][ T6466] bridge1: the hash_elasticity option has been deprecated and is always 16
[   88.483172][ T6504] __nla_validate_parse: 13 callbacks suppressed
[   88.483188][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'.
[   88.488592][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'.
[   88.544750][ T6509] validate_nla: 2 callbacks suppressed
[   88.544760][ T6509] netlink: 'syz.2.200': attribute type 5 has an invalid length.
[   88.597850][ T6509] netlink: 'syz.2.200': attribute type 5 has an invalid length.
[   88.920008][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'.
[   88.942607][ T6532] syz_tun (unregistering): left allmulticast mode
[   88.946063][ T6532] syz_tun (unregistering): left promiscuous mode
[   88.949399][ T6532] bridge0: port 1(syz_tun) entered disabled state
[   89.086157][ T6545] netlink: 'syz.2.210': attribute type 1 has an invalid length.
[   89.089640][ T6545] netlink: 240 bytes leftover after parsing attributes in process `syz.2.210'.
[   89.489430][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'.
[   89.519894][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'.
[   89.526701][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.531725][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.542014][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.554289][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.587613][ T6578] syzkaller0: entered promiscuous mode
[   89.595735][ T6578] syzkaller0: entered allmulticast mode
[   89.684921][ T6592] netlink: 'syz.1.219': attribute type 4 has an invalid length.
[   89.689518][ T6588] bridge0: port 1(erspan0) entered blocking state
[   89.697461][ T6588] bridge0: port 1(erspan0) entered disabled state
[   89.704481][ T6588] erspan0: entered allmulticast mode
[   89.713559][ T6588] erspan0: entered promiscuous mode
[   89.736530][ T6588] erspan0: left allmulticast mode
[   89.740212][ T6588] erspan0: left promiscuous mode
[   89.746955][ T6588] bridge0: port 1(erspan0) entered disabled state
[   89.792152][ T6588] netlink: 68 bytes leftover after parsing attributes in process `syz.2.220'.
[   89.793091][ T6599] netlink: 64 bytes leftover after parsing attributes in process `syz.0.221'.
[   89.801325][ T6588] netlink: 64 bytes leftover after parsing attributes in process `syz.2.220'.
[   89.927495][ T6610] netlink: 'syz.0.225': attribute type 1 has an invalid length.
[   89.931482][ T6610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.225'.
[   89.960921][ T6606] netlink: 'syz.2.223': attribute type 4 has an invalid length.
[   89.972895][ T6606] netlink: 'syz.2.223': attribute type 4 has an invalid length.
[   89.984732][ T6612] netlink: 'syz.0.226': attribute type 1 has an invalid length.
[   90.033249][ T6612] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.045579][ T6615] netlink: 'syz.1.227': attribute type 1 has an invalid length.
[   90.081144][ T6615] bond6: entered promiscuous mode
[   90.083482][ T6615] 8021q: adding VLAN 0 to HW filter on device bond6
[   90.101238][ T6612] bond1: (slave geneve2): making interface the new active one
[   90.108823][ T6612] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   90.120408][ T6615] ipvlan2: entered allmulticast mode
[   90.123866][ T6615] bond6: entered allmulticast mode
[   90.125958][ T5474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.132762][ T6606] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   90.147652][ T6615] bond6: (slave bridge2): making interface the new active one
[   90.152130][ T6615] bridge2: entered promiscuous mode
[   90.155838][ T6615] bridge2: entered allmulticast mode
[   90.164553][ T6615] bond6: (slave bridge2): Enslaving as an active interface with an up link
[   90.175424][ T5474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.185521][ T5474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.193590][ T5474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.295651][ T6625] netlink: 'syz.0.229': attribute type 10 has an invalid length.
[   90.310041][ T6625] team0: Port device dummy0 added
[   90.314818][ T6628] x_tables: duplicate underflow at hook 2
[   90.322339][ T6625] team0: Port device dummy0 removed
[   90.341552][ T6625] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   90.451474][ T6638] IPVS: persistence engine module ip_vs_pe_ not found
[   90.460349][ T6640] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[   90.603067][ T6655] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   90.815543][ T6660] bridge_slave_1: left allmulticast mode
[   90.817345][ T6660] bridge_slave_1: left promiscuous mode
[   90.819189][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.826971][ T6660] bond0: (slave bond_slave_0): Releasing backup interface
[   90.830679][ T6660] bond0: (slave bond_slave_1): Releasing backup interface
[   90.835031][ T6660] team0: Port device team_slave_0 removed
[   90.839036][ T6660] team0: Port device team_slave_1 removed
[   90.840978][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.844715][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.847801][ T6660] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   91.228202][ T6678] xt_hashlimit: size too large, truncated to 1048576
[   91.828374][ T6712] bond2: entered promiscuous mode
[   91.830385][ T6712] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.935851][ T6717] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.986066][ T6717] macvlan2: entered promiscuous mode
[   91.989290][ T6717] macvlan2: entered allmulticast mode
[   92.397852][ T6731] 8021q: adding VLAN 0 to HW filter on device bond7
[   92.423593][ T6731] bond7: (slave gretap1): making interface the new active one
[   92.431114][ T6731] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96
[   92.443247][ T6731] bond7: (slave gretap1): Enslaving as an active interface with an up link
[   92.623171][ T6751] lo speed is unknown, defaulting to 1000
[   92.630816][ T6751] lo speed is unknown, defaulting to 1000
[   92.639841][ T6751] lo speed is unknown, defaulting to 1000
[   92.664164][ T6744] sit1: entered promiscuous mode
[   92.930795][ T6751] infiniband sqz0: set active
[   92.937405][ T6751] infiniband sqz0: added lo
[   92.939780][ T5673] lo speed is unknown, defaulting to 1000
[   92.963812][ T6751] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   92.969720][ T6751] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   92.977695][ T6751] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   93.006241][ T6751] RDS/IB: sqz0: added
[   93.018532][ T6751] smc: adding ib device sqz0 with port count 1
[   93.021207][ T6751] smc:    ib device sqz0 port 1 has no pnetid
[   93.025971][ T5673] lo speed is unknown, defaulting to 1000
[   93.032910][ T6751] lo speed is unknown, defaulting to 1000
[   93.264494][ T6776] bridge_slave_0: left allmulticast mode
[   93.267691][ T6776] bridge_slave_0: left promiscuous mode
[   93.271241][ T6776] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.276059][ T6776] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   93.283737][ T6751] lo speed is unknown, defaulting to 1000
[   93.588006][ T6797] lo: Caught tx_queue_len zero misconfig
[   93.592402][ T6751] lo speed is unknown, defaulting to 1000
[   93.649463][ T6801] validate_nla: 8 callbacks suppressed
[   93.649473][ T6801] netlink: 'syz.1.276': attribute type 1 has an invalid length.
[   93.722277][ T6801] 8021q: adding VLAN 0 to HW filter on device bond9
[   93.809256][ T6805] __nla_validate_parse: 12 callbacks suppressed
[   93.809267][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.277'.
[   93.855891][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'.
[   93.884224][ T6812] hsr_slave_1 (unregistering): left promiscuous mode
[   94.080943][ T6825] pim6reg1: entered promiscuous mode
[   94.084670][ T6825] pim6reg1: entered allmulticast mode
[   94.360680][ T6845] netlink: 'syz.2.288': attribute type 3 has an invalid length.
[   94.369821][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'.
[   94.473078][ T6845] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.288'.
[   94.485734][ T6845] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   94.636898][ T6852] netlink: 'syz.0.289': attribute type 1 has an invalid length.
[   94.640462][ T6860] bond10: option lacp_active: invalid value (8)
[   94.643413][ T6860] bond10 (unregistering): Released all slaves
[   94.657618][ T6864] netlink: 14 bytes leftover after parsing attributes in process `syz.2.291'.
[   94.668237][ T6864] bond0 (unregistering): Released all slaves
[   94.676275][ T6852] bond0: (slave dummy0): Releasing backup interface
[   94.680618][ T6852] bridge_slave_0: left allmulticast mode
[   94.682382][ T6852] bridge_slave_0: left promiscuous mode
[   94.684174][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.696039][ T6852] bridge_slave_1: left allmulticast mode
[   94.697992][ T6852] bridge_slave_1: left promiscuous mode
[   94.699813][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.706057][ T6852] bond0: (slave bond_slave_0): Releasing backup interface
[   94.712315][ T6852] bond0: (slave bond_slave_1): Releasing backup interface
[   94.725446][ T6852] team0: Port device team_slave_0 removed
[   94.734180][ T6852] team0: Port device team_slave_1 removed
[   94.741750][ T6852] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.761074][ T6852] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.767280][ T6852] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   94.920189][ T6876] netlink: 'syz.0.295': attribute type 1 has an invalid length.
[   94.964828][ T6876] 8021q: adding VLAN 0 to HW filter on device bond4
[   94.974495][ T6876] macvlan2: entered promiscuous mode
[   94.976205][ T6876] macvlan2: entered allmulticast mode
[   94.978843][ T6876] bond4: entered allmulticast mode
[   94.980472][ T6876] bond4: entered promiscuous mode
[   94.983314][ T6876] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   94.986553][ T6876] team0: Port device macvlan2 added
[   94.996159][ T6876] bond4: (slave ip6gretap3): making interface the new active one
[   94.998555][ T6876] ip6gretap3: entered promiscuous mode
[   95.000373][ T6876] ip6gretap3: entered allmulticast mode
[   95.003169][ T6876] bond4: (slave ip6gretap3): Enslaving as an active interface with an up link
[   95.046263][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'.
[   95.047611][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'.
[   95.051322][ T6886] : entered promiscuous mode
[   95.058134][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'.
[   95.062949][ T6889] team0: entered promiscuous mode
[   95.064783][ T6889] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   95.132262][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.302'.
[   95.325571][ T6904] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.304'.
[   96.048350][ T6926] netlink: 'syz.0.310': attribute type 10 has an invalid length.
[   96.060279][ T6926] dummy0: entered promiscuous mode
[   96.063340][ T6926] team0: Port device dummy0 added
[   96.422652][ T6945] netlink: 'syz.1.315': attribute type 3 has an invalid length.
[   96.426265][ T6945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.475896][ T6948] vlan4: entered allmulticast mode
[   96.483737][ T6948] bond0: entered allmulticast mode
[   96.649025][ T6963] ipvlan2: entered promiscuous mode
[   96.668844][ T6966] erspan1: entered promiscuous mode
[   96.670601][ T6966] erspan1: entered allmulticast mode
[   96.722862][ T6971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.864233][ T6980] netlink: 'syz.2.321': attribute type 3 has an invalid length.
[   96.872049][ T6976] lo speed is unknown, defaulting to 1000
[   96.942834][ T6980] hm3): entered promiscuous mode
[   97.320245][ T5673] IPVS: starting estimator thread 0...
[   97.323713][ T6996] netlink: 'syz.1.323': attribute type 29 has an invalid length.
[   97.327243][ T6996] netlink: 'syz.1.323': attribute type 29 has an invalid length.
[   97.330851][ T6996] netlink: 'syz.1.323': attribute type 29 has an invalid length.
[   97.337362][ T6996] hsr0: entered promiscuous mode
[   97.342898][ T6995] hsr0: left promiscuous mode
[   97.416549][ T6997] IPVS: using max 65 ests per chain, 156000 per kthread
[   99.698309][ T6971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   99.818201][ T7019] __nla_validate_parse: 33 callbacks suppressed
[   99.818211][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'.
[  100.254196][ T7036] ipip1: entered promiscuous mode
[  100.265071][ T7038] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ipip1
[  100.270651][ T7038] gretap2: entered promiscuous mode
[  100.272913][ T7038] gretap2: entered allmulticast mode
[  100.572784][ T7050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.338'.
[  100.620304][ T7052] netlink: 68 bytes leftover after parsing attributes in process `syz.1.339'.
[  100.730584][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'.
[  100.778061][ T7067] validate_nla: 24 callbacks suppressed
[  100.778073][ T7067] netlink: 'syz.0.343': attribute type 1 has an invalid length.
[  100.815423][ T7067] 8021q: adding VLAN 0 to HW filter on device bond6
[  100.859390][ T7066] vlan5: entered promiscuous mode
[  100.863515][ T7066] bond6: entered promiscuous mode
[  100.866908][ T7066] vlan5: entered allmulticast mode
[  100.869800][ T7066] bond6: entered allmulticast mode
[  100.927767][ T7083] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  100.931610][ T7083] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  100.953358][ T7078] bond5 (unregistering): Released all slaves
[  101.068873][ T7090] netlink: 25 bytes leftover after parsing attributes in process `syz.0.347'.
[  101.073714][ T7090] netlink: 'syz.0.347': attribute type 13 has an invalid length.
[  101.076075][ T7090] netlink: 'syz.0.347': attribute type 17 has an invalid length.
[  101.091200][ T7090] gretap0: refused to change device tx_queue_len
[  101.093268][ T7090] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  101.230047][ T7100] pim6reg1: entered promiscuous mode
[  101.232083][ T7100] pim6reg1: entered allmulticast mode
[  101.234917][ T7099] xt_hashlimit: size too large, truncated to 1048576
[  101.378999][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.351'.
[  101.411566][ T7106] bond7: (slave bond_slave_1): Device is not bonding slave
[  101.413845][ T7106] bond7: option active_slave: invalid value (bond_slave_1)
[  101.417965][ T7106] bond7 (unregistering): Released all slaves
[  101.488488][ T7109] syzkaller1: entered promiscuous mode
[  101.490191][ T7109] syzkaller1: entered allmulticast mode
[  101.563745][ T7111] tunl0: entered promiscuous mode
[  101.566950][ T7111] netlink: 'syz.1.353': attribute type 4 has an invalid length.
[  101.569714][ T7111] netlink: 9 bytes leftover after parsing attributes in process `syz.1.353'.
[  101.714460][ T7123] gretap0: entered promiscuous mode
[  101.715507][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'.
[  101.718439][ T7123] macvlan4: entered promiscuous mode
[  101.723897][ T7123] gretap0: left promiscuous mode
[  101.787655][ T7125] netlink: 'syz.2.358': attribute type 10 has an invalid length.
[  101.871003][ T7135] syzkaller1: entered promiscuous mode
[  101.873945][ T7135] syzkaller1: entered allmulticast mode
[  101.947749][ T7137] netlink: 56 bytes leftover after parsing attributes in process `syz.1.361'.
[  101.960799][ T7137] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  102.091646][   T10] lo speed is unknown, defaulting to 1000
[  102.091732][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.097286][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.099614][   T10] sqz0: Port: 1 Link DOWN
[  102.104237][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.111211][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.117636][ T5474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.124039][   T10] lo speed is unknown, defaulting to 1000
[  102.137729][ T7155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.160032][ T7155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.214202][ T7161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.367'.
[  102.458802][ T5666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.476936][ T7188] netlink: 'syz.1.374': attribute type 9 has an invalid length.
[  102.487652][ T7188] netlink: 'syz.1.374': attribute type 7 has an invalid length.
[  102.491787][ T7188] netlink: 'syz.1.374': attribute type 8 has an invalid length.
[  102.574399][ T7196] netlink: 'syz.0.377': attribute type 1 has an invalid length.
[  102.633565][ T7199] bond1: left promiscuous mode
[  102.635270][ T7199] bond3: left promiscuous mode
[  102.637897][ T7199] veth3: left promiscuous mode
[  102.639575][ T7199] veth3: left allmulticast mode
[  102.641818][ T7199] sit1: left promiscuous mode
[  102.643883][ T7199] erspan1: left promiscuous mode
[  102.645910][ T7199] erspan1: left allmulticast mode
[  102.648317][ T7199] ipip1: left promiscuous mode
[  102.650183][ T7199] gretap2: left promiscuous mode
[  102.651936][ T7199] gretap2: left allmulticast mode
[  102.673173][ T7205] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  102.676808][ T7205] bond7: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  102.684881][ T7205] bond7: (slave vxcan3): making interface the new active one
[  102.688245][ T7205] bond7: (slave vxcan3): Enslaving as an active interface with an up link
[  102.741316][ T7196] bond7 (unregistering): (slave vxcan3): Releasing backup interface
[  102.745679][ T7196] bond7 (unregistering): Released all slaves
[  102.779009][ T7203] lo speed is unknown, defaulting to 1000
[  102.890148][ T7215] tipc: Failed to remove unknown binding: 66,1,1/0:3711399978/3711399980
[  102.908292][ T7215] tipc: Failed to remove unknown binding: 66,1,1/0:3711399978/3711399980
[  102.919154][ T7215] tipc: Failed to remove unknown binding: 66,1,1/0:3711399978/3711399980
[  103.038665][ T7223] lo speed is unknown, defaulting to 1000
[  103.126054][ T7234] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  103.229934][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.246647][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.268830][ T7246] : renamed from virt_wifi0
[  103.382411][ T7222] lo speed is unknown, defaulting to 1000
[  103.394382][ T7254] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  103.471642][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.511226][ T7266] 8021q: VLANs not supported on ip_vti0
[  103.587777][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.708323][ T7280] netlink: 'syz.1.397': attribute type 10 has an invalid length.
[  103.715387][ T7280] team0: Port device dummy0 added
[  103.866235][ T7282] team0: Port device dummy0 removed
[  103.896038][ T7282] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  104.039262][ T7280] nbd0: detected capacity change from 0 to 63
[  104.053994][ T7290] block nbd0: Receive control failed (result -32)
[  104.054887][ T5615] block nbd0: Send control failed (result -32)
[  104.057044][   T56] block nbd0: Receive control failed (result -32)
[  104.060045][ T5615] block nbd0: Request send failed, requeueing
[  104.084460][ T5073] block nbd0: Dead connection, failed to find a fallback
[  104.087966][ T5073] block nbd0: shutting down sockets
[  104.090762][ T5073] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.094575][ T5073] Buffer I/O error on dev nbd0, logical block 0, async page read
[  104.109593][ T5615] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.121424][ T5615] Buffer I/O error on dev nbd0, logical block 1, async page read
[  104.140746][ T5615] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.152611][ T5615] Buffer I/O error on dev nbd0, logical block 2, async page read
[  104.157667][ T5615] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.165050][ T5615] Buffer I/O error on dev nbd0, logical block 3, async page read
[  104.170205][ T5615] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.186487][ T5615] Buffer I/O error on dev nbd0, logical block 0, async page read
[  104.197209][ T5615] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.201619][ T5615] Buffer I/O error on dev nbd0, logical block 1, async page read
[  104.208592][ T5615] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.215588][ T5615] Buffer I/O error on dev nbd0, logical block 2, async page read
[  104.225850][ T5615] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.235440][ T5615] Buffer I/O error on dev nbd0, logical block 3, async page read
[  104.240095][ T5615] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.245263][ T5615] Buffer I/O error on dev nbd0, logical block 0, async page read
[  104.250951][ T5615] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.254361][ T5615] Buffer I/O error on dev nbd0, logical block 1, async page read
[  104.267412][ T5615] ldm_validate_partition_table(): Disk read failed.
[  104.276944][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.280860][ T5615] Dev nbd0: unable to read RDB block 0
[  104.287620][ T5615]  nbd0: unable to read partition table
[  104.346195][ T5615] ldm_validate_partition_table(): Disk read failed.
[  104.364222][ T5615] Dev nbd0: unable to read RDB block 0
[  104.381336][ T5615]  nbd0: unable to read partition table
[  104.686260][ T7315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.691166][ T7315] IPv6: NLM_F_CREATE should be set when creating new route
[  104.693896][ T7314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.738265][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.742452][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.866104][ T7323] __nla_validate_parse: 18 callbacks suppressed
[  104.866117][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'.
[  104.908212][ T7330] 8021q: adding VLAN 0 to HW filter on device bond5
[  104.940074][ T7330] bond5: (slave veth7): Enslaving as an active interface with a down link
[  104.950054][ T7330] 8021q: adding VLAN 0 to HW filter on device batadv1
[  104.953592][ T7330] bond5: (slave batadv1): making interface the new active one
[  104.956978][ T7330] batadv1: entered promiscuous mode
[  104.959294][ T7330] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  104.989131][ T7330] bond5 (unregistering): (slave veth7): Releasing active interface
[  105.003021][ T7330] bond5 (unregistering): (slave batadv1): Releasing active interface
[  105.021221][ T7330] bond5 (unregistering): Released all slaves
[  105.169054][ T7340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.176552][ T7340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.194094][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'.
[  105.244010][ T7350] xt_hashlimit: size too large, truncated to 1048576
[  105.252944][ T7340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.256192][ T7340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.300356][ T7340] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode
[  105.304621][ T7340] bridge0: port 2(netdevsim1) entered disabled state
[  105.321929][ T7340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.331703][ T7340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.400994][ T7340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.404247][ T7340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.523982][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.528271][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.539910][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.542823][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.555001][ T5666] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.562932][ T5666] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.589951][ T7359] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20002
[  105.601481][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.604840][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.671800][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'.
[  105.990223][ T7396] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  106.009020][ T7396] bond11: (slave lo): Enslaving as an active interface with an up link
[  106.032059][ T7401] validate_nla: 6 callbacks suppressed
[  106.032076][ T7401] netlink: 'syz.2.427': attribute type 10 has an invalid length.
[  106.068625][ T7401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.427'.
[  107.086267][ T7424] geneve0: entered promiscuous mode
[  107.090538][ T7424] geneve0: entered allmulticast mode
[  107.093961][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.097550][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.100872][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.103758][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.707124][   T13] net_ratelimit: 9 callbacks suppressed
[  107.707148][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.812673][ T7427] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  107.820268][ T7427] bond7 (unregistering): Released all slaves
[  108.023508][ T7441] netlink: 112 bytes leftover after parsing attributes in process `syz.0.437'.
[  108.048357][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.261338][ T7454] lo speed is unknown, defaulting to 1000
[  108.536798][ T7470] netlink: 32 bytes leftover after parsing attributes in process `syz.0.440'.
[  108.602707][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'.
[  108.826713][ T5666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.834780][ T7485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.441'.
[  109.083724][ T7493] netlink: 'syz.1.443': attribute type 13 has an invalid length.
[  109.086876][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.090154][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.093305][ T7493] netlink: 'syz.1.443': attribute type 17 has an invalid length.
[  109.097936][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.101565][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.107609][ T7493] tunl0: left promiscuous mode
[  109.141284][ T7493] bridge0: left promiscuous mode
[  109.149295][ T7493] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.153230][ T7493] 8021q: adding VLAN 0 to HW filter on device team0
[  109.160067][ T7493] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.177485][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.188129][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.194950][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'.
[  109.200348][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.204120][ T7493] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.204702][ T7151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.208883][ T7493] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.216862][ T7493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  109.219756][ T7493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  109.224695][ T7493] veth0_virt_wifi: left allmulticast mode
[  109.228226][ T7493] veth1_vlan: left promiscuous mode
[  109.230504][ T7493] veth0_vlan: left promiscuous mode
[  109.233324][ T7493] veth0_vlan: entered promiscuous mode
[  109.238319][ T7493] veth1_vlan: entered promiscuous mode
[  109.244346][ T7493] veth1_macvtap: left promiscuous mode
[  109.248824][ T7493] veth0_macvtap: left promiscuous mode
[  109.251927][ T7493] veth0_macvtap: entered promiscuous mode
[  109.258115][ T7493] veth1_macvtap: entered promiscuous mode
[  109.269086][   T27] wlan1: Selected IBSS BSSID fa:89:a0:7f:fc:70 based on configured SSID
[  109.279945][ T7493] 8021q: adding VLAN 0 to HW filter on device bond1
[  109.287518][ T7493] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.293714][ T7493] 8021q: adding VLAN 0 to HW filter on device bond3
[  109.303128][ T7493] bridge0: entered promiscuous mode
[  109.304892][ T7493] macsec1: left promiscuous mode
[  109.311184][ T7493] veth0_to_team: entered promiscuous mode
[  109.319859][ T7493] 8021q: adding VLAN 0 to HW filter on device bond4
[  109.328791][ T7493] 8021q: adding VLAN 0 to HW filter on device bond5
[  109.362646][ T7493] bond6: left promiscuous mode
[  109.364721][ T7493] bridge2: left promiscuous mode
[  109.372726][ T7493] 8021q: adding VLAN 0 to HW filter on device bond6
[  109.376809][ T7493] ipvlan2: left allmulticast mode
[  109.378850][ T7493] bond6: left allmulticast mode
[  109.380976][ T7493] bridge2: left allmulticast mode
[  109.384045][ T7493] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  109.393801][ T7493] 8021q: adding VLAN 0 to HW filter on device bond7
[  109.453323][ T7493] 8021q: adding VLAN 0 to HW filter on device bond8
[  109.491232][ T7493] 8021q: adding VLAN 0 to HW filter on device bond9
[  109.530203][ T7493] 8021q: adding VLAN 0 to HW filter on device bond10
[  109.583914][ T7493] 8021q: adding VLAN 0 to HW filter on device eth0
[  109.601822][ T7493] 8021q: adding VLAN 0 to HW filter on device eth1
[  109.617883][ T7493] 8021q: adding VLAN 0 to HW filter on device eth2
[  109.632791][ T7493] 8021q: adding VLAN 0 to HW filter on device eth3
[  109.653899][ T7493] 8021q: adding VLAN 0 to HW filter on device bond11
[  109.658881][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  109.778442][ T7496] team2: entered promiscuous mode
[  109.780612][ T7496] team2: entered allmulticast mode
[  109.786732][ T7496] 8021q: adding VLAN 0 to HW filter on device team2
[  109.858302][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  109.862939][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.867792][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.875807][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  109.880955][ T6418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.887419][ T6418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.924580][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.929953][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.937035][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  110.000105][ T6418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  110.056608][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'.
[  110.132083][ T6418] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  110.223519][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'.
[  110.274894][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'.
[  110.278829][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'.
[  110.299102][ T6418] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.303134][ T6418] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.307079][ T6418] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.310453][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'.
[  110.313707][ T6418] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.318122][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'.
[  110.435446][ T7533] netlink: 'syz.2.452': attribute type 28 has an invalid length.
[  110.472138][ T7538] netlink: 'syz.0.453': attribute type 1 has an invalid length.
[  110.504458][ T7538] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  110.523239][ T5612] Bluetooth: hci2: link tx timeout
[  110.527162][ T5612] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  110.713858][ T5612] Bluetooth: hci2: link tx timeout
[  110.715805][ T5612] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  110.748490][ T5612] Bluetooth: hci2: link tx timeout
[  110.750055][ T5612] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  110.765113][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'.
[  111.057506][ T7567] netlink: 'syz.0.458': attribute type 1 has an invalid length.
[  111.064545][ T7567] netlink: 224 bytes leftover after parsing attributes in process `syz.0.458'.
[  111.161957][ T7581] bond5 (unregistering): Released all slaves
[  111.253758][ T7587] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  111.302315][ T7592] syzkaller0: entered promiscuous mode
[  111.304595][ T7592] syzkaller0: entered allmulticast mode
[  111.357153][ T7592] batadv0: entered promiscuous mode
[  111.359685][ T7592] ip6gretap0: entered promiscuous mode
[  111.365301][ T7592] hsr1: entered allmulticast mode
[  111.367515][ T7592] batadv0: entered allmulticast mode
[  111.369413][ T7592] ip6gretap0: entered allmulticast mode
[  111.453157][ T7589] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.457549][ T7589] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.519811][ T7589] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.523453][ T7589] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.583702][ T7589] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.588799][ T7589] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.630913][ T7589] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.634934][ T7589] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.684654][ T7595] block nbd0: NBD_DISCONNECT
[  111.686134][ T7595] block nbd0: Send disconnect failed -32
[  111.691171][ T7595] block nbd0: Send disconnect failed -32
[  111.739265][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  111.744221][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.759493][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  111.765501][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.840569][ T5666] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  111.846106][ T5666] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.865833][ T5666] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  111.869751][ T5666] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.883398][ T7602] netlink: 'syz.0.469': attribute type 1 has an invalid length.
[  111.914805][ T7602] 8021q: adding VLAN 0 to HW filter on device bond7
[  112.083335][ T7616] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  112.196980][ T7622] netlink: 'syz.1.474': attribute type 1 has an invalid length.
[  112.221627][ T7622] 8021q: adding VLAN 0 to HW filter on device bond12
[  112.264315][ T7618] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.268537][ T7618] 8021q: adding VLAN 0 to HW filter on device team0
[  112.273883][ T7618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.318741][ T7618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  112.322625][ T7618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.330600][ T7618] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  112.334928][ T7618] veth1_vlan: left promiscuous mode
[  112.338575][ T7618] veth0_vlan: left promiscuous mode
[  112.340775][ T7618] veth0_vlan: entered promiscuous mode
[  112.344244][ T7618] veth1_vlan: entered promiscuous mode
[  112.350724][ T7618] veth1_macvtap: left promiscuous mode
[  112.353036][ T7618] veth0_macvtap: left promiscuous mode
[  112.355301][ T7618] veth0_macvtap: entered promiscuous mode
[  112.357882][ T7618] veth1_macvtap: entered promiscuous mode
[  112.363215][ T7618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  112.365912][ T7618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  112.369942][ T7618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  112.372805][ T7618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  112.381107][ T7618] 8021q: adding VLAN 0 to HW filter on device team1
[  112.384574][ T7618] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  112.401847][ T7618] 8021q: adding VLAN 0 to HW filter on device bond5
[  112.474654][ T5666] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  112.481926][ T5666] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  112.491098][ T5666] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  112.498754][   T13] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  112.506094][ T5666] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  112.598346][ T5612] Bluetooth: hci2: command 0x0405 tx timeout
[  112.603486][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.478'.
[  112.620397][ T7637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.478'.
[  112.664048][ T7640] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  112.674895][ T7640] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  112.678772][ T7640] veth0_virt_wifi: entered allmulticast mode
[  112.682761][ T7640] veth0_virt_wifi: entered promiscuous mode
[  112.685723][ T7640] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  112.688890][ T7640] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  112.717547][ T7634] IPVS: Error connecting to the multicast addr
[  112.795510][ T7649] vti0: entered promiscuous mode
[  112.798258][ T5474] net_ratelimit: 14 callbacks suppressed
[  112.798270][ T5474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  112.943894][ T7653] bond0: entered promiscuous mode
[  112.950037][ T7653] batadv_slave_0: entered promiscuous mode
[  112.953511][ T7653] debugfs: 'hsr1' already exists in 'hsr'
[  112.956114][ T7653] Cannot create hsr debugfs directory
[  112.998568][ T7657] netlink: 'syz.2.485': attribute type 1 has an invalid length.
[  113.028191][ T7657] gretap3: entered allmulticast mode
[  113.035521][ T7657] bond5: (slave gretap3): making interface the new active one
[  113.039535][ T7657] bond5: (slave gretap3): Enslaving as an active interface with an up link
[  113.218411][ T7677] lo speed is unknown, defaulting to 1000
[  113.497552][ T5474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.588186][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.796820][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.883129][ T7701] netlink: 'syz.2.495': attribute type 1 has an invalid length.
[  113.918413][ T7664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.938202][ T7701] 8021q: adding VLAN 0 to HW filter on device bond6
[  113.999931][ T7709] bond11: (slave lo): Releasing backup interface
[  114.003864][ T7709] bond11: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  114.011520][ T7709] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  114.029532][ T7709] netlink: 'syz.1.497': attribute type 22 has an invalid length.
[  114.077551][ T7709] netlink: 'syz.1.497': attribute type 22 has an invalid length.
[  114.145643][ T7714] bond7 (unregistering): Released all slaves
[  114.356681][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  114.414514][ T7731] syzkaller1: entered promiscuous mode
[  114.416796][ T7731] syzkaller1: entered allmulticast mode
[  116.517043][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  116.581610][ T7684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  116.682699][ T7734] __nla_validate_parse: 9 callbacks suppressed
[  116.682745][ T7734] netlink: 876 bytes leftover after parsing attributes in process `syz.1.504'.
[  116.697370][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'.
[  116.881872][ T7736] netlink: 'syz.2.505': attribute type 1 has an invalid length.
[  116.889038][ T7736] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  116.910425][ T7751] netlink: 'syz.0.509': attribute type 1 has an invalid length.
[  116.943432][ T7751] 8021q: adding VLAN 0 to HW filter on device bond8
[  116.966187][ T7751] vlan6: entered promiscuous mode
[  116.968718][ T7751] bond8: entered promiscuous mode
[  116.970873][ T7751] vlan6: entered allmulticast mode
[  116.972889][ T7751] bond8: entered allmulticast mode
[  117.031373][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.511'.
[  117.039721][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.511'.
[  117.161508][ T5692] lo speed is unknown, defaulting to 1000
[  117.168883][ T5692] sqz0: Port: 1 Link ACTIVE
[  117.172180][ T5692] lo speed is unknown, defaulting to 1000
[  117.276814][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'.
[  117.369406][ T7771] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  117.378447][ T7771] bond9: (slave lo): Enslaving as an active interface with an up link
[  117.385378][ T7771] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  117.598090][   T10] lo speed is unknown, defaulting to 1000
[  117.600518][   T10] sqz0: Port: 1 Link DOWN
[  117.604058][   T10] lo speed is unknown, defaulting to 1000
[  117.604717][ T5474] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.622708][ T5474] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.634247][ T5474] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.660167][ T5474] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.673163][ T5474] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.682262][ T5474] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.689948][ T5474] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.698968][ T5474] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.758214][ T7794] dvmrp0: entered allmulticast mode
[  117.815446][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'.
[  117.916079][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'.
[  117.920159][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'.
[  117.925231][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'.
[  117.940786][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'.
[  118.149104][ T7825] bridge2: entered promiscuous mode
[  118.154313][ T7825] bridge2: entered allmulticast mode
[  118.162260][ T7825] team0: Port device bridge2 added
[  118.231674][ T7825] bridge3: entered promiscuous mode
[  118.233596][ T7825] bridge3: entered allmulticast mode
[  118.239352][ T7825] team0: Port device bridge3 added
[  118.242033][ T7837] netlink: 'syz.0.531': attribute type 7 has an invalid length.
[  118.243340][ T7825] bridge0: port 1(team0) entered blocking state
[  118.244592][ T7837] netlink: 'syz.0.531': attribute type 8 has an invalid length.
[  118.246935][ T7825] bridge0: port 1(team0) entered disabled state
[  118.251736][ T7825] team0: entered allmulticast mode
[  118.292147][ T7841] Bluetooth: MGMT ver 1.23
[  118.713167][ T7871] netlink: 'syz.1.541': attribute type 5 has an invalid length.
[  118.852114][ T7879] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  118.859815][ T7879] bond8 (unregistering): Released all slaves
[  119.117705][ T7900] veth0: entered promiscuous mode
[  119.121285][ T7900] veth0: left promiscuous mode
[  119.164824][ T7906] netlink: 'syz.1.551': attribute type 8 has an invalid length.
[  119.170976][ T7906] bond0: entered promiscuous mode
[  119.174247][ T7906] bond_slave_0: entered promiscuous mode
[  119.176069][ T7906] bond_slave_1: entered promiscuous mode
[  119.181153][ T7906] geneve2: entered promiscuous mode
[  119.182994][ T7906] dummy0: entered promiscuous mode
[  119.191933][ T7906] gretap0: entered promiscuous mode
[  119.193940][ T7906] team0: entered promiscuous mode
[  119.195558][ T7906] team_slave_0: entered promiscuous mode
[  119.197875][ T7906] team_slave_1: entered promiscuous mode
[  119.201447][ T7906] hsr2: entered promiscuous mode
[  119.270757][ T7908] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  119.275869][ T7908] bond8 (unregistering): Released all slaves
[  119.533059][ T7918] lo speed is unknown, defaulting to 1000
[  119.970183][ T7939] netlink: 'syz.1.560': attribute type 2 has an invalid length.
[  120.056142][ T7945] netlink: 'syz.2.562': attribute type 21 has an invalid length.
[  120.060593][ T7945] IPv6: NLM_F_CREATE should be specified when creating new route
[  120.067669][ T7945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  120.069986][ T7945] IPv6: NLM_F_CREATE should be set when creating new route
[  120.072247][ T7945] IPv6: NLM_F_CREATE should be set when creating new route
[  120.074339][ T7945] IPv6: NLM_F_CREATE should be set when creating new route
[  120.084150][ T7945] netlink: 'syz.2.562': attribute type 21 has an invalid length.
[  120.086823][ T7945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  120.120585][   T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.123734][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.185602][ T7960] netlink: 'syz.2.565': attribute type 1 has an invalid length.
[  120.189213][ T5474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.197213][   T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.201107][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.288858][ T7968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.327292][ T5474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.357465][ T5612] Bluetooth: hci2: command 0x0405 tx timeout
[  120.363386][ T4998] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  120.393975][ T7970] netlink: 'syz.1.568': attribute type 11 has an invalid length.
[  120.552319][ T7988] lo speed is unknown, defaulting to 1000
[  120.597275][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.637196][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.667434][ T7996] x_tables: ip6_tables: mh match: only valid for protocol 135
[  120.837813][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.955045][ T8010] lo speed is unknown, defaulting to 1000
[  121.477374][ T8015] bond13: (slave gretap4): making interface the new active one
[  121.488809][ T8015] bond13: (slave gretap4): Enslaving as an active interface with an up link
[  121.652404][ T8022] batadv_slave_1: entered promiscuous mode
[  121.656044][ T8025] ip6tnl0: Caught tx_queue_len zero misconfig
[  121.670441][ T8022] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.693393][ T8022] batadv_slave_1 (unregistering): left promiscuous mode
[  121.696807][ T8022] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.860821][ T8032] __nla_validate_parse: 27 callbacks suppressed
[  121.860897][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'.
[  121.883115][ T8032] netlink: 68 bytes leftover after parsing attributes in process `syz.0.583'.
[  121.918929][ T8039] validate_nla: 2 callbacks suppressed
[  121.918940][ T8039] netlink: 'syz.1.585': attribute type 1 has an invalid length.
[  121.927897][ T8037] netlink: 'syz.2.584': attribute type 4 has an invalid length.
[  121.930360][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'.
[  121.950704][ T8039] 8021q: adding VLAN 0 to HW filter on device bond14
[  121.967272][ T8039] vlan0: entered promiscuous mode
[  121.969173][ T8039] bond14: entered promiscuous mode
[  121.971255][ T8039] vlan0: entered allmulticast mode
[  121.972804][ T8039] bond14: entered allmulticast mode
[  121.985440][ T8032] lo speed is unknown, defaulting to 1000
[  122.040010][ T8043] netlink: 68 bytes leftover after parsing attributes in process `syz.2.586'.
[  122.048597][ T8043] netlink: 'syz.2.586': attribute type 1 has an invalid length.
[  122.102362][ T8043] bond10: entered promiscuous mode
[  122.106866][ T8043] 8021q: adding VLAN 0 to HW filter on device bond10
[  122.282264][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'.
[  122.540703][ T8071] netlink: 68 bytes leftover after parsing attributes in process `syz.2.593'.
[  122.545787][ T8063] bond0: Device is already in use.
[  122.550957][ T8071] netlink: 'syz.2.593': attribute type 1 has an invalid length.
[  122.567986][ T8071] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  122.854850][ T8081] syzkaller0: entered promiscuous mode
[  122.863777][ T8081] syzkaller0: entered allmulticast mode
[  123.397464][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  124.328951][ T8104] bond9: (slave lo): Releasing backup interface
[  124.331421][ T8104] bond9: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  124.343611][ T8107] ip6gre1: entered allmulticast mode
[  124.410150][ T8118] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  124.414313][ T8122] netlink: 'syz.1.601': attribute type 1 has an invalid length.
[  124.438727][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.599'.
[  124.447539][ T8122] bond15: entered promiscuous mode
[  124.449631][ T8122] 8021q: adding VLAN 0 to HW filter on device bond15
[  124.452808][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'.
[  124.462933][ T8122] 8021q: adding VLAN 0 to HW filter on device bond15
[  124.465399][ T8122] bond15: (slave vcan1): The slave device specified does not support setting the MAC address
[  124.468715][ T8122] bond15: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  124.477293][ T8122] bond15: (slave vcan1): making interface the new active one
[  124.479646][ T8122] vcan1: entered promiscuous mode
[  124.482468][ T8122] bond15: (slave vcan1): Enslaving as an active interface with an up link
[  124.614480][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'.
[  124.661579][ T8137] netlink: 'syz.1.604': attribute type 1 has an invalid length.
[  124.684345][ T8137] 8021q: adding VLAN 0 to HW filter on device bond16
[  124.695508][ T8137] vlan2: entered allmulticast mode
[  124.698586][ T8137] bond16: entered allmulticast mode
[  125.148392][ T6418] net_ratelimit: 18 callbacks suppressed
[  125.148407][ T6418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.293582][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'.
[  125.317153][   T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.320828][   T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.323587][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.326718][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  125.327226][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.335179][ T2353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.390130][ T7784] bridge0: entered promiscuous mode
[  125.429925][ T8194] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  125.508298][ T8191] geneve0: left promiscuous mode
[  125.511783][ T8191] geneve0: left allmulticast mode
[  125.517259][ T8191] gretap3: left allmulticast mode
[  125.523457][ T8191] bridge2: left promiscuous mode
[  125.533195][ T8191] bridge3: left promiscuous mode
[  125.538180][ T8191] bond10: left promiscuous mode
[  125.828986][ T8212] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  125.838975][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.879353][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.893435][ T8217] xt_hl: Unknown TTL match mode: 237
[  125.947372][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.958354][   T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.369981][ T8240] dvmrp0: entered allmulticast mode
[  126.481019][ T8244] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  126.486075][ T8248] netlink: 'syz.0.637': attribute type 1 has an invalid length.
[  126.496266][ T8244] bond17: (slave lo): Enslaving as an active interface with an up link
[  126.549411][ T8248] 8021q: adding VLAN 0 to HW filter on device bond11
[  126.614383][ T8250] bond11: (slave veth5): Enslaving as an active interface with a down link
[  126.676578][ T8253] 8021q: adding VLAN 0 to HW filter on device bond19
[  126.700811][ T8253] bond19 (unregistering): Released all slaves
[  126.738060][ T8261] bond12 (unregistering): Released all slaves
[  126.873285][ T8268] bond19: entered allmulticast mode
[  126.882343][ T8271] __nla_validate_parse: 70 callbacks suppressed
[  126.882356][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'.
[  126.887997][ T8271] netlink: 52 bytes leftover after parsing attributes in process `syz.0.643'.
[  126.893527][ T8268] macvlan4: entered promiscuous mode
[  126.897465][ T8268] macvlan4: entered allmulticast mode
[  126.900584][ T8268] bond19: entered promiscuous mode
[  126.903361][ T8268] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  126.914382][ T8268] bond19: left promiscuous mode
[  126.933306][ T8271] ip6tnl2: entered allmulticast mode
[  126.978589][ T5675] IPVS: starting estimator thread 0...
[  126.981226][ T8273] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20001
[  127.030177][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'.
[  127.032949][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'.
[  127.068394][ T8274] IPVS: using max 34 ests per chain, 81600 per kthread
[  127.075240][ T8276] hmac(sha224: entered promiscuous mode
[  127.159334][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.646'.
[  127.214282][ T8281] syzkaller0: entered promiscuous mode
[  127.216417][ T8281] syzkaller0: entered allmulticast mode
[  127.304977][ T8288] Cannot find set identified by id 65534 to match
[  128.539945][ T8293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.550983][ T8280] tipc: Resetting bearer <eth:syzkaller0>
[  128.567824][ T8280] tipc: Disabling bearer <eth:syzkaller0>
[  128.684331][ T8300] netlink: 'syz.0.652': attribute type 7 has an invalid length.
[  128.749376][ T8302] netlink: 'syz.2.653': attribute type 1 has an invalid length.
[  128.751737][ T8302] netlink: 224 bytes leftover after parsing attributes in process `syz.2.653'.
[  128.770736][ T8304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.774444][ T8304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.778804][ T8304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  128.809105][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'.
[  128.854699][ T8304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.858188][ T8304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.861406][ T8304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  128.875517][ T8309] netlink: 'syz.2.654': attribute type 8 has an invalid length.
[  128.914648][ T8304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.919104][ T8304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.923184][ T8304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  128.992575][ T8304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.995737][ T8304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.999434][ T8304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  129.015169][ T8314] macsec2: entered promiscuous mode
[  129.017145][ T8314] virt_wifi0: entered promiscuous mode
[  129.073162][ T8114] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.076694][ T8114] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  129.079325][ T8114] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  129.096183][ T8114] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.100012][ T8114] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  129.103216][ T8114] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  129.115663][ T8114] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.119015][ T8114] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  129.121919][ T8114] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  129.133045][ T8114] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.135731][ T8114] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  129.138829][ T8114] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  129.194102][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'.
[  129.522959][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'.
[  129.552687][ T8326] 8021q: adding VLAN 0 to HW filter on device bond20
[  129.625338][ T8331] netlink: 56 bytes leftover after parsing attributes in process `syz.1.662'.
[  129.722296][ T8333] netlink: 'syz.1.663': attribute type 1 has an invalid length.
[  129.722905][ T8334] netlink: 'syz.1.663': attribute type 1 has an invalid length.
[  129.800507][ T8333] 8021q: adding VLAN 0 to HW filter on device bond21
[  130.190495][ T8352] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  130.205921][ T8352] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  130.245246][ T8352] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  130.251937][ T8352] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  130.312426][ T8371] netlink: 'syz.2.669': attribute type 1 has an invalid length.
[  130.327784][ T8352] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  130.332063][ T8352] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  130.335289][ T8352] CPU: 1 UID: 0 PID: 8352 Comm: syz.1.668 Not tainted syzkaller #0 PREEMPT(full) 
[  130.338546][ T8352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.342108][ T8352] RIP: 0010:klist_remove+0x156/0x340
[  130.344044][ T8352] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 2d 5b 91 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 0e 5b 91 f6 49 8b 44 24 58 48 89 44 24 08
[  130.350839][ T8352] RSP: 0018:ffffc90004057820 EFLAGS: 00010202
[  130.353058][ T8352] RAX: 000000000000000b RBX: ffff888174c80000 RCX: 0000000000000000
[  130.355886][ T8352] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  130.358735][ T8352] RBP: ffffc90004057920 R08: ffffffff90173d43 R09: 1ffffffff202e7a8
[  130.361528][ T8352] R10: dffffc0000000000 R11: fffffbfff202e7a9 R12: 0000000000000000
[  130.364367][ T8352] R13: 1ffff110221a1d0c R14: ffff888110d0e860 R15: dffffc0000000000
[  130.367170][ T8352] FS:  00007efe6b4e76c0(0000) GS:ffff8882a928a000(0000) knlGS:0000000000000000
[  130.370257][ T8352] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.372587][ T8352] CR2: 00007fdc7abe70d0 CR3: 000000017359e000 CR4: 00000000000006f0
[  130.375433][ T8352] Call Trace:
[  130.376622][ T8352]  <TASK>
[  130.377683][ T8352]  ? __pfx_klist_remove+0x10/0x10
[  130.379511][ T8352]  ? kobject_move+0x5de/0x720
[  130.381213][ T8352]  ? __pfx_kobject_move+0x10/0x10
[  130.383013][ T8352]  ? do_raw_spin_unlock+0x4d/0x210
[  130.384823][ T8352]  ? get_device_parent+0x366/0x3a0
[  130.386612][ T8352]  device_move+0x193/0x730
[  130.388207][ T8352]  hci_conn_del_sysfs+0xb8/0x1a0
[  130.389968][ T8352]  hci_conn_del+0xc36/0x1230
[  130.391716][ T8352]  hci_conn_hash_flush+0x191/0x260
[  130.393569][ T8352]  hci_dev_close_sync+0x821/0x10e0
[  130.395355][ T8352]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  130.397432][ T8352]  ? do_raw_spin_lock+0x12b/0x2f0
[  130.399334][ T8352]  hci_dev_do_close+0x30/0xc0
[  130.401127][ T8352]  hci_rfkill_set_block+0x1f4/0x290
[  130.403086][ T8352]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  130.405171][ T8352]  rfkill_set_block+0x1a4/0x4e0
[  130.406724][ T8352]  rfkill_fop_write+0x461/0x5a0
[  130.408134][ T8352]  ? apparmor_file_permission+0x1f4/0x300
[  130.410148][ T8352]  ? __pfx_rfkill_fop_write+0x10/0x10
[  130.411774][ T8352]  ? security_kernfs_init_security+0x210/0x270
[  130.413685][ T8352]  ? rw_verify_area+0x255/0x4d0
[  130.415138][ T8352]  ? __pfx_rfkill_fop_write+0x10/0x10
[  130.416757][ T8352]  vfs_write+0x29a/0xb90
[  130.417980][ T8352]  ? __pfx_vfs_write+0x10/0x10
[  130.419336][ T8352]  ? __fget_files+0x2a/0x420
[  130.420662][ T8352]  ? __fget_files+0x2a/0x420
[  130.421972][ T8352]  ? __fget_files+0x3a0/0x420
[  130.423362][ T8352]  ? __fget_files+0x2a/0x420
[  130.424723][ T8352]  ksys_write+0x150/0x270
[  130.426203][ T8352]  ? __pfx_ksys_write+0x10/0x10
[  130.427688][ T8352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.429622][ T8352]  do_syscall_64+0x15f/0xf80
[  130.431067][ T8352]  ? trace_irq_disable+0x3b/0x140
[  130.432602][ T8352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.434858][ T8352] RIP: 0033:0x7efe6a59cdd9
[  130.436560][ T8352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  130.443747][ T8352] RSP: 002b:00007efe6b4e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  130.446311][ T8352] RAX: ffffffffffffffda RBX: 00007efe6a815fa0 RCX: 00007efe6a59cdd9
[  130.448645][ T8352] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004
[  130.450884][ T8352] RBP: 00007efe6a632d69 R08: 0000000000000000 R09: 0000000000000000
[  130.453137][ T8352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.455460][ T8352] R13: 00007efe6a816038 R14: 00007efe6a815fa0 R15: 00007ffe5866c728
[  130.457802][ T8352]  </TASK>
[  130.458768][ T8352] Modules linked in:
[  130.460766][ T8352] ---[ end trace 0000000000000000 ]---
[  130.470206][ T8352] RIP: 0010:klist_remove+0x156/0x340
[  130.472341][ T8352] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 2d 5b 91 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 0e 5b 91 f6 49 8b 44 24 58 48 89 44 24 08
[  130.479333][ T8352] RSP: 0018:ffffc90004057820 EFLAGS: 00010202
[  130.481267][ T8352] RAX: 000000000000000b RBX: ffff888174c80000 RCX: 0000000000000000
[  130.483704][ T8352] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  130.486792][ T8352] RBP: ffffc90004057920 R08: ffffffff90173d43 R09: 1ffffffff202e7a8
[  130.489763][ T8352] R10: dffffc0000000000 R11: fffffbfff202e7a9 R12: 0000000000000000
[  130.492690][ T8352] R13: 1ffff110221a1d0c R14: ffff888110d0e860 R15: dffffc0000000000
[  130.495564][ T8352] FS:  00007efe6b4e76c0(0000) GS:ffff8882a928a000(0000) knlGS:0000000000000000
[  130.499193][ T8352] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.501669][ T8352] CR2: 00007fdc7abe70d0 CR3: 000000017359e000 CR4: 00000000000006f0
[  130.504678][ T8352] Kernel panic - not syncing: Fatal exception
[  130.507546][ T8352] Kernel Offset: disabled
[  130.509108][ T8352] Rebooting in 86400 seconds..
