last executing test programs:

51.240589842s ago: executing program 1 (id=7830):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/94, 0x5e}, {&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000980)=""/158, 0x9e}, {&(0x7f00000001c0)=""/49, 0x31}], 0x4, 0x0, 0x0, 0x200000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/89, 0x59}, {&(0x7f0000000700)=""/88, 0x58}, {&(0x7f0000004740)=""/4096, 0x1041}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x4}, 0x7fffffff}], 0x3, 0x2, 0x0)

51.181800398s ago: executing program 1 (id=7831):
r0 = socket$kcm(0x29, 0x7, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0xc)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={<r2=>r0, 0x0, 0x3, 0x6})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'dvmrp0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x134, r4, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xde, 0x4b}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x350}], @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x64, 0x80}}]}, @NL80211_ATTR_IE={0xe4, 0x2a, [@cf={0x4, 0x6, {0x1, 0x4, 0x5, 0xe7e}}, @tim={0x5, 0x37, {0x2, 0x2d, 0x1, "e13ab987ee797ed673c13e1951abc305223c74c8cbf9ced31754e4c0f98c0cf7de8b30e6f9236d3218851b429cc6b48aa73c9052"}}, @measure_req={0x26, 0x67, {0x4, 0xa4, 0x0, "2560b3715e4320ddc582dae1b6607002f4373b3124860d6b435182ac4ce52e0ad325138b282033308d1cfb674f9cf43fdc7fb598b4e445c6e38bec62a92e7a1b1ce526e7ba7ec9c52fa1d8e07e6586efd256a7731f1192a36933bfbe562a4d7350f99a3b"}}, @ht={0x2d, 0x1a, {0x20, 0x1, 0x6, 0x0, {0xff, 0xd, 0x0, 0x38f, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x8, 0x853b, 0x2}}, @mic={0x8c, 0x18, {0x80d, "589b75eae98f", @long="caa0393bd223bd9ec2cd9295ccc4bf27"}}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x196}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}]}, 0x134}, 0x1, 0x0, 0x0, 0x50}, 0x40040)
sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4f}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x0, 0x4, 0xf37]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x4]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000)
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3)
ioctl$FIOCLEX(r1, 0x5451)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0x4010)
r6 = socket$xdp(0x2c, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x15)
bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e23, @private=0xa010100}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r3, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000700)={0x0, <r8=>0x0}, &(0x7f0000000740)=0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)=@report={0x90, 0x20, 0x2, 0x70bd2b, 0x25dfdbfe, {0x32, {@in6=@remote, @in6=@mcast2, 0x4e24, 0x90, 0x4e22, 0x8c2, 0x2, 0x60, 0x60, 0xff, r7, r8}}, [@srcaddr={0x14, 0xd, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @encap={0x1c, 0x4, {0x3, 0x4e23, 0x4e23, @in6=@loopback}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x804)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc10}, 0x24000005)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000009c0)={0x1, 0x7}, 0x8)
connect$inet(r2, &(0x7f0000000a00)={0x2, 0x4e22, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000a40)=0xffffffffffffffff, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xd8, 0x41, 0x8, 0x70bd2d, 0x25dfdbfc, {0xb}, [@typed={0xc3, 0xe8, 0x0, 0x0, @binary="f3a3c8b2cfc296d5ab9f8664a78068fabf5bb0f39dfd51e8032c029040ff028e2a057b2a6c5d2d9838a8565f2f01b6df824db15a1e5270760428793dbb0e6ed8d62f9fc5d03f477d42a7277d3c5b0d80730d467f5ad47e175b06e21395c41817e9f26c17b74d70803d4319deccd558b5b73b70a9f83986912aba195bf5eb51f9e25002cb0afad845615c6724564401439d7f3c60422bf62d47a87b7d43cb850d9bb7dbd186ae978b5c0d948456bc7e38fe731ef8aa365f78fd69f129a9b938"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x90)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000c40)={<r9=>r3, 0x1, 0x1, 0x8})
sendmsg$nl_xfrm(r9, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd29, 0x25dfdbfb, 0x9, ["", "", "", "", "", "", ""]}, 0x14}}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000d80)={'wlan1\x00'})
getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000dc0)={0x0, 0x5, 0x2, 0x4, 0x4, 0x5, 0x0, 0x8, {0x0, @in={{0x2, 0x4e22, @local}}, 0x10001, 0x7e05, 0xfffffffe, 0x1aa0, 0x6}}, &(0x7f0000000e80)=0xb0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000ec0)={'pimreg\x00'})

51.180696459s ago: executing program 1 (id=7832):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
unshare(0x400)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48)
r2 = socket(0x28, 0x5, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r2, 0x900}, 0x20)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4}, 0x20)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002000ffff2abd7000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e000108001b"], 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan4\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf250b00030000000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x380533681c76ead2}, 0x80)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x6, 0x4)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000000000000000000000001624514d86eb9c", @ANYRES32=0x0, @ANYBLOB="0003000000320001140012800c0001006d6163766c616e00040002800a0001000000000000000000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0xd0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000011)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r10, 0x891b, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x8000000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r11, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000000308010800000000000000000b0000051400048008000240375d0f8608000240000000011f0003002100010073797a3100001c00048008000240000000020800044000000005080001400000000b06000240891400000c001f80080001408000000000000000000900"/118], 0x78}}, 0x24000490)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000400)={{0x9, 0xfffffff8}, 0x100, './file0\x00'})

51.022204062s ago: executing program 1 (id=7833):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@broadcast, @in=@empty, 0x4e21, 0x4, 0x4e20, 0x0, 0x2}, {0x40, 0xae, 0xffffffff, 0x9, 0x9, 0x9, 0x9, 0x5}, {0x10000, 0x7, 0x8}, 0x2, 0x6e6bbf, 0x1, 0x2a515e8a9e1e315e, 0x1}, {{@in6=@loopback, 0x4d2, 0x3c}, 0xa, @in=@multicast2, 0x3503, 0x4, 0x0, 0x48, 0x54, 0x1ff, 0x1}}, 0xe8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a8010002d800c000180080016000600000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10)
write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={r6, 0x3, 0x30}, 0xc)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400), 0x4)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@generic={&(0x7f00000003c0)='./file0\x00', r7}, 0x18)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r6, @in6={{0xa, 0x4e20, 0x10, @loopback, 0xd}}}, &(0x7f0000000380)=0x84)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000007c0)={&(0x7f0000000580)="3bb1cdfdf931d4892cc67f4d35e71fc1009dd651581e1130e58b89d1b8ff80d688a1b2a8a7b4d10481b3a54c85b082430285a02d55db5fc3ae1fa35418015ae74b08d23c941f05906f6302263524733fe185e1e5adc168232865d5b115e8495fac09dac13fa532ed73bf340b8cea97ef23213036697895907738501fb3462d482acc086d8410e4bc5e169d0e035a34ca650c7bec66335628fbde8519b98f0027a4484bac948570f36e8681b36613d77f4b5bf346cc3271ba69debee7510dc32899b8b8ee3f26b12c5aaf", &(0x7f0000000c40)=""/4096, &(0x7f0000000680)="99", &(0x7f00000006c0)="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", 0x5, r2}, 0x38)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'gre0\x00', r9, 0x7, 0x7800, 0x7, 0x5, {{0x1f, 0x4, 0x0, 0x37, 0x7c, 0x66, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@lsrr={0x83, 0x1b, 0x18, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @rand_addr=0x64010100, @empty, @local]}, @rr={0x7, 0xb, 0xe0, [@empty, @rand_addr=0x64010100]}, @timestamp={0x44, 0xc, 0xb, 0x0, 0x1, [0xffffffff, 0x6]}, @timestamp_addr={0x44, 0xc, 0x50, 0x1, 0xd, [{@multicast1, 0x1ff}]}, @ssrr={0x89, 0x23, 0xc7, [@multicast1, @loopback, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ra={0x94, 0x4}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94)
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$EXT4_IOC_CHECKPOINT(r10, 0x4004662b, &(0x7f0000000540)=0x4)

50.611529307s ago: executing program 2 (id=7842):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000abcad53a4930450d66a36667a031d63145bd6ad9b1041d4d39b2dc1ed8653d20990fdfea9f23a8dbfe400a532ddd8696b3d51b35af440bb640e232eeb4ec95001ecae77424ad15aae919835f32ba6c63200f1cb4f35a1ebb69d6499f554162fabc0c7e29721255f806fdcdc3ae519c156f8bf1e2f8ca4810ecc6648c"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) (async, rerun: 64)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) (rerun: 64)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001000000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r5}, 0x38) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000008d08000071122d0000000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x4004)
r7 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r7, 0x29, 0x8, 0x0, &(0x7f0000000240))

50.482243644s ago: executing program 2 (id=7843):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x11, 0xb43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x16}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

50.481896877s ago: executing program 2 (id=7844):
socket$packet(0x11, 0x2, 0x300)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
r1 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14)
setsockopt$packet_int(r1, 0x107, 0x1c, &(0x7f0000000100)=0x4000200, 0x4)

50.431643604s ago: executing program 2 (id=7845):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a0001"], 0xc8}, 0x1, 0x0, 0x0, 0x4008005}, 0x20000004)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x20, 0x3f7, 0x2, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4020}, 0x4)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f00000002c0)="23000000010006", 0x7)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r10, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0)

50.181000783s ago: executing program 2 (id=7850):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1ff, @local, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000002c0)="70240e94e6012e6947677f8e24c0327c3957128cfa0033b7ab232b06fdda20801d186d38d70bc1e939d3ca8de618badc3221fa10b71eb766675b4b3c35c76aa261af8362075aa6413b9c77f3febede95c1d78410a257e2258ab1cdc378db91b98fca59569f993492b320afb5965d37b76198373f02e1a4d9c32cfae7d40bcac9a5125a2b469b1e0e4d0f28bcb281014153fd50c9ff2bfa40888a7793487a55e55c9064fac165e4ca5a3a94f5de545c59bdd2fb35852a5d95eff084d31fbf9cbab05b7209b021c23569adde", 0xcb}, {&(0x7f0000000080)="4939294f91d657201f410a4a83e16799ca25e673254f35ddd4ef949f7667bac8a7a112830b1b5a2a4fcee632cf92c09fa4bf8c6911b2d85b941cf1b9e4a8028ed611f33f760407c2c99557993cd4942b42fc", 0x52}, {&(0x7f0000000400)="037aeb5cfa30e7da77eac4fd10f8c61cad5e1cc0105c1bcf785eee021e75b51e692830cd182b398c4a98ba451e5152f2a2540fc5c5c2e80ece6113276a8c3f132cb7a3ef51b2af3b7f", 0x49}], 0x3, &(0x7f0000000480)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}], 0x18}, 0x102}], 0x1, 0x44081)

50.180722153s ago: executing program 1 (id=7851):
socket$key(0xf, 0x3, 0x2)
socket$inet(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r0, 0x0, 0x2}, 0x18)
pipe(&(0x7f0000000c00))
epoll_create(0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r2}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000140000f008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0)

50.109223045s ago: executing program 2 (id=7853):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt(r0, 0x6, 0x0, 0x0, &(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x55457}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004894}, 0x4001800)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@mcast1, r3}, 0x14) (async)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@mcast1, r3}, 0x14)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$int_in(r5, 0x5452, &(0x7f00000002c0)=0xffffffff)
socket$inet6(0xa, 0x3, 0x75) (async)
r6 = socket$inet6(0xa, 0x3, 0x75)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0xa4ff)
bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfe, 0xe83d9e537fb8966}, 0xc) (async)
bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfe, 0xe83d9e537fb8966}, 0xc)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000000)={0x67, 0xf, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x6, 0x2, [0x7, 0x1, 0x1, 0x380000000000]}}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x4, 0x9, [0xfff, 0x9, 0x2, 0x81, 0x3ff, 0x1]}}, @pad1]}, 0x88)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}, @mark={0xc, 0x15, {0x35075a, 0x5}}]}, 0x10c}}, 0x0) (async)
sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}, @mark={0xc, 0x15, {0x35075a, 0x5}}]}, 0x10c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffeb}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0)
listen(r7, 0x4) (async)
listen(r7, 0x4)
pipe(&(0x7f0000000180)={<r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000001c0)={'batadv_slave_1\x00'})

49.995174556s ago: executing program 32 (id=7853):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt(r0, 0x6, 0x0, 0x0, &(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x55457}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004894}, 0x4001800)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@mcast1, r3}, 0x14) (async)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@mcast1, r3}, 0x14)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$int_in(r5, 0x5452, &(0x7f00000002c0)=0xffffffff)
socket$inet6(0xa, 0x3, 0x75) (async)
r6 = socket$inet6(0xa, 0x3, 0x75)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0xa4ff)
bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfe, 0xe83d9e537fb8966}, 0xc) (async)
bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfe, 0xe83d9e537fb8966}, 0xc)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000000)={0x67, 0xf, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x6, 0x2, [0x7, 0x1, 0x1, 0x380000000000]}}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x4, 0x9, [0xfff, 0x9, 0x2, 0x81, 0x3ff, 0x1]}}, @pad1]}, 0x88)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}, @mark={0xc, 0x15, {0x35075a, 0x5}}]}, 0x10c}}, 0x0) (async)
sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}, @mark={0xc, 0x15, {0x35075a, 0x5}}]}, 0x10c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffeb}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0)
listen(r7, 0x4) (async)
listen(r7, 0x4)
pipe(&(0x7f0000000180)={<r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000001c0)={'batadv_slave_1\x00'})

49.951581978s ago: executing program 1 (id=7856):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000801863000000000000000900000900000099b300011000000018100000", @ANYRES32=0x1, @ANYBLOB="0000000000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="000000001d000000b702000008000000850000008600000018110000", @ANYRES32, @ANYBLOB="000000000000000018240000", @ANYRES32, @ANYBLOB="00000000820200009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x24}, 0x94)

49.951356713s ago: executing program 33 (id=7856):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000801863000000000000000900000900000099b300011000000018100000", @ANYRES32=0x1, @ANYBLOB="0000000000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="000000001d000000b702000008000000850000008600000018110000", @ANYRES32, @ANYBLOB="000000000000000018240000", @ANYRES32, @ANYBLOB="00000000820200009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x24}, 0x94)

640.520386ms ago: executing program 4 (id=9013):
r0 = socket(0x11, 0x800000003, 0x0)
getpeername$packet(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a320000000014000580080002400000000208000140e1"], 0xa0}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

638.3415ms ago: executing program 4 (id=9015):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000001080)=0x700)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x34, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_ECN={0x8}, @TCA_PIE_BETA={0x8, 0x5, 0x20}, @TCA_PIE_LIMIT={0x8, 0x2, 0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x3}, @TCA_PIE_TARGET={0x8, 0x1, 0x9}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0xf]}}]}]}, 0x88}}, 0x4000010)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000080)={'gretap0\x00', r4, 0x1, 0x700, 0x6, 0x8, {{0x6, 0x4, 0x0, 0x35, 0x18, 0x67, 0x0, 0xda, 0x29, 0x0, @empty, @rand_addr=0x64010101, {[@noop]}}}}})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

502.170024ms ago: executing program 4 (id=9018):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/94, 0x5e}, {&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000980)=""/158, 0x9e}, {&(0x7f00000001c0)=""/49, 0x31}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x7}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/89, 0x59}, {&(0x7f0000000700)=""/88, 0x58}, {&(0x7f0000004740)=""/4096, 0x1059}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x4}, 0x7fffffff}], 0x3, 0x2, 0x0)

501.199199ms ago: executing program 3 (id=9019):
socket$key(0xf, 0x3, 0x2)
socket$inet(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r0, 0x0, 0x2}, 0x18)
pipe(&(0x7f0000000c00))
epoll_create(0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r2}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc0000001e000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0)

500.945762ms ago: executing program 4 (id=9020):
socketpair(0xa, 0x4, 0xc, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x41}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x1891)
sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x28}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x2000c044)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x24000081)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), r0)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r4, 0x8, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x361b7ec57d606e15}, 0x40)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0x303e]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x9, 0x8, 0x7]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x10000, 0x5, 0x6, 0x10, 0x7]}]}, 0x90}, 0x1, 0x0, 0x0, 0x81}, 0x8014)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x1)
r7 = syz_genetlink_get_family_id$net_dm(&(0x7f00000009c0), r1)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40040040}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x1)
r8 = accept4(r6, &(0x7f0000000ac0)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000b40)=0x80, 0x0)
bind$l2tp6(r8, &(0x7f0000000b80)={0xa, 0x0, 0x80, @loopback, 0x7, 0x2}, 0x20)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004800)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000cc0)={'wlan0\x00'})
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x4000)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e40), r1)
sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r10, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x801)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000f80)={'wg1\x00', <r12=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x8c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40008c0}, 0xc005)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000001100), 0x4)

440.407371ms ago: executing program 3 (id=9021):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb43, 0x0, 0x0, 0x102}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x16}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

440.061811ms ago: executing program 3 (id=9022):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, <r1=>0x0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000a400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r3=>0x0, @initdev, @initdev}, &(0x7f0000000100)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r1, r2}, 0x94)

439.527887ms ago: executing program 4 (id=9023):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xe8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x7, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x48}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x68, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5f, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15be1a3c2c548d7259b70c08e808f7af3a3406f731c9d6e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f00000072c0)=[{{&(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006b80)}}, {{&(0x7f0000006cc0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000007200)}}], 0x5, 0x24008000)
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="8700000008000000"], 0x8)
getsockopt$inet6_opts(r5, 0x29, 0x36, 0xfffffffffffffffe, &(0x7f0000000840)=0x7)
syz_emit_ethernet(0xfc0, &(0x7f0000000cc0)={@random="6bc412f0f7fe", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "dd00", 0xf8a, 0x3a, 0x1, @remote, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x8, "7fa117870e3c5193b7c790fbe7846273c2719fd2e9b3f3db613ff25418c7648b0952025b93f2570bdd348feb594ce096988b5a19cc0d46938c89f2c92660e4"}, {0xe, 0x0, 'io'}, {0x22, 0x1e7, "68e11c5c2872a7b593e0115ac2e5d7805e41a798b49194101b15ff6030176eb66a570769d5a74b28df46a72228f13d4c4a3b18240c3da3ffc27df3ca1f0ff33c16c210a52eaa67b6adc3f07ffeb56cd1e2786750c544696b16522ba08708a97b97e24faf27368a542f2aa92637db961902814ef34eb040bd84a92b0f1c2926ab733fce2ba0409f16190460a55de391eca77b484491f9d5e194c78df37f060bb7e246773966de65b6987ed1a6a50a35e17333cfc8b2e90191c6d591db4ad99e5720b2352635aa0b6d6f96e345ab7f80efb946dcda5a86802a6b62f75cfd7e28e026354bdc04e7b47fa046efdc64ce390a3c33f199fc429eebf809f4c97af7d653435213959ccf2cf5643848643223bcc80d4d449343e625b34d803f0f3b0b2409c1008a1353c39d560a92a3fb3ec991f0118223169d771205c7caa2ad43c9c8463c0c6651b1c8ab3d82ce10d4af2658d78d5e3cac7f3b320fe519d98f8e250304c7c4001aca25888c8602cb6e44919f9a7e216bf1d2d068b714123a834d02bb1de23b56d1e25765447a27f671a8aea3c57c9c05b216aa6d0d2f881d16215710a7a2166aaf0b5686712a8da75519baa1887fdc9a9cde8b991a3c73483edd28657251aa88555c0f98ed18324d0b9932a863eb4c678197e89d3cee281b7587dd6f5d7679ec311e53d96ef8479f750662d0277e6717fd6920a4f8dca46b6518793300fe00876185ebf491ac54f7607b53d1e83683d1b4ad24de6946f7ef0ff42d0b402b810fb53315cfd8a628e27f029024eb6d4c09dd16ae568fad166fd78b2a22ded1a71baf71b7431f4b5b572ca00df0282a2d1f7ac426ca15aceecd0b4b1200c0b9aabb641f27f1c5f0f7739b7466a662466e5db4ac5f36a3a28663fc86b34709f2858a40981df847fdbc3463748a4e0559fb5f630f865728c26ef116809beab9888c41345c7d601bd120081ccb8d29f320096730f375c19cc3552d2f5dc336396ace8bc1d268dfc945e59a7f19734168f3a09dd7069ccc1d9743426a35c0de1ba3b97807c237ffb6404fcd795918c916d8bebe7d2af3356e35863b1e7c1119b36ef6a07ddbced73c76ae4b11704e5aa733cec9394b867dba663d2f42391aabf29b6ca9075fb8914dff293d9b8f751dc486075b6a3cb43f3b3a9e84e0fe2b704a21b9280dc4ca2df7d59df2d4a5c5355f11c34118f110a33c283f25d2247760347b3dc3bc49f11c2e4ef452ff2f07da0e0efd3efe4b44db3e462f06afa7996f6762d182b07749b540354582a2c518a3598c169c28b8aa23c012a069782c3cd08a11bf4c102bbac3d9f6d242a13cd9737818c439c1708e8c4634abaf9642cf92f0b8202432567b02489f8fc472c0fd5eb45bd5bf5e923b20f3db7f69e782d49124a34a71802f6be147458db5ea19d8855bb8a96c8eb22f452e3e5e65eed069c06b2d436ecad4b0655ffbdddb55d91d99988f08927f0975e913b0beed2839d6c0ac51bc242548e37495edb449c975e17e963e02ed40f0fcf47f751b9fc478fed2933e73387abd16223883da138b42cf52efb138b7922e68c30a9b41030b4dd9c633609824c603e5a24f90209fa025f55f97b74df170e0275a62263d03472d3a48058f1eb372131a1d816628af093fcb85ddb36bae995eced86257a51c0dcce8f67401a8c50ee0fbca6e1c6acd09861c65fbb731391137f6d06fc7c4de8db33d9a2c23d42959e961547c3ea84624fce831d85f15d5d0918c1ea4ce028b4b2508075139e616587c8b821db010e3de72d0daea1f02ae80068693a3b537a4358604920ee7f9dec80c124b164f467b307cf95ce0759574613f964c28b4290c38190f5704671bca65e7e83f2ef94a3e069c7a3eb44def932ac215010cd92f1f7f8a54fd2150b70ab077efb335cf4394f8dc4215ab52fcf1626ef28458bebef9909c5b82c0e652b6936105a53ab9e6527359a880fa0229d2704d81a0098dc062d9bad1e8fb036055502871755a8c63d993bd4affcf0deb88f02653565820eb08ad34b016a697dc7972648cc5ae004979c2d30148083742c0b71e8338f3ae413cf180e750e1387aed830254251e631ac40d948e4ca82a62d2749dc4a09aac4457eebe6c4f93a9e2c54d1a46cd54ea51a45063c9619467d60ecf039f4b95be19890f1a435becaa6b13da3bc95f8a76f7d8e10ff97dabd220bb4e57985980c1feddbd000eea15019ac8cadc41dfecb7799bcc3677c3b2da267a5da008dc1bae6332c1db2d9ee2febe70c296a45c46998f1a38570fafb5cbbc45bcdfbd1ef194343265629cae43eec0c6c513d35180359a14d2ad36f412c979d1bf084a1955f9a60e8b491a54d2b6264f1a54c1178dbdd78ad7ba396826fdf1a1454d1df1eb752c27519190de3d4245664606498bd93233764a7d86a0c7df4e6ea8da279660ef0355c69b9935a8a15c09c49dc1d3c8134de162e7e07e072e2aebceab5cb64b5c6761f248dd94dcc7ddd4e68fbb4606c35c4d96ba434903ff577b241bf2a924f9065e7139593e633c2de4efcbce0e68ff8b23102c803e121ee37d4bd00c38274f54858b1fa926a17ffc79a4b0ac1597280823daa531e64a2ad66b5957fbe6adee43c4c1d53dc8fd98f17ff6e823268c2c9141a591b618bde5ac3f76492a48117d3ec4a03dea1e96afa98551cf2bd46d380f65ae5fbf7d24d86321065b60fc06aa41d32de1053b5b2d94deb9a8487913a038acab0688cea1c24a50122f55cdf1bddd56142bb85bb8de08a119350053c02f09250494a73b313a33a8d4388aa14a982bc313a6ff47861a96e1cfae7f624f474276ae6e1b9337d273cd56463dca608876269c33cfdb8268837b133f21b643ae35fa1e3d47aca1c750cdfb3ae51366f2cc0a8247d0eae0df78c9e0b0e1a1a96e72c93272816176a5fde4037203c1bca93b7da3f77d61768d0c677f9ff52a9c4113621a1a6b525003527117685046c2dc7ff7e146f5c5902cf02386a0254fd1ff9393278b37d130d3a7c0829633b8e4a6b6a15be8eca2c229f9877a40a8b4be09551fd39aba95f0b76af8ddea29ab956c15cd65bd49d47ebfa02dfe483a4cb47f450e09a4a5b71682a8f17fc185632776d3f988d8a46acd60320de6b68b9b6780d716ae23da6d267524c581d654f2e8f4616f87a143ea2af201f8bca78a0bd7e4acfe714a9a121100eb55ea1ac7d55bf556cec0c9c3ed4a5e218d21175dcb8838124de1d69bf6d97409c9c831310c2c70d6878cae1c85eee72d96d444c5be469a68178708e797c92f4e21a408474191acc33964cca82903d3aec182c445cbd50a8b9e658476848fa178da12dc56408704a306aaf7ae47192dd83900d3ae570a1f2a16b12590f8c4e7a8143f784a4949d85d04cd81ca9a0e5db7968b50a49cb870c9c6cedc26ffc0a6a644578678cf04138ee13e7dc05b15ed310fa88900c0d39e90f07397a494ff542bfa85fa2fe83af74407e3466da35007019ed9a2e7128fb9b7788a3ef162507a9fa85610fe9d19a64578539841711dd0fb7695acaac12af85910ce461e67c38d1407541ca391b519b7dae07785f540a5dfa5fe3293db7593a201d4489865b094ae33bd76e54e89658e27799a3154d5e11622fec984f13c3695da1b33ea4dc0229002cf5ee61056725d7bbd87506eb25f101dcf246a9689d32372a88060e0fb76a00507c08fa6544b3128d1345ff9ec131c8c1a33939aefbcfec243f2a3500f6afbd373e6e61449d629ac5d810f71d83db188c5201af3b8bba190774ee340400b42bb098e126045f4ed6dbe4b3d9d8dcc0d26e44db115111875a9fbaacf105e675e4877f8d0c39d53957237685c34c0ef78b19baa4900e7ce8b6b921b189d76f8c784340d5accb8455b136077e1b48b490119e8fec5bda76ec518120d2e322887c8d860be58402e40c5bfce181b9d2764bb12508f685711fb27c07f852e9b78e8975e678395bb51498d2bda79b366c6e2a195ea49124dce607b3c4a530857c9f9a798f852bb6de69da51d7c5f1e153fc11b4ca95a6abdf40370cfc65899616e9db5fb3797fac58cdfa2e43b6b6eaa3e1d03c11c658b17de679913fe6d2b396df6dce5be4b40c00ac5448b705f7892373d01cf1839a42daeb1edb0b54519d9a0265e56910c62aba07bf5055d2078e614efcdc47f4e5ae86ad09252f135d0cd3e06a720023b8d3819b41e20a0a9f1e93e37a15e1b2650dae2c7694797c761211b6904b72ae5f492d845d258ed5cb526fb2e8e53d5d9a9123c810c29ef8676a25a328d59a061cecad0364f0496d369432059967162617f2bdebe30385672ac1af2525e400c7f77a34f55020b07ec287fa3798671004e95257509c11869cbdb03e0658af8a6e8e72bf314d9ced48cc42528c56f3c45a214e56540ae73639bc6e1a253c96f694dec1fd6abde50474c4dd9074e43b42dcb7270592fe0762dd4d11e3fed51c13802b3147d6c8e12ad2fc1001b8418dbae433d7cf69fa060be5bad38b4c73fd12efe49fb9f0c2dab3705b3cb38b1442e7bfba3eb7fc4ee9d86bd00745cb4f4d4840ef5af349bf96487512ebde05b92c15496d57df51876611244fa00533a0a1444023a99b10b73c7c8a6383a5fcdf2c9d844d9ac4e79d64aa6d19df6313de997e2e83aef072aefca742d24046f685872a65277e0e245df4bae65e4c7ab7ea20e6a32241c7e743068a1b3a66d0a6a03faeb567f5f72dac195271f8a9f776bfdbb7f5b1b4e6bd01c218f4b7f674de27f73f66ca58e9ab92decdc02bfedadf19ed0fb9de243262aff7c8b7f38ed465e661afed1a5fd1bfe6c5dd676e8c5c19eacaa37c386c4b9e65abaf0e03a9700e1833b0a4b508275f9a9d966b5878bfac21c102e69b0231a9bbc1dbfdd70ecfacf14e92c99bb3dff10dcf403d0662269eeac7cc575c12fcb21a82909f4683e91607611391026d316cdaff7d1b38a9cb3bc40500c9556df433aa3e7c18bd7313e550a224de930e94a9fbc280ce27fd961be2383d53aef7a28437f336a1fb7b1e5fe0269e63dd0a5c0997ce1ff44fa620a16895bad348b9095006680f5a04f22ff4cddbe34ba0d07e3e8bcc72f03d5c2d60e222ddfdfe958a54432aff2dc4685ce06bed394296e57d077fa0ca806edda99db3b1fd5c53675c4eabec3bf4546df46436200327ac8c101576356ef38992b3fa59f73997675f4531d0a734afff58b3f4710acf8cde8fbcd7afec486cce41bfd8bd92923f17644964fc87d662bdbaf5169ff61b3424f1563c80f20b886bf1340c43f7d3618b892e9dd61234051aa6d70aca2d94738e51b5fab98d5feda12a82ce321af14ed25a340a4e05c2693b4a620cb97ef934a114c7fe39a62436ec48cf97d26382097e5d0f6784af42dc0adb88aa5ec9e7f79266f3e16e105f06a931466d9d38778dbec0440b9fd04332e01dabe9cd8ddf182b180a80b6279c5efa1a25d096122c06f53bf1357b0846e683d348fc8d7fa72b98c38d17b8fd9808fd278c3b79ea1bbcf187581bf426e"}]}}}}}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)
sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r7, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000)

361.690878ms ago: executing program 4 (id=9024):
ioctl$FIOCLEX(0xffffffffffffffff, 0x5451)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x7, 0x747, 0x2, 0x200}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000200)=@netrom={'nr', 0x0}, 0x10)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffffe01}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa8}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x40800)
bind$alg(r1, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', <r4=>0x0})
recvfrom(r0, &(0x7f0000000400)=""/204, 0xcc, 0x10000, &(0x7f0000000540)=@ll={0x11, 0xf6, r4, 0x1, 0x4, 0x6, @multicast}, 0x80)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x43, 0x4}, 0x10)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000600)={0x7, 0x48c, 0xa, 0x1, 0x4, 0x0, [{0x3, 0x4, 0xffffffffffffffff, '\x00', 0xa}, {0x24, 0x7fffffffffffffff, 0x8, '\x00', 0x800}, {0x5, 0x7, 0xfb3, '\x00', 0x1000}, {0x6, 0x29ee1bae, 0x8000, '\x00', 0x4}]})
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x8}, 0x18)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
recvmsg(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)=""/196, 0xc4}, {&(0x7f0000000880)=""/195, 0xc3}], 0x2, &(0x7f00000009c0)=""/36, 0x24}, 0x0)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x4008, r6}, 0x18)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000c40)={r7, &(0x7f0000000ac0)="dd8d262ee773b9fba09331d2f53b9aeed212a19162d9d76da872a8ce7c4e895b0ec96f9901b70a9f88085b824baf771e4b41763a264b5159c534a3a4700da93be997a622641a6196720f4d5c29caf01515ab1c8f52035d14e1eb6708a34d0366b79389c583075828bd62ca3e4579368fdd8e5376e236bb50caf432aa91f48f080ad16f7836a8cbe10d5a97fc5e1c69f773fb7aa4c1687507345f51a9589b39fe328bcc0815355f28d7bd31d8473bd9cc0f620614d584", &(0x7f0000000b80)=""/160}, 0x20)
gettid()
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x92, 0x0, r7, 0x8b, '\x00', r4, r1, 0x3, 0x5, 0x1}, 0x50)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f00)={0xffffffffffffffff, 0x8}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_ext={0x1c, 0x15, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000dc0)='GPL\x00', 0x1, 0xa5, &(0x7f0000000e00)=""/165, 0x40f00, 0x40, '\x00', r4, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0)={0x1, 0x7, 0x8, 0x29a0}, 0x10, 0x1ea6f, r5, 0x0, &(0x7f0000000f40)=[r9], 0x0, 0x10, 0x6}, 0x94)
r10 = accept4$inet(0xffffffffffffffff, &(0x7f0000001040)={0x2, 0x0, @remote}, &(0x7f0000001080)=0x10, 0x80800)
getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x487, &(0x7f00000010c0), &(0x7f0000001100)=0x30)
shutdown(r10, 0x1)
recvmsg$qrtr(r1, &(0x7f0000001200)={&(0x7f0000001140), 0xc, &(0x7f00000011c0)=[{&(0x7f0000001180)=""/48, 0x30}], 0x1, 0x0, 0x0, 0x1}, 0x38, 0x80012183)
ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000001240))

361.195823ms ago: executing program 3 (id=9025):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x300000000000000}}}, 0xb8}}, 0x0)

360.888716ms ago: executing program 3 (id=9026):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040880)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040880) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async)

360.225634ms ago: executing program 0 (id=9027):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb8}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r6=>0x0})
sendto$packet(r4, &(0x7f0000000000)="09000000e70014000000d97bfbf788a83baa88a8000000000000810000008100", 0x20, 0x200000c4, &(0x7f0000000080)={0x11, 0x88a8, r6, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14)
bpf$PROG_LOAD(0xfe, &(0x7f0000000240)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb43}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)

279.776765ms ago: executing program 3 (id=9028):
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0xfe, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x68}, 0x1, 0x7}, 0x0)
socket$phonet(0x23, 0x2, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x80, 0x0}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x5f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x55}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x6e)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r8)
sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c40)={0x50, r9, 0x1, 0x70bd27, 0x0, {0x4}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={0x34, 0x3e, 0x1, 0x80000, 0x0, {0x2}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@nested={0x14, 0x7, 0x0, 0x1, [@nested={0x6558, 0x115, 0x0, 0x1, [@typed={0xc, 0xed, 0x0, 0x0, @u64=0x2}]}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

278.34532ms ago: executing program 0 (id=9029):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000100100000e0000401000000000000000100100000e000000"], 0x20}, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYBLOB="020000003b8e35f2aa065c19c72d80cd0a28c96a619f07bfe8a1c5ae3d9c3819e3804cc72890d7829ff01ee1bc73cfb76c47c3322a888a4b6a7825d5fdb1", @ANYRES16=0x0, @ANYBLOB="010800000000000000000b0000000c0099003000000005000000280050800800030001ac0f000500020000000000050002000000000009000100061e04b77a000000"], 0x48}, 0x1, 0x0, 0x0, 0x4091}, 0x10) (rerun: 64)
r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x1f, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x18}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000100)='wg2\x00', 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x24706d4278830b08}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = socket$kcm(0x21, 0x5, 0x2)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000010010300010000530eb2670000000000c7568a2b5d9d8572cef3a8203909efec2cad16a8f3b00ac1c1265fd1de2af2f3b8c68e70fe9bc86938b6ef228bc0d79a0f5602aab72f9a8d103395ea027599ee958448f1dfb7ff29238caf3ec3389d53dbc6f9192078cf7be53e0de23e43d8dc6f8ccb23"], 0x18}, 0x0) (async)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async)
listen(r7, 0x0) (async)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 32)
r10 = accept(r0, 0x0, 0x0) (rerun: 32)
sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
unshare(0x6020480) (async, rerun: 64)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x9, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x8, 0x9, 0x2, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x1, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x6, 0x0, 0x11000, 0x2, 0x5, 0x3, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0xfffffff3, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x1, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x8, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xe, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x10000003, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5f, 0xffffffff]}}) (async, rerun: 64)
poll(&(0x7f0000000640)=[{r3, 0x8}, {0xffffffffffffffff, 0x20}, {r5, 0x8}, {r4, 0x5000}, {r8, 0x4000}], 0x5, 0x9) (async)
socket$nl_generic(0x10, 0x3, 0x10)

220.807386ms ago: executing program 0 (id=9030):
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10)
pwrite64(0xffffffffffffffff, 0x0, 0xff0f, 0x100000001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='task_rename\x00', r1}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000"], 0x17)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18dfff000000000055ab000036713eec71121d0095001d00000000dd0000000000000005f031b2ce3d4976ac84fb2ff8958d8be045a50663e551ff0fe943b79fdc85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

220.335516ms ago: executing program 0 (id=9031):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r4=>0x0})
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000ac0)={'wpan0\x00'})
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x60000)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000800), &(0x7f00000003c0)=0x8)
unshare(0x2040400)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r9, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffff13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4, 0x8, 0x4, {}, {0x0, 0xea60}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "8187dc4bf6d0fd86"}}, 0x48}, 0x1, 0x0, 0x0, 0xc850}, 0x240400c6)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="30000000040601040000000000000000030000050500010007000000050001"], 0x30}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r10, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)

529.465µs ago: executing program 0 (id=9032):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1bc, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x184, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fb9d13e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4e7}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7175}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63fb63dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f11}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7adb}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6520cd5a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ba50db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a77}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d06583c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6476}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8402}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2522e5b3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x164d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a60}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9388}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd718}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66bafd95}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47fd1c41}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x582cb6b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ccd816}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x163a50d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa639}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb37d29d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6dcc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x63a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ea048bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b25}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc49a}, @NLBL_CIPSOV4_A_MLSCATLOC={0xfffffffffffffeab, 0x9, 0x56c9fd5f}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16136e78}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb340}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72a57452}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf89a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43237551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32edbefd}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa6a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac28}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa849ad0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdcd6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4dd6}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0xc082}, 0xc000)

0s ago: executing program 0 (id=9033):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a739dfe54ad99ffa18c27526b51001fb4f778791377c"], 0x1c}}, 0x4000054)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x98, r4, 0xf93329e27f8bac5b, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)}}], 0x2, 0x20000004)
shutdown(r5, 0x1)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r6, 0x6, 0x1c, 0x0, &(0x7f0000000040))
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={<r8=>0x0, 0xd, 0x3, 0x8}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x4d}}, 0xe, 0x7, 0x9, 0x3, 0x20, 0xdf, 0x2}, &(0x7f0000000180)=0x9c)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x40, r10, 0x1, 0x2070bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0d5}, 0x24044884)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0)={0x2, 'veth1_to_bridge\x00', {0xffffffff}, 0x5})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

kernel console output (not intermixed with test programs):

: (slave vxcan3): Error -95 calling set_mac_address
[  299.218045][T21719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5568'.
[  299.225804][T21719] 8021q: adding VLAN 0 to HW filter on device bond17
[  299.288331][T21727] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5575'.
[  299.321504][T21729] bridge_slave_0: entered promiscuous mode
[  299.380726][T21738] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  299.874196][T21786] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  300.122392][T21806] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  300.479466][T21864] x_tables: duplicate underflow at hook 2
[  300.524724][T21860] v: renamed from ip6_vti0
[  300.528430][T21860] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.692575][T21871] validate_nla: 6 callbacks suppressed
[  300.692585][T21871] netlink: 'syz.1.5623': attribute type 1 has an invalid length.
[  300.897214][T21881] netlink: 'syz.1.5628': attribute type 3 has an invalid length.
[  300.982376][T21893] netlink: 'syz.1.5632': attribute type 1 has an invalid length.
[  301.393390][T21938] netlink: 'syz.2.5644': attribute type 2 has an invalid length.
[  301.425913][T21942] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  301.748273][T21965] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  301.799406][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  301.941551][T21974] netlink: 'syz.0.5656': attribute type 13 has an invalid length.
[  301.956147][T21974] gretap0: refused to change device tx_queue_len
[  301.958837][T21974] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  302.387317][T21982] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  302.667278][T22013] netlink: 'syz.2.5671': attribute type 1 has an invalid length.
[  302.670606][T22013] __nla_validate_parse: 28 callbacks suppressed
[  302.670616][T22013] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5671'.
[  302.768024][T22023] ip6gre4: entered allmulticast mode
[  302.782136][T22029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5677'.
[  302.786146][T22026] netlink: 'syz.0.5676': attribute type 1 has an invalid length.
[  302.789222][T22026] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5676'.
[  302.796752][T22030] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5677'.
[  302.820086][T22035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5679'.
[  302.852110][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5681'.
[  302.864825][T22035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5679'.
[  302.869415][T22041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5681'.
[  302.908778][T22038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5680'.
[  302.943845][T22050] netlink: 388 bytes leftover after parsing attributes in process `syz.2.5684'.
[  303.085896][T22071] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  303.171844][T22080] netem: unknown loss type 13
[  303.173726][T22080] netem: change failed
[  303.211898][T22087] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  303.244501][T22092] netlink: 'syz.2.5697': attribute type 13 has an invalid length.
[  303.247513][T22092] netlink: 'syz.2.5697': attribute type 11 has an invalid length.
[  303.257580][T22092] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000
[  303.263415][T22092] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000
[  303.558300][T22132] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  304.465425][T22137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.599418][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  305.018442][T22154] netlink: 'syz.1.5721': attribute type 1 has an invalid length.
[  305.309054][T22192] 8021q: VLANs not supported on sit0
[  305.961288][T22228] validate_nla: 1 callbacks suppressed
[  305.961299][T22228] netlink: 'syz.1.5732': attribute type 4 has an invalid length.
[  306.117375][T22241] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  306.125632][T22241] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  306.445226][T22251] IPv6: sit5: Disabled Multicast RS
[  306.809865][T22264] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  306.893271][T22266] netlink: 'syz.2.5759': attribute type 1 has an invalid length.
[  307.354767][T22287] netlink: 'syz.0.5766': attribute type 1 has an invalid length.
[  307.427968][T22291] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  307.431430][T22291] macsec1: left allmulticast mode
[  307.433251][T22291] netdevsim0: left promiscuous mode
[  307.435069][T22291] netdevsim0: left allmulticast mode
[  307.437017][T22291] bond4: left promiscuous mode
[  307.438759][T22291] batadv1: left promiscuous mode
[  307.442211][T22291] batadv1: left allmulticast mode
[  307.445266][T22291] xfrm1: left promiscuous mode
[  307.446898][T22291] xfrm1: left allmulticast mode
[  307.448612][T22291] veth5: left promiscuous mode
[  307.450695][T22291] bond0: left promiscuous mode
[  307.452565][T22291] geneve3: left promiscuous mode
[  307.454400][T22291] bond15: left promiscuous mode
[  307.456094][T22291] bond15: left allmulticast mode
[  307.457916][T22291] macvtap0: left allmulticast mode
[  307.459710][T22291] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  307.462153][T22291] batman_adv: batadv0: Interface deactivated: macvtap0
[  307.464418][T22291] batman_adv: batadv0: Removing interface: macvtap0
[  307.477219][T22291] team0: Port device gtp3 removed
[  307.594530][T22304] unknown channel width for channel at 909000KHz?
[  307.670722][T22305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.681545][T22313] __nla_validate_parse: 32 callbacks suppressed
[  307.681554][T22313] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5778'.
[  307.687700][T22303] tipc: Disabling bearer <eth:syzkaller0>
[  307.861351][T22340] netlink: 'syz.1.5787': attribute type 11 has an invalid length.
[  307.917157][T22351] netlink: 'syz.1.5790': attribute type 4 has an invalid length.
[  307.933260][T22351] netlink: 'syz.1.5790': attribute type 4 has an invalid length.
[  308.092516][T22375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5798'.
[  308.095432][T22375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5798'.
[  308.354367][T22417] netlink: 'syz.1.5812': attribute type 1 has an invalid length.
[  308.358330][T22417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5812'.
[  308.406807][T22425] netlink: 'syz.0.5815': attribute type 1 has an invalid length.
[  308.409688][T22425] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5815'.
[  308.420874][T22421] netlink: 'syz.1.5814': attribute type 10 has an invalid length.
[  308.454334][T22430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5817'.
[  308.646852][T22455] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  309.422903][T22462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5827'.
[  309.559402][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  309.612916][T22486] openvswitch: netlink: Missing key (keys=40, expected=80)
[  309.704663][T22499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5842'.
[  309.720624][T22499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5842'.
[  310.312869][T22582] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5861'.
[  310.315928][T22582] 8021q: VLANs not supported on team0
[  310.352561][T22586] netlink: 'syz.2.5862': attribute type 1 has an invalid length.
[  310.359427][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  310.382559][T22588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.386935][T22588] syzkaller0: entered promiscuous mode
[  310.389609][T22588] syzkaller0: entered allmulticast mode
[  310.396559][T22587] tipc: Resetting bearer <eth:syzkaller0>
[  310.415715][T22587] tipc: Disabling bearer <eth:syzkaller0>
[  310.637462][T22610] netlink: 'syz.1.5873': attribute type 1 has an invalid length.
[  310.649476][T22608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  311.758047][T22635] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  312.163829][T22687] netlink: 'syz.2.5900': attribute type 1 has an invalid length.
[  312.218239][T22694] _Z`Ԁ@: entered promiscuous mode
[  312.223207][T22694] netlink: 'syz.1.5903': attribute type 10 has an invalid length.
[  312.226425][T22694] bond0: (slave wlan1): Releasing active interface
[  312.232503][T22694] netlink: 'syz.1.5903': attribute type 10 has an invalid length.
[  312.403531][T22709] 8021q: adding VLAN 0 to HW filter on device team0
[  312.407995][T22709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  312.452172][  T789] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  312.459661][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  312.585987][T22716] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  313.399768][  T789] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  313.832189][ T5660] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  313.835080][ T5660] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  313.837605][T22718] __nla_validate_parse: 9 callbacks suppressed
[  313.837613][T22718] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5912'.
[  314.040573][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  314.055495][T22751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5923'.
[  314.384385][T22779] xt_TPROXY: Can be used only with -p tcp or -p udp
[  314.429896][T22781] netlink: 'syz.2.5933': attribute type 1 has an invalid length.
[  314.433162][T22781] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5933'.
[  314.466114][T22783] netlink: 14716 bytes leftover after parsing attributes in process `syz.2.5934'.
[  314.469514][T22783] netlink: 2032 bytes leftover after parsing attributes in process `syz.2.5934'.
[  314.738427][T22789] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5936'.
[  314.809527][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  314.841014][T22793] netlink: 'syz.2.5937': attribute type 1 has an invalid length.
[  314.845044][T22793] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5937'.
[  314.852788][T22799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5939'.
[  314.880550][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  314.957128][T22801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5940'.
[  315.210215][T22820] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  316.144172][T22845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5951'.
[  316.269153][T22857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.286160][T22860] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20022
[  316.404137][T22873] netlink: 'syz.0.5963': attribute type 30 has an invalid length.
[  316.407080][T22874] netlink: 'syz.0.5963': attribute type 30 has an invalid length.
[  316.413280][T22873] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  316.416425][T22873] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  316.420759][T22873] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  316.423880][T22873] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  316.437114][T22873] netlink: 'syz.0.5963': attribute type 30 has an invalid length.
[  316.445572][T22874] netlink: 'syz.0.5963': attribute type 30 has an invalid length.
[  316.483329][T22878] netlink: 'syz.2.5965': attribute type 1 has an invalid length.
[  316.503994][T22883] bridge_slave_0: entered promiscuous mode
[  316.805404][T22915] : entered promiscuous mode
[  316.996499][T22942] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  317.112562][T22955] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  317.121938][T22955] xt_hashlimit: size too large, truncated to 1048576
[  317.583953][T22973] validate_nla: 3 callbacks suppressed
[  317.583964][T22973] netlink: 'syz.1.5998': attribute type 10 has an invalid length.
[  317.736970][T22984] netlink: 'syz.1.6003': attribute type 2 has an invalid length.
[  317.741884][T22984] netlink: 'syz.1.6003': attribute type 5 has an invalid length.
[  317.809444][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  317.921958][T23001] netlink: 'syz.2.6008': attribute type 10 has an invalid length.
[  318.125862][T23014] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  318.130519][T23014] netlink: 'syz.2.6013': attribute type 10 has an invalid length.
[  318.528099][T23020] netlink: 'syz.0.6016': attribute type 10 has an invalid length.
[  318.764788][T23039] netlink: 'syz.1.6021': attribute type 1 has an invalid length.
[  318.817801][T23043] netlink: 'syz.1.6023': attribute type 1 has an invalid length.
[  319.005723][T23050] __nla_validate_parse: 29 callbacks suppressed
[  319.005736][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6026'.
[  319.028120][T23052] netlink: 'syz.2.6027': attribute type 1 has an invalid length.
[  319.036306][T23052] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6027'.
[  319.053136][T23054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6028'.
[  319.131955][T23057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6029'.
[  319.138763][T23057] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  319.146945][T23057] tipc: Enabled bearer <udp:syz1>, priority 10
[  319.272802][T23083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6037'.
[  319.526304][T23117] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  319.585370][T23125] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6051'.
[  319.592692][T23125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6051'.
[  319.691550][T23130] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6054'.
[  319.695491][T23129] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6054'.
[  319.696439][T23135] IPVS: set_ctl: invalid protocol: 8345 172.30.1.1:20003
[  319.701072][T23130] IPVS: set_ctl: invalid protocol: 8345 172.30.1.1:20003
[  319.705263][T23130] Cannot find del_set index 17 as target
[  319.836779][T23147] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  319.858911][T23147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6061'.
[  320.228213][T23178] syz!: rxe_newlink: already configured on team_slave_0
[  320.233036][T23178] xt_hashlimit: size too large, truncated to 1048576
[  320.344268][T23189] netlink: 'syz.2.6076': attribute type 1 has an invalid length.
[  320.487908][T23214] macvtap0: entered allmulticast mode
[  320.490307][T23214] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  320.648617][T23230] bond17: entered promiscuous mode
[  320.651119][T23230] 8021q: adding VLAN 0 to HW filter on device bond17
[  320.733074][T23230] bond17 (unregistering): Released all slaves
[  321.041144][T23262] : entered promiscuous mode
[  321.275249][T23273] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  322.214348][T23284] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  322.216841][T23284] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  322.231169][T23281] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  322.264896][T23286] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  322.270425][T23286] xt_hashlimit: size too large, truncated to 1048576
[  322.672517][T23308] nbd: must specify a device to reconfigure
[  322.724825][T23314] 0{X: renamed from gretap0
[  322.730786][T23314] 0{X: left promiscuous mode
[  322.733330][T23314] 0{X: entered allmulticast mode
[  322.736176][T23314] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  322.765603][T23320] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3)
[  322.769152][T23320] validate_nla: 5 callbacks suppressed
[  322.769161][T23320] netlink: 'syz.0.6125': attribute type 2 has an invalid length.
[  322.783481][T23320] : entered promiscuous mode
[  322.796106][T23322] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  322.801315][T23322] xt_hashlimit: size too large, truncated to 1048576
[  323.234108][T23354] TCP: TCP_TX_DELAY enabled
[  323.241863][T23356] syz!: rxe_newlink: already configured on team_slave_0
[  323.358195][T23367] netlink: 'syz.0.6143': attribute type 1 has an invalid length.
[  323.406435][T23372] xt_hashlimit: max too large, truncated to 1048576
[  323.408733][T23372] No such timeout policy "syz1"
[  323.581143][T23386] syz!: rxe_newlink: already configured on team_slave_0
[  323.837276][T23400] netlink: 'syz.0.6155': attribute type 1 has an invalid length.
[  323.894106][T23404] syz!: rxe_newlink: already configured on team_slave_0
[  324.048822][T23410] IPv6: sit6: Disabled Multicast RS
[  324.051913][T23410] sit6: entered allmulticast mode
[  324.126721][T23418] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  324.129689][T23418] __nla_validate_parse: 34 callbacks suppressed
[  324.129699][T23418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6164'.
[  324.279474][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  324.302951][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6167'.
[  324.322328][T23430] netlink: 'syz.1.6167': attribute type 1 has an invalid length.
[  324.324882][T23430] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6167'.
[  324.329890][T23424] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  324.338431][T23433] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  324.445040][T23442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6170'.
[  324.451175][T23441] syz!: rxe_newlink: already configured on team_slave_0
[  324.456684][T23441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6172'.
[  324.741526][T23457] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6178'.
[  324.777182][T23459] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6179'.
[  325.234742][T23484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6187'.
[  325.317433][T23490] netlink: 316 bytes leftover after parsing attributes in process `syz.1.6191'.
[  325.342426][T23498] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6194'.
[  325.357893][T23498] delete_channel: no stack
[  325.400880][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  325.449037][T23519] syzkaller1: entered promiscuous mode
[  325.452370][T23519] syzkaller1: entered allmulticast mode
[  325.505407][T23525] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  325.508368][T23525] xt_hashlimit: size too large, truncated to 1048576
[  325.615549][T23544] netlink: 'syz.0.6208': attribute type 1 has an invalid length.
[  325.751945][T23565] netlink: 'syz.1.6211': attribute type 7 has an invalid length.
[  325.781133][T23570] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  325.784763][T23570] xt_hashlimit: size too large, truncated to 1048576
[  325.926159][T23582] syzkaller0: entered promiscuous mode
[  325.928087][T23582] syzkaller0: entered allmulticast mode
[  325.944213][T23586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.028649][T23594] vxcan3: entered allmulticast mode
[  326.046750][T23600] syz!: rxe_newlink: already configured on team_slave_0
[  326.051458][T23600] xt_hashlimit: size too large, truncated to 1048576
[  326.199490][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  326.419861][T23627] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  326.492588][T23631] delete_channel: no stack
[  327.457997][T23653] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  327.466847][T23653] xt_hashlimit: size too large, truncated to 1048576
[  327.785445][T23669] netlink: 'syz.1.6244': attribute type 1 has an invalid length.
[  327.861814][T23674] netlink: 'syz.1.6246': attribute type 1 has an invalid length.
[  327.921985][T23679] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  327.928884][T23679] xt_hashlimit: size too large, truncated to 1048576
[  328.229155][T23696] xt_ecn: cannot match TCP bits for non-tcp packets
[  328.403469][T23712] syz!: rxe_newlink: already configured on team_slave_0
[  328.407139][T23712] xt_hashlimit: size too large, truncated to 1048576
[  328.629631][T23732] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  328.683036][T23738] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  328.699662][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  328.836479][T23748] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  328.844881][T23748] xt_hashlimit: size too large, truncated to 1048576
[  329.081878][T23754] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  329.479748][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  329.508557][T23768] __nla_validate_parse: 17 callbacks suppressed
[  329.508569][T23768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6278'.
[  329.514407][T23768] netlink: 'syz.1.6278': attribute type 9 has an invalid length.
[  329.998706][T23796] can: request_module (can-proto-3) failed.
[  330.593812][T23807] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6289'.
[  330.597266][T23807] hsr_slave_0: left promiscuous mode
[  330.661853][T23812] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6291'.
[  330.782916][T23816] 8021q: VLANs not supported on ip6tnl0
[  330.791708][T23818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6294'.
[  330.798223][T23816] netlink: 'syz.1.6293': attribute type 8 has an invalid length.
[  330.827785][T23824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6297'.
[  330.942551][T23840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.959400][T23842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6300'.
[  330.976337][T23836] can: request_module (can-proto-3) failed.
[  331.013571][T23846] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  331.230235][T23862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6311'.
[  331.436555][T23879] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  331.476287][T23879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6318'.
[  331.713419][T23890] netlink: 'syz.2.6320': attribute type 1 has an invalid length.
[  331.718736][T23890] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6320'.
[  331.808853][T23897] syz!: rxe_newlink: already configured on team_slave_0
[  331.820460][T23897] xt_hashlimit: size too large, truncated to 1048576
[  332.137791][T23924] netlink: 'syz.2.6332': attribute type 1 has an invalid length.
[  332.182043][T23928] netlink: 'syz.1.6333': attribute type 1 has an invalid length.
[  332.184876][T23928] netlink: 'syz.1.6333': attribute type 10 has an invalid length.
[  332.187563][T23928] netlink: 236 bytes leftover after parsing attributes in process `syz.1.6333'.
[  332.191182][T23924] 8021q: adding VLAN 0 to HW filter on device bond18
[  332.242956][T23920] can: request_module (can-proto-3) failed.
[  332.254332][T23932] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  332.260112][T23932] xt_hashlimit: size too large, truncated to 1048576
[  332.676629][T23957] syzkaller0: entered promiscuous mode
[  332.678690][T23957] syzkaller0: entered allmulticast mode
[  333.172719][T23983] xt_hashlimit: size too large, truncated to 1048576
[  333.585281][T24001] netlink: 'syz.0.6357': attribute type 10 has an invalid length.
[  333.650502][T24006] netlink: 'syz.0.6359': attribute type 3 has an invalid length.
[  334.443460][T24018] erspan0: left allmulticast mode
[  334.452695][T24018] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.456836][T24018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  334.606074][T24029] netlink: 'syz.2.6367': attribute type 1 has an invalid length.
[  334.608796][T24029] __nla_validate_parse: 3 callbacks suppressed
[  334.608804][T24029] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6367'.
[  334.741023][T24045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6371'.
[  334.995250][T24069] x_tables: duplicate underflow at hook 3
[  335.052773][T24073] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  335.067797][T24075] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6381'.
[  335.385132][T24085] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6383'.
[  335.680151][T24101] xt_hashlimit: size too large, truncated to 1048576
[  335.898560][T24099] pim6reg: left allmulticast mode
[  335.953576][T24125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6394'.
[  335.990521][T24128] xt_hashlimit: size too large, truncated to 1048576
[  335.992431][T24130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6397'.
[  336.124779][T24142] netlink: 'syz.2.6401': attribute type 1 has an invalid length.
[  336.127516][T24142] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6401'.
[  336.152325][T24144] xt_hashlimit: size too large, truncated to 1048576
[  336.237386][T24151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6403'.
[  336.244671][T24151] vlan0: entered allmulticast mode
[  336.246416][T24151] bridge_slave_0: entered allmulticast mode
[  336.327032][T24162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6408'.
[  336.398491][T24168] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6416'.
[  336.548164][T24174] xt_hashlimit: size too large, truncated to 1048576
[  336.882339][T24207] SET target dimension over the limit!
[  337.826798][T24243] xt_hashlimit: size too large, truncated to 1048576
[  337.969122][T24259] openvswitch: netlink: Message has 4 unknown bytes.
[  337.973569][T24259] netlink: 'syz.1.6440': attribute type 13 has an invalid length.
[  338.040750][T24266] vxcan1: entered allmulticast mode
[  338.042905][T24266] vxcan1: left allmulticast mode
[  338.065694][T24268] tun0: tun_chr_ioctl cmd 2147767507
[  338.067736][T24268] tun0: tun_chr_ioctl cmd 2147767507
[  338.896418][T24298] netlink: 'syz.2.6452': attribute type 1 has an invalid length.
[  338.899077][T24298] netlink: 'syz.2.6452': attribute type 2 has an invalid length.
[  338.907652][T24298] dvmrp0: entered allmulticast mode
[  339.176893][T24316] netlink: 'syz.0.6457': attribute type 21 has an invalid length.
[  339.181045][T24316] xt_CT: You must specify a L4 protocol and not use inversions on it
[  339.378989][T24335] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  339.630708][T24356] __nla_validate_parse: 12 callbacks suppressed
[  339.630720][T24356] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6472'.
[  340.052216][T24381] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6479'.
[  340.139177][T24392] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  340.360861][T24408] xt_hashlimit: size too large, truncated to 1048576
[  340.744367][T24413] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  340.770384][T24415] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  340.937209][T24431] xt_hashlimit: size too large, truncated to 1048576
[  341.066761][T24437] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  341.375052][T24446] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  341.811752][T24466] netlink: 'syz.2.6506': attribute type 9 has an invalid length.
[  341.819560][T24467] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  341.820837][T24466] netlink: 185272 bytes leftover after parsing attributes in process `syz.2.6506'.
[  341.837262][T24473] netlink: 'syz.0.6507': attribute type 1 has an invalid length.
[  341.842151][T24473] netlink: 'syz.0.6507': attribute type 2 has an invalid length.
[  341.852635][T24473] netlink: 'syz.0.6507': attribute type 1 has an invalid length.
[  341.855231][T24473] netlink: 'syz.0.6507': attribute type 2 has an invalid length.
[  341.952670][T24484] IPVS: stopping backup sync thread 10941 ...
[  342.018284][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6513'.
[  342.067690][T24497] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6515'.
[  342.100823][T24499] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  342.108121][T24499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6516'.
[  342.382974][T24511] netlink: 'syz.1.6521': attribute type 1 has an invalid length.
[  342.385669][T24511] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6521'.
[  342.389162][T24511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6521'.
[  342.447981][T24516] xt_hashlimit: size too large, truncated to 1048576
[  342.826796][T24534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6529'.
[  342.831616][T24534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6529'.
[  342.849428][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  343.220414][   T24] tipc: Node number set to 4257234861
[  343.263679][T24551] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  343.676405][T24561] netlink: 'syz.1.6539': attribute type 13 has an invalid length.
[  343.695362][T24560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  343.703220][T24561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  343.721300][T24560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.777960][T24560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.834255][T24559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.967497][T24569] xt_TCPMSS: Only works on TCP SYN packets
[  343.969692][T24570] xt_TCPMSS: Only works on TCP SYN packets
[  344.042653][T24577] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  344.107745][T24574] validate_nla: 3 callbacks suppressed
[  344.107756][T24574] netlink: 'syz.0.6544': attribute type 6 has an invalid length.
[  344.128905][T24588] xt_hashlimit: size too large, truncated to 1048576
[  344.446426][T24602] netlink: 'syz.2.6554': attribute type 6 has an invalid length.
[  344.507664][T24628] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.512578][T24628] syzkaller0: entered promiscuous mode
[  344.514390][T24628] syzkaller0: entered allmulticast mode
[  344.518828][T24628] tipc: Resetting bearer <eth:syzkaller0>
[  344.522719][T24627] tipc: Resetting bearer <eth:syzkaller0>
[  344.531563][T24627] tipc: Disabling bearer <eth:syzkaller0>
[  344.709601][T24652] __nla_validate_parse: 6 callbacks suppressed
[  344.709614][T24652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6570'.
[  344.714705][T24652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6570'.
[  344.728192][T24653] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6568'.
[  344.768955][T24657] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6571'.
[  344.795886][T24659] xt_hashlimit: size too large, truncated to 1048576
[  344.930379][T24672] netlink: 'syz.1.6575': attribute type 1 has an invalid length.
[  344.933030][T24672] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6575'.
[  344.957766][T24674] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  344.994863][T24677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6576'.
[  345.068876][T24682] netlink: 'syz.1.6579': attribute type 1 has an invalid length.
[  345.071564][T24682] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6579'.
[  345.901992][T24699] netlink: 'syz.2.6584': attribute type 3 has an invalid length.
[  345.907498][T24699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6584'.
[  345.938845][T24701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.945739][T24701] netlink: 'syz.2.6585': attribute type 4 has an invalid length.
[  345.953605][T24703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6586'.
[  345.994065][T24707] netlink: 308 bytes leftover after parsing attributes in process `syz.1.6588'.
[  345.997072][T24707] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  346.050474][T24715] netlink: 'syz.1.6589': attribute type 21 has an invalid length.
[  346.053199][T24715] netlink: 'syz.1.6589': attribute type 4 has an invalid length.
[  346.069213][T24715] netlink: 'syz.1.6589': attribute type 3 has an invalid length.
[  346.347839][T24739] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  346.513587][T24747] netlink: 'syz.1.6601': attribute type 1 has an invalid length.
[  347.033021][T24783] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  347.794156][T24788] : renamed from bond0 (while UP)
[  348.028613][T24803] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  349.210798][   T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  349.478363][T24933] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  349.793393][T24950] vlan0: entered promiscuous mode
[  349.795413][T24950] macvlan3: entered promiscuous mode
[  350.156016][T24952] macsec3: entered promiscuous mode
[  350.157911][T24952] macsec3: entered allmulticast mode
[  350.200508][   T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  350.370687][T24957] __nla_validate_parse: 201 callbacks suppressed
[  350.370697][T24957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6672'.
[  350.431069][T24961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6674'.
[  350.542806][T24969] validate_nla: 3 callbacks suppressed
[  350.542816][T24969] netlink: 'syz.2.6677': attribute type 4 has an invalid length.
[  350.552075][T24969] netlink: 'syz.2.6677': attribute type 4 has an invalid length.
[  350.561264][T24969] xt_hashlimit: size too large, truncated to 1048576
[  350.747132][T24983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6683'.
[  350.810651][T24990] delete_channel: no stack
[  350.951289][T25001] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6688'.
[  350.954456][T25001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6688'.
[  350.957363][T25001] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6688'.
[  350.959222][T25003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6690'.
[  350.961083][T25001] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6688'.
[  350.968384][T25001] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6688'.
[  351.728962][T25012] xt_hashlimit: size too large, truncated to 1048576
[  351.862534][T25018] vlan1: entered promiscuous mode
[  351.864353][T25018] vlan1: entered allmulticast mode
[  351.902801][T25022] netlink: 'syz.2.6697': attribute type 6 has an invalid length.
[  352.038910][T25035] team0: port 1(batadv0) entered blocking state
[  352.041491][T25035] team0: port 1(batadv0) entered disabled state
[  352.043685][T25035] batadv0: entered allmulticast mode
[  352.046888][T25035] batadv0: entered promiscuous mode
[  352.066543][T25028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6700'.
[  352.070591][T25028] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  352.073907][T25028] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  352.539563][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  352.543182][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  352.935384][T25079] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  352.937920][T25079] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  353.387150][T25112] netlink: 'syz.0.6726': attribute type 1 has an invalid length.
[  353.396023][T25114] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  353.407430][T25114] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  353.591947][T25122] netlink: 'syz.1.6731': attribute type 2 has an invalid length.
[  353.668848][T25122] bond14: (slave gretap3): Releasing active interface
[  353.674758][T25122] bond15: (slave bridge28): Releasing active interface
[  353.683165][T25122] batadv0: left allmulticast mode
[  353.685044][T25122] batadv0: left promiscuous mode
[  353.686921][T25122] team0: port 1(batadv0) entered disabled state
[  353.719973][    T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  353.723488][T25132] netlink: 'syz.0.6734': attribute type 35 has an invalid length.
[  353.975334][T25162] netlink: 'syz.0.6743': attribute type 1 has an invalid length.
[  354.036870][T25168] x_tables: duplicate underflow at hook 3
[  354.300055][T25194] netlink: 'syz.0.6750': attribute type 1 has an invalid length.
[  354.327981][T25196] xt_hashlimit: size too large, truncated to 1048576
[  354.359464][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  354.610004][    T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  355.081671][T25247] netlink: 'syz.2.6766': attribute type 11 has an invalid length.
[  355.162753][T25254] can: request_module (can-proto-0) failed.
[  355.186026][T25266] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  355.437939][T25293] xt_hashlimit: size too large, truncated to 1048576
[  355.596880][T25307] netlink: 'syz.2.6783': attribute type 1 has an invalid length.
[  355.602126][T25307] __nla_validate_parse: 18 callbacks suppressed
[  355.602137][T25307] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6783'.
[  355.666861][T25309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6784'.
[  355.782122][T25321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6787'.
[  356.234182][T25355] netlink: 'syz.0.6800': attribute type 1 has an invalid length.
[  356.237042][T25355] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6800'.
[  356.797927][T25383] sctp: [Deprecated]: syz.2.6810 (pid 25383) Use of int in max_burst socket option deprecated.
[  356.797927][T25383] Use struct sctp_assoc_value instead
[  356.805075][T25383] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6810'.
[  357.194890][T25386] netlink: 'syz.0.6811': attribute type 10 has an invalid length.
[  357.198096][T25386] netlink: 'syz.0.6811': attribute type 10 has an invalid length.
[  357.200978][T25386] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6811'.
[  357.748552][T25410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6817'.
[  357.840803][T25412] netlink: 'syz.2.6818': attribute type 5 has an invalid length.
[  358.516713][T25412] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  358.558468][T25418] netlink: 'syz.2.6820': attribute type 2 has an invalid length.
[  358.567341][T25418] netlink: 'syz.2.6820': attribute type 1 has an invalid length.
[  358.576580][T25418] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6820'.
[  358.643848][T25422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6821'.
[  358.694950][T25436] pim6reg1: entered promiscuous mode
[  358.696772][T25436] pim6reg1: entered allmulticast mode
[  358.742151][T25440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6827'.
[  358.806393][T25445] netlink: 'syz.0.6829': attribute type 7 has an invalid length.
[  358.808915][T25445] netlink: 'syz.0.6829': attribute type 8 has an invalid length.
[  358.842923][T25445] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  358.875980][T25454] netlink: 'syz.2.6833': attribute type 1 has an invalid length.
[  359.318984][T25506] sctp: [Deprecated]: syz.0.6851 (pid 25506) Use of struct sctp_assoc_value in delayed_ack socket option.
[  359.318984][T25506] Use struct sctp_sack_info instead
[  359.324565][T25506] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20001
[  359.327007][T25507] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20001
[  359.331438][T25506] sctp: [Deprecated]: syz.0.6851 (pid 25506) Use of int in max_burst socket option deprecated.
[  359.331438][T25506] Use struct sctp_assoc_value instead
[  359.336621][T25507] sctp: [Deprecated]: syz.0.6851 (pid 25507) Use of int in max_burst socket option deprecated.
[  359.336621][T25507] Use struct sctp_assoc_value instead
[  359.461711][T25516] xt_hashlimit: size too large, truncated to 1048576
[  359.902722][T25559] syzkaller1: entered promiscuous mode
[  359.904575][T25559] syzkaller1: entered allmulticast mode
[  359.951665][T25565] vlan0: entered promiscuous mode
[  359.953591][T25565] vlan0: left allmulticast mode
[  359.955256][T25565] bridge_slave_0: left allmulticast mode
[  360.118607][T25587] macvlan4: entered promiscuous mode
[  360.121404][T25587] macvlan4: entered allmulticast mode
[  360.321562][T25623] xt_hashlimit: size too large, truncated to 1048576
[  360.398946][T25631] IPVS: Scheduler module ip_vs_sip not found
[  361.468652][T25684] __nla_validate_parse: 24 callbacks suppressed
[  361.468666][T25684] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6914'.
[  361.751541][T25689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6916'.
[  361.755525][T25689] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6916'.
[  361.994542][T25703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6922'.
[  362.106742][T25716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6923'.
[  362.123318][T25709] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  362.372083][T25736] validate_nla: 4 callbacks suppressed
[  362.372100][T25736] netlink: 'syz.0.6933': attribute type 10 has an invalid length.
[  362.374414][T25738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.383316][T25736] batman_adv: batadv0: Adding interface: netdevsim0
[  362.385678][T25736] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.395453][T25736] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  362.547814][T25755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6942'.
[  362.551665][T25755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6942'.
[  362.555498][T25755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6942'.
[  362.559078][T25755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6942'.
[  362.625937][T25755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6942'.
[  362.744390][T25761] x_tables: unsorted underflow at hook 3
[  362.839403][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  362.972872][T25796] hsr_slave_1 (unregistering): left promiscuous mode
[  363.053331][T25807] bond0: invalid ARP target 0.0.0.0 specified for addition
[  363.055751][T25807] bond0: option arp_ip_target: invalid value (0)
[  363.057783][T25807] bond0: Removing last arp target with arp_interval on
[  363.292412][T25833] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  363.460052][T25850] netlink: 'syz.2.6972': attribute type 11 has an invalid length.
[  363.592054][T25867] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  363.657400][T25869] netlink: 'syz.1.6977': attribute type 83 has an invalid length.
[  364.041869][T25883] batadv2: entered promiscuous mode
[  364.643651][T25934] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  364.677109][T25936] xt_hashlimit: size too large, truncated to 1048576
[  364.685267][T25936] xt_hashlimit: max too large, truncated to 1048576
[  364.700926][T25936] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  364.735772][T25932] netlink: 'syz.1.7000': attribute type 21 has an invalid length.
[  364.761486][T25932] syzkaller0: mtu greater than device maximum
[  364.775033][T25941] xt_hashlimit: size too large, truncated to 1048576
[  365.658658][T25988] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  365.671570][T25988] batman_adv: batadv0: Removing interface: netdevsim0
[  365.675693][T25988] bond13: (slave veth9): Releasing active interface
[  365.794039][T25990] netlink: 'syz.2.7022': attribute type 8 has an invalid length.
[  365.893606][T25997] netlink: 'syz.2.7025': attribute type 32 has an invalid length.
[  365.966633][T26004] netlink: 'syz.2.7026': attribute type 1 has an invalid length.
[  366.022321][T26008] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  366.025499][T26008] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  366.029025][T26008] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  366.255628][T26030] netlink: 'syz.1.7035': attribute type 1 has an invalid length.
[  366.263456][T26030] pim6reg: entered allmulticast mode
[  366.265856][T26030] pim6reg: left allmulticast mode
[  366.472838][   T54] Bluetooth: hci2: link tx timeout
[  366.474566][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  366.482422][T26047] xt_hashlimit: size too large, truncated to 1048576
[  366.738544][T26068] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  366.845942][T26083] ip6gretap0: entered promiscuous mode
[  366.848039][T26083] macsec2: entered promiscuous mode
[  366.853432][T26083] macsec2: entered allmulticast mode
[  366.856387][T26083] ip6gretap0: entered allmulticast mode
[  366.894977][T26088] __nla_validate_parse: 22 callbacks suppressed
[  366.894990][T26088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7053'.
[  367.050431][T26105] netlink: 252 bytes leftover after parsing attributes in process `syz.2.7059'.
[  367.074469][T26107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7057'.
[  367.143169][T26114] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7063'.
[  367.151007][T26114] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7063'.
[  367.153957][T26114] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7063'.
[  367.156818][T26114] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  367.307575][T26135] netlink: 'syz.2.7069': attribute type 1 has an invalid length.
[  367.313284][T26135] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7069'.
[  367.431909][T26147] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7075'.
[  367.435745][T26147] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  367.573222][T26164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7083'.
[  367.593847][T26170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7086'.
[  367.697121][T26178] tipc: Cannot configure node identity twice
[  367.876778][T26168] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  367.879227][T26168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.920087][T26189] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  368.093703][T26204] netlink: 'syz.0.7096': attribute type 1 has an invalid length.
[  368.520318][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  368.543024][T26246] xt_hashlimit: size too large, truncated to 1048576
[  368.766207][T26255] syzkaller1: entered promiscuous mode
[  368.768196][T26255] syzkaller1: entered allmulticast mode
[  368.893916][T26272] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  369.206720][T26298] netlink: 'syz.2.7127': attribute type 3 has an invalid length.
[  369.520152][T26327] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  369.561666][T26331] xt_hashlimit: size too large, truncated to 1048576
[  369.924819][T26349] xt_NFQUEUE: number of total queues is 0
[  370.112865][T26365] netlink: 'syz.0.7152': attribute type 2 has an invalid length.
[  370.195291][T26381] netlink: 'syz.0.7157': attribute type 3 has an invalid length.
[  370.291665][T26391] netlink: 'syz.2.7161': attribute type 1 has an invalid length.
[  370.379205][T26399] pim6reg1: entered promiscuous mode
[  370.382481][T26399] pim6reg1: entered allmulticast mode
[  370.478734][T26413] netlink: 'syz.1.7170': attribute type 1 has an invalid length.
[  370.612008][T26436] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  370.618041][T26436] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  370.622399][T26436] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  370.627936][T26436] tipc: New replicast peer: 0.0.0.0
[  370.633046][T26436] tipc: Enabled bearer <udp:syz2>, priority 9
[  370.639746][T26436] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  370.734034][T26453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.762705][T26456] netlink: 'syz.0.7188': attribute type 1 has an invalid length.
[  370.809443][T26464] netlink: 'syz.1.7191': attribute type 1 has an invalid length.
[  371.154032][T26507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  371.159569][T26507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  371.168692][T26501] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  371.179231][T26508] netlink: 'syz.1.7203': attribute type 13 has an invalid length.
[  371.184172][T26508] netlink: 'syz.1.7203': attribute type 17 has an invalid length.
[  371.209527][  T789] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  371.270713][    T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  371.559736][  T789] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  371.747156][T26533] xt_hashlimit: size too large, truncated to 1048576
[  371.769595][    T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  371.867275][T26543] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  372.156525][T26585] __nla_validate_parse: 35 callbacks suppressed
[  372.156536][T26585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7229'.
[  372.277762][T26604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7236'.
[  372.342970][T26611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7239'.
[  372.347361][T26612] xt_hashlimit: size too large, truncated to 1048576
[  372.550660][T26633] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7246'.
[  372.555151][T26629] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7245'.
[  372.558097][T26629] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7245'.
[  372.561263][T26629] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7245'.
[  372.572367][T26628] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  372.583805][T26628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7245'.
[  373.464177][T26699] syzkaller0: entered promiscuous mode
[  373.466386][T26699] syzkaller0: entered allmulticast mode
[  373.805231][T26722] pim6reg1: entered promiscuous mode
[  373.807104][T26722] pim6reg1: entered allmulticast mode
[  373.874888][T26726] xt_hashlimit: size too large, truncated to 1048576
[  373.971281][T26736] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  373.975910][T26736] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7281'.
[  374.027575][T26736] validate_nla: 2 callbacks suppressed
[  374.027589][T26736] netlink: 'syz.1.7281': attribute type 10 has an invalid length.
[  374.032157][T26736] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  374.034908][T26736] wlan1: mtu less than device minimum
[  374.036852][T26736] : (slave wlan1): Error -22 calling dev_set_mtu
[  374.049835][   T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  374.203764][T26747] netlink: 'syz.2.7282': attribute type 13 has an invalid length.
[  374.206332][T26747] netlink: 'syz.2.7282': attribute type 17 has an invalid length.
[  374.335038][T26751] macsec0: entered promiscuous mode
[  374.336959][T26751] macsec0: entered allmulticast mode
[  374.338685][T26751] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  374.435247][T26751] netlink: 'syz.0.7285': attribute type 6 has an invalid length.
[  374.642175][T26784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7296'.
[  374.999635][    T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  375.068384][T26793] xt_hashlimit: size too large, truncated to 1048576
[  375.514974][T26814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  375.517479][T26814] IPv6: NLM_F_CREATE should be set when creating new route
[  375.643745][T26818] netlink: 'syz.2.7309': attribute type 10 has an invalid length.
[  375.864512][T26842] : entered promiscuous mode
[  375.869794][T26841] : left promiscuous mode
[  375.904539][T26845] netlink: 'syz.2.7318': attribute type 3 has an invalid length.
[  376.066603][T26866] xt_hashlimit: size too large, truncated to 1048576
[  376.275445][T26877] netlink: 'syz.2.7327': attribute type 12 has an invalid length.
[  376.281202][T26877] netlink: 'syz.2.7327': attribute type 14 has an invalid length.
[  376.428406][T26892] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  377.291925][T26914] netlink: 'syz.0.7339': attribute type 3 has an invalid length.
[  377.294717][T26914] __nla_validate_parse: 28 callbacks suppressed
[  377.294727][T26914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7339'.
[  377.299848][T26914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7339'.
[  377.319053][T26915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7338'.
[  377.330462][T26917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7340'.
[  377.388236][T26917] netlink: 788 bytes leftover after parsing attributes in process `syz.0.7340'.
[  377.460213][T26912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7338'.
[  377.467582][T26912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7338'.
[  377.488350][T26925] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7342'.
[  377.522189][T26929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7343'.
[  377.528072][T26929] gtp4: entered promiscuous mode
[  377.529976][T26929] gtp4: entered allmulticast mode
[  377.713309][T26942] netlink: 'syz.0.7350': attribute type 1 has an invalid length.
[  377.715824][T26942] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7350'.
[  377.877550][T26963] xt_hashlimit: size too large, truncated to 1048576
[  377.922919][T26967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.043071][ T1361] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  378.427331][T27001] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  378.435805][T27005] batadv_slave_1: entered promiscuous mode
[  378.446067][T27004] batadv_slave_1: left promiscuous mode
[  378.956513][T27074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  378.958871][T27074] IPv6: NLM_F_CREATE should be set when creating new route
[  378.961363][T27074] IPv6: NLM_F_CREATE should be set when creating new route
[  379.121456][T27093] xt_hashlimit: size too large, truncated to 1048576
[  379.451210][T27116] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  379.453868][T27116] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  379.763136][T27122] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  379.770722][T27123] validate_nla: 4 callbacks suppressed
[  379.770735][T27123] netlink: 'syz.1.7415': attribute type 1 has an invalid length.
[  379.775950][T27122] netlink: 'syz.1.7415': attribute type 1 has an invalid length.
[  379.818062][T27125] macsec3: entered promiscuous mode
[  379.820390][T27125] macsec3: entered allmulticast mode
[  380.101013][T27144] netlink: 'syz.1.7421': attribute type 3 has an invalid length.
[  380.762524][T27178] Timeout policy `syz1' can only be used by L3 protocol number 246
[  380.820766][T27181] netlink: 'syz.0.7435': attribute type 26 has an invalid length.
[  381.072870][T27197] netlink: 'syz.1.7444': attribute type 1 has an invalid length.
[  381.265062][T27214] xt_hashlimit: size too large, truncated to 1048576
[  381.656275][T27227] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  381.658829][T27227] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  381.667165][T27227] netlink: 'syz.0.7454': attribute type 58 has an invalid length.
[  381.696544][T27229] chnl_net:caif_netlink_parms(): no params data found
[  381.958400][T27251] 8021q: VLANs not supported on caif0
[  382.417630][T27294] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  382.495486][T27276] __nla_validate_parse: 31 callbacks suppressed
[  382.495499][T27276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7475'.
[  383.130510][T27327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7494'.
[  383.373929][T27348] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7501'.
[  383.437974][T27352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7502'.
[  383.475809][T27354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7503'.
[  383.648824][T27368] netlink: 'syz.1.7508': attribute type 3 has an invalid length.
[  383.652423][T27368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7508'.
[  383.655419][T27368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7508'.
[  383.946102][T27391] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  384.145301][T27407] netlink: 'syz.1.7522': attribute type 20 has an invalid length.
[  384.212902][T27413] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7524'.
[  384.266107][T27413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7524'.
[  384.570746][T27434] xt_hashlimit: size too large, truncated to 1048576
[  384.690229][T27438] xt_CT: No such helper "snmp"
[  384.711297][T27441] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.7533'.
[  385.167979][T27477] netlink: 'syz.2.7548': attribute type 3 has an invalid length.
[  385.307507][T27488] netlink: 'syz.0.7551': attribute type 10 has an invalid length.
[  385.327902][T27488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.334740][T27488] batadv0: entered promiscuous mode
[  385.336540][T27488] batadv0: entered allmulticast mode
[  385.720809][T27519] nbd: must specify at least one socket
[  385.811432][T27522] block nbd3: shutting down sockets
[  385.893757][T27545] netlink: 'syz.1.7571': attribute type 3 has an invalid length.
[  386.021795][T27555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.135546][T27568] 8021q: VLANs not supported on vcan0
[  386.643766][T27610] xt_hashlimit: size too large, truncated to 1048576
[  386.735746][T27614] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  386.739587][T27614] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  386.939939][T27628] GUP no longer grows the stack in syz.0.7604 (27628): 200000006000-20000000a000 (200000005000)
[  386.943708][T27628] CPU: 0 UID: 0 PID: 27628 Comm: syz.0.7604 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  386.943723][T27628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  386.943729][T27628] Call Trace:
[  386.943734][T27628]  <TASK>
[  386.943740][T27628]  dump_stack_lvl+0x189/0x250
[  386.943759][T27628]  ? __pfx_dump_stack_lvl+0x10/0x10
[  386.943769][T27628]  ? __pfx__printk+0x10/0x10
[  386.943781][T27628]  ? find_vma+0xe7/0x160
[  386.943801][T27628]  __get_user_pages+0x2a60/0x30b0
[  386.943828][T27628]  ? __pfx___get_user_pages+0x10/0x10
[  386.943838][T27628]  ? __gup_longterm_locked+0xbf7/0x15b0
[  386.943848][T27628]  ? down_read_killable+0x1d1/0x350
[  386.943858][T27628]  ? try_get_folio+0x633/0x660
[  386.943870][T27628]  __gup_longterm_locked+0xd66/0x15b0
[  386.943882][T27628]  ? try_grab_folio_fast+0x1be/0x4f0
[  386.943898][T27628]  ? gup_fast_fallback+0x1afc/0x2260
[  386.943911][T27628]  gup_fast_fallback+0x1cd4/0x2260
[  386.943937][T27628]  ? __pfx_gup_fast_fallback+0x10/0x10
[  386.943945][T27628]  ? trace_contention_end+0x39/0x120
[  386.943956][T27628]  ? __mutex_lock+0x330/0xe80
[  386.943964][T27628]  ? futex_unqueue+0x22/0x240
[  386.943974][T27628]  ? futex_unqueue+0x22/0x240
[  386.943983][T27628]  ? futex_unqueue+0x22/0x240
[  386.943991][T27628]  ? is_valid_gup_args+0x11f/0x200
[  386.944001][T27628]  ? get_user_pages_fast+0x4d/0xb0
[  386.944012][T27628]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  386.944028][T27628]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  386.944034][T27628]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  386.944045][T27628]  ? wait_for_space+0x24d/0x2d0
[  386.944057][T27628]  iov_iter_get_pages2+0x5e/0xa0
[  386.944069][T27628]  __se_sys_vmsplice+0x548/0x10d0
[  386.944088][T27628]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  386.944099][T27628]  ? __pfx_futex_wait+0x10/0x10
[  386.944111][T27628]  ? __lock_acquire+0xab9/0xd20
[  386.944134][T27628]  ? do_pipe2+0xf7/0x170
[  386.944146][T27628]  ? do_syscall_64+0xbe/0x3b0
[  386.944157][T27628]  do_syscall_64+0xfa/0x3b0
[  386.944165][T27628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.944173][T27628]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  386.944183][T27628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.944190][T27628] RIP: 0033:0x7fc0a6d8e929
[  386.944199][T27628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  386.944206][T27628] RSP: 002b:00007fc0a4bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  386.944216][T27628] RAX: ffffffffffffffda RBX: 00007fc0a6fb5fa0 RCX: 00007fc0a6d8e929
[  386.944244][T27628] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  386.944250][T27628] RBP: 00007fc0a6e10ca1 R08: 0000000000000000 R09: 0000000000000000
[  386.944256][T27628] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  386.944261][T27628] R13: 0000000000000000 R14: 00007fc0a6fb5fa0 R15: 00007ffec11e2a68
[  386.944275][T27628]  </TASK>
[  387.296791][T27660] syzkaller1: entered promiscuous mode
[  387.298685][T27660] syzkaller1: entered allmulticast mode
[  387.404814][T27670] xt_CT: No such helper "snmp"
[  387.499959][T27681] __nla_validate_parse: 69 callbacks suppressed
[  387.499973][T27681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7625'.
[  387.504929][T27686] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.7630'.
[  387.508571][T27681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7625'.
[  387.513349][T27681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7625'.
[  387.517093][T27681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7625'.
[  387.525504][T27681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7625'.
[  387.528979][T27681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7625'.
[  387.532388][T27681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7625'.
[  387.535656][T27681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7625'.
[  387.539020][T27681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7625'.
[  387.604463][T27690] xt_CT: No such helper "snmp"
[  387.653459][T27697] netlink: 'syz.2.7626': attribute type 10 has an invalid length.
[  388.034319][T27715] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  388.057745][T27717] xt_hashlimit: size too large, truncated to 1048576
[  388.119424][   T10] page_pool_release_retry() stalled pool shutdown: id 100, 1 inflight 60 sec
[  388.177993][T27721] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  388.435482][T27733] batadv_slave_1: entered promiscuous mode
[  388.443304][T27732] batadv_slave_1: left promiscuous mode
[  388.567523][T27745] netlink: 'syz.1.7647': attribute type 3 has an invalid length.
[  388.749656][T27760] ipvlan3: entered promiscuous mode
[  388.811149][T27767] netlink: 'syz.0.7656': attribute type 2 has an invalid length.
[  388.839606][  T789] page_pool_release_retry() stalled pool shutdown: id 102, 1 inflight 60 sec
[  388.965415][T27787] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  388.980974][T27787] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  389.196398][T27812] netlink: 'syz.1.7670': attribute type 142 has an invalid length.
[  389.424799][T27843] netlink: 'syz.1.7682': attribute type 13 has an invalid length.
[  389.430370][T27843] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  390.578864][T27875] netlink: 'syz.2.7693': attribute type 10 has an invalid length.
[  390.728586][T27898] xt_hashlimit: size too large, truncated to 1048576
[  390.957593][T27919] netlink: 'syz.0.7710': attribute type 3 has an invalid length.
[  391.314729][T27962] xt_TCPMSS: Only works on TCP SYN packets
[  391.342428][T27964] netlink: 'syz.2.7728': attribute type 6 has an invalid length.
[  391.394727][T27972] netlink: 'syz.0.7732': attribute type 10 has an invalid length.
[  391.401507][T27972] bridge0: entered promiscuous mode
[  391.403561][T27972] bridge0: entered allmulticast mode
[  391.411109][T27972] netlink: 'syz.0.7732': attribute type 10 has an invalid length.
[  392.265838][T28020] netlink: 'syz.1.7747': attribute type 3 has an invalid length.
[  392.269118][T28020] delete_channel: no stack
[  392.348789][T28023] netlink: 'syz.1.7748': attribute type 9 has an invalid length.
[  392.351735][T28023] netlink: 'syz.1.7748': attribute type 6 has an invalid length.
[  392.779120][T28039] __nla_validate_parse: 45 callbacks suppressed
[  392.779134][T28039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7756'.
[  393.012574][T28049] xt_hashlimit: size too large, truncated to 1048576
[  393.216543][T28068] xt_hashlimit: size too large, truncated to 1048576
[  393.321024][T28076] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  393.526738][T28093] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  394.591787][T28112] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  395.152045][T28124] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7788'.
[  395.155978][T28124] syzkaller1: entered promiscuous mode
[  395.158146][T28124] syzkaller1: entered allmulticast mode
[  395.266513][T28129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7790'.
[  395.271422][T28129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7790'.
[  395.386595][T28134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  395.390222][T28133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  395.433550][T28152] xt_hashlimit: size too large, truncated to 1048576
[  395.721212][T28177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.734653][T28183] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7804'.
[  395.737740][T28183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7804'.
[  395.752566][T28188] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7805'.
[  395.907123][T28210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7813'.
[  395.963642][T28219] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  395.994380][T28222] af_packet: tpacket_rcv: packet too big, clamped from 124 to 4294967272. macoff=96
[  396.120291][T28229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7818'.
[  396.124072][T28229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7818'.
[  396.663736][T28264] netlink: 'syz.1.7832': attribute type 3 has an invalid length.
[  396.695676][T28271] netlink: 'syz.1.7833': attribute type 1 has an invalid length.
[  396.698697][T28271] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  396.817273][T28274] xt_hashlimit: size too large, truncated to 1048576
[  397.058617][T28290] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  397.109578][T28297] IPVS: Error connecting to the multicast addr
[  397.302688][T28308] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  397.453679][T28314] netlink: 'syz.0.7847': attribute type 9 has an invalid length.
[  397.861345][T28339] netlink: 'syz.0.7857': attribute type 1 has an invalid length.
[  397.914440][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  397.914635][T28343] netlink: 'syz.0.7858': attribute type 58 has an invalid length.
[  397.919755][T28343] __nla_validate_parse: 9 callbacks suppressed
[  397.919764][T28343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7858'.
[  397.921082][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  397.928603][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  397.934619][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  397.937483][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  397.989968][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  397.993913][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  397.997564][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  398.001766][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  398.004792][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  398.074115][T28349] netlink: 'syz.0.7860': attribute type 3 has an invalid length.
[  398.076682][T28349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7860'.
[  398.089612][T28349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7860'.
[  398.178842][T28358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7862'.
[  398.216184][T28342] chnl_net:caif_netlink_parms(): no params data found
[  398.314672][T28342] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.317132][T28342] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.319721][T28342] bridge_slave_0: entered allmulticast mode
[  398.322475][T28342] bridge_slave_0: entered promiscuous mode
[  398.325766][T28342] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.328118][T28342] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.330779][T28342] bridge_slave_1: entered allmulticast mode
[  398.333539][T28342] bridge_slave_1: entered promiscuous mode
[  398.369909][T28342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.381685][T28342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.424583][T28342] team0: Port device team_slave_0 added
[  398.432041][T28342] team0: Port device team_slave_1 added
[  398.448225][T28342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.451095][T28342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.461335][T28342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.468105][T28342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.470781][T28342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.479077][T28342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.486419][T28346] chnl_net:caif_netlink_parms(): no params data found
[  398.537323][T28342] hsr_slave_0: entered promiscuous mode
[  398.540251][T28342] hsr_slave_1: entered promiscuous mode
[  398.576445][T28346] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.579079][T28346] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.581751][T28346] bridge_slave_0: entered allmulticast mode
[  398.584759][T28346] bridge_slave_0: entered promiscuous mode
[  398.601852][T28346] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.604288][T28346] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.607007][T28346] bridge_slave_1: entered allmulticast mode
[  398.610034][T28346] bridge_slave_1: entered promiscuous mode
[  398.638904][T28346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.646409][T28346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.689076][T28346] team0: Port device team_slave_0 added
[  398.693059][T28346] team0: Port device team_slave_1 added
[  398.724533][T28346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.726907][T28346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.735632][T28346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.743143][T28346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.745528][T28346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.753992][T28346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.798268][T28346] hsr_slave_0: entered promiscuous mode
[  398.801673][T28346] hsr_slave_1: entered promiscuous mode
[  398.803882][T28346] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  398.806386][T28346] Cannot create hsr debugfs directory
[  398.832900][T28342] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  398.848369][T28342] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  398.859815][T28342] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  398.867059][T28342] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  398.964016][T28346] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  398.968823][T28346] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  398.976027][T28346] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  398.980734][T28346] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  399.068331][T28342] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.089804][T28346] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.094198][T28342] 8021q: adding VLAN 0 to HW filter on device team0
[  399.128702][T11008] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.131285][T11008] bridge0: port 1(bridge_slave_0) entered forwarding state
[  399.136183][T11008] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.138580][T11008] bridge0: port 2(bridge_slave_1) entered forwarding state
[  399.162198][T28346] 8021q: adding VLAN 0 to HW filter on device team0
[  399.174381][T22576] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.176757][T22576] bridge0: port 1(bridge_slave_0) entered forwarding state
[  399.194867][T22576] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.197320][T22576] bridge0: port 2(bridge_slave_1) entered forwarding state
[  399.236658][T28346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  399.288013][T28342] 8021q: adding VLAN 0 to HW filter on device batadv0
[  399.322675][T28342] veth0_vlan: entered promiscuous mode
[  399.328269][T28342] veth1_vlan: entered promiscuous mode
[  399.354324][T28342] veth0_macvtap: entered promiscuous mode
[  399.358945][T28342] veth1_macvtap: entered promiscuous mode
[  399.376777][T28342] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.394742][T28346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  399.411017][T28342] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.420801][T28342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.426635][T28342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.441506][T28342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.444444][T28342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.566084][T11017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.568737][T11017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.594029][T11017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.597309][T11017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.628657][T28346] veth0_vlan: entered promiscuous mode
[  399.641001][T28346] veth1_vlan: entered promiscuous mode
[  399.674396][T28346] veth0_macvtap: entered promiscuous mode
[  399.683640][T28346] veth1_macvtap: entered promiscuous mode
[  399.704824][T28346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.716991][T28346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.738779][T28346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.744843][T28346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.747756][T28346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.751867][T28346] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.758967][T28424] netlink: 'syz.0.7871': attribute type 4 has an invalid length.
[  399.836094][T22573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.838690][T22573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.867671][T22573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.871707][T22573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.933352][T28437] netlink: 'syz.3.7877': attribute type 23 has an invalid length.
[  399.959927][   T54] Bluetooth: hci1: command tx timeout
[  399.965040][T28439] bridge0: entered promiscuous mode
[  399.966959][T28439] macsec1: entered promiscuous mode
[  399.970319][T28439] bridge0: port 3(macsec1) entered blocking state
[  399.972424][T28439] bridge0: port 3(macsec1) entered disabled state
[  399.976637][T28439] macsec1: entered allmulticast mode
[  399.978370][T28439] bridge0: entered allmulticast mode
[  399.984582][T28439] macsec1: left allmulticast mode
[  399.986331][T28439] bridge0: left allmulticast mode
[  399.990009][T28439] bridge0: left promiscuous mode
[  400.040624][   T54] Bluetooth: hci2: command tx timeout
[  400.093101][T28444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7879'.
[  400.150793][T28454] netlink: 'syz.4.7883': attribute type 1 has an invalid length.
[  400.156923][T28454] netlink: 'syz.4.7883': attribute type 2 has an invalid length.
[  400.353402][T28465] veth3: entered promiscuous mode
[  400.396355][T28466] erspan0: entered allmulticast mode
[  401.029234][T28468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7886'.
[  401.215541][T28490] netlink: 'syz.3.7893': attribute type 11 has an invalid length.
[  401.224849][T28490] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7893'.
[  401.281885][T28496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7897'.
[  401.290012][T28496] macvlan2: entered promiscuous mode
[  401.291812][T28496] macvlan2: entered allmulticast mode
[  401.413459][T28511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7903'.
[  401.416371][T28511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7903'.
[  401.423669][T28512] No such timeout policy "syz0"
[  401.425910][T28511] erspan0: entered promiscuous mode
[  401.428710][T28511] batadv_slave_1: entered promiscuous mode
[  401.433325][T28511] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  401.435734][T28511] Cannot create hsr debugfs directory
[  401.437512][T28511] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  401.613995][T28413] IPVS: starting estimator thread 0...
[  401.703087][T28534] IPVS: using max 78 ests per chain, 187200 per kthread
[  401.717326][T28543] SET target dimension over the limit!
[  401.723649][T28540] unknown channel width for channel at 909000KHz?
[  401.730536][T28540] unknown channel width for channel at 909000KHz?
[  402.040445][   T54] Bluetooth: hci1: command tx timeout
[  402.107096][T28580] validate_nla: 6 callbacks suppressed
[  402.107109][T28580] netlink: 'syz.0.7930': attribute type 3 has an invalid length.
[  402.119510][   T54] Bluetooth: hci2: command 0x041b tx timeout
[  402.276873][T28592] netlink: 'syz.0.7936': attribute type 1 has an invalid length.
[  402.297994][T28592] 8021q: adding VLAN 0 to HW filter on device bond19
[  402.316611][T28592] 8021q: adding VLAN 0 to HW filter on device bond19
[  402.318950][T28592] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address
[  402.323419][T28592] bond19: (slave vxcan1): Error -95 calling set_mac_address
[  402.376453][T28601] veth11: entered promiscuous mode
[  402.382914][T28601] bond19: (slave veth11): Enslaving as an active interface with a down link
[  402.428196][T28592] netlink: 'syz.0.7936': attribute type 1 has an invalid length.
[  402.505856][T28601] xt_CT: No such helper "snmp"
[  402.770770][T28639] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  403.011900][T28654] netlink: 'syz.3.7959': attribute type 10 has an invalid length.
[  403.126672][T28660] ip6t_REJECT: ECHOREPLY is not supported
[  403.326012][T28668] __nla_validate_parse: 14 callbacks suppressed
[  403.326025][T28668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7965'.
[  403.338472][T28668] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  403.464801][T28672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7967'.
[  403.536807][T28680] netlink: 'syz.3.7970': attribute type 3 has an invalid length.
[  403.539659][T28680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7970'.
[  403.542655][T28680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7970'.
[  403.551289][T28682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7971'.
[  403.565813][T28682] netlink: 'syz.4.7971': attribute type 1 has an invalid length.
[  403.584198][T28685] xt_hashlimit: size too large, truncated to 1048576
[  403.595351][T28683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7971'.
[  403.598776][T28683] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  404.119917][ T5839] Bluetooth: hci1: command tx timeout
[  404.202589][ T5839] Bluetooth: hci2: command 0x041b tx timeout
[  404.267596][T28755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7996'.
[  404.276669][T28755] bond0: Unable to set down delay as MII monitoring is disabled
[  404.299114][T28757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7997'.
[  404.478381][T28765] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8001'.
[  404.538896][T28766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8001'.
[  404.960475][T28788] netlink: 'syz.4.8007': attribute type 29 has an invalid length.
[  405.581747][T28803] tipc: Started in network mode
[  405.583458][T28803] tipc: Node identity 2aa96cb4f7ae, cluster identity 4711
[  405.585958][T28803] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.588689][T28803] syzkaller0: entered promiscuous mode
[  405.590674][T28803] syzkaller0: entered allmulticast mode
[  405.613421][T28803] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  405.639025][T28803] tipc: Resetting bearer <eth:syzkaller0>
[  405.654544][T28802] tipc: Resetting bearer <eth:syzkaller0>
[  405.681105][T28802] tipc: Disabling bearer <eth:syzkaller0>
[  405.760482][T28823] netlink: 'syz.4.8020': attribute type 1 has an invalid length.
[  405.804532][T28827] netlink: 'syz.0.8022': attribute type 2 has an invalid length.
[  405.932995][T28847] xt_ecn: cannot match TCP bits for non-tcp packets
[  406.013932][T28854] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  406.204565][ T5839] Bluetooth: hci1: command tx timeout
[  406.277889][T28882] netlink: 'syz.3.8046': attribute type 3 has an invalid length.
[  406.281663][ T5839] Bluetooth: hci2: command 0x041b tx timeout
[  406.292671][T28882] team0: Device gtp0 is of different type
[  406.383811][T28889] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  407.195936][T28900] netlink: 'syz.0.8052': attribute type 1 has an invalid length.
[  407.198489][T28900] netlink: 'syz.0.8052': attribute type 2 has an invalid length.
[  407.199672][T28901] netlink: 'syz.4.8053': attribute type 7 has an invalid length.
[  407.203626][T28901] netlink: 'syz.4.8053': attribute type 8 has an invalid length.
[  407.264975][T28901] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  407.324634][T28917] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  407.358736][T28919] Cannot find set identified by id 0 to match
[  407.577557][T28944] netlink: 'syz.4.8066': attribute type 2 has an invalid length.
[  407.581707][T28946] xt_hashlimit: size too large, truncated to 1048576
[  407.588338][T28944] : entered promiscuous mode
[  407.826753][T28972] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20004
[  407.863785][   T24] IPVS: starting estimator thread 0...
[  407.961992][T28976] IPVS: using max 78 ests per chain, 187200 per kthread
[  408.364471][T28998] syzkaller1: entered promiscuous mode
[  408.366408][T28998] syzkaller1: entered allmulticast mode
[  408.369553][   T54] Bluetooth: hci2: command 0x041b tx timeout
[  408.445494][T29000] netlink: 'syz.3.8086': attribute type 3 has an invalid length.
[  408.448226][T29000] __nla_validate_parse: 21 callbacks suppressed
[  408.448234][T29000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8086'.
[  408.455680][T29000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8086'.
[  408.621498][T29013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8091'.
[  408.746691][T29026] netlink: 'syz.4.8096': attribute type 1 has an invalid length.
[  408.799768][T29036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8100'.
[  408.804947][T29026] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  408.810974][T29036] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  408.816594][T29036] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  408.863203][T29042] 8021q: VLANs not supported on ipvlan1
[  408.915817][T29046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8104'.
[  408.960392][T29046] netlink: 'syz.0.8104': attribute type 1 has an invalid length.
[  408.963237][T29046] netlink: 'syz.0.8104': attribute type 1 has an invalid length.
[  408.966174][T29046] netlink: 'syz.0.8104': attribute type 1 has an invalid length.
[  408.971042][T29046] block nbd3: shutting down sockets
[  409.035183][T29054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8105'.
[  409.284775][T29067] xt_hashlimit: size too large, truncated to 1048576
[  409.537019][T29083] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8114'.
[  409.655463][T29087] tun0: tun_chr_ioctl cmd 2147767507
[  409.665315][T29087] veth2: entered allmulticast mode
[  409.671465][T29087] veth3: entered promiscuous mode
[  409.793859][T29101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8122'.
[  409.855473][T29108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8126'.
[  409.858396][T29108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8126'.
[  410.005486][T29125] pimreg: entered allmulticast mode
[  410.011552][T29125] pimreg: left allmulticast mode
[  410.439498][ T5839] Bluetooth: hci2: command 0x041b tx timeout
[  411.050725][T29172] x_tables: duplicate underflow at hook 1
[  411.151181][T29184] syz_tun: entered promiscuous mode
[  411.161319][T29184] batadv_slave_0: entered promiscuous mode
[  411.173192][T29184] hsr2: entered allmulticast mode
[  411.174864][T29184] syz_tun: entered allmulticast mode
[  411.176540][T29184] batadv_slave_0: entered allmulticast mode
[  411.231788][T29197] tap0: tun_chr_ioctl cmd 1074025680
[  411.985266][T29259] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003
[  412.084511][T29268] macsec1: entered promiscuous mode
[  412.086361][T29268] macsec1: entered allmulticast mode
[  412.503701][T29304] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  412.793835][T29334] unknown channel width for channel at 909000KHz?
[  412.796718][T29334] unknown channel width for channel at 909000KHz?
[  412.798974][T29334] unknown channel width for channel at 909000KHz?
[  412.878900][T29343] syzkaller0: entered promiscuous mode
[  412.883521][T29343] syzkaller0: entered allmulticast mode
[  413.196591][T29365] validate_nla: 2 callbacks suppressed
[  413.196602][T29365] netlink: 'syz.3.8219': attribute type 1 has an invalid length.
[  413.457610][T29389] __nla_validate_parse: 25 callbacks suppressed
[  413.457625][T29389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8226'.
[  413.481746][T29389] netlink: 'syz.4.8226': attribute type 12 has an invalid length.
[  413.639881][T29401] netlink: 'syz.4.8231': attribute type 1 has an invalid length.
[  413.657171][T29401] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  413.661936][T29401] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  413.665147][T29401] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  413.667976][T29401] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  413.675053][T29401] bond2: (slave geneve2): making interface the new active one
[  413.679494][T29401] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  413.683580][T29401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8231'.
[  413.815856][T29408] netlink: 'syz.0.8235': attribute type 21 has an invalid length.
[  413.818587][T29408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8235'.
[  413.879602][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  413.895400][T29421] IPVS: set_ctl: invalid protocol: 51 172.30.1.5:20003
[  413.908256][T22575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  413.911575][T22575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  413.971062][T29420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.999037][T29430] netlink: 134820 bytes leftover after parsing attributes in process `syz.3.8243'.
[  414.054948][T29433] IPVS: Scheduler module ip_vs_sip not found
[  414.059742][T29433] IPVS: length: 8 != 446622349272
[  414.240505][T29445] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8250'.
[  414.596290][T29467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8258'.
[  414.606451][T29467] bond0: invalid ARP target 0.0.0.0 specified for addition
[  414.613499][T29467] bond0: option arp_ip_target: invalid value (0)
[  414.647021][T29467] ip6erspan0: entered allmulticast mode
[  414.729559][T29478] netlink: 'syz.3.8263': attribute type 21 has an invalid length.
[  414.732169][T29478] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8263'.
[  414.735047][T29478] netlink: 'syz.3.8263': attribute type 5 has an invalid length.
[  414.737052][T29480] netlink: 'syz.4.8264': attribute type 3 has an invalid length.
[  414.737526][T29478] netlink: 'syz.3.8263': attribute type 6 has an invalid length.
[  414.743260][T29480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8264'.
[  414.746249][T29480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8264'.
[  414.775193][T29482] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8265'.
[  414.838527][T29489] hsr0 speed is unknown, defaulting to 1000
[  414.843824][T29489] hsr0 speed is unknown, defaulting to 1000
[  414.846376][T29489] hsr0 speed is unknown, defaulting to 1000
[  414.857053][T29489] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  414.885995][T29489] hsr0 speed is unknown, defaulting to 1000
[  414.894127][T29491] netlink: 'syz.3.8267': attribute type 2 has an invalid length.
[  414.894415][T29489] hsr0 speed is unknown, defaulting to 1000
[  414.909854][T29489] hsr0 speed is unknown, defaulting to 1000
[  414.920904][T29489] hsr0 speed is unknown, defaulting to 1000
[  414.923889][T29489] hsr0 speed is unknown, defaulting to 1000
[  415.020313][T29494] xt_hashlimit: size too large, truncated to 1048576
[  415.406668][T29523] erspan0: Device is already in use.
[  415.736187][T29545] netlink: 'syz.0.8284': attribute type 1 has an invalid length.
[  415.787705][T29545] 8021q: adding VLAN 0 to HW filter on device bond20
[  415.807439][T29549] xt_hashlimit: size too large, truncated to 1048576
[  415.865847][T29559] : renamed from bridge_slave_0 (while UP)
[  415.928645][T29563] IPv6: NLM_F_CREATE should be specified when creating new route
[  416.397807][T29627] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  416.557374][T29621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  416.566983][T29629] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.569831][T29629] bridge0: port 1() entered disabled state
[  416.645416][T29629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  416.655637][T29629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  416.711936][T29629] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.714760][T29629] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.717761][T29629] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.724272][T29629] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.764259][T29629] macsec1: left promiscuous mode
[  416.766624][T29629] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  416.773440][T29629] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  416.776412][T29629] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  416.779899][T29629] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  416.794186][T29631] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.797183][T29631] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.806897][T29631] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.816769][T29631] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.149358][   T33] audit: type=1800 audit(1752780912.387:9): pid=29638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8312" name="cgroup.controllers" dev="tmpfs" ino=734 res=0 errno=0
[  417.690819][T29684] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  418.409931][T29723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.790428][T29727] __nla_validate_parse: 11 callbacks suppressed
[  418.790440][T29727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8339'.
[  418.913435][T29737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8344'.
[  418.927661][T29737] 0{X: left allmulticast mode
[  418.932765][T29737] erspan0: left allmulticast mode
[  418.945210][T29737] bond0: left promiscuous mode
[  418.946864][T29737] bond0: left allmulticast mode
[  418.951963][T29737] bridge_slave_0: left promiscuous mode
[  418.958704][T29737] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  418.963869][T29737] vlan2: left allmulticast mode
[  418.965563][T29737] bridge_slave_0: left allmulticast mode
[  418.967799][T29737] bridge20: left allmulticast mode
[  418.970162][T29737] gtp0: left promiscuous mode
[  418.971841][T29737] gtp0: left allmulticast mode
[  418.974917][T29737] xfrm1: left promiscuous mode
[  418.978878][T29737] xfrm1: left allmulticast mode
[  418.985747][T29737] xfrm2: left promiscuous mode
[  418.988558][T29737] xfrm2: left allmulticast mode
[  418.992298][T29737] geneve3: left promiscuous mode
[  418.996377][T29737] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.000875][T29737] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.003826][T29737] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.007404][T29737] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.007446][T29741] validate_nla: 1 callbacks suppressed
[  419.007457][T29741] netlink: 'syz.3.8345': attribute type 1 has an invalid length.
[  419.015617][T29737] geneve4: left promiscuous mode
[  419.018374][T29737] bridge25: left allmulticast mode
[  419.022149][T29737] veth7: left promiscuous mode
[  419.024932][T29737] gretap3: left promiscuous mode
[  419.031948][T29737] veth9: left promiscuous mode
[  419.034635][T29737] bond14: left promiscuous mode
[  419.046378][T29737] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  419.049695][T29737] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  419.052646][T29737] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  419.055648][T29737] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  419.064461][T29737] tipc: Resetting bearer <eth:syzkaller0>
[  419.066655][T29737] syzkaller0: left promiscuous mode
[  419.068347][T29737] syzkaller0: left allmulticast mode
[  419.090736][T29737] macvlan4: left promiscuous mode
[  419.092429][T29737] macvlan4: left allmulticast mode
[  419.094698][T29737] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  419.096958][T29737] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  419.099231][T29737] macsec0: left promiscuous mode
[  419.103108][T29737] macsec0: left allmulticast mode
[  419.113206][T29737] veth11: left promiscuous mode
[  419.154357][T29747] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  419.196427][T29751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8349'.
[  420.234705][T29784] netlink: 'syz.0.8360': attribute type 83 has an invalid length.
[  420.238666][T29784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.247672][T29786] netlink: 'syz.0.8360': attribute type 83 has an invalid length.
[  420.253088][T29785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.323762][T29793] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8362'.
[  420.413186][T29810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8367'.
[  420.425105][T29810] erspan0: left allmulticast mode
[  420.433409][T29810] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  420.440180][T29810] hsr2: left allmulticast mode
[  420.441785][T29810] syz_tun: left allmulticast mode
[  420.443462][T29810] batadv_slave_0: left allmulticast mode
[  420.450711][T29810] macsec1: left allmulticast mode
[  420.452764][T29810] ip6erspan0: left allmulticast mode
[  420.457083][T29810] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  420.460405][T29810] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  420.463512][T29810] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  420.466356][T29810] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  420.512611][T29819] sctp: [Deprecated]: syz.4.8371 (pid 29819) Use of struct sctp_assoc_value in delayed_ack socket option.
[  420.512611][T29819] Use struct sctp_sack_info instead
[  420.517662][T29819] sctp: [Deprecated]: syz.4.8371 (pid 29819) Use of struct sctp_assoc_value in delayed_ack socket option.
[  420.517662][T29819] Use struct sctp_sack_info instead
[  420.672407][T29839] xt_hashlimit: size too large, truncated to 1048576
[  420.701446][T29842] tipc: Started in network mode
[  420.703206][T29842] tipc: Node identity 36d30f997158, cluster identity 4711
[  420.705619][T29842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.708298][T29842] syzkaller0: entered promiscuous mode
[  420.710742][T29842] syzkaller0: entered allmulticast mode
[  420.758819][T29841] tipc: Resetting bearer <eth:syzkaller0>
[  420.777624][T29841] tipc: Disabling bearer <eth:syzkaller0>
[  420.823173][T29847] netlink: 'syz.4.8381': attribute type 1 has an invalid length.
[  420.844223][T29847] bond3: (slave bridge2): making interface the new active one
[  420.851502][T29847] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  420.984261][T29860] x_tables: duplicate underflow at hook 3
[  421.152907][T29879] netlink: 'syz.3.8395': attribute type 29 has an invalid length.
[  421.156319][T29879] netlink: 'syz.3.8395': attribute type 29 has an invalid length.
[  421.162335][T29879] netlink: 'syz.3.8395': attribute type 29 has an invalid length.
[  421.169977][T29879] netlink: 'syz.3.8395': attribute type 29 has an invalid length.
[  421.172796][T29879] netlink: 'syz.3.8395': attribute type 29 has an invalid length.
[  421.175377][T29879] netlink: 'syz.3.8395': attribute type 29 has an invalid length.
[  421.305292][T29893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8400'.
[  421.384722][T29896] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  422.341657][T29928] syzkaller0: entered allmulticast mode
[  422.355380][T29928] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.358064][T29928] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.364301][T22575] wlan0: Trigger new scan to find an IBSS to join
[  422.366639][T29928] bridge0: entered allmulticast mode
[  422.476661][T29933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8410'.
[  422.479120][T29936] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8412'.
[  422.488378][T29936] dvmrp0: entered allmulticast mode
[  422.584914][T29955] xt_hashlimit: size too large, truncated to 1048576
[  422.803016][T29985] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8427'.
[  422.811934][T29988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8431'.
[  423.421837][T30032] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  423.598348][T30039] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  423.988584][T30062] openvswitch: netlink: Unknown key attributes 2
[  424.126055][T30071] __nla_validate_parse: 4 callbacks suppressed
[  424.126068][T30071] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8466'.
[  424.233995][T30081] validate_nla: 20 callbacks suppressed
[  424.234008][T30081] netlink: 'syz.3.8469': attribute type 1 has an invalid length.
[  424.234737][T30083] netlink: 71 bytes leftover after parsing attributes in process `syz.0.8470'.
[  424.475629][T30104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8477'.
[  424.962640][T30118] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8481'.
[  425.157921][T30128] can: request_module (can-proto-0) failed.
[  425.319716][T22575] wlan0: Trigger new scan to find an IBSS to join
[  425.462549][T30166] netlink: 'syz.4.8495': attribute type 2 has an invalid length.
[  425.486270][T30168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.498331][T30170] xt_hashlimit: size too large, truncated to 1048576
[  425.669039][T30183] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  425.727591][T30189] netlink: 84 bytes leftover after parsing attributes in process `syz.4.8503'.
[  425.838072][T30195] netlink: 'syz.0.8506': attribute type 58 has an invalid length.
[  425.843061][T30195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8506'.
[  425.889115][T30196] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8506'.
[  425.925254][T30198] sctp: [Deprecated]: syz.4.8507 (pid 30198) Use of struct sctp_assoc_value in delayed_ack socket option.
[  425.925254][T30198] Use struct sctp_sack_info instead
[  426.236333][T11008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.289083][T30229] xt_l2tp: v2 doesn't support IP mode
[  426.454834][T30247] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8524'.
[  426.528492][T30257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8530'.
[  426.533598][T30257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8530'.
[  426.767376][T30285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.788917][T30287] xt_hashlimit: size too large, truncated to 1048576
[  426.837974][T30285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.857889][T30277] hsr0 speed is unknown, defaulting to 1000
[  426.891613][T30297] netlink: 'syz.0.8546': attribute type 3 has an invalid length.
[  426.908457][T30285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  427.720038][T30370] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  427.906186][T30380] netlink: 'syz.4.8571': attribute type 1 has an invalid length.
[  428.611530][T30401] netlink: 'syz.3.8579': attribute type 3 has an invalid length.
[  428.642983][T30403] x_tables: duplicate underflow at hook 2
[  428.864608][T30419] xt_hashlimit: size too large, truncated to 1048576
[  429.235547][T30440] __nla_validate_parse: 11 callbacks suppressed
[  429.235557][T30440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8594'.
[  429.492474][T30457] netlink: 'syz.3.8601': attribute type 8 has an invalid length.
[  429.507248][T30467] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.510636][T30467] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.513387][T30467] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.519477][T30467] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  429.522419][T30467] geneve5: entered promiscuous mode
[  429.525934][T30467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8604'.
[  429.597516][T30475] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8609'.
[  429.624858][T30477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8610'.
[  429.650612][T30477] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  429.661429][T30477] syzkaller0: entered promiscuous mode
[  429.663278][T30477] syzkaller0: entered allmulticast mode
[  429.674964][T30477] tipc: Resetting bearer <eth:syzkaller0>
[  429.705527][T30486] veth3: entered promiscuous mode
[  429.823672][T30499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8618'.
[  429.834557][T30499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.903060][T30501] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  429.943031][T30509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8623'.
[  429.956041][T30513] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  429.965621][T30509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8623'.
[  429.970088][T30513] netlink: 'syz.0.8625': attribute type 1 has an invalid length.
[  429.972676][T30513] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8625'.
[  429.985912][T30513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8625'.
[  429.991411][T30513] netlink: 'syz.0.8625': attribute type 12 has an invalid length.
[  430.277290][T30533] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  430.467583][T30544] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  430.786462][T30546] netlink: 'syz.4.8636': attribute type 1 has an invalid length.
[  430.789123][T30546] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8636'.
[  430.906030][T30556] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  430.958468][T22574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.965894][T22574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.363149][T30577] team0 (unregistering): Port device team_slave_0 removed
[  431.370942][T30577] team0 (unregistering): Port device team_slave_1 removed
[  431.591922][T30590] xt_hashlimit: size too large, truncated to 1048576
[  432.036249][T30616] netlink: 'syz.3.8659': attribute type 23 has an invalid length.
[  432.222921][T30635] netlink: 'syz.3.8664': attribute type 2 has an invalid length.
[  433.000352][T30671] openvswitch: netlink: Multiple metadata blocks provided
[  433.004215][T30673] netlink: 'syz.0.8680': attribute type 3 has an invalid length.
[  433.036961][T30675] netlink: 'syz.3.8681': attribute type 1 has an invalid length.
[  433.093592][T30675] netlink: 'syz.3.8681': attribute type 1 has an invalid length.
[  433.358898][T30702] netlink: 'syz.3.8689': attribute type 2 has an invalid length.
[  433.561789][   T33] audit: type=1800 audit(1752780928.807:10): pid=30705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8690" name="cgroup.controllers" dev="tmpfs" ino=1680 res=0 errno=0
[  433.726990][T30715] xt_hashlimit: size too large, truncated to 1048576
[  434.126883][T30734] 8021q: adding VLAN 0 to HW filter on device bond2
[  434.143008][T30734] bond2: (slave gretap1): making interface the new active one
[  434.146311][T30734] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  434.298107][T30752] __nla_validate_parse: 18 callbacks suppressed
[  434.298120][T30752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8706'.
[  434.319462][T30752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8706'.
[  434.325752][T30747] xt_cgroup: invalid path, errno=-2
[  434.371547][T30756] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  434.375829][T30756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8708'.
[  434.466125][T30765] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8712'.
[  434.536350][T30776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.624564][T30781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8716'.
[  434.631878][T30778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8715'.
[  434.766769][T30795] validate_nla: 4 callbacks suppressed
[  434.766781][T30795] netlink: 'syz.3.8722': attribute type 3 has an invalid length.
[  434.773883][T30795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8722'.
[  434.778835][T30795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8722'.
[  434.806308][T30799] x9: renamed from bridge_slave_0 (while UP)
[  435.145002][T30829] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  435.305917][T30842] netlink: 'syz.0.8739': attribute type 16 has an invalid length.
[  435.308561][T30842] netlink: 'syz.0.8739': attribute type 17 has an invalid length.
[  435.328534][T30842] tipc: Resetting bearer <eth:syzkaller0>
[  435.333257][T30842] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.336330][T30842] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.341954][T30842] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.346358][T30842] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.351689][T30841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8739'.
[  435.404487][T30841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8739'.
[  435.496241][T30855] openvswitch: netlink: Message has 24 unknown bytes.
[  435.591711][T30859] netlink: 'syz.0.8743': attribute type 1 has an invalid length.
[  435.954764][T30880] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[  436.024514][T30884] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.056713][T30888] tipc: Disabling bearer <eth:syzkaller0>
[  436.136061][T30891] netlink: 'syz.3.8756': attribute type 1 has an invalid length.
[  436.157536][T30891] 8021q: adding VLAN 0 to HW filter on device bond3
[  436.176002][T30891] 8021q: adding VLAN 0 to HW filter on device bond3
[  436.181621][T30891] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  436.186171][T30891] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  436.214423][T30892] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  436.218476][T30892] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  436.321109][T30907] netlink: 'syz.3.8762': attribute type 3 has an invalid length.
[  436.437992][T30918] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  436.508182][T30931] bridge_slave_0: invalid flags given to default FDB implementation
[  436.712712][T30953] netlink: 'syz.0.8778': attribute type 4 has an invalid length.
[  436.721577][T30953] netlink: 'syz.0.8778': attribute type 4 has an invalid length.
[  436.788646][T30958] smc: net device bond0 applied user defined pnetid SYZ2
[  436.793123][T30958] smc: net device bond0 erased user defined pnetid SYZ2
[  436.804076][T30958] bridge0: entered allmulticast mode
[  436.896716][T30970] netlink: 'syz.0.8784': attribute type 3 has an invalid length.
[  437.170178][T30981] xt_hashlimit: size too large, truncated to 1048576
[  437.460080][T30996] bridge_slave_1: left allmulticast mode
[  437.462088][T30996] bridge_slave_1: left promiscuous mode
[  437.464105][T30996] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.471029][T30996] x9: left allmulticast mode
[  437.472723][T30996] x9: left promiscuous mode
[  437.474464][T30996] bridge0: port 1(1x9) entered disabled state
[  437.639729][T30993] hsr0 speed is unknown, defaulting to 1000
[  437.767563][T31011] tipc: Enabling of bearer <eth:vxcan1> rejected, failed to enable media
[  437.886466][T31026] netlink: 'syz.3.8801': attribute type 4 has an invalid length.
[  438.820975][T31054] openvswitch: netlink: Key 32 has unexpected len 20 expected 2
[  439.155157][T31072] bridge_slave_0: default FDB implementation only supports local addresses
[  439.485125][ T1361] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  439.605450][T31108] __nla_validate_parse: 11 callbacks suppressed
[  439.605463][T31108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8832'.
[  439.668865][T31120] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8835'.
[  439.822969][T31136] netlink: 'syz.0.8842': attribute type 33 has an invalid length.
[  439.825631][T31136] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8842'.
[  440.032898][T31151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8845'.
[  440.071386][T31153] netlink: 'syz.0.8848': attribute type 1 has an invalid length.
[  440.075413][T31153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8848'.
[  440.081518][T31153] gtp2: entered promiscuous mode
[  440.083281][T31153] gtp2: entered allmulticast mode
[  440.225723][T31161] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  440.231779][T31161] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  440.375055][T31172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8854'.
[  440.379682][T31173] netlink: 'syz.0.8854': attribute type 1 has an invalid length.
[  440.426213][T31176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.433380][T31178] netlink: 'syz.0.8856': attribute type 3 has an invalid length.
[  440.442927][T31178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8856'.
[  440.453963][T31178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8856'.
[  440.741576][T31209] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  440.745994][T31203] netlink: 'syz.4.8865': attribute type 1 has an invalid length.
[  440.752548][T31209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8867'.
[  440.785163][T31203] bond4: (slave gretap1): making interface the new active one
[  440.788367][T31203] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  440.816215][T31215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8868'.
[  441.238763][T31254] openvswitch: netlink: Key type 100 is out of range max 32
[  442.037708][T31270] netlink: 'syz.0.8892': attribute type 6 has an invalid length.
[  442.176632][T31284] bond0: (slave bond_slave_0): Releasing backup interface
[  442.183062][T31284] bond0: (slave bond_slave_1): Releasing backup interface
[  442.189023][T31284] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  442.193375][T31284] batman_adv: batadv0: Removing interface: batadv_slave_0
[  442.196853][T31284] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  442.200895][T31284] batman_adv: batadv0: Removing interface: batadv_slave_1
[  442.212962][T31284] bond2: (slave gretap1): Releasing active interface
[  442.226040][   T24] hsr0 speed is unknown, defaulting to 1000
[  442.249217][T31284] netlink: 'syz.3.8890': attribute type 10 has an invalid length.
[  442.262449][T31284] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  442.343398][T31287] hsr0 speed is unknown, defaulting to 1000
[  442.722664][T31302] geneve2: entered promiscuous mode
[  442.975570][T31313] : left allmulticast mode
[  442.982465][T31313] : left promiscuous mode
[  442.988112][T31313] bridge0: port 1() entered disabled state
[  442.998640][T31313] bridge_slave_1: left allmulticast mode
[  443.001369][T31313] bridge_slave_1: left promiscuous mode
[  443.003958][T31313] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.025110][T31313] bond0: (slave bond_slave_0): Releasing backup interface
[  443.030337][T31322] netlink: 'syz.4.8900': attribute type 10 has an invalid length.
[  443.032879][T31313] bond0: (slave bond_slave_1): Releasing backup interface
[  443.041727][T31313] team0: Port device team_slave_0 removed
[  443.047020][T31313] team0: Port device team_slave_1 removed
[  443.049177][T31313] batman_adv: batadv0: Removing interface: batadv_slave_0
[  443.052717][T31313] batman_adv: batadv0: Removing interface: batadv_slave_1
[  443.056350][T31313] bond1: (slave bridge1): Releasing backup interface
[  443.060230][T31313] bond2: (slave geneve2): Releasing active interface
[  443.064236][T31313] bond3: (slave bridge2): Releasing active interface
[  443.067760][T31313] bond4: (slave gretap1): Releasing active interface
[  443.078253][T31321] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  443.084178][T31322] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  443.136470][T31326] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  443.144463][T31326] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  443.356159][T31343] x_tables: ip6_tables: mh match: only valid for protocol 135
[  443.432174][T31351] openvswitch: netlink: Missing key (keys=40, expected=100)
[  443.455036][T31353] xt_hashlimit: size too large, truncated to 1048576
[  443.926434][T31399] netlink: 'syz.3.8934': attribute type 3 has an invalid length.
[  444.093016][T31421] bond22: entered promiscuous mode
[  444.095320][T31421] 8021q: adding VLAN 0 to HW filter on device bond22
[  444.148949][T31428] veth6: entered allmulticast mode
[  444.155247][T31428] veth7: entered promiscuous mode
[  444.592436][T31471] xt_ipcomp: unknown flags F7
[  444.664637][T31473] __nla_validate_parse: 10 callbacks suppressed
[  444.664651][T31473] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8964'.
[  444.712619][T31475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8965'.
[  444.774002][T31481] xt_hashlimit: size too large, truncated to 1048576
[  444.778427][T31479] netlink: 'syz.4.8967': attribute type 7 has an invalid length.
[  444.787049][T31479] : entered promiscuous mode
[  445.282250][T31512] bond0: Unable to set down delay as MII monitoring is disabled
[  445.457218][T31525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8981'.
[  445.685069][T31544] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  445.741228][T31550] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  445.813872][T31554] netlink: 'syz.4.8990': attribute type 8 has an invalid length.
[  446.037252][T31572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  446.040143][T31572] syzkaller0: entered promiscuous mode
[  446.041924][T31572] syzkaller0: entered allmulticast mode
[  446.058420][T31572] tipc: Resetting bearer <eth:syzkaller0>
[  446.072643][T31572] tipc: Disabling bearer <eth:syzkaller0>
[  446.221041][T31578] xt_TPROXY: Can be used only with -p tcp or -p udp
[  446.275819][T31584] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9000'.
[  446.295373][T31585] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8999'.
[  446.463691][T31592] netlink: 'syz.3.9003': attribute type 13 has an invalid length.
[  446.744434][T31592] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.747423][T31592] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.750566][T31592] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.753433][T31592] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.837681][ T5892] hsr0 speed is unknown, defaulting to 1000
[  446.839935][ T5892] syz2: Port: 1 Link DOWN
[  446.864207][T31601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9005'.
[  446.867253][T31601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9005'.
[  446.879575][T31601] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.882757][T31601] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.886072][T31601] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.888864][T31601] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.894389][T31601] geneve2: entered allmulticast mode
[  446.998674][T31608] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9008'.
[  447.045183][T31614] bridge0: entered allmulticast mode
[  447.050443][T31614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9011'.
[  447.102126][T31620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9014'.
[  447.332559][T31645] xt_CT: No such helper "syz1"
[  447.405084][T31660] veth0_to_bond: entered allmulticast mode
[  447.565399][T31676] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  447.761922][T31686] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  447.765066][T31686] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  447.813137][T31687] 
[  447.813963][T31687] ======================================================
[  447.816523][T31687] WARNING: possible circular locking dependency detected
[  447.819267][T31687] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  447.822860][T31687] ------------------------------------------------------
[  447.825461][T31687] syz.0.9033/31687 is trying to acquire lock:
[  447.827733][T31687] ffffffff8f6745f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  447.830750][T31687] 
[  447.830750][T31687] but task is already holding lock:
[  447.833057][T31687] ffffffff8f674598 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  447.836022][T31687] 
[  447.836022][T31687] which lock already depends on the new lock.
[  447.836022][T31687] 
[  447.839233][T31687] 
[  447.839233][T31687] the existing dependency chain (in reverse order) is:
[  447.842081][T31687] 
[  447.842081][T31687] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  447.844541][T31687]        lock_acquire+0x120/0x360
[  447.846305][T31687]        _raw_spin_lock_bh+0x36/0x50
[  447.848158][T31687]        nr_rt_ioctl+0x390/0xd50
[  447.850145][T31687]        sock_do_ioctl+0xdc/0x300
[  447.852130][T31687]        sock_ioctl+0x576/0x790
[  447.854058][T31687]        __se_sys_ioctl+0xfc/0x170
[  447.856102][T31687]        do_syscall_64+0xfa/0x3b0
[  447.857983][T31687]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.860397][T31687] 
[  447.860397][T31687] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  447.863199][T31687]        lock_acquire+0x120/0x360
[  447.865069][T31687]        _raw_spin_lock_bh+0x36/0x50
[  447.867105][T31687]        nr_rt_ioctl+0x193/0xd50
[  447.869017][T31687]        sock_do_ioctl+0xdc/0x300
[  447.870960][T31687]        sock_ioctl+0x576/0x790
[  447.872932][T31687]        __se_sys_ioctl+0xfc/0x170
[  447.875016][T31687]        do_syscall_64+0xfa/0x3b0
[  447.876757][T31687]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.878963][T31687] 
[  447.878963][T31687] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  447.881605][T31687]        validate_chain+0xb9b/0x2140
[  447.883410][T31687]        __lock_acquire+0xab9/0xd20
[  447.885186][T31687]        lock_acquire+0x120/0x360
[  447.887056][T31687]        _raw_spin_lock_bh+0x36/0x50
[  447.888886][T31687]        nr_rt_device_down+0xa9/0x720
[  447.890850][T31687]        nr_device_event+0x137/0x150
[  447.892809][T31687]        notifier_call_chain+0x1b6/0x3e0
[  447.894693][T31687]        __dev_notify_flags+0x18d/0x2e0
[  447.896742][T31687]        netif_change_flags+0xe8/0x1a0
[  447.898631][T31687]        dev_change_flags+0x130/0x260
[  447.900571][T31687]        dev_ioctl+0x7b4/0x1150
[  447.902275][T31687]        sock_do_ioctl+0x22c/0x300
[  447.904031][T31687]        sock_ioctl+0x576/0x790
[  447.905692][T31687]        __se_sys_ioctl+0xfc/0x170
[  447.907446][T31687]        do_syscall_64+0xfa/0x3b0
[  447.909193][T31687]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.911551][T31687] 
[  447.911551][T31687] other info that might help us debug this:
[  447.911551][T31687] 
[  447.915348][T31687] Chain exists of:
[  447.915348][T31687]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  447.915348][T31687] 
[  447.920614][T31687]  Possible unsafe locking scenario:
[  447.920614][T31687] 
[  447.923151][T31687]        CPU0                    CPU1
[  447.925137][T31687]        ----                    ----
[  447.927199][T31687]   lock(nr_neigh_list_lock);
[  447.928998][T31687]                                lock(&nr_node->node_lock);
[  447.932011][T31687]                                lock(nr_neigh_list_lock);
[  447.934986][T31687]   lock(nr_node_list_lock);
[  447.936953][T31687] 
[  447.936953][T31687]  *** DEADLOCK ***
[  447.936953][T31687] 
[  447.939790][T31687] 2 locks held by syz.0.9033/31687:
[  447.941697][T31687]  #0: ffffffff8f51bb08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  447.944682][T31687]  #1: ffffffff8f674598 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  447.948034][T31687] 
[  447.948034][T31687] stack backtrace:
[  447.950019][T31687] CPU: 0 UID: 0 PID: 31687 Comm: syz.0.9033 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  447.950030][T31687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  447.950036][T31687] Call Trace:
[  447.950041][T31687]  <TASK>
[  447.950047][T31687]  dump_stack_lvl+0x189/0x250
[  447.950059][T31687]  ? __pfx_dump_stack_lvl+0x10/0x10
[  447.950068][T31687]  ? __pfx__printk+0x10/0x10
[  447.950080][T31687]  ? print_lock_name+0xde/0x100
[  447.950090][T31687]  print_circular_bug+0x2ee/0x310
[  447.950106][T31687]  check_noncircular+0x134/0x160
[  447.950117][T31687]  validate_chain+0xb9b/0x2140
[  447.950128][T31687]  ? rt6_disable_ip+0x6b3/0x720
[  447.950139][T31687]  ? __lock_acquire+0xab9/0xd20
[  447.950147][T31687]  __lock_acquire+0xab9/0xd20
[  447.950155][T31687]  ? nr_rt_device_down+0xa9/0x720
[  447.950162][T31687]  lock_acquire+0x120/0x360
[  447.950169][T31687]  ? nr_rt_device_down+0xa9/0x720
[  447.950178][T31687]  ? nr_rt_device_down+0xa9/0x720
[  447.950184][T31687]  _raw_spin_lock_bh+0x36/0x50
[  447.950196][T31687]  ? nr_rt_device_down+0xa9/0x720
[  447.950203][T31687]  nr_rt_device_down+0xa9/0x720
[  447.950212][T31687]  ? do_raw_spin_unlock+0x4d/0x240
[  447.950223][T31687]  nr_device_event+0x137/0x150
[  447.950230][T31687]  notifier_call_chain+0x1b6/0x3e0
[  447.950240][T31687]  __dev_notify_flags+0x18d/0x2e0
[  447.950251][T31687]  ? __pfx___dev_notify_flags+0x10/0x10
[  447.950261][T31687]  ? __dev_change_flags+0x4cc/0x6d0
[  447.950272][T31687]  ? __pfx___dev_change_flags+0x10/0x10
[  447.950281][T31687]  ? dev_ioctl+0x7a4/0x1150
[  447.950289][T31687]  ? full_name_hash+0x92/0xe0
[  447.950298][T31687]  netif_change_flags+0xe8/0x1a0
[  447.950309][T31687]  dev_change_flags+0x130/0x260
[  447.950320][T31687]  dev_ioctl+0x7b4/0x1150
[  447.950330][T31687]  sock_do_ioctl+0x22c/0x300
[  447.950340][T31687]  ? __pfx_sock_do_ioctl+0x10/0x10
[  447.950347][T31687]  ? __lock_acquire+0xab9/0xd20
[  447.950356][T31687]  sock_ioctl+0x576/0x790
[  447.950364][T31687]  ? __pfx_sock_ioctl+0x10/0x10
[  447.950371][T31687]  ? __fget_files+0x2a/0x420
[  447.950377][T31687]  ? __fget_files+0x3a0/0x420
[  447.950383][T31687]  ? __fget_files+0x2a/0x420
[  447.950389][T31687]  ? bpf_lsm_file_ioctl+0x9/0x20
[  447.950399][T31687]  ? __pfx_sock_ioctl+0x10/0x10
[  447.950405][T31687]  __se_sys_ioctl+0xfc/0x170
[  447.950415][T31687]  do_syscall_64+0xfa/0x3b0
[  447.950423][T31687]  ? lockdep_hardirqs_on+0x9c/0x150
[  447.950430][T31687]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.950436][T31687]  ? exc_page_fault+0x9f/0xf0
[  447.950443][T31687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.950450][T31687] RIP: 0033:0x7fc0a6d8e929
[  447.950458][T31687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  447.950466][T31687] RSP: 002b:00007fc0a4bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  447.950474][T31687] RAX: ffffffffffffffda RBX: 00007fc0a6fb6080 RCX: 00007fc0a6d8e929
[  447.950479][T31687] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000007
[  447.950484][T31687] RBP: 00007fc0a6e10ca1 R08: 0000000000000000 R09: 0000000000000000
[  447.950488][T31687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  447.950493][T31687] R13: 0000000000000000 R14: 00007fc0a6fb6080 R15: 00007ffec11e2a68
[  447.950500][T31687]  </TASK>

VM DIAGNOSIS:
19:35:43  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000023 RBX=0000000000000023 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000003171 RDI=0000000000003172 RBP=00000000000003f8 RSP=ffffc90006797030
R8 =ffff888108dc8237 R9 =1ffff110211b9046 R10=dffffc0000000000 R11=ffffffff85460dc0
R12=dffffc0000000000 R13=ffffffff99aee8c7 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc0a4bd56c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc0a4bd4fc8 CR3=000000002e8c4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000011194dda 0000000000000018 XMM01=0000000030717062 00005646b0c59078
XMM02=00000100ffffffff 0101000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b0c7f1ac6232c400 RBX=ffffffff81976c78 RCX=b0c7f1ac6232c400 RDX=0000000000000001
RSI=ffffffff8be28c20 RDI=ffffffff81976c78 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d5f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d3000
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c24da70 CR3=0000000030e78000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=8f3679453eca62bd 28580783c58993b7 XMM03=088ff491aa32f4ca 50bb36e276538edd
XMM04=f7691c5efc975a0d e1cba836786fd10a XMM05=84d51406620fccd9 3b47d831bdd7285f
XMM06=351508cc8b32fe39 9b58a9515f340775 XMM07=68c1a47afb73f769 1c5efc975a0de1cb
XMM08=a836786fd10a088f f491aa32f4ca50bb XMM09=0000000000000000 00007fe51e011df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
