last executing test programs:

2.305305588s ago: executing program 0 (id=1848):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000002400ebee26bd7000fe06b4c62831f2c95d4300"/36], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x14940)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
listen(r2, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
setsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, 0x0) (async)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) (async)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000002400ebee26bd7000fe06b4c62831f2c95d4300"/36], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x14940) (async)

2.130962881s ago: executing program 0 (id=1850):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000000)={0xdfcc, 0x1, 0x0, 0x8, 0x5})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@generic={0x91, 0x1, 0x1, 0x73}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
sendmmsg$sock(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x240400d4)
sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x4, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x14, 0x0, 0x4, 0x0, "c4f40c848d97a447"}}, 0x48}}, 0x0)

1.995906899s ago: executing program 0 (id=1852):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0x551}, 0x100, './file0\x00'})
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040}, 0x20048894) (async)
socket$packet(0x11, 0x2, 0x300) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5773}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x5, 0x0, 0x6, 0x6, 0x0, 0x18, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x3, 0xe, &(0x7f0000000340)=""/14, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x9, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x4, 0x3, 0xa, 0x1}, {0x2, 0x1, 0x9, 0xb}], 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x0, 0xff, 0x4c, &(0x7f0000000540)="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", &(0x7f0000000640)=""/76, 0xffffffff, 0x0, 0x4c, 0xa1, &(0x7f00000006c0)="fdd3192c3d0ef549dbfedadf7bb7dff828e830755bdbdb0f3a64268481ef6570c6b0c73c95b6eb13818e4e0c49fea66d6c5491a8dbebe7ebae2da35b2e7f905ba11ab99466e1aebd5faefbdf", &(0x7f0000000740)="437f476e4ecb648c66d16ef16c89486c3d17af90d1f2ab6ba4a0c6393538657ec0c325a1fe4374433e3a4b40ba638be57cc7cd95cbb03f0d35cfc7bf1eda1537e63df277701954ff4145a651e8b1e59b7af17a67838b5874da93a632af38116eab749d6013d1300589310f6efe6c5f246c3a27e627ffedb9985281ed594b9ee7747fdab246e0d6af7aed07aecbcc6dffa9ebc12303963fc275550097031cc5d5dd", 0x3, 0x0, 0x2}, 0x50) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x8000)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000980)={'filter\x00', 0x0, [0x9, 0x1, 0x10000, 0xc1e, 0x80]}, &(0x7f0000000a00)=0x54) (async)
r4 = socket$packet(0x11, 0x3, 0x300) (async)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a40), 0x200800, 0x0)
write$rfkill(r5, &(0x7f0000000a80)={0x7, 0x6, 0x2, 0x0, 0x1}, 0x8) (async)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0xfffff4f8, 0x7ff, 0x2, 0x1c, 0x4, 0x0, 0x3}, 0x1c) (async)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) (async)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000b00)=[@in6={0xa, 0x4e22, 0x83, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, @in6={0xa, 0x4e20, 0xd4, @loopback, 0xffffff1a}, @in6={0xa, 0x4e23, 0x7, @mcast2}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x74)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0x0, 0x7, 0x30}, 0xc)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000c80)=<r8=>0x0, &(0x7f0000000cc0)=0x4) (async)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d00)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r2, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0], <r10=>0x0, 0xf4, &(0x7f0000000e80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000f40)}}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x3, 0xf, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x76, '\x00', r8, @fallback=0x27, r9, 0x8, &(0x7f0000000d40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x5, 0xc, 0x0, 0xc84f}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)=[0x1], 0x0, 0x10, 0x1}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r3)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000001300)={&(0x7f00000011c0), 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x4c, r12, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x28f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040804}, 0x40010) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r9, 0x111, 0x1, 0x5d4a, 0x4) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r11, 0x6628) (async)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000001540)={0x0, 0x7, 0x9970}, 0x8)

1.718492701s ago: executing program 0 (id=1855):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
socket(0x2, 0x80805, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400b59508000000000000000a400000", @ANYRES32=r4, @ANYBLOB="14000200ff020000000000000000000000000001080008000207"], 0x34}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400a59500000000000000000a6800c8", @ANYRES32=r4, @ANYBLOB="14000200ff02000000000000000000000000000114000100fe"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x800)

1.169019619s ago: executing program 2 (id=1860):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d3"}]}], {0x14}}, 0x70}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000b060102000000000000000006000002050001"], 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4800) (async)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000b060102000000000000000006000002050001"], 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4800)

1.168381396s ago: executing program 2 (id=1861):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000300)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x4, 0x220, 0x1, {r4, r5/1000+10000}, {0x77359400}, {0x3, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "d88a9ef7e56ea7ae2cc578e01a050a60a6580ea9ccaf7e1338cb7db0139dacd5d0b9891eacb37b70163e42930e81d5057c74cb0bcc2c7834a5d12d96f139baf2"}}, 0x80}, 0x1, 0x0, 0x0, 0x200448c9}, 0x845)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @remote, @void, {@llc={0x8864, {@snap={0x0, 0x0, '~', "3fab95", 0x892f}}}}}, 0x0)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000000)={0x13, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x208}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x0, 0x3, 0x2}, @IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP2_TO={0x0, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x24008010}, 0x4400d040)
socket$unix(0x1, 0x1, 0x0)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008810}, 0x4040004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7ffffffe}]}}]}, 0x40}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xffffffffffffffa8, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000081808000000000000000000014000100fc00000000000000000000000000000008000f"], 0x38}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
r10 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f00000004c0)=0x2, 0x4)
sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000000)={0x11, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="08000000001f009e44", 0x9}, {0x0}], 0x2}}], 0x2, 0x404c080)

1.089085332s ago: executing program 2 (id=1863):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r3, @ANYBLOB='\x00\x00g', @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002c0007012bbd7000ffdbdf25077c0000080001800400dd80100003800c0003"], 0x2c}}, 0x2000c004)

1.01881563s ago: executing program 2 (id=1864):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001e40), r1)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000007c0)={'wpan0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xb, 0xb}, {0xffe6, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000)
r8 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r9, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b00070066696c746572"], 0x330}}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b40)={0x40, r5, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xde567ea0696331e4}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0xffffffff}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000fd", @ANYRES16=r3, @ANYBLOB="0a002bbd7000fedbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="08000500010000000c0017000201aaaaaaaaaaaa0c0017000203aaaaaaaaaaaa08000300", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x54000)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000000)=ANY=[@ANYBLOB="786bf85082a34338fe9c10bffc796e788d27472197cf58bb01042bc37f581a4f98e0a98acd6006c3f960ba2ad3b617ffca6ffd3dc411b8bc9b54349a6ee61e6e77455b19ac334efccd9ee1847d5d180dd66d3f5efdb550d5947c4b9e6ca64722a8e5332ba149291a6da15c21f4d4326521b712ff65dd96add97936d9998782aa3366fcd5e5e10416305cc5d953bba65050da989b66c48b0000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25040000001400050000000000000000000000ffff64010102080002000300000008000700ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x64004880)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001e40), r1) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) (async)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xb, 0xb}, {0xffe6, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r9, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b00070066696c746572"], 0x330}}, 0x0) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b40)={0x40, r5, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xde567ea0696331e4}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0xffffffff}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000fd", @ANYRES16=r3, @ANYBLOB="0a002bbd7000fedbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="08000500010000000c0017000201aaaaaaaaaaaa0c0017000203aaaaaaaaaaaa08000300", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x54000) (async)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000000)=ANY=[@ANYBLOB="786bf85082a34338fe9c10bffc796e788d27472197cf58bb01042bc37f581a4f98e0a98acd6006c3f960ba2ad3b617ffca6ffd3dc411b8bc9b54349a6ee61e6e77455b19ac334efccd9ee1847d5d180dd66d3f5efdb550d5947c4b9e6ca64722a8e5332ba149291a6da15c21f4d4326521b712ff65dd96add97936d9998782aa3366fcd5e5e10416305cc5d953bba65050da989b66c48b0000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25040000001400050000000000000000000000ffff64010102080002000300000008000700ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x64004880) (async)

845.626013ms ago: executing program 1 (id=1865):
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{<r0=>0xffffffffffffffff, &(0x7f0000000000)='],\x00', 0x40080, &(0x7f0000000040)={@align=0xb, {0x97, 0x7, 0x81, 0xdd7}}, 0x36, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x4}, {[0x6, 0x25f, 0xa, 0xd3c]}, 0x10000, 0xfe, &(0x7f0000000100)=""/254})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "b3b47b00e624ff7748656955f62ad1"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044001)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)={0x478, r1, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3d2, 0x68}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x435, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7ffc}, @device_b, @device_b, @random="bf8bed2602ee", {0x3, 0x2}, @value=@ver_80211n={0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x8274, 0x2, @broadcast, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0x99, "4f95101451c7bdac6ca07c4f47d4caecb8c08ec339dd620ebfd4472347f68b3c440ec91f1371a1d24f78bee4d5ba4e1f093ebdc500133d06b6ce034a2082f980ca47c766983319cc954ef39258337fd595842be0ce525c98d0da1652dc9309724def713eff1a598ecceefbd2c4a37489406d58916f99873f37604af894b57f4546bc9beececeb1bb6b4345116827788418ed0ea1df2bffe920"}, {0xdd, 0xb0, "01062dbed98964e0681f052bf1c0d076e1153d71d12beefccfde55837184d82e6af3febf170f83c463fa7b84f0a54108f1b30a1bdcac7cfc1d859a863a88d5f5ba8706126a241b05e8a589ca030ab61b4e95910e6fe4fa80b0c3f4f006b9713ed42dc4423abe8c26ab69f35264a4afbb8add5a82485e189b3f8188cbab6d739143296dc123c53629e879cbd081391a72d7fb728c23690d406878dbf7c87a4a936601d513372134bed2341895729814b4"}, {0xdd, 0xb9, "d127b42ce2dbcc39b80750d9656943a2508fbf4f611fa8bd92a4c5a3e4370811e8c4935913fc26eca0ea972719657755a5a8d0d3c287b2b91764cec515143754e0370c3f67e258938c49200b3e204f22edb894c1d67e02d13a462b2ef164d57b161716eb409749dd535b199d688ff106a4c9bb2c09eca46fdcb16a3d3e84db42557089230fa0600fce5596c4e7235a4c4dfb219e9cbe0e3d21ee16635da1601cbf3ceafd598497c97fc8448ce4528a46a771cd769e2712fd16"}, {0xdd, 0xb5, "5be2ed8f516d581e351461b510fcc0206e4778045c70f6c59e61fdd0e44d63fd9e50563fa716b9a1dc6a6ced4937c7d0da60654c61f41ef5ce1584edcafa71fe510fdad45817baab0bbf337f019c7c119ae3f6b7246637c97daa9878a65984a0203933305b101d83893f81b77d67ece8ebdac34555f68eb36c849ef83b19a97cfcd4b4965ee46695d4d6c5b86fe56819e6970eb71e27fe73d89afc2428da3cb364719f25b771e4749029db9aa1155c7e0b846e47c8"}, {0xdd, 0xd1, "ea5bf1d7aa4257eb620c047a4612214c9ca273e4a63cfc62d1f4042089110c78f1dd521c7a119ba82d0e9bdf653b09c27dc7bef85e05e6d66564ce1ff548a0ca66788ac2bb4098bb6dfa90fb17d260c9457c7c966f9b89a3e84fe1aca661f11d82308fe6a6b63ec912225194e009edf2e324fb840a6d2358b8255768a9cb31bf8a82f437f054ede31e70f173bb46ee9fa6910a74f3836cb0d27fd31d0e16a4e05675b385e4a64c389c783e7800837fd308ff32642413cd15e34aa6f4532146466b030a5239b6815ec0e74c5068be04cf1b"}, {0xdd, 0x6f, "c0b5633ce2fea9c8ce7f18246708ee5b2b08f91cea766ce0dfd354e14ea5d3b52c79b4a11ca814efb477c1459438e76e3f67b940b51495560b5c609b51104792c242697051da62a92316e5e3d44f5b8a49750111770948e4579550735a4970de659a1dd9c87d318997f9fce0417f99"}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x2404c805}, 0x20000004)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x9, 0x11, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='GPL\x00', 0x2, 0xb1, &(0x7f0000000ac0)=""/177, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x4, 0xc, 0xfff, 0xb1c}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000bc0)=[r0, r0, r0, r0, r0], &(0x7f0000000c00)=[{0x5, 0x1, 0x6, 0xb}, {0x2, 0x5, 0x6622, 0xa}, {0x1, 0x3, 0xd, 0x7}, {0x5, 0x5, 0xe, 0xb}, {0x4, 0x3, 0x0, 0x2}, {0x2, 0x1, 0x8, 0x6}], 0x10, 0x7f}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r0, <r4=>0xffffffffffffffff}, &(0x7f0000000980), &(0x7f0000000d40)=r3}, 0x20)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000f00)={&(0x7f0000000dc0), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r5, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7fff, 0x9}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0xc0)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xae1}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008080}, 0x4000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6b}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4040840)
r8 = accept4$nfc_llcp(r0, &(0x7f0000001180), &(0x7f0000001200)=0x60, 0x80000)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001240)=<r9=>0x0)
sendmsg$nfc_llcp(r8, &(0x7f0000001700)={&(0x7f0000001280)={0x27, r9, 0xffffffffffffffff, 0x5, 0xc, 0x4, "ba03ce58295a084619b5546184f26bf635addd4e2714187aa4380793b401ef2a178b31878609e5858ef33123c9977fff3a756c1c92b9c1ab5b2ee7a707a10f", 0x35}, 0x60, &(0x7f0000001600)=[{&(0x7f0000001300)="76c351978bdef16d992ca6b16216675bcd779cd2a78b87154051c007bb32bb8932dd13403560", 0x26}, {&(0x7f0000001340)="b48f815a52990253b0f49d1be492204bd2256fb20b09637056f48b3ca3180b348c2612ccdf54f9cda608d817def251b4c5ccb3cb3064f1cee93b99daeab2f8cbe2cd0467e3d696d4657f36dd3174e67d180e8a264e367b5ad3aa66d8ebdadde98d06a1116f4e208c690c4580f9d0ae0b406eb9883edf4c5610df73fa133a19073132ed642ad1b62f33baa3090db3bcbb73a07d03818b2ee8f6112a64a2ff305f9f42c157d581de6fb90f02f65ffe6f87a0903fcbfa290240a25ba35518e4cb722d341da72d8426048d9810dd15a015a77cca11908c67c8fa154c0b3a5a6d20adcb21402974af18c83d9e0fec7ddf7f72e5", 0xf1}, {&(0x7f0000001440)="e6fdb19f565daeed188484726c1cb4f321e6d391c934c7f43a70cf738a519340a741fe56e160a2c280f776ee234c2c149d7431adc78628fc02528650c7b2e8f2268c57d55f404486e5d85df21f74d5a0c1cdfdc864626f4782943cded75f109eb0c6b0a5c94cdb7c29a2ae46c879aaa9ca9b3477b02a8548abc022a5cb55171102895d3715b3259404424f27bd015bce7b50197b05d355b93d58a062548f9027298575c78c331a6e91e7f5e11957bf2aa45688f7863c3f620e714f6ab20a0c0096b97307106d5839b5750bb8e5c4df0b51a33eff2d684f018d089294def8c7cc", 0xe0}, {&(0x7f0000001540)="01f18a676a6abb4dcc7fae8d517ce8821427586cc53d28c64a08d46759dec9119dbaa895459a5b2ea686fe02ff19ed9065a04688c579490b0b7c51a143e6530a9d2848330169a78c622c4cfcee6e8fe806f7f15bb88bcf05d62b87cf50d4c3eaf5ff5f1206ee6febb3f77815fe5a8259cf7232", 0x73}, {&(0x7f00000015c0)="fa19aeb2272f075b4affdbdca597", 0xe}], 0x5, &(0x7f0000001680)={0x78, 0xff, 0xde8, "67c00e4aed806b382bb5b32e0c8a6b3c672960b7f5aecbde21f765fc57043fedca048655f614f471cc8b336c1f03b69fae3f6b3524833058f673fdbf5adb47c2114be377640ef0a47e0d611fb15ca2ed152a3dec5adc71541b7b4fb745dd1456ee510964814b26"}, 0x78, 0x97}, 0x40010)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x20, r1, 0x8, 0x70bd25, 0x7, {{}, {@void, @void, @val={0xc, 0x99, {0x1ff, 0x29}}}}, ["", "", ""]}, 0x20}}, 0x20008083)
syz_emit_ethernet(0x4a, &(0x7f0000001840)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x6, 0x1}}, {@llc={0x4, {@llc={0x7e, 0x0, "118d", "35846526e730d3a714fbe240f7a739ae642327233f3aed91be2c879a4e48a9959661862735c0eb5f91263188651e04ad"}}}}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r4, <r10=>0xffffffffffffffff}, &(0x7f00000018c0), &(0x7f0000001900)=r0}, 0x20)
ioctl$sock_SIOCGSKNS(r7, 0x894c, &(0x7f0000001980))
accept4$vsock_stream(r0, &(0x7f00000019c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000001b00)={'syztnl0\x00', &(0x7f0000001a00)={'syztnl2\x00', <r12=>0x0, 0x8000, 0x40, 0x552a, 0x4, {{0x2d, 0x4, 0x1, 0x11, 0xb4, 0x67, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xa7, 0x3, 0x2, [{@empty, 0xaf}, {@multicast2, 0x7}]}, @lsrr={0x83, 0xb, 0xb1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x34, 0x4d, 0x1, 0x8, [{@private=0xa010102, 0x5}, {@multicast1, 0xd}, {@multicast1, 0x9}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010102, 0x1}]}, @generic={0x86, 0x11, "7516c14444ca8ff1b8dbf1498e8c14"}, @timestamp_prespec={0x44, 0x3c, 0x34, 0x3, 0x1, [{@remote, 0xcfbc}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0x4}, {@multicast2, 0xff}, {@local, 0x6}, {@broadcast, 0xaf6}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001bc0)={'ip6_vti0\x00', &(0x7f0000001b40)={'syztnl2\x00', <r13=>r12, 0x29, 0x8, 0xe, 0x0, 0x75, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x1, 0x3, 0x400}})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001e00)={r0, <r14=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x9, 0x11, &(0x7f0000001c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb277, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001cc0)='syzkaller\x00', 0x5, 0x6f, &(0x7f0000001d00)=""/111, 0x41000, 0x8, '\x00', r13, 0x0, r0, 0x8, &(0x7f0000001d80)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001dc0)={0x5, 0x1, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001e40)=[r4, r10, r14, r0, r10, r0, r10], &(0x7f0000001e80)=[{0x2, 0x4, 0x7, 0xb}], 0x10, 0x9}, 0x94)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001fc0), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(r15, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x310080b0}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x14, r16, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x60000045}, 0x80)
ioctl$BTRFS_IOC_START_SYNC(r14, 0x80089418, &(0x7f00000020c0))

844.66098ms ago: executing program 2 (id=1866):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, 0x0, 0x40080)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002480), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000024c0)={'wpan1\x00', <r2=>0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r0, 0x0, 0x240400c5)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000002b00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7fff}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xb}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x4004080)

717.158323ms ago: executing program 0 (id=1867):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1006, &(0x7f0000002500)=""/4102, 0x0, 0xc}, 0x94)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, &(0x7f0000000180)=0x7fffffffffffffff, r7, 0x0, 0x4, 0xa)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000040)={r10, 0x2}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000380)={r10, @in6={{0xa, 0x4e23, 0x7f, @empty, 0x10001}}, 0x80000000, 0x8001, 0x64e, 0x400, 0x0, 0xce4, 0x6}, 0x9c)
sendmmsg$inet(r2, &(0x7f00000033c0)=[{{&(0x7f0000000800)={0x2, 0x6e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000cc0)="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", 0x1a4}, {&(0x7f0000000700)="1e9bdb919930b63490b5092febd4ff5a7fdfebce145cf8edd142d88e92908746fe920060d936ca0b89f1a56fa4b26d0657c57a665369d2ce8909af5d00d8d7eb6407c762ebac337367d400cc47fd1d9a15533e4958ec0d45bd6ce376ace04c0b5cb07312b1cae72e32fdcaf7e6aa26737e748d2a83009703ef0a756140a832d841fdec50624cddcbe8a4a7baaf2a2b5a583115", 0x93}, {&(0x7f0000000080)="130c30e22e659c9576b8f2b4fe51", 0xe}, {&(0x7f0000000980)="bbac16fcc4d7f544650412d99d848131e90c3ddb46328254d612a7137dc0fef685c549edea047466f98e315c404278f30041195c9258323be608bc4f3bd7fffb49f496ff336b01064dbda605139f2f216ee4bb009da26bc8b9290bbd3e6e9bf79d62123a72d33f70e6266109cf777dce8b918ea73612fc05d067f822c4006712d8430f698dd7a12f125f17da6d0c0fc5bfec9e243bd269dfce6877fe1529c1cc59e1cb7f50b311986abf05a0ea27cd6877e2b641e23047937ae413a3e174d879479206240ed9f29c702bbdb8aa274844209385fca92af09d2ab7a1a094bd4f3911ff19d17a", 0xe5}, {&(0x7f0000000680)="3b3c0a00000088ac8acfccb718614eb19bad32c259752a0edeffb674542ead31a8921c1f42c1155966e90af9ec0298a9576fdcf6d9d72b3bdf6e7a8cecba8af910000ba7e9b1a84f76c94b3981948ddf1a84cd4be5946b79e4379eb900"/103, 0x67}, {0x0}, {&(0x7f00000008c0)="3ac5dcd0cc302ce4ec6bcc1d80dbdc825f337102590b376ac7a7292663503365324660ad9b2de82843ef59", 0x2b}], 0x7}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000540)="aee1a8e7378565cc05db8e416922cb45d90738e91100af6e79911cd8aba6b363511c2642e2adaed0465fbc36c0a41ba072d513d3a12c16596e81a2812d7ddb4c0a76af3e3d8246058eace356f33a93bd8ff2b5a90a4b8d9aea530a6a82aacb5dcdb3380d3c4c107355c45dc182c5aa56801a138525d24fb54560c7f0b4fb33d0ea440967abce8573bd93d1cd8b72a9afdf3a690b23ad8ab08ac7b5b425e11267a56a48378932bae9", 0xa8}, {&(0x7f0000000b80)}, {&(0x7f0000000c40)="4cd6572d1d8b4085df67", 0xa}, {&(0x7f0000000e80)="0b697e1e3843052f17c96c8d866c6c01cd86b9f087576301088b59c320973b9599175c908071f2f349e827fe1db7f70f2c7d550f5d3c8533d935c63f3162552128b7024727bb2a9fc98cf917342207fa80e8f93df6ff00b6e113e0b672feb1a7e74a95a3047e0b7ba47d6ae26e548b4922e5a5b705630216f05a6b264aa40da11bc79d39e27e880170c8388607643e9515116445e74ec69b1dd9f0a1b61ed5e05e3ba9264e177abc55341fd67783cb0b14daf573f20e5c92ffe9487524ece98ec693128c75db25e8cf1f02c4db8577f8ce4cebd0b5580c8697be8b80fc81c78fb050a3d611d29dc934bf91e7e01a0e73", 0xf0}], 0x4, &(0x7f0000000fc0)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000010c0)="c9fb8c70ef8b7ae2a560a6e6307ecc901de7a2a623bc7d04266b8715547e60daaabf518a20d2df5285ae92c4eb85ca9c323a6fdf86838dd739cb99f467efedef2c405d", 0x43}, {&(0x7f0000001780)="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", 0x42b}], 0x2}}, {{&(0x7f0000002c00)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x6, 0x24008844)
sendto$inet(r2, &(0x7f0000001740)="e839", 0x2, 0x32000800, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000200025a729bd7000fddbdf25020000cdff00000102000100080006000000000014000100fc0000000000000000000000000000000500150002"], 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)

550.121392ms ago: executing program 1 (id=1868):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
socket$packet(0x11, 0xa, 0x300)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ae"}]}], {0x14}}, 0xa4}}, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2)
r4 = accept4(r1, 0x0, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='+\x00T', @ANYRES16=r6, @ANYBLOB="000125bd7000fbc3df2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004890}, 0x8044)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x3, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x22, 0x1, 0x5)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500003257e0bd9bfec8f2143e30000043ca030fe993d81e2e6d4bb57fbb4673f22cb8dca3b08922cf88b6ce4c395fbd9703feb98e0fa3f156f90b00b556047d11ca46c8e5a24c92c04d368da9", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00000000000800040000050000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

417.65744ms ago: executing program 2 (id=1869):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000006000000611000000000000062000013000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0x10, 0x1403, 0x1, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x338)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x8000000010, 0x2, 0x0)
write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90)
sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}})
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x5, 0x3, 0x8, 0x6})
r7 = socket(0xa, 0x1, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000017c0)={0x3c, r9, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)

370.906788ms ago: executing program 0 (id=1870):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(0xffffffffffffffff)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendfile(r2, r3, 0x0, 0xffffffff000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)

226.914779ms ago: executing program 1 (id=1871):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x8, 0x10, 0x72748f52b8af0932}}, 0x1c}}, 0x20024090)
r2 = socket$netlink(0x10, 0x3, 0x8000000004) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xca8)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000cc0)={{r4, 0x0, 0x4000, &(0x7f0000000240)={@align=0x4, {0x9, 0x8, 0xfffffffe, 0x400000000000}}, 0x7fff, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x800}, 0x8, &(0x7f0000000d40)=[{0x3, 0x100, &(0x7f00000003c0)='{]#\'-\xd4\xef:%(*\x0e-\x00', &(0x7f0000000400)="72668ac6d3cb78dee2f87861d1efc9534cf63516b8ff7950bef7a4b420495df9faa3a49b9717a1d493c99f7c3ab03610fa2c35117d22ea13370908539e2b0c01bea836f03e03d37127c93865464edec36720042d8274f37b3b2550ad5b77cb254f9620e0dd285b1d656485dad0bf4cfa633a2c3eec142d6f54b14ab38a4d6d3c6276daee", 0x84, 0xf6d6b6fdaff6622c}, {0x2, 0x7, &(0x7f00000004c0)='+/\x00', &(0x7f0000000580)="96e3c493f0c802fe000966521ed0028bc04fb77dfafe5b53aa662dc04775ba1eeef7cc3f56e5aaf133998b5c69588c162efdcaf7fdbe70fd14311c0f4a6aa8829feeae00e89c6cffe4b33e113930d2d21928b98d7984048f4cdf1318eef1f0e40336c131a00c5f71b57f719950403200cc74405ae0f3e5edf7be8a068223001ce01828db932826c31fad62120d250f23a0a85b62f7b05c030a9bf70c53f893f45a1a9f19d0de2c19a08d8c4214f96928122a040cfecdbca31480e071de3c032904d2c7141b2bf7e34fb69850528085684a5a6e9504c8e9e582dcfcdbf8b2c970d416", 0xe2, 0x11}, {0x3, 0x0, &(0x7f0000000680)='^-^[]*\':!{]:)\x00', &(0x7f00000006c0)="06182f6a57ab78df535ee4aededda2b3cb535882b9028eb07bb383cbe85c32abeb9fcbe438bf147b0826786f1519ef85cab7c5a8fb7a03c1fa68d51c5627ae52f629ab1c634e7ceb834943eec95384ac2f69f31f4488e1b53aa40b26a8ee220150b670372d07ba85be36e0b7322a12bb96ac78d1b182355a4d12ccc213e763e8db", 0x81, 0x2}, {0x1, 0x80000000, &(0x7f0000000780)='\x00', &(0x7f00000007c0)="c1347b8bd5c2906867222df908b512a111782a1c6aa3cc8ffe6c8e801af49daf8c7b69ed0fc697a23c8f15c6fb58aabf8204285a17260a5f5c21a60807c2c14c73f439ef0efcbdc697d14797a5169902", 0x50, 0x12}, {0x2, 0x1d, &(0x7f0000000840)='team_slave_1\x00', &(0x7f0000000880)="8044de57eefe446f84c1c0c9410c54866cccce85673051041341dcb37abe5f62dea6b5903066a75619f1cbf2156f7e9094e636c01ee25a454872", 0x3a, 0x28}, {0x3, 0x80, &(0x7f00000008c0)=',:\x00', &(0x7f0000000900)="76ce2b8e10af509f0ca32deb6dc3d070118a05443a752426fcd640ce156d6600bdb2f7eb9aa90d1b4f9f3c2b3b11f8cf22e8235b9f597301d4775d2a06f4eece7b50de1594b3b155b88e2b41db5c1ac337b03518d378cc9a7ceb02772a782648954380d5848c299775cf5630a2533d6da429aa16535f2425d71bff3527e979a1fe4f9cf90cb62317e9be7b21fd30f5691a8867f7b690722d49ea786194dc1a769f00d19af1d81dba9d61f95b8dadaa8e6aa5c939c53f6af1fedce59645550a9d2f15cba46159c18f132111d832d5ed6bdd25664da4c94bc2d82be69715b0fb55a59e105c932cc32955eeb46054ac04", 0xef, 0x3a}, {0x3, 0x3, &(0x7f0000000a00)='&\x00', &(0x7f0000000a40)="79b07a35d8ccb8a8f3943b3f862b798b0ef13acd2177d902c97e428357e46049e2c455297f9e1b27af8555e798756cd08b084d93455d591365aa0014766a72df664b24e983c049b000113dd2f662c2f1af80f09e4cfe215cc53c44e85b7da768b1ffd06962eb8cf6902135f3903354c42f7440b5950b63691d7241c96233cb28cfce478b7f0bec7529b343967a92b38462595c022bb579f87b887aca021b69bea9b86fc0f72d76c057e6586a106fcd2351ec49c94d1f83ee9e08175610244ebab35e168827e568a87d486ff06b8b81882bce4a4c55b7", 0xd6, 0x3a}, {0x1, 0x8f76, &(0x7f0000000b40)='.)*.#+%&\x00', &(0x7f0000000b80)="b8c957a3fdd1", 0x6, 0xa}]})
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
close(r5) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x2, 0x1, 0x7, 0x4105e, 0x1, 0x1, '\x00', 0x0, r1, 0x0, 0x2, 0x4, 0x2}, 0x50)
socket(0x5, 0x1, 0x5) (async)
writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe909000000ff0000f03ac7100003ffffffffffffffffff77262d8ce56b2e14f09d4affffe7ee0000d4e9bd4779548451a125ed02a9b58ce6b92f13fc3afec7d4d0aaec0b553e69f80ec72ffe91fb9cd9e60a2961b4", 0x85}], 0x1) (async)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, 0x33, 0x107, 0x2, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc044}, 0xc050)

157.091602ms ago: executing program 1 (id=1872):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newqdisc={0xf8, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff3}, {}, {0xd, 0xfff7}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x6}}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x4d, 0x3, 0x9a6a, 0x2, 0x5d2, 0x3, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x4, 0x59, 0xb, 0x8001, 0x0, 0x8, 0x2, 0x1}}, {0x6, 0x2, [0xb]}}, {{0x1c, 0x1, {0x7, 0x9, 0x1, 0x7df, 0x2, 0xc8a, 0x0, 0x5}}, {0xe, 0x2, [0x3, 0x9, 0x7ff, 0x7f, 0x2800]}}, {{0x1c, 0x1, {0x5, 0x5, 0x8, 0x75d3, 0x1, 0x101, 0xffff1442, 0x5}}, {0xe, 0x2, [0x6, 0xfff, 0x8, 0xff, 0x1265]}}, {{0x1c, 0x1, {0x8, 0xb7, 0xffff, 0x7fffffff, 0x2, 0x9, 0xffffff80, 0x4}}, {0xc, 0x2, [0x6, 0x7f, 0x9, 0x5]}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc}, 0x1) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000006c0)=0x7baf14b8, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000)

57.441897ms ago: executing program 1 (id=1873):
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 1 (id=1874):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$inet6(0xa, 0x400000000001, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000008bcc3e6f0000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002"], 0x140}}, 0x844)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x1a6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x54, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

kernel console output (not intermixed with test programs):

ttribute type 13 has an invalid length.
[  116.331849][ T7223] netlink: 'syz.0.374': attribute type 17 has an invalid length.
[  116.365264][ T7223] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  116.371889][ T7188] syzkaller0: delete flow: hash 2583113102 index 1
[  116.524798][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'.
[  116.883868][ T7228] netlink: 132 bytes leftover after parsing attributes in process `syz.2.375'.
[  116.936378][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'.
[  116.947685][ T7229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.375'.
[  118.066628][ T7245] netlink: 'syz.1.378': attribute type 1 has an invalid length.
[  118.171775][ T7252] netlink: 'syz.1.380': attribute type 1 has an invalid length.
[  118.184593][ T7253] bond2: option ad_select: invalid value (34)
[  118.192945][ T7253] bond2 (unregistering): Released all slaves
[  118.279544][ T5679] bridge0: entered promiscuous mode
[  118.336573][ T7263] ieee802154 phy0 wpan0: encryption failed: -22
[  118.413252][ T7275] netlink: 'syz.0.385': attribute type 1 has an invalid length.
[  118.850338][ T7302] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  118.979122][ T7315] 8021q: VLANs not supported on bond0
[  119.598330][ T7342] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  119.941639][ T7366] : renamed from bond_slave_0
[  119.946454][ T7366] netlink: 'syz.1.412': attribute type 2 has an invalid length.
[  120.877232][ T7378] __nla_validate_parse: 17 callbacks suppressed
[  120.877272][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'.
[  120.887576][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'.
[  120.892400][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'.
[  120.898074][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'.
[  120.971630][ T7382] syzkaller1: entered promiscuous mode
[  120.973880][ T7382] syzkaller1: entered allmulticast mode
[  121.041639][ T7386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'.
[  121.105037][ T7389] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  121.545352][ T7395] netlink: 364 bytes leftover after parsing attributes in process `syz.0.420'.
[  121.612889][   T33] audit: type=1800 audit(1778666763.431:3): pid=7397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.421" name=CB dev="tmpfs" ino=593 res=0 errno=0
[  121.650878][ T7399] netlink: 34 bytes leftover after parsing attributes in process `syz.0.422'.
[  121.659724][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'.
[  121.827016][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'.
[  121.852817][ T7402] 8021q: adding VLAN 0 to HW filter on device bond4
[  121.877854][ T7402] bond4: (slave veth7): Enslaving as an active interface with an up link
[  121.914144][ T7402] veth9: entered allmulticast mode
[  121.931332][ T7402] bond4: (slave veth9): Enslaving as an active interface with an up link
[  121.951525][ T7402] bond4 (unregistering): (slave veth7): Releasing backup interface
[  121.970747][ T7402] bond4 (unregistering): (slave veth9): Releasing backup interface
[  121.993212][ T7402] bond4 (unregistering): Released all slaves
[  122.098366][ T7415] x_tables: duplicate underflow at hook 2
[  122.104955][ T7415] x_tables: duplicate underflow at hook 2
[  122.184816][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'.
[  122.191019][ T7423] netlink: 'syz.0.428': attribute type 14 has an invalid length.
[  122.202061][ T5658] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.202177][ T7423] netlink: 'syz.0.428': attribute type 14 has an invalid length.
[  122.205633][ T5658] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.211578][ T5658] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.218120][ T5658] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.533942][ T7443] geneve3: entered promiscuous mode
[  123.402679][ T7474] syzkaller0: entered promiscuous mode
[  123.405004][ T7474] syzkaller0: entered allmulticast mode
[  123.554567][ T7480] netlink: 'syz.1.446': attribute type 22 has an invalid length.
[  123.573422][ T7480] netlink: 'syz.1.446': attribute type 22 has an invalid length.
[  123.590815][ T7480] netlink: 'syz.1.446': attribute type 22 has an invalid length.
[  123.597675][ T7480] netlink: 'syz.1.446': attribute type 22 has an invalid length.
[  123.744943][ T7492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  123.747554][ T7492] IPv6: NLM_F_CREATE should be set when creating new route
[  124.137836][ T7514] x_tables: duplicate underflow at hook 2
[  124.267695][ T7522] xt_hl: Unknown TTL match mode: 237
[  124.643727][ T7551] netlink: 'syz.1.465': attribute type 5 has an invalid length.
[  124.865582][ T7567] netlink: 'syz.2.469': attribute type 1 has an invalid length.
[  124.907080][ T7567] bond6: entered promiscuous mode
[  124.912415][ T7567] 8021q: adding VLAN 0 to HW filter on device bond6
[  124.940497][ T7567] bond6: (slave bridge3): making interface the new active one
[  124.943499][ T7567] bridge3: entered promiscuous mode
[  124.946695][ T7567] bond6: (slave bridge3): Enslaving as an active interface with an up link
[  125.243672][ T7591] block nbd1: not configured, cannot reconfigure
[  125.317758][ T7591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.543386][ T7607] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.548068][ T7607] syzkaller0: entered promiscuous mode
[  125.551876][ T7607] syzkaller0: entered allmulticast mode
[  125.561257][ T7607] tipc: Resetting bearer <eth:syzkaller0>
[  125.564982][ T7606] tipc: Resetting bearer <eth:syzkaller0>
[  125.587811][ T7606] tipc: Disabling bearer <eth:syzkaller0>
[  125.736429][ T7612] syz.2.483 (7612) used greatest stack depth: 19928 bytes left
[  125.808595][ T7616] batadv1: entered promiscuous mode
[  125.810919][ T7616] batadv1: entered allmulticast mode
[  125.814602][ T7616] 8021q: adding VLAN 0 to HW filter on device batadv1
[  125.954501][ T7621] syzkaller0: entered promiscuous mode
[  125.956460][ T7621] syzkaller0: entered allmulticast mode
[  126.031941][ T7624] netlink: 'syz.0.485': attribute type 11 has an invalid length.
[  126.104489][ T7626] netlink: 'syz.2.487': attribute type 1 has an invalid length.
[  126.119627][ T7626] bond7: entered promiscuous mode
[  126.121749][ T7626] bond7: entered allmulticast mode
[  126.123624][ T7626] 8021q: adding VLAN 0 to HW filter on device bond7
[  126.132736][ T7626] __nla_validate_parse: 18 callbacks suppressed
[  126.132747][ T7626] netlink: 44 bytes leftover after parsing attributes in process `syz.2.487'.
[  126.664369][ T7637] tipc: Started in network mode
[  126.666521][ T7637] tipc: Node identity ac14140f, cluster identity 4711
[  126.670217][ T7637] tipc: New replicast peer: 172.20.20.170
[  126.672924][ T7637] tipc: Enabled bearer <udp:syz2>, priority 10
[  127.538570][ T7639] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  127.547118][ T7639] batman_adv: batadv0: Adding interface: gretap1
[  127.550070][ T7639] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  127.560456][ T7639] batman_adv: batadv0: Interface activated: gretap1
[  127.633887][ T7646] netlink: 'syz.2.492': attribute type 1 has an invalid length.
[  127.656478][ T7646] bond8: entered promiscuous mode
[  127.658592][ T7646] 8021q: adding VLAN 0 to HW filter on device bond8
[  127.680385][ T7646] 8021q: adding VLAN 0 to HW filter on device bond8
[  127.682876][ T7646] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  127.686067][ T7646] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  127.692716][ T7646] bond8: (slave ip6gre1): making interface the new active one
[  127.695262][ T7646] ip6gre1: entered promiscuous mode
[  127.698432][ T7646] bond8: (slave ip6gre1): Enslaving as an active interface with an up link
[  127.804265][   T24] tipc: Node number set to 2886997007
[  127.953071][ T7668] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  127.957783][ T7668] syzkaller0: entered promiscuous mode
[  127.960983][ T7668] syzkaller0: entered allmulticast mode
[  128.076071][ T7676] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.501'.
[  128.082699][ T7677] netlink: 14 bytes leftover after parsing attributes in process `syz.0.501'.
[  128.126132][ T7678] netlink: 'syz.1.500': attribute type 3 has an invalid length.
[  128.129748][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'.
[  128.186137][ T7682] netlink: 'syz.0.503': attribute type 4 has an invalid length.
[  128.198198][ T7682] netlink: 'syz.0.503': attribute type 4 has an invalid length.
[  128.283099][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'.
[  128.380681][ T7697] netlink: 'syz.1.507': attribute type 3 has an invalid length.
[  128.489645][ T7699] netlink: 72 bytes leftover after parsing attributes in process `syz.1.508'.
[  128.495653][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'.
[  128.521672][ T7701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.527250][ T7700] tipc: Disabling bearer <eth:syzkaller0>
[  128.645318][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'.
[  128.663993][ T7707] hmac(sh: entered promiscuous mode
[  128.737984][ T7710] netlink: 'syz.0.512': attribute type 1 has an invalid length.
[  128.981528][ T7711] veth0_virt_wifi: left allmulticast mode
[  129.086078][ T7711] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  129.107438][ T7711] erspan1: left promiscuous mode
[  129.113019][ T7711] erspan1: left allmulticast mode
[  129.121779][ T7711] veth5: left allmulticast mode
[  129.139584][ T7711] bond2: left promiscuous mode
[  129.175022][ T7711] veth9: left allmulticast mode
[  129.186799][ T7711] bond5: left promiscuous mode
[  129.195371][ T7711] wireguard1: left promiscuous mode
[  129.215718][ T7711] geneve3: left promiscuous mode
[  129.222787][ T7711] bond6: left promiscuous mode
[  129.224983][ T7711] bridge3: left promiscuous mode
[  129.234066][ T7711] batadv1: left promiscuous mode
[  129.236332][ T7711] batadv1: left allmulticast mode
[  129.242671][ T7711] bond7: left promiscuous mode
[  129.244870][ T7711] bond7: left allmulticast mode
[  129.248614][ T7711] batman_adv: batadv0: Interface deactivated: gretap1
[  129.257526][ T7711] bond8: left promiscuous mode
[  129.263333][ T7711] ip6gre1: left promiscuous mode
[  129.324551][ T7715] bond4: (slave geneve2): making interface the new active one
[  129.331310][ T7715] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  129.340519][ T5672] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.344471][ T5672] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.348221][ T5672] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.354277][ T5672] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.359705][ T5672] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.366320][ T5672] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.376724][ T5672] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.385800][ T5672] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.395531][ T5672] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  129.400941][ T5672] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  129.406811][ T5672] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  129.415432][ T5672] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  129.436395][ T7733] netlink: 'syz.0.515': attribute type 1 has an invalid length.
[  129.499158][ T7733] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  129.504517][ T7733] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  129.584940][ T7739] netlink: 52 bytes leftover after parsing attributes in process `syz.1.517'.
[  129.698496][ T7743] syzkaller1: entered allmulticast mode
[  129.809170][ T7753] netlink: 280 bytes leftover after parsing attributes in process `syz.0.521'.
[  130.020320][ T7760] syzkaller0: entered promiscuous mode
[  130.023014][ T7760] syzkaller0: entered allmulticast mode
[  130.418175][ T7768] bond6: entered allmulticast mode
[  130.737398][ T7778] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  130.743326][ T7778] bond2 (unregistering): Released all slaves
[  130.906956][ T7789] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  131.008844][ T7795] Driver unsupported XDP return value 0 on prog  (id 96) dev N/A, expect packet loss!
[  131.238611][ T7819] netlink: 'syz.2.539': attribute type 1 has an invalid length.
[  131.266563][ T7819] bond9: entered promiscuous mode
[  131.272671][ T7819] 8021q: adding VLAN 0 to HW filter on device bond9
[  131.293321][ T7819] vlan3: entered allmulticast mode
[  131.295367][ T7819] bond9: entered allmulticast mode
[  131.315005][ T7819] bond9: (slave bridge5): making interface the new active one
[  131.318323][ T7819] bridge5: entered promiscuous mode
[  131.323522][ T7819] bridge5: entered allmulticast mode
[  131.326167][ T7819] bond9: (slave bridge5): Enslaving as an active interface with an up link
[  131.376407][ T7824] netlink: 'syz.0.540': attribute type 1 has an invalid length.
[  131.433691][ T7824] __nla_validate_parse: 5 callbacks suppressed
[  131.433705][ T7824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.540'.
[  131.443054][ T7824] 8021q: adding VLAN 0 to HW filter on device bond7
[  131.470488][ T7835] netlink: 52 bytes leftover after parsing attributes in process `syz.2.543'.
[  131.473672][ T7835] netlink: 280 bytes leftover after parsing attributes in process `syz.2.543'.
[  131.507210][ T7838] netlink: 277 bytes leftover after parsing attributes in process `syz.0.544'.
[  131.590381][ T7829] bond2: option miimon: invalid value (18446744073709551607)
[  131.598856][ T7829] bond2: option miimon: allowed values 0 - 2147483647
[  131.606632][ T7829] bond2 (unregistering): Released all slaves
[  131.680983][ T7839] block nbd0: Receive control failed (result -32)
[  131.842204][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'.
[  131.853095][ T7858] netlink: 'syz.1.548': attribute type 1 has an invalid length.
[  131.919584][ T7858] bond2: entered promiscuous mode
[  131.923570][ T7858] 8021q: adding VLAN 0 to HW filter on device bond2
[  132.009213][ T7875] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  132.020922][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'.
[  132.024299][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'.
[  132.039758][ T7880] syzkaller0: entered promiscuous mode
[  132.044376][ T7880] syzkaller0: entered allmulticast mode
[  132.056237][ T7880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.065379][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'.
[  132.070740][ T7878] tipc: Resetting bearer <eth:syzkaller0>
[  132.093210][ T7878] tipc: Disabling bearer <eth:syzkaller0>
[  132.167234][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.557'.
[  132.175839][ T7890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.217930][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'.
[  132.227156][ T7892] openvswitch: netlink: Message has 4 unknown bytes.
[  132.244100][ T7892] syzkaller0: entered promiscuous mode
[  132.245859][ T7892] syzkaller0: entered allmulticast mode
[  132.251152][ T7892] 0: reclassify loop, rule prio 0, protocol 800
[  132.551239][ T7909] netlink: 'syz.0.563': attribute type 1 has an invalid length.
[  132.553987][ T7909] netlink: 'syz.0.563': attribute type 2 has an invalid length.
[  132.655041][ T7914] tunl0: mtu less than device minimum
[  132.659958][ T7914] bridge4: port 1(veth0_to_bond) entered blocking state
[  132.662554][ T7914] bridge4: port 1(veth0_to_bond) entered disabled state
[  132.665562][ T7914] veth0_to_bond: entered allmulticast mode
[  132.670735][ T7914] veth0_to_bond: entered promiscuous mode
[  132.738072][ T7922] netlink: 'syz.0.567': attribute type 1 has an invalid length.
[  132.741070][ T7922] netlink: 'syz.0.567': attribute type 2 has an invalid length.
[  132.950207][ T7951] ieee802154 phy0 wpan0: encryption failed: -22
[  133.086468][ T7957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.114003][ T7957] syzkaller0: entered promiscuous mode
[  133.115755][ T7957] syzkaller0: entered allmulticast mode
[  133.117939][ T7957] tipc: Resetting bearer <eth:syzkaller0>
[  133.126481][ T7956] tipc: Resetting bearer <eth:syzkaller0>
[  134.449827][ T7956] tipc: Disabling bearer <eth:syzkaller0>
[  134.567722][ T7969] netlink: 'syz.0.581': attribute type 13 has an invalid length.
[  134.577972][ T7970] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  134.686799][ T7979] netlink: 'syz.2.584': attribute type 1 has an invalid length.
[  134.731396][ T7979] 8021q: adding VLAN 0 to HW filter on device bond12
[  134.757785][ T7978] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  134.765002][ T7978] batman_adv: batadv0: Adding interface: ip6gretap1
[  134.767271][ T7978] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  134.776561][ T7978] batman_adv: batadv0: Interface activated: ip6gretap1
[  134.792082][ T7979] bond12: (slave ip6gretap1): making interface the new active one
[  134.796600][ T7979] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link
[  134.894021][ T7990] bridge0: port 1(erspan0) entered blocking state
[  134.905442][ T7990] bridge0: port 1(erspan0) entered disabled state
[  134.914754][ T7990] erspan0: entered allmulticast mode
[  134.929957][ T7990] erspan0: entered promiscuous mode
[  134.947023][ T7994] erspan0: left allmulticast mode
[  134.949685][ T7994] erspan0: left promiscuous mode
[  134.962855][ T7994] bridge0: port 1(erspan0) entered disabled state
[  134.976437][ T7991] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  134.979859][ T7991] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  135.043051][ T7998] syzkaller1: entered promiscuous mode
[  135.045425][ T7998] syzkaller1: entered allmulticast mode
[  135.327467][ T8010] netlink: 'syz.2.593': attribute type 1 has an invalid length.
[  136.075469][ T8026] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.077982][ T8026] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.108567][ T8026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.116036][ T8026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.171839][ T8026] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  136.179143][ T5672] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.188778][ T5672] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.191555][ T5672] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  136.194964][ T5672] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.211279][ T5672] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.214184][ T5672] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  136.217129][ T5672] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.220601][ T5672] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.223384][ T5672] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  136.231899][ T5672] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.243261][ T5672] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.250010][ T5672] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  136.263672][ T5672] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  136.267964][ T5672] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  136.271899][ T5672] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  136.275302][ T5672] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  136.319706][ T8032] netdevsim netdevsim2: Direct firmware load for . failed with error -2
[  136.345472][ T8032] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  136.459032][ T8042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.522760][ T8044] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  136.738371][ T8051] __nla_validate_parse: 17 callbacks suppressed
[  136.738383][ T8051] netlink: 104 bytes leftover after parsing attributes in process `syz.0.602'.
[  136.745159][ T8052] netlink: 104 bytes leftover after parsing attributes in process `syz.0.602'.
[  136.752959][ T8052] netlink: 104 bytes leftover after parsing attributes in process `syz.0.602'.
[  136.774033][ T8048] block nbd0: NBD_DISCONNECT
[  136.781951][ T8048] block nbd0: Send disconnect failed -32
[  136.796812][ T8048] block nbd0: shutting down sockets
[  136.836716][ T8048] pimreg: left allmulticast mode
[  136.887291][ T8061] sctp: [Deprecated]: syz.0.604 (pid 8061) Use of int in maxseg socket option.
[  136.887291][ T8061] Use struct sctp_assoc_value instead
[  137.018905][ T8066] veth0_vlan: entered allmulticast mode
[  137.032486][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[  137.118373][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'.
[  137.332628][ T8084] bond13 (unregistering): Released all slaves
[  137.473973][ T8089] macsec0: entered allmulticast mode
[  137.476258][ T8089] veth1_macvtap: entered allmulticast mode
[  137.478448][ T8089] macsec0: left allmulticast mode
[  137.480482][ T8089] veth1_macvtap: left allmulticast mode
[  137.486609][ T8089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.610'.
[  137.676938][ T8096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'.
[  137.742978][ T8103] validate_nla: 2 callbacks suppressed
[  137.742989][ T8103] netlink: 'syz.2.614': attribute type 1 has an invalid length.
[  137.747384][ T8103] netlink: 'syz.2.614': attribute type 3 has an invalid length.
[  138.013154][ T8117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'.
[  138.064509][ T8117] 8021q: adding VLAN 0 to HW filter on device 
[  138.069417][ T8117] 8021q: adding VLAN 0 to HW filter on device team0
[  138.075349][ T8117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.120947][ T8117] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.125830][ T8117] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.134522][ T8117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  138.138617][ T8117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  138.146844][ T8117] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  138.169360][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.171616][ T6179] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.178197][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.181063][ T6179] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.195241][ T6179] bridge4: port 1(veth0_to_bond) entered blocking state
[  138.198111][ T6179] bridge4: port 1(veth0_to_bond) entered forwarding state
[  138.284474][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  138.286804][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  138.317550][ T8130] netlink: 76 bytes leftover after parsing attributes in process `syz.1.620'.
[  138.357736][ T8132] netlink: 48 bytes leftover after parsing attributes in process `syz.2.621'.
[  138.709906][ T8151] netlink: 'syz.2.627': attribute type 61 has an invalid length.
[  138.813119][ T8153] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  138.965722][ T8166] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  139.110128][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.113092][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.195258][ T8168] bridge4: port 1(veth0_to_bond) entered disabled state
[  139.233996][ T8168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.245387][ T8168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.398262][ T8183] vlan2: entered promiscuous mode
[  139.427320][ T8183] syzkaller1: entered promiscuous mode
[  139.429457][ T8183] syzkaller1: entered allmulticast mode
[  139.695980][ T8208] netlink: 'syz.1.646': attribute type 9 has an invalid length.
[  139.700229][ T8208] netlink: 'syz.1.646': attribute type 6 has an invalid length.
[  139.911904][ T8228] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  139.984262][ T8233] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  140.175357][ T8254] netlink: 'syz.1.657': attribute type 1 has an invalid length.
[  140.184597][ T8254] netlink: 'syz.1.657': attribute type 2 has an invalid length.
[  140.196870][   T33] audit: type=1804 audit(1778666782.011:4): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.657" name="/newroot/226/cgroup.controllers" dev="tmpfs" ino=1169 res=1 errno=0
[  140.218398][   T33] audit: type=1800 audit(1778666782.011:5): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.657" name="cgroup.controllers" dev="tmpfs" ino=1169 res=0 errno=0
[  140.227305][   T33] audit: type=1800 audit(1778666782.021:6): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.657" name="cgroup.controllers" dev="tmpfs" ino=1169 res=0 errno=0
[  140.317910][ T8258] ip6t_srh: unknown srh match flags  4000
[  140.365924][ T8260] openvswitch: netlink: Key type 142 is out of range max 32
[  140.407226][ T8260] netlink: 'syz.2.660': attribute type 2 has an invalid length.
[  140.419420][ T8263] syzkaller0: entered promiscuous mode
[  140.428174][ T8263] syzkaller0: entered allmulticast mode
[  142.061069][ T8263] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.074337][ T8257] tipc: Resetting bearer <eth:syzkaller0>
[  142.099925][ T8257] tipc: Disabling bearer <eth:syzkaller0>
[  142.144506][ T8277] __nla_validate_parse: 13 callbacks suppressed
[  142.144525][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'.
[  142.268106][ T8282] vlan4: entered promiscuous mode
[  142.414111][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'.
[  142.656597][ T8318] 5n: entered promiscuous mode
[  142.661141][ T8320] wg2: entered promiscuous mode
[  142.663945][ T8320] wg2: entered allmulticast mode
[  142.678141][ T8324] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.675'.
[  142.693426][ T8324] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.675'.
[  142.702182][ T8324] openvswitch: netlink: Message has 3 unknown bytes.
[  158.446767][ T8343] syzkaller0: entered promiscuous mode
[  158.450091][ T8343] syzkaller0: entered allmulticast mode
[  158.506337][ T8346] netlink: 'syz.1.681': attribute type 83 has an invalid length.
[  158.706807][ T6353] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  158.715579][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.683'.
[  158.719054][ T8366] openvswitch: netlink: Flow key attr not present in new flow.
[  158.972907][ T8370] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  159.966637][ T8376] ieee802154 phy0 wpan0: encryption failed: -22
[  160.137012][ T8379] netlink: 3 bytes leftover after parsing attributes in process `syz.2.688'.
[  160.140847][ T8379] 0X: renamed from batadv0
[  160.147031][ T8379] 0X: entered allmulticast mode
[  160.151424][ T8379] 8021q: adding VLAN 0 to HW filter on device 60X
[  160.154630][ T8379] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  161.627086][ T8356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  161.801541][ T8388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.691'.
[  161.884623][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'.
[  161.891128][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'.
[  162.097781][   T55] block nbd0: Receive control failed (result -32)
[  162.341461][ T8420] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  162.347216][ T8420] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  162.619499][ T8432] netlink: 'syz.1.703': attribute type 29 has an invalid length.
[  162.622423][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'.
[  162.626258][ T8432] netlink: 'syz.1.703': attribute type 29 has an invalid length.
[  162.630205][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'.
[  162.634641][ T8434] hsr0: entered promiscuous mode
[  162.636543][ T8432] netlink: 'syz.1.703': attribute type 29 has an invalid length.
[  162.640462][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'.
[  162.644620][ T8432] netlink: 'syz.1.703': attribute type 29 has an invalid length.
[  162.648371][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'.
[  162.653768][ T8432] netlink: 'syz.1.703': attribute type 29 has an invalid length.
[  162.657000][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'.
[  162.661124][ T8432] netlink: 'syz.1.703': attribute type 29 has an invalid length.
[  162.664587][ T8432] netlink: 'syz.1.703': attribute type 29 has an invalid length.
[  162.667990][ T8432] netlink: 'syz.1.703': attribute type 29 has an invalid length.
[  162.671703][ T8432] netlink: 'syz.1.703': attribute type 29 has an invalid length.
[  162.681376][ T8431] hsr0: left promiscuous mode
[  162.773133][ T6353] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.778487][ T6353] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.853164][ T6353] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.856892][ T8440] bond9 (unregistering): Released all slaves
[  162.872496][ T6353] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.883230][ T8442] syzkaller1: entered promiscuous mode
[  162.885575][ T8442] syzkaller1: entered allmulticast mode
[  163.025910][ T8448] SET target dimension over the limit!
[  163.056634][ T8450] xt_CT: You must specify a L4 protocol and not use inversions on it
[  163.759651][ T8514] batadv_slave_1: entered promiscuous mode
[  163.768810][ T8514] batadv_slave_1: entered allmulticast mode
[  163.774999][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.962551][ T8534] __nla_validate_parse: 43 callbacks suppressed
[  163.962564][ T8534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.729'.
[  163.967616][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'.
[  163.970840][ T8534] netlink: 31 bytes leftover after parsing attributes in process `syz.0.729'.
[  163.973647][ T8534] validate_nla: 25 callbacks suppressed
[  163.973656][ T8534] netlink: 'syz.0.729': attribute type 3 has an invalid length.
[  163.990633][ T8534] netlink: 'syz.0.729': attribute type 2 has an invalid length.
[  163.993210][ T8534] netlink: 31 bytes leftover after parsing attributes in process `syz.0.729'.
[  163.996862][ T8534] netlink: 'syz.0.729': attribute type 2 has an invalid length.
[  164.015299][ T8538] netlink: 'syz.2.731': attribute type 4 has an invalid length.
[  164.035659][ T8536] IPVS: length: 15 != 93192
[  164.080958][ T8545] netlink: 'syz.1.733': attribute type 3 has an invalid length.
[  164.125965][ T8553] netlink: 'syz.1.734': attribute type 7 has an invalid length.
[  164.266938][ T8555] vlan2: entered promiscuous mode
[  164.276299][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'.
[  164.291829][ T8556] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  164.327791][ T8556] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  164.369732][ T8556] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  164.387880][ T8560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.391686][ T8560] syzkaller0: entered promiscuous mode
[  164.394974][ T8560] syzkaller0: entered allmulticast mode
[  164.399346][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'.
[  164.403166][ T8559] tipc: Resetting bearer <eth:syzkaller0>
[  164.427129][ T8559] tipc: Disabling bearer <eth:syzkaller0>
[  164.441663][ T8556] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  164.501267][ T8562] syzkaller0: entered promiscuous mode
[  164.503150][ T8562] syzkaller0: entered allmulticast mode
[  164.573887][ T6353] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  164.586374][ T6353] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  164.613972][ T6353] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  164.624971][ T6353] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  164.808339][ T8573] netlink: 'syz.2.744': attribute type 4 has an invalid length.
[  164.831601][ T8573] : renamed from vlan0
[  164.849553][ T8576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.887611][ T8577] netlink: 'syz.1.742': attribute type 1 has an invalid length.
[  164.918130][ T8575] bond3: (slave geneve0): making interface the new active one
[  164.924355][ T8575] bond3: (slave geneve0): Enslaving as an active interface with an up link
[  164.927858][ T5658] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  164.931219][ T5658] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  164.933944][ T5658] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  164.936750][ T5658] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  164.977404][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'.
[  165.063602][ T8596] netlink: 52 bytes leftover after parsing attributes in process `syz.2.750'.
[  165.070911][ T8596] netlink: 76 bytes leftover after parsing attributes in process `syz.2.750'.
[  165.075541][ T8596] netlink: 52 bytes leftover after parsing attributes in process `syz.2.750'.
[  165.130309][ T8604] netlink: 'syz.2.752': attribute type 1 has an invalid length.
[  165.178578][ T8604] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  165.188427][ T8604] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  165.241764][ T8604] bond13: (slave gretap2): making interface the new active one
[  165.245041][ T8604] bond13: (slave gretap2): Enslaving as an active interface with an up link
[  165.258575][ T8604] macvlan3: entered promiscuous mode
[  165.260689][ T8604] macvlan3: entered allmulticast mode
[  165.263429][ T8604] bond13: entered promiscuous mode
[  165.264152][   T55] block nbd1: Receive control failed (result -32)
[  165.265122][ T8604] gretap2: entered promiscuous mode
[  165.269533][ T8604] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  165.279286][ T8604] bond13: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  165.284848][ T8604] bond13: left promiscuous mode
[  165.286761][ T8604] gretap2: left promiscuous mode
[  165.319535][ T8615] bond4: entered promiscuous mode
[  165.322270][ T8615] 8021q: adding VLAN 0 to HW filter on device bond4
[  165.334949][ T8615] 8021q: adding VLAN 0 to HW filter on device bond4
[  165.337726][ T8615] bond4: (slave sit1): The slave device specified does not support setting the MAC address
[  165.342275][ T8615] bond4: (slave sit1): Error -95 calling set_mac_address
[  165.353741][ T8604] syz.2.752 (8604) used greatest stack depth: 19192 bytes left
[  166.466977][ T8667] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.470981][ T8667] team0: Device vlan0 failed to change mtu
[  166.549678][ T8675] netlink: 'syz.2.774': attribute type 83 has an invalid length.
[  166.588726][ T8677] pim6reg1: entered promiscuous mode
[  166.590444][ T8677] pim6reg1: entered allmulticast mode
[  166.647565][ T8679] netlink: 'syz.0.775': attribute type 11 has an invalid length.
[  166.990392][ T8696] syzkaller0: entered promiscuous mode
[  166.994771][ T8696] syzkaller0: entered allmulticast mode
[  167.285697][ T8712] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  167.314169][ T8717] tipc: Can't bind to reserved service type 2
[  167.361224][ T8721] 0X: renamed from batadv0
[  167.365965][ T8721] 8021q: adding VLAN 0 to HW filter on device 60X
[  167.373042][ T8721] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  167.430646][ T8726] pim6reg1: entered promiscuous mode
[  167.432537][ T8726] pim6reg1: entered allmulticast mode
[  169.061743][ T8806] __nla_validate_parse: 30 callbacks suppressed
[  169.061763][ T8806] netlink: 80 bytes leftover after parsing attributes in process `syz.1.812'.
[  169.224317][ T8813] validate_nla: 3 callbacks suppressed
[  169.224330][ T8813] netlink: 'syz.2.815': attribute type 1 has an invalid length.
[  169.255006][ T8813] bond14: entered promiscuous mode
[  169.256828][ T8813] bond14: entered allmulticast mode
[  169.258963][ T8813] 8021q: adding VLAN 0 to HW filter on device bond14
[  169.312413][ T8813] erspan2: entered allmulticast mode
[  169.327524][ T8813] bond14: (slave erspan2): making interface the new active one
[  169.334423][ T8813] erspan2: entered promiscuous mode
[  169.342125][ T8813] bond14: (slave erspan2): Enslaving as an active interface with an up link
[  169.567463][ T8832] syzkaller1: entered promiscuous mode
[  169.569544][ T8832] syzkaller1: entered allmulticast mode
[  169.736953][ T8836] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  170.149878][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'.
[  170.273328][ T8841] netlink: 47 bytes leftover after parsing attributes in process `syz.2.823'.
[  170.322453][ T8844] netlink: 'syz.2.824': attribute type 1 has an invalid length.
[  170.343981][ T8844] bond15: entered promiscuous mode
[  170.348457][ T8844] bond15: entered allmulticast mode
[  170.350775][ T8844] 8021q: adding VLAN 0 to HW filter on device bond15
[  170.431180][ T8849] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  170.434438][ T8849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.498487][ T8855] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  170.505525][ T8855] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  170.635886][ T8863] bond8: entered allmulticast mode
[  170.637591][ T8863] ip6gre1: entered allmulticast mode
[  170.641363][ T8862] bond8: left allmulticast mode
[  170.644415][ T8862] ip6gre1: left allmulticast mode
[  170.783075][ T8877] netlink: 140 bytes leftover after parsing attributes in process `syz.2.832'.
[  171.156910][ T8885] veth3: left allmulticast mode
[  171.169953][ T8885] veth5: left allmulticast mode
[  171.173191][ T8885] hsr1: left allmulticast mode
[  171.175602][ T8885] 0X: left allmulticast mode
[  171.177178][ T8885] erspan0: left allmulticast mode
[  171.179853][ T8885] veth9: left allmulticast mode
[  171.181921][ T8885] bond6: left allmulticast mode
[  171.194251][ T6353] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.197355][ T6353] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.200802][ T6353] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.207792][ T6353] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.325778][ T8896] netlink: 'syz.0.837': attribute type 13 has an invalid length.
[  171.329341][ T8896] netlink: 152 bytes leftover after parsing attributes in process `syz.0.837'.
[  171.334624][ T8896] syz_tun: refused to change device tx_queue_len
[  171.336802][ T8896] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  171.397957][ T8900] netlink: 64 bytes leftover after parsing attributes in process `syz.1.838'.
[  171.415873][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'.
[  171.537717][ T8909] netlink: 'syz.1.840': attribute type 1 has an invalid length.
[  171.540453][ T8909] netlink: 224 bytes leftover after parsing attributes in process `syz.1.840'.
[  171.657313][ T8910] vti0: entered promiscuous mode
[  171.773653][ T8920] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  171.779133][ T8920] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  171.905864][ T8937] netem: change failed
[  171.950246][ T8944] SET target dimension over the limit!
[  172.024078][ T8947] netlink: 32 bytes leftover after parsing attributes in process `syz.0.849'.
[  172.304372][ T8963] netlink: 204 bytes leftover after parsing attributes in process `syz.1.852'.
[  172.353584][ T8979] only policy match revision 0 supported
[  172.353599][ T8979] unable to load match
[  172.617335][ T8989] syzkaller0: entered promiscuous mode
[  172.620764][ T8989] syzkaller0: entered allmulticast mode
[  173.771864][ T9035] syzkaller0: entered promiscuous mode
[  173.773556][ T9035] syzkaller0: entered allmulticast mode
[  173.819351][ T9039] netlink: 'syz.2.878': attribute type 1 has an invalid length.
[  173.853020][ T9039] 8021q: adding VLAN 0 to HW filter on device bond16
[  173.902341][ T9039] IPv6: sit2: Disabled Multicast RS
[  173.918096][ T9039] bond16: (slave gretap3): making interface the new active one
[  173.923502][ T9039] bond16: (slave gretap3): Enslaving as an active interface with an up link
[  173.954810][ T9039] bond16 (unregistering): (slave gretap3): Releasing active interface
[  173.971486][ T9039] bond16 (unregistering): Released all slaves
[  174.185262][ T9056] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  174.993162][ T9063] __nla_validate_parse: 16 callbacks suppressed
[  174.993178][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'.
[  175.012640][ T9066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.887'.
[  175.229020][ T9077] netlink: 'syz.2.890': attribute type 1 has an invalid length.
[  175.235710][ T9077] netlink: 224 bytes leftover after parsing attributes in process `syz.2.890'.
[  175.371110][ T9093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.371914][ T9095] netlink: 52 bytes leftover after parsing attributes in process `syz.0.896'.
[  175.413101][ T9097] netdevsim0: mtu less than device minimum
[  175.444471][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'.
[  175.447273][ T9100] xfrm1: entered allmulticast mode
[  175.453722][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'.
[  175.514959][ T9111] bridge7: entered promiscuous mode
[  175.526537][ T9111] bridge7: entered allmulticast mode
[  175.530977][ T9111] team0: Port device bridge7 added
[  175.533137][ T9113] bridge0: port 1(team0) entered blocking state
[  175.539137][ T9113] bridge0: port 1(team0) entered disabled state
[  175.541702][ T9113] team0: entered allmulticast mode
[  175.550185][ T9113] team0: entered promiscuous mode
[  175.637029][ T9125] sctp: [Deprecated]: syz.1.906 (pid 9125) Use of int in maxseg socket option.
[  175.637029][ T9125] Use struct sctp_assoc_value instead
[  175.676216][ T9114] syzkaller0: entered promiscuous mode
[  175.678531][ T9114] syzkaller0: entered allmulticast mode
[  175.861392][ T9144] sctp: [Deprecated]: syz.2.910 (pid 9144) Use of struct sctp_assoc_value in delayed_ack socket option.
[  175.861392][ T9144] Use struct sctp_sack_info instead
[  175.861595][ T9137] raw_sendmsg: syz.1.906 forgot to set AF_INET. Fix it!
[  175.883398][ T9144] sctp: [Deprecated]: syz.2.910 (pid 9144) Use of struct sctp_assoc_value in delayed_ack socket option.
[  175.883398][ T9144] Use struct sctp_sack_info instead
[  177.414957][ T9148] x_tables: duplicate underflow at hook 2
[  177.473942][ T9155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.911'.
[  177.611899][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'.
[  177.615916][ T9163] hsr_slave_0: left promiscuous mode
[  177.621718][ T9163] hsr_slave_1: left promiscuous mode
[  178.121380][ T9183] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.135856][ T9183] 8021q: adding VLAN 0 to HW filter on device team0
[  178.141169][ T9183] 8021q: adding VLAN 0 to HW filter on device 60X
[  178.189057][ T9183] batman_adv: 60X: Interface activated: batadv_slave_0
[  178.195773][ T9183] batman_adv: 60X: Interface activated: batadv_slave_1
[  178.206610][ T9183] veth1_vlan: left promiscuous mode
[  178.209810][ T9183] veth0_vlan: left promiscuous mode
[  178.212040][ T9183] veth0_vlan: entered promiscuous mode
[  178.215569][ T9183] veth1_vlan: entered promiscuous mode
[  178.220452][ T9183] veth1_macvtap: left promiscuous mode
[  178.222829][ T9183] veth0_macvtap: left promiscuous mode
[  178.225166][ T9183] veth0_macvtap: entered promiscuous mode
[  178.227638][ T9183] veth1_macvtap: entered promiscuous mode
[  178.233804][ T9183] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  178.236767][ T9183] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  178.240739][ T9183] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  178.243595][ T9183] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  178.246154][ T9183] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  178.260946][  T813] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.263206][  T813] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.267229][  T813] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.269462][  T813] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.305326][ T5672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.309467][ T5672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.356902][ T5672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.364490][ T5672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.674074][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.927'.
[  178.678274][ T9205] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  178.774766][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'.
[  178.965180][ T9215] ip6gretap1: entered promiscuous mode
[  179.299013][ T9223] syzkaller0: entered promiscuous mode
[  179.300814][ T9223] syzkaller0: entered allmulticast mode
[  181.185836][ T9254] __nla_validate_parse: 4 callbacks suppressed
[  181.185848][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'.
[  181.224122][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'.
[  181.403408][ T9261] syzkaller0: entered promiscuous mode
[  181.407080][ T9261] syzkaller0: entered allmulticast mode
[  182.127981][ T9281] netlink: 'syz.1.944': attribute type 1 has an invalid length.
[  182.132929][ T9281] netlink: 280 bytes leftover after parsing attributes in process `syz.1.944'.
[  182.136539][ T9278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.943'.
[  182.171782][ T9278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.943'.
[  182.203887][ T9288] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  182.203887][ T9288] Please contact the netfilter-devel mailing list or update your nftables rules.
[  182.266620][ T9295] netlink: 'syz.2.948': attribute type 7 has an invalid length.
[  182.280784][ T9295] netlink: 'syz.2.948': attribute type 8 has an invalid length.
[  182.284284][ T9295] netlink: 'syz.2.948': attribute type 8 has an invalid length.
[  182.288414][ T9295] netlink: 'syz.2.948': attribute type 4 has an invalid length.
[  182.298430][ T9295] netlink: 'syz.2.948': attribute type 7 has an invalid length.
[  182.302506][ T9295] netlink: 207236 bytes leftover after parsing attributes in process `syz.2.948'.
[  182.312902][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'.
[  182.485394][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'.
[  182.522744][ T9320] netlink: 'syz.2.954': attribute type 21 has an invalid length.
[  182.525357][ T9320] netlink: 132 bytes leftover after parsing attributes in process `syz.2.954'.
[  182.528328][ T9320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.954'.
[  182.530958][ T7721] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  182.590165][ T9328] 8021q: VLANs not supported on bond0
[  182.608355][ T9327] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  182.632831][ T9332] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  182.651325][ T9335] netlink: 'syz.0.958': attribute type 1 has an invalid length.
[  182.662127][ T9332] block nbd2: not configured, cannot reconfigure
[  182.689812][ T5658] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  182.869849][ T9354] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  182.876254][ T9354] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  182.974304][ T9364] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  183.096608][ T9380] openvswitch: netlink: IP tunnel TTL not specified.
[  183.150040][ T9385] netlink: 'syz.1.970': attribute type 1 has an invalid length.
[  183.154123][ T9385] netlink: 'syz.1.970': attribute type 4 has an invalid length.
[  183.499050][ T7721] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  183.727455][ T5658] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  183.752248][ T5658] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  183.782977][ T9427] hm3): entered promiscuous mode
[  183.871206][ T9436] syzkaller1: entered promiscuous mode
[  183.873343][ T9436] syzkaller1: entered allmulticast mode
[  184.031334][ T7721] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  185.060906][ T9516] netem: change failed
[  185.247237][ T9536] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.263337][ T9536] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  185.330639][ T9536] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.334595][ T9536] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  185.386757][ T9536] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.399729][ T9536] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  185.439242][ T9546] syzkaller1: entered allmulticast mode
[  185.488527][ T9536] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.492642][ T9536] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  185.585673][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  185.591184][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  185.609837][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  185.612735][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  185.630107][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  185.630438][ T9553] x_tables: duplicate underflow at hook 1
[  185.633640][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  185.672363][ T5658] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  185.675675][ T5658] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  185.837933][ T9566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.890647][ T7721] IPVS: starting estimator thread 0...
[  185.981353][ T9568] IPVS: using max 65 ests per chain, 156000 per kthread
[  186.182797][ T9584] 0X: left allmulticast mode
[  186.184581][ T9584] wg2: left promiscuous mode
[  186.186217][ T9584] wg2: left allmulticast mode
[  186.188114][ T9584] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  186.191682][ T9584] bond9: left promiscuous mode
[  186.193634][ T9584] bridge5: left promiscuous mode
[  186.195814][ T9584] vlan3: left allmulticast mode
[  186.198073][ T9584] bond9: left allmulticast mode
[  186.200069][ T9584] bridge5: left allmulticast mode
[  186.202560][ T9584] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  186.205125][ T9584] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  186.207553][ T9584] bond14: left promiscuous mode
[  186.209343][ T9584] erspan2: left promiscuous mode
[  186.211255][ T9584] bond14: left allmulticast mode
[  186.213156][ T9584] erspan2: left allmulticast mode
[  186.215015][ T9584] bond15: left promiscuous mode
[  186.216493][ T9584] bond15: left allmulticast mode
[  186.228473][   T12] IPVS: stop unused estimator thread 0...
[  186.238901][ T9587] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  186.325872][ T9594] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.330555][ T9594] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  186.364693][ T9596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.386657][ T9594] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.397878][ T9594] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  186.444643][ T9594] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.447880][ T9594] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  186.470305][ T9601] syzkaller0: entered promiscuous mode
[  186.472138][ T9601] syzkaller0: entered allmulticast mode
[  186.485554][ T9594] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.489974][ T9594] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  186.714351][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.717794][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  186.740221][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.749285][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  186.805811][ T9615] __nla_validate_parse: 21 callbacks suppressed
[  186.805830][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'.
[  186.810335][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.814608][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  186.817530][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.820784][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  186.837594][ T9615] bond9: Setting coupled_control to off (0)
[  187.005262][ T9620] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1026'.
[  187.076669][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'.
[  187.168620][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'.
[  187.190010][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'.
[  187.213187][ T9643] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1034'.
[  187.216437][ T9643] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1034'.
[  187.222127][ T9639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1032'.
[  187.247555][ T9641] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1033'.
[  187.390143][ T9665] validate_nla: 8 callbacks suppressed
[  187.390157][ T9665] netlink: 'syz.1.1040': attribute type 3 has an invalid length.
[  187.457001][ T9659] dvmrp31: entered allmulticast mode
[  187.528143][ T9677] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1043'.
[  187.623214][ T9684] netlink: 'syz.1.1045': attribute type 8 has an invalid length.
[  187.875460][ T9697] veth0_macvtap: left promiscuous mode
[  187.958980][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  188.023894][ T9704] netlink: 'syz.2.1052': attribute type 1 has an invalid length.
[  188.101614][ T9704] 8021q: adding VLAN 0 to HW filter on device bond16
[  188.245153][ T9716] tipc: Failed to remove unknown binding: 66,1,1/0:632998503/632998505
[  188.362121][ T9733] netlink: 'syz.2.1059': attribute type 1 has an invalid length.
[  188.364975][ T9733] netlink: 'syz.2.1059': attribute type 2 has an invalid length.
[  188.460739][ T9737] xt_cgroup: path and classid specified
[  188.478193][ T9742] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  188.694991][ T9751] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  188.708794][ T9751] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  189.561540][ T9758] netlink: 'syz.1.1067': attribute type 12 has an invalid length.
[  189.564696][ T9758] netlink: 'syz.1.1067': attribute type 11 has an invalid length.
[  190.178428][ T9794] netlink: 'syz.0.1072': attribute type 12 has an invalid length.
[  190.317641][ T9801] openvswitch: netlink: Message has 151 unknown bytes.
[  190.425825][ T9814] netlink: 'syz.1.1075': attribute type 1 has an invalid length.
[  190.582562][ T9834] netlink: 'syz.1.1079': attribute type 5 has an invalid length.
[  191.024752][ T9862] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  191.076568][ T9865] syzkaller1: entered promiscuous mode
[  191.084211][ T9865] syzkaller1: entered allmulticast mode
[  194.016177][ T9880] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  194.026306][ T9880] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  194.498206][   T55] block nbd2: Receive control failed (result -32)
[  194.499515][ T9878] block nbd2: NBD_DISCONNECT
[  194.501098][ T8391] block nbd2: Receive control failed (result -32)
[  194.514868][ T9878] block nbd2: Send disconnect failed -32
[  194.519922][ T9878] block nbd2: Send disconnect failed -32
[  194.529036][ T9878] block nbd2: shutting down sockets
[  196.437971][ T9912] netlink: 'syz.2.1096': attribute type 1 has an invalid length.
[  196.501910][ T9917] tipc: Enabling of bearer <ib:syzkaller1> rejected, failed to enable media
[  196.528834][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  196.605415][ T9927] syzkaller0: entered promiscuous mode
[  196.608432][ T9927] syzkaller0: entered allmulticast mode
[  196.638395][ T9934] __nla_validate_parse: 19 callbacks suppressed
[  196.638408][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'.
[  196.643385][ T9934] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1102'.
[  196.984491][ T9955] netlink: 'syz.2.1105': attribute type 1 has an invalid length.
[  197.002190][ T9955] bond18: entered promiscuous mode
[  197.004937][ T9955] 8021q: adding VLAN 0 to HW filter on device bond18
[  197.015835][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'.
[  197.078548][ T9961] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1107'.
[  197.123455][ T9964] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  197.127687][ T9964] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  197.145632][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1109'.
[  197.222888][ T9968] ip6gre2: entered promiscuous mode
[  197.224918][ T9968] ip6gre2: entered allmulticast mode
[  200.494622][T10005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'.
[  200.781173][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'.
[  200.784568][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'.
[  200.791039][T10017] netlink: 'syz.1.1117': attribute type 2 has an invalid length.
[  200.798567][T10017] netlink: 'syz.1.1117': attribute type 2 has an invalid length.
[  201.046103][T10037] netlink: 'syz.1.1121': attribute type 16 has an invalid length.
[  201.051383][T10041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1122'.
[  201.051580][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'.
[  201.688948][T10066] openvswitch: netlink: Message has 151 unknown bytes.
[  201.733370][T10070] netlink: 'syz.2.1129': attribute type 1 has an invalid length.
[  201.775116][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1130'.
[  201.950000][T10087] syzkaller0: entered promiscuous mode
[  201.952194][T10087] syzkaller0: entered allmulticast mode
[  202.069495][T10093] netlink: 181256 bytes leftover after parsing attributes in process `syz.2.1135'.
[  202.073326][T10093] netlink: ct family unspecified
[  204.022827][   T33] audit: type=1804 audit(1778666845.841:7): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1138" name="/newroot/372/cgroup.controllers" dev="tmpfs" ino=1912 res=1 errno=0
[  204.033489][   T33] audit: type=1800 audit(1778666845.841:8): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1138" name="cgroup.controllers" dev="tmpfs" ino=1912 res=0 errno=0
[  204.210390][T10120] netlink: 'syz.1.1142': attribute type 10 has an invalid length.
[  204.211958][T10121] netlink: 'syz.1.1142': attribute type 10 has an invalid length.
[  204.213878][T10120] syz_tun: entered promiscuous mode
[  204.244581][T10122] netlink: 'syz.0.1143': attribute type 1 has an invalid length.
[  204.247712][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'.
[  204.311864][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1142'.
[  204.444108][T10132] netlink: 'syz.1.1146': attribute type 1 has an invalid length.
[  204.455056][T10132] nbd: illegal input index 33022
[  204.548102][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1148'.
[  204.834148][T10148] netlink: 'syz.1.1151': attribute type 1 has an invalid length.
[  204.903317][T10154] geneve1: entered promiscuous mode
[  205.131800][T10179] netlink: 'syz.1.1157': attribute type 1 has an invalid length.
[  205.203327][T10179] 8021q: adding VLAN 0 to HW filter on device bond5
[  205.245393][T10188] bond5: (slave gretap2): making interface the new active one
[  205.251061][T10188] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  205.267397][T10190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1159'.
[  205.272670][T10190] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  205.288595][T10179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.292449][T10179] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  205.295451][T10179] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  205.367831][T10179] tipc: Resetting bearer <eth:syzkaller0>
[  205.642797][T10214] netlink: 'syz.0.1163': attribute type 1 has an invalid length.
[  205.735777][T10219] bond10: (slave geneve3): making interface the new active one
[  205.739815][T10219] bond10: (slave geneve3): Enslaving as an active interface with an up link
[  205.743645][ T5672] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  205.762788][T10214] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.1163'.
[  205.767122][ T5672] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  205.776189][ T5672] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  205.783866][T10214] openvswitch: netlink: Flow key attr not present in new flow.
[  205.788425][ T5672] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  205.965350][T10237] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  206.287044][T10261] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  206.293847][T10261] bond6 (unregistering): Released all slaves
[  206.844327][T10293] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1175'.
[  206.923709][T10301] dvmrp0: entered allmulticast mode
[  206.934203][T10301] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1178'.
[  206.948208][T10305] netlink: 'syz.0.1176': attribute type 1 has an invalid length.
[  206.989240][T10305] 8021q: adding VLAN 0 to HW filter on device bond11
[  206.994858][T10297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1176'.
[  207.002825][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'.
[  207.246568][T10335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1187'.
[  207.294448][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'.
[  207.300899][T10339] gtp2: entered promiscuous mode
[  207.302548][T10339] gtp2: entered allmulticast mode
[  207.362149][T10342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1190'.
[  207.585722][T10346] netlink: 'syz.2.1191': attribute type 9 has an invalid length.
[  207.590662][T10347] netlink: 'syz.2.1191': attribute type 9 has an invalid length.
[  207.681344][T10352] ipt_ECN: cannot use operation on non-tcp rule
[  207.685489][T10352] ipt_ECN: cannot use operation on non-tcp rule
[  207.923503][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'.
[  207.968008][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'.
[  208.002313][T10377] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1201'.
[  208.052847][T10374] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  208.084474][T10374] bond6: (slave lo): Enslaving as an active interface with an up link
[  208.096210][T10374] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  208.200822][T10395] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.207411][T10395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.216389][T10395] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.316366][T10399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.321054][T10399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  208.490128][T10399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.493332][T10399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  208.586305][T10399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.591159][T10399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  208.675094][T10399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.678221][T10399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  208.755214][ T8329] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  208.758024][ T8329] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  208.778613][ T8329] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  208.783108][ T8329] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  208.799560][ T8329] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  208.802616][ T8329] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  208.818846][ T8329] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  208.821805][ T8329] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  208.826101][T10412] syzkaller1: entered promiscuous mode
[  208.828485][T10412] syzkaller1: entered allmulticast mode
[  208.902364][T10412] geneve1: left promiscuous mode
[  208.912187][T10412] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  208.916919][T10412] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  208.939371][T10412] bond18: left promiscuous mode
[  208.945355][T10412] ip6gre2: left promiscuous mode
[  208.947028][T10412] ip6gre2: left allmulticast mode
[  208.955091][T10412] syzkaller1: left promiscuous mode
[  208.958989][T10412] syzkaller1: left allmulticast mode
[  208.965110][T10419] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) !
[  209.765404][T10444] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  209.771997][T10445] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  209.868557][T10452] netlink: 'syz.0.1219': attribute type 1 has an invalid length.
[  210.053171][T10462] netlink: 'syz.0.1222': attribute type 1 has an invalid length.
[  210.071052][T10462] 8021q: adding VLAN 0 to HW filter on device bond12
[  210.094007][T10462] bond12: (slave veth13): Enslaving as an active interface with a down link
[  210.714282][T10499] netlink: zone id is out of range
[  210.716390][T10499] netlink: zone id is out of range
[  210.718443][T10499] netlink: zone id is out of range
[  210.723172][T10499] netlink: zone id is out of range
[  210.724988][T10499] netlink: zone id is out of range
[  210.726688][T10499] netlink: zone id is out of range
[  210.728378][T10499] netlink: zone id is out of range
[  210.821006][T10513] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  210.826563][T10513] syzkaller0: entered promiscuous mode
[  210.831208][T10513] syzkaller0: entered allmulticast mode
[  211.069380][T10519] netlink: 'syz.0.1237': attribute type 10 has an invalid length.
[  211.072719][T10519] syz_tun: entered promiscuous mode
[  211.201807][T10535] netlink: 'syz.0.1239': attribute type 1 has an invalid length.
[  211.297272][T10535] 8021q: adding VLAN 0 to HW filter on device bond13
[  211.519730][T10552] vlan1: entered allmulticast mode
[  211.521394][T10552] bond0: entered allmulticast mode
[  211.523211][T10552] bond_slave_0: entered allmulticast mode
[  211.525025][T10552] bond_slave_1: entered allmulticast mode
[  211.650723][T10572] netlink: 'syz.2.1248': attribute type 1 has an invalid length.
[  211.677564][T10572] 8021q: adding VLAN 0 to HW filter on device bond19
[  211.684624][T10578] pimreg: entered allmulticast mode
[  211.915304][T10593] bond20: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  211.928024][T10593] bond20 (unregistering): Released all slaves
[  211.947010][T10598] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.165208][T10624] ip6t_srh: unknown srh match flags  4000
[  212.253272][T10634] syzkaller1: entered promiscuous mode
[  212.255109][T10634] syzkaller1: entered allmulticast mode
[  212.373193][T10649] netlink: 'syz.2.1267': attribute type 29 has an invalid length.
[  212.377210][T10649] __nla_validate_parse: 20 callbacks suppressed
[  212.377219][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'.
[  212.393217][T10649] netlink: 'syz.2.1267': attribute type 29 has an invalid length.
[  212.404531][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'.
[  212.693321][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'.
[  212.776656][T10687] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1272'.
[  212.802618][T10692] xt_bpf: check failed: parse error
[  212.933687][T10702] bond14: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  212.952284][T10702] bond14 (unregistering): Released all slaves
[  213.070010][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'.
[  213.074134][T10718] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1279'.
[  213.137341][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1281'.
[  213.157281][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1282'.
[  213.180543][T10732] netlink: 'syz.2.1282': attribute type 21 has an invalid length.
[  213.183770][T10732] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1282'.
[  213.187400][T10732] netlink: 'syz.2.1282': attribute type 4 has an invalid length.
[  213.194688][T10732] netlink: 'syz.2.1282': attribute type 5 has an invalid length.
[  213.199960][T10732] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1282'.
[  213.479580][T10767] team0: Cannot enslave team device to itself
[  213.482693][T10768] netlink: 'syz.2.1291': attribute type 1 has an invalid length.
[  213.508297][T10768] bond20: entered promiscuous mode
[  213.510671][T10768] bond20: entered allmulticast mode
[  213.512805][T10768] 8021q: adding VLAN 0 to HW filter on device bond20
[  213.798892][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  214.123509][T10808] veth0_vlan: entered allmulticast mode
[  214.301432][T10824] netlink: 'syz.0.1307': attribute type 1 has an invalid length.
[  214.566347][T10847] syzkaller1: entered promiscuous mode
[  214.568373][T10847] syzkaller1: entered allmulticast mode
[  214.660664][T10852] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  214.663708][T10852] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  214.749240][T10854] netlink: 'syz.2.1316': attribute type 16 has an invalid length.
[  214.751700][T10854] netlink: 'syz.2.1316': attribute type 17 has an invalid length.
[  214.761854][T10854] erspan0: entered promiscuous mode
[  214.789393][T10854] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.792681][T10854] 8021q: adding VLAN 0 to HW filter on device team0
[  214.799135][T10854] 8021q: adding VLAN 0 to HW filter on device 60X
[  214.826652][T10854] veth1_vlan: left promiscuous mode
[  214.830014][T10854] veth0_vlan: left promiscuous mode
[  214.831736][T10854] veth0_vlan: left allmulticast mode
[  214.833825][T10854] veth0_vlan: entered promiscuous mode
[  214.837576][T10854] veth1_vlan: entered promiscuous mode
[  214.842651][T10854] veth1_macvtap: left promiscuous mode
[  214.844968][T10854] veth0_macvtap: left promiscuous mode
[  214.847401][T10854] veth0_macvtap: entered promiscuous mode
[  214.850237][T10854] veth1_macvtap: entered promiscuous mode
[  214.855755][T10854] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  214.859592][T10854] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  214.864131][T10854] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  214.867030][T10854] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  214.870140][T10854] net_ratelimit: 798 callbacks suppressed
[  214.870148][T10854] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  214.893893][ T5672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.899559][ T5672] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.911587][ T5672] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.921638][ T6353] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.992811][T10868] netlink: 'syz.2.1319': attribute type 1 has an invalid length.
[  215.239909][T10891] openvswitch: netlink: IP tunnel dst address not specified
[  217.144320][T10899] infiniband syz0: set active
[  217.153439][T10899] infiniband syz0: added veth0_to_team
[  217.178000][T10899] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  217.186823][T10899] infiniband syz0: Couldn't open port 1
[  217.194599][T10899] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  217.203498][T10899] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  217.210322][T10899] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  217.283563][T10899] RDS/IB: syz0: added
[  217.291273][T10899] smc: adding ib device syz0 with port count 1
[  217.294653][T10899] smc:    ib device syz0 port 1 has no pnetid
[  217.926980][T10951] __nla_validate_parse: 10 callbacks suppressed
[  217.926990][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1337'.
[  217.968162][T10951] 8021q: adding VLAN 0 to HW filter on device bond7
[  217.982672][T10952] bond7: entered promiscuous mode
[  217.984438][T10952] bond7: entered allmulticast mode
[  217.995514][T10952] 8021q: adding VLAN 0 to HW filter on device bond7
[  218.009665][T10952] team0: Port device bond7 added
[  218.013605][T10952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1337'.
[  218.048308][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1339'.
[  218.085962][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'.
[  218.247928][T10972] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002
[  218.392287][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1345'.
[  218.442702][T10995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1347'.
[  218.549990][T10989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.602938][T11002] netlink: 'syz.2.1351': attribute type 1 has an invalid length.
[  218.639581][T11002] bond21: (slave vxcan3): The slave device specified does not support setting the MAC address
[  218.645548][T11002] bond21: (slave vxcan3): Error -95 calling set_mac_address
[  218.940609][T11017] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  218.944816][T11017] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  219.107677][T11021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1354'.
[  219.217653][T11023] tipc: Resetting bearer <eth:syzkaller0>
[  219.272706][T11029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1356'.
[  219.332698][T11037] netlink: 'syz.1.1359': attribute type 1 has an invalid length.
[  219.346824][T11037] bond8: entered promiscuous mode
[  219.349055][T11037] 8021q: adding VLAN 0 to HW filter on device bond8
[  219.362266][T11037] macvtap1: entered allmulticast mode
[  219.372894][T11037] bond8: (slave bridge7): making interface the new active one
[  219.375306][T11037] bridge7: entered promiscuous mode
[  219.378169][T11037] bond8: (slave bridge7): Enslaving as an active interface with an up link
[  219.386852][T11037] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1359'.
[  219.404076][T11037] rdma_rxe: rxe_newlink: failed to add lo
[  219.407185][T11040] lo speed is unknown, defaulting to 1000
[  219.412098][T11040] lo speed is unknown, defaulting to 1000
[  219.414934][T11040] lo speed is unknown, defaulting to 1000
[  219.541869][ T7720] lo speed is unknown, defaulting to 1000
[  219.544427][T11040] infiniband sqz0: set active
[  219.545980][T11040] infiniband sqz0: added lo
[  219.555766][T11040] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  219.567302][T11040] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  219.573122][T11040] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  219.591023][T11040] RDS/IB: sqz0: added
[  219.594480][T11040] smc: adding ib device sqz0 with port count 1
[  219.596472][T11040] smc:    ib device sqz0 port 1 has no pnetid
[  219.599545][ T7720] lo speed is unknown, defaulting to 1000
[  219.603411][T11040] lo speed is unknown, defaulting to 1000
[  219.716672][T11040] lo speed is unknown, defaulting to 1000
[  219.843026][T11040] lo speed is unknown, defaulting to 1000
[  219.870708][T11047] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1361'.
[  219.984537][T11051] team0: left allmulticast mode
[  219.986278][T11051] bridge7: left allmulticast mode
[  219.988122][T11051] team0: left promiscuous mode
[  219.990075][T11051] bridge7: left promiscuous mode
[  219.991974][T11051] bridge0: port 1(team0) entered disabled state
[  220.005782][T11051] bond5: (slave wireguard1): Releasing backup interface
[  220.021737][T11051] bond6: (slave bridge3): Releasing backup interface
[  220.024555][T11051] batman_adv: 60X: Removing interface: gretap1
[  220.041639][T11051] bond8: (slave ip6gre1): Releasing backup interface
[  220.046535][T11051] bond9: (slave bridge5): Releasing backup interface
[  220.051052][T11051] bond12: (slave ip6gretap1): Releasing active interface
[  220.055725][T11051] bond13: (slave gretap2): Releasing active interface
[  220.064959][T11051] bond14: (slave erspan2): Releasing active interface
[  220.074953][T11051] team0: Port device bridge7 removed
[  220.148467][T11062] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  220.244557][   T33] audit: type=1804 audit(1778666862.061:9): pid=11075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1371" name="/newroot/429/cgroup.controllers" dev="tmpfs" ino=2217 res=1 errno=0
[  220.252081][   T33] audit: type=1800 audit(1778666862.061:10): pid=11075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1371" name="cgroup.controllers" dev="tmpfs" ino=2217 res=0 errno=0
[  220.345977][T11078] sctp: [Deprecated]: syz.1.1372 (pid 11078) Use of struct sctp_assoc_value in delayed_ack socket option.
[  220.345977][T11078] Use struct sctp_sack_info instead
[  220.406695][T11080] netlink: 'syz.1.1372': attribute type 1 has an invalid length.
[  221.122556][T11091] netlink: 'syz.2.1376': attribute type 12 has an invalid length.
[  221.197259][T11093] IPv6: NLM_F_CREATE should be specified when creating new route
[  221.287514][T11096] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.775209][T11115] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  222.274621][T11128] netlink: 'syz.1.1386': attribute type 11 has an invalid length.
[  222.277230][T11127] netlink: 'syz.1.1386': attribute type 11 has an invalid length.
[  222.482283][T11141] netlink: 'syz.2.1389': attribute type 21 has an invalid length.
[  222.678590][T11150] openvswitch: netlink: Invalid VLAN frame
[  222.693170][T11150] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  222.698276][T11150] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  222.704200][T11150] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  222.728207][T11150] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  222.737018][T11156] netlink: 'syz.0.1394': attribute type 3 has an invalid length.
[  222.745808][T11150] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  222.802692][T11168] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  222.806327][T11168] sctp: [Deprecated]: syz.2.1392 (pid 11168) Use of int in max_burst socket option.
[  222.806327][T11168] Use struct sctp_assoc_value instead
[  222.826841][T11164] smc: removing ib device syz0
[  222.887090][T11164] smbdirect: ib_dev[syz0] removed
[  222.895621][T11173] netlink: 'syz.0.1398': attribute type 15 has an invalid length.
[  223.055051][ T5658] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.058469][ T5658] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  223.067585][ T5658] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.078187][ T5658] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  223.095731][ T5658] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.101725][ T5658] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  223.109564][T11182] __nla_validate_parse: 18 callbacks suppressed
[  223.109592][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1401'.
[  223.110847][ T5658] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.127473][ T5658] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  223.179594][T11185] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1402'.
[  223.325146][T11191] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1404'.
[  223.328529][T11191] netlink: 'syz.1.1404': attribute type 1 has an invalid length.
[  223.410417][T11201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1406'.
[  223.521261][T11203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1407'.
[  223.619983][T11208] xt_hashlimit: size too large, truncated to 1048576
[  223.791773][T11208] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1409'.
[  223.794552][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'.
[  223.797504][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'.
[  223.834436][T11217] netlink: 'syz.2.1411': attribute type 13 has an invalid length.
[  223.922648][T11218] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  223.957807][T11220] xt_CT: You must specify a L4 protocol and not use inversions on it
[  223.961209][T11220] netlink: 'syz.0.1412': attribute type 21 has an invalid length.
[  223.974673][T11220] openvswitch: netlink: Flow actions attr not present in new flow.
[  224.071965][T11226] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  224.145323][T11228] netlink: 'syz.2.1415': attribute type 1 has an invalid length.
[  224.183501][T11228] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1415'.
[  224.187271][T11228] tc_dump_action: action bad kind
[  224.274261][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1416'.
[  224.856205][T11256] netlink: 'syz.1.1426': attribute type 10 has an invalid length.
[  225.344889][T11289] xt_hashlimit: size too large, truncated to 1048576
[  225.454974][T11298] openvswitch: netlink: Flow key attr not present in new flow.
[  225.646291][T11312] netlink: 'syz.1.1444': attribute type 16 has an invalid length.
[  225.652630][T11312] netlink: 'syz.1.1444': attribute type 17 has an invalid length.
[  225.683018][T11312] syz_tun: left promiscuous mode
[  225.691563][T11312] 8021q: adding VLAN 0 to HW filter on device 
[  225.697143][T11312] 8021q: adding VLAN 0 to HW filter on device team0
[  225.761910][T11312] batadv_slave_1: left promiscuous mode
[  225.764086][T11312] batadv_slave_1: left allmulticast mode
[  225.773272][T11312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  225.777290][T11312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  225.785302][T11312] veth1_macvtap: left promiscuous mode
[  225.788515][T11312] veth0_macvtap: left promiscuous mode
[  225.794042][T11312] veth0_macvtap: entered promiscuous mode
[  225.797645][T11312] veth1_macvtap: entered promiscuous mode
[  225.803888][T11312] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  225.820184][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.822993][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.834646][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.837644][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.872758][ T5672] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.877071][ T5672] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.885504][ T5672] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.888861][ T5672] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.898466][T11316] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  226.288396][T11337] netlink: 'syz.0.1453': attribute type 32 has an invalid length.
[  226.314743][T11337] bond15: Setting coupled_control to off (0)
[  226.476615][ T7839] block nbd3: Receive control failed (result -32)
[  226.659267][T11354] bridge0: port 3(team0) entered blocking state
[  226.664582][T11354] bridge0: port 3(team0) entered disabled state
[  226.667113][T11354] team0: entered allmulticast mode
[  226.671478][T11354] team_slave_0: entered allmulticast mode
[  226.678263][T11354] team_slave_1: entered allmulticast mode
[  226.683065][T11354] vlan0: entered allmulticast mode
[  226.686953][T11354] veth0_vlan: entered allmulticast mode
[  226.698820][T11354] team0: entered promiscuous mode
[  226.701959][T11354] team_slave_0: entered promiscuous mode
[  226.705587][T11354] team_slave_1: entered promiscuous mode
[  226.709182][T11354] vlan0: entered promiscuous mode
[  226.715576][T11354] bridge0: port 3(team0) entered blocking state
[  226.718026][T11354] bridge0: port 3(team0) entered forwarding state
[  226.808336][T11372] netlink: 'syz.2.1461': attribute type 1 has an invalid length.
[  226.869369][T11372] bond22: (slave veth15): Enslaving as an active interface with a down link
[  226.904726][T11372] bond22: (slave dummy0): Enslaving as an active interface with a down link
[  226.911672][T11372] netlink: 'syz.2.1461': attribute type 10 has an invalid length.
[  226.994708][T11372] dummy0: entered promiscuous mode
[  226.998467][T11372] bond22: (slave dummy0): Releasing active interface
[  227.106729][T11384] netlink: 'syz.0.1464': attribute type 21 has an invalid length.
[  227.310506][T11400] veth1_to_bond: Caught tx_queue_len zero misconfig
[  227.453065][T11405] bond16 (unregistering): Released all slaves
[  227.690026][T11414] lo speed is unknown, defaulting to 1000
[  227.894776][T11426] lo speed is unknown, defaulting to 1000
[  228.257817][T11432] __nla_validate_parse: 29 callbacks suppressed
[  228.257836][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'.
[  228.264839][T11432] batman_adv: 60X: Interface deactivated: batadv_slave_0
[  228.285912][T11432] batman_adv: 60X: Removing interface: batadv_slave_0
[  228.410041][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'.
[  228.430446][   T33] audit: type=1107 audit(1778666870.251:11): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='bխVHc(euz=>IG9bRY?ٔu:8SqF> Es#mRym10'
[  228.442931][T11438] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20003
[  228.615653][T11446] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1485'.
[  229.191874][T11476] lo speed is unknown, defaulting to 1000
[  229.201120][T11482] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1495'.
[  229.208787][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'.
[  229.367449][T11485] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1498'.
[  229.446177][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'.
[  229.451187][T11496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1500'.
[  229.481462][T11498] lo speed is unknown, defaulting to 1000
[  229.501255][T11501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1501'.
[  229.859635][T11514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1503'.
[  229.903487][T11516] validate_nla: 9 callbacks suppressed
[  229.903499][T11516] netlink: 'syz.1.1504': attribute type 1 has an invalid length.
[  229.928463][T11516] 8021q: adding VLAN 0 to HW filter on device bond9
[  229.949973][T11516] bond9: (slave veth7): Enslaving as an active interface with a down link
[  229.978242][T11516] bond9: (slave veth9): Enslaving as an active interface with a down link
[  229.987019][T11516] bond9: entered allmulticast mode
[  230.059937][T11524] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  230.582460][T11539] netlink: 'syz.1.1509': attribute type 2 has an invalid length.
[  230.583377][T11546] netlink: 'syz.2.1511': attribute type 1 has an invalid length.
[  230.606796][T11546] 8021q: adding VLAN 0 to HW filter on device bond23
[  230.808537][T11570] veth11: entered allmulticast mode
[  230.814287][T11570] bond10: (slave veth11): Enslaving as an active interface with an up link
[  230.824525][T11570] bond10 (unregistering): (slave veth11): Releasing backup interface
[  230.830237][T11570] bond10 (unregistering): Released all slaves
[  230.841473][T11576] lo: Caught tx_queue_len zero misconfig
[  230.843448][T11576] netem: change failed
[  231.262427][   T33] audit: type=1804 audit(1778666873.081:12): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1530" name="/newroot/500/cgroup.controllers" dev="tmpfs" ino=2570 res=1 errno=0
[  231.284789][   T33] audit: type=1800 audit(1778666873.081:13): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1530" name="cgroup.controllers" dev="tmpfs" ino=2570 res=0 errno=0
[  231.349982][T11641] netlink: 'syz.2.1532': attribute type 22 has an invalid length.
[  231.502954][T11652] openvswitch: netlink: IPv4 tun info is not correct
[  231.648147][T11659] netlink: 'syz.2.1538': attribute type 3 has an invalid length.
[  231.746414][T11669] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  232.001402][T11689] bond25: option lacp_active: invalid value (8)
[  232.008002][T11689] bond25 (unregistering): Released all slaves
[  232.027002][T11679] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  232.036465][T11679] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  232.044437][T11679] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  232.048448][T11696] netlink: 'syz.1.1547': attribute type 1 has an invalid length.
[  232.056702][T11679] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  232.073459][T11696] bond10: entered promiscuous mode
[  232.075444][T11696] bond10: entered allmulticast mode
[  232.077377][T11696] 8021q: adding VLAN 0 to HW filter on device bond10
[  232.086112][T11696] erspan2: entered allmulticast mode
[  232.091548][T11696] bond10: (slave erspan2): making interface the new active one
[  232.093911][T11696] erspan2: entered promiscuous mode
[  232.108215][T11696] bond10: (slave erspan2): Enslaving as an active interface with an up link
[  232.217215][ T6179] smbdirect: ib_dev[syz2] removed
[  232.515452][T11734] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.724203][T11742] netlink: 'syz.0.1558': attribute type 6 has an invalid length.
[  233.107441][T11764] xt_hashlimit: size too large, truncated to 1048576
[  233.119046][T11764] xt_hashlimit: max too large, truncated to 1048576
[  233.194813][T11772] netlink: 'syz.0.1567': attribute type 8 has an invalid length.
[  233.240354][T11776] syzkaller1: entered promiscuous mode
[  233.242568][T11776] syzkaller1: entered allmulticast mode
[  233.337857][T11783] __nla_validate_parse: 29 callbacks suppressed
[  233.337879][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1571'.
[  233.345707][T11783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1571'.
[  233.401792][T11788] xt_l2tp: v2 tid > 0xffff: 37482740
[  233.557206][T11800] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1577'.
[  233.576140][T11800] siw: device registration error -23
[  233.650158][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1580'.
[  233.719927][T11821] SET target dimension over the limit!
[  233.725580][T11819] bridge0: port 3(team0) entered disabled state
[  233.735613][T11819] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.742605][T11819] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.764407][T11825] netlink: 'syz.0.1582': attribute type 16 has an invalid length.
[  233.767779][T11825] netlink: 'syz.0.1582': attribute type 17 has an invalid length.
[  233.797096][T11825] syz_tun: left promiscuous mode
[  233.812772][ T7720] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  233.812984][T11825] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.819842][T11825] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.826791][T11825] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.829115][T11825] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.844589][T11825] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  233.850220][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.857587][ T6180] bridge0: port 3(team0) entered blocking state
[  233.860279][ T6180] bridge0: port 3(team0) entered forwarding state
[  233.870816][T11827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1583'.
[  234.083010][T11835] ipip0: entered promiscuous mode
[  234.132071][T11837] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1587'.
[  234.416839][T11855] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1591'.
[  234.522039][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'.
[  234.524811][T11862] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1593'.
[  234.531488][T11862] vlan2: entered allmulticast mode
[  234.533103][T11862] veth0_to_bond: entered allmulticast mode
[  234.564360][T11864] dvmrp6: entered allmulticast mode
[  234.573511][T11865] dummy0: left promiscuous mode
[  234.593659][T11865] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  234.603053][T11868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1595'.
[  234.624584][T11868] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  234.632052][T11868] pim6reg1: entered promiscuous mode
[  234.637245][T11868] pim6reg1: entered allmulticast mode
[  234.682252][ T7720] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  234.839650][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  235.189750][T11888] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  235.212876][T11893] erspan0: left promiscuous mode
[  235.273101][T11893] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.278405][T11893] 8021q: adding VLAN 0 to HW filter on device 60X
[  235.314996][T11893] veth1_vlan: left promiscuous mode
[  235.317613][T11893] veth0_vlan: left promiscuous mode
[  235.323712][T11893] veth0_vlan: entered promiscuous mode
[  235.334401][T11893] veth1_vlan: entered promiscuous mode
[  235.350257][T11893] veth1_macvtap: left promiscuous mode
[  235.352966][T11893] veth0_macvtap: left promiscuous mode
[  235.356701][T11893] veth0_macvtap: entered promiscuous mode
[  235.374538][T11893] veth1_macvtap: entered promiscuous mode
[  235.384833][T11893] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  235.395915][T11893] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  235.406860][T11893] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  235.415939][T11893] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  235.426692][T11893] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  235.583523][T11915] validate_nla: 7 callbacks suppressed
[  235.583533][T11915] netlink: 'syz.0.1604': attribute type 1 has an invalid length.
[  235.587844][T11915] netlink: 'syz.0.1604': attribute type 3 has an invalid length.
[  235.591467][T11915] NCSI netlink: No device for ifindex 813332851
[  235.599297][T11915] syzkaller0: entered promiscuous mode
[  235.602914][T11915] syzkaller0: entered allmulticast mode
[  235.774619][T11928] veth0: entered promiscuous mode
[  235.782460][T11929] bond0: entered promiscuous mode
[  235.784667][T11929] bond_slave_0: entered promiscuous mode
[  235.786681][T11929] bond_slave_1: entered promiscuous mode
[  235.797732][T11929] bond0: left promiscuous mode
[  235.801722][T11929] bond_slave_0: left promiscuous mode
[  235.803940][T11929] bond_slave_1: left promiscuous mode
[  235.807914][T11929] veth0: left promiscuous mode
[  235.887778][T11933] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  236.156779][T11954] lo speed is unknown, defaulting to 1000
[  236.172999][T11956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  236.215366][T11957] netlink: 'syz.2.1613': attribute type 2 has an invalid length.
[  236.231141][T11959] syzkaller1: entered promiscuous mode
[  236.234606][T11959] syzkaller1: entered allmulticast mode
[  236.519072][T11976] netlink: 'syz.2.1619': attribute type 160 has an invalid length.
[  236.587493][T11984] netlink: 'syz.2.1621': attribute type 11 has an invalid length.
[  236.659453][T11975] bond11: option miimon: invalid value (18446744073709551607)
[  236.661755][T11975] bond11: option miimon: allowed values 0 - 2147483647
[  236.672666][T11975] bond11 (unregistering): Released all slaves
[  236.769255][T12000] unsupported nlmsg_type 40
[  236.843805][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  236.852150][ T7839] block nbd4: Receive control failed (result -32)
[  236.920546][T12006] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  236.924511][T12006] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  236.985355][T12012] SET target dimension over the limit!
[  237.050099][T12019] ipip0: entered promiscuous mode
[  237.051357][T12024] x_tables: duplicate underflow at hook 4
[  237.118176][T12030] netlink: 'syz.1.1632': attribute type 8 has an invalid length.
[  237.530955][T12058] netlink: 'syz.0.1644': attribute type 1 has an invalid length.
[  237.582199][T12058] bond17: entered promiscuous mode
[  237.584741][T12058] 8021q: adding VLAN 0 to HW filter on device bond17
[  237.743430][T12078] lo speed is unknown, defaulting to 1000
[  237.962687][T12087] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  238.007911][T12097] netlink: 'syz.0.1653': attribute type 6 has an invalid length.
[  238.010393][T12097] netlink: 'syz.0.1653': attribute type 7 has an invalid length.
[  238.012861][T12097] netlink: 'syz.0.1653': attribute type 8 has an invalid length.
[  238.015344][T12097] netlink: 'syz.0.1653': attribute type 15 has an invalid length.
[  238.169776][T12104] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR
[  238.407077][T12123] __nla_validate_parse: 65 callbacks suppressed
[  238.407090][T12123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1659'.
[  238.460897][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'.
[  238.556048][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1662'.
[  238.718192][T12139] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  238.890433][T12138] nbd6: detected capacity change from 0 to 63
[  238.900962][ T7839] block nbd6: Receive control failed (result -32)
[  238.905505][   T56] block nbd6: Receive control failed (result -32)
[  238.910790][T10008] block nbd6: Send control failed (result -32)
[  238.917606][T10008] block nbd6: Request send failed, requeueing
[  238.932398][   T52] block nbd6: Dead connection, failed to find a fallback
[  238.935500][   T52] block nbd6: shutting down sockets
[  238.938064][   T52] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.942090][   T52] Buffer I/O error on dev nbd6, logical block 0, async page read
[  238.951083][T10008] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.956686][T10008] Buffer I/O error on dev nbd6, logical block 1, async page read
[  238.960242][T10008] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.964075][T10008] Buffer I/O error on dev nbd6, logical block 2, async page read
[  238.966655][T10008] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.971111][T10008] Buffer I/O error on dev nbd6, logical block 3, async page read
[  238.975798][T10008] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.979706][T10008] Buffer I/O error on dev nbd6, logical block 0, async page read
[  238.982853][T10008] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.986373][T10008] Buffer I/O error on dev nbd6, logical block 1, async page read
[  238.989174][T10008] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.992302][T10008] Buffer I/O error on dev nbd6, logical block 2, async page read
[  238.994918][T10008] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.997797][T10008] Buffer I/O error on dev nbd6, logical block 3, async page read
[  239.001257][T10008] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  239.005599][T10008] Buffer I/O error on dev nbd6, logical block 0, async page read
[  239.011489][T10008] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  239.015221][T10008] Buffer I/O error on dev nbd6, logical block 1, async page read
[  239.021112][T10008] ldm_validate_partition_table(): Disk read failed.
[  239.026330][T10008] Dev nbd6: unable to read RDB block 0
[  239.029918][T10008]  nbd6: unable to read partition table
[  239.037716][T10008] ldm_validate_partition_table(): Disk read failed.
[  239.040960][T10008] Dev nbd6: unable to read RDB block 0
[  239.044583][T10008]  nbd6: unable to read partition table
[  239.101816][T12157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1669'.
[  239.217266][T12168] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1670'.
[  239.279612][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'.
[  239.486389][T12184] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  239.510436][T12184] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  239.632696][T12190] Cannot find add_set index 0 as target
[  239.781698][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1679'.
[  239.993295][T12209] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1683'.
[  240.289770][T12217] bridge0: port 3(team0) entered disabled state
[  240.292139][T12217] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.294599][T12217] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.326873][T12230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1687'.
[  240.480451][T12217] batman_adv: 60X: Interface deactivated: batadv_slave_1
[  240.656966][T12217] gtp2: left promiscuous mode
[  240.661894][T12217] gtp2: left allmulticast mode
[  240.685035][T12217] vlan1: left allmulticast mode
[  240.688517][T12217] bond0: left allmulticast mode
[  240.696823][T12217] bond_slave_0: left allmulticast mode
[  240.706008][T12217] bond_slave_1: left allmulticast mode
[  240.720645][T12217] ipip0: left promiscuous mode
[  240.735611][T12217] vlan2: left allmulticast mode
[  240.738877][T12217] veth0_to_bond: left allmulticast mode
[  240.742593][T12217] bond17: left promiscuous mode
[  240.754820][T12229] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1687'.
[  240.785064][ T5672] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  240.793888][ T5672] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  240.797125][ T5672] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  240.800666][ T5672] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  240.803629][ T5672] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  240.806591][ T5672] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  240.812872][ T5672] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  240.815754][ T5672] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  240.834495][T12237] validate_nla: 6 callbacks suppressed
[  240.834506][T12237] netlink: 'syz.2.1689': attribute type 5 has an invalid length.
[  240.868453][T12237] geneve4: entered promiscuous mode
[  240.873434][T12237] geneve4: entered allmulticast mode
[  240.882430][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  240.885885][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  240.893597][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  240.897268][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  241.034539][T12256] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.204074][T12274] veth0_vlan: entered allmulticast mode
[  241.357801][T12285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.726827][   T33] audit: type=1804 audit(1778666883.541:14): pid=12307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1701" name="/newroot/551/cgroup.controllers" dev="tmpfs" ino=2839 res=1 errno=0
[  241.735861][   T33] audit: type=1800 audit(1778666883.541:15): pid=12307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1701" name="cgroup.controllers" dev="tmpfs" ino=2839 res=0 errno=0
[  241.770711][T12309] batadv_slave_1: entered promiscuous mode
[  241.805208][T12308] batadv_slave_1: left promiscuous mode
[  245.061322][T12336] kthread_run failed with err -4
[  245.064578][T12335] __nla_validate_parse: 6 callbacks suppressed
[  245.064592][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'.
[  245.289688][T12358] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  245.293688][T12355] bond18 (unregistering): Released all slaves
[  245.359871][T12359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1711'.
[  245.477527][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'.
[  245.598830][T12366] syzkaller0: entered promiscuous mode
[  245.600960][T12366] syzkaller0: entered allmulticast mode
[  245.707225][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'.
[  245.768403][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1715'.
[  245.769197][T12373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1715'.
[  246.004938][T12378] netlink: 'syz.0.1716': attribute type 1 has an invalid length.
[  246.008298][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'.
[  246.011796][T12378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1716'.
[  246.381166][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1718'.
[  249.149653][T12388] bond6: (slave lo): Releasing backup interface
[  249.155190][T12388] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  249.187843][T12388] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  249.201331][T12388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  249.244789][T12391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1720'.
[  249.265430][ T5679] lo speed is unknown, defaulting to 1000
[  249.270581][ T5679] sqz0: Port: 1 Link DOWN
[  249.292496][ T5679] lo speed is unknown, defaulting to 1000
[  249.298118][T12391] bridge0: port 1(syz_tun) entered blocking state
[  249.308212][T12391] bridge0: port 1(syz_tun) entered disabled state
[  249.311548][T12391] syz_tun: entered allmulticast mode
[  249.315892][T12391] syz_tun: entered promiscuous mode
[  249.328228][T12391] bridge0: port 1(syz_tun) entered blocking state
[  249.331039][T12391] bridge0: port 1(syz_tun) entered forwarding state
[  249.647867][T12404] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  249.887638][T12419] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.899044][T12421] netlink: 'syz.0.1730': attribute type 15 has an invalid length.
[  249.899760][T12422] netlink: 'syz.0.1730': attribute type 15 has an invalid length.
[  249.957672][T12421] netlink: 'syz.0.1730': attribute type 5 has an invalid length.
[  249.981498][T12419] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.012856][T12421] batadv_slave_1: entered promiscuous mode
[  250.021551][T12417] batadv_slave_1: left promiscuous mode
[  250.053770][T12419] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.141962][T12419] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.250773][T12439] __nla_validate_parse: 14 callbacks suppressed
[  250.250789][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1734'.
[  250.307406][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.365719][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.452440][ T5672] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.467815][ T5672] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.476826][T12440] syzkaller0: entered promiscuous mode
[  250.485047][T12440] syzkaller0: entered allmulticast mode
[  250.561019][T12446] netlink: 'syz.2.1735': attribute type 4 has an invalid length.
[  250.673769][T12447] netlink: 'syz.1.1736': attribute type 6 has an invalid length.
[  250.683232][T12447] IPv6: NLM_F_CREATE should be specified when creating new route
[  250.696310][T12452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1737'.
[  250.699488][T12452] netlink: 'syz.0.1737': attribute type 7 has an invalid length.
[  250.702496][T12452] netlink: 'syz.0.1737': attribute type 8 has an invalid length.
[  250.705071][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'.
[  251.405400][T12479] netlink: 'syz.1.1746': attribute type 1 has an invalid length.
[  251.434386][T12479] 8021q: adding VLAN 0 to HW filter on device bond11
[  251.475095][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  251.529208][T12482] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1745'.
[  251.693309][T12475] netlink: 'syz.2.1744': attribute type 1 has an invalid length.
[  252.327235][T12509] netlink: 'syz.1.1750': attribute type 13 has an invalid length.
[  252.441451][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'.
[  252.450959][T12509] netlink: 'syz.1.1750': attribute type 1 has an invalid length.
[  252.460242][T12512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1751'.
[  252.461832][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'.
[  252.554078][T12517] netlink: 'syz.0.1751': attribute type 4 has an invalid length.
[  252.561203][T12517] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1751'.
[  252.572975][T12514] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1752'.
[  252.576383][T12516] nbd: must specify a size in bytes for the device
[  252.715089][T12522] x_tables: duplicate underflow at hook 2
[  252.774559][T12526] x_tables: duplicate underflow at hook 2
[  253.025754][T12537] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  253.253271][T12540] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  253.276075][T12540] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  253.554550][T12544] nbd: nbd64 already in use
[  254.617585][T12598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  254.624813][T12598] bond0: Unable to set down delay as MII monitoring is disabled
[  254.981874][T12616] tipc: Failed to remove unknown binding: 66,0,0/0:1972304129/1972304131
[  254.989874][T12616] tipc: Failed to remove unknown binding: 66,0,0/0:1972304129/1972304130
[  254.996297][T12616] tipc: Failed to remove unknown binding: 66,0,0/0:1972304129/1972304131
[  255.005098][T12616] tipc: Failed to remove unknown binding: 66,0,0/0:1972304129/1972304130
[  255.317754][T12618] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  255.516035][T12620] __nla_validate_parse: 7 callbacks suppressed
[  255.516047][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'.
[  255.534881][T12620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  255.649491][T12625] lo speed is unknown, defaulting to 1000
[  256.098800][T12636] netlink: 'syz.1.1774': attribute type 1 has an invalid length.
[  256.373406][T12639] x_tables: ip_tables: ah match: only valid for protocol 51
[  256.602062][T12643] netlink: 'syz.0.1777': attribute type 1 has an invalid length.
[  256.677037][T12643] 8021q: adding VLAN 0 to HW filter on device bond18
[  256.730397][T12643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1777'.
[  256.787813][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1778'.
[  256.791495][T12648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1778'.
[  256.881634][T12650] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1779'.
[  257.112567][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'.
[  257.158232][T12660] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1781'.
[  257.247842][T12663] netlink: 'syz.0.1782': attribute type 1 has an invalid length.
[  257.311041][T12663] 8021q: adding VLAN 0 to HW filter on device bond19
[  257.318599][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'.
[  257.397215][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'.
[  257.496335][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1785'.
[  258.578591][   T33] audit: type=1804 audit(1778666900.391:16): pid=12694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1791" name="/newroot/589/cgroup.controllers" dev="tmpfs" ino=3039 res=1 errno=0
[  258.587890][   T33] audit: type=1800 audit(1778666900.391:17): pid=12694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1791" name="cgroup.controllers" dev="tmpfs" ino=3039 res=0 errno=0
[  259.194168][T12728] syzkaller0: create flow: hash 2583113102 index 1
[  259.209002][ T5679] syzkaller0: tun_net_xmit 76
[  259.211647][ T5679] syzkaller0: tun_net_xmit 76
[  259.259379][T12729] syzkaller0: delete flow: hash 2583113102 index 1
[  261.977011][T12743] tipc: Failed to remove unknown binding: 66,0,0/0:446110343/446110345
[  261.979799][T12743] tipc: Failed to remove unknown binding: 66,0,0/0:446110343/446110344
[  262.382016][T12769] netlink: 'syz.1.1807': attribute type 1 has an invalid length.
[  262.417300][T12769] bond12: entered promiscuous mode
[  262.420169][T12769] 8021q: adding VLAN 0 to HW filter on device bond12
[  262.503814][T12769] bond12: (slave veth15): making interface the new active one
[  262.516871][T12769] veth15: entered promiscuous mode
[  262.535611][T12769] bond12: (slave veth15): Enslaving as an active interface with an up link
[  262.976023][T12790] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  263.105567][T12798] __nla_validate_parse: 2 callbacks suppressed
[  263.105581][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'.
[  263.157875][T12801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1815'.
[  263.368192][T12815] netlink: 'syz.1.1817': attribute type 8 has an invalid length.
[  263.581514][T12818] tunl0: Caught tx_queue_len zero misconfig
[  263.687212][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1819'.
[  263.700502][T12826] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1820'.
[  263.730383][T12821] nbd: socks must be embedded in a SOCK_ITEM attr
[  264.147749][T12851] netlink: 'syz.2.1828': attribute type 1 has an invalid length.
[  264.164264][T12851] bond25: entered promiscuous mode
[  264.166439][T12851] 8021q: adding VLAN 0 to HW filter on device bond25
[  264.172520][T12851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1828'.
[  264.187352][T12851] bond25: (slave bridge14): making interface the new active one
[  264.189921][T12851] bridge14: entered promiscuous mode
[  264.192494][T12851] bond25: (slave bridge14): Enslaving as an active interface with an up link
[  264.200797][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'.
[  264.213704][T12851] ip6tnl2: entered allmulticast mode
[  264.348512][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1829'.
[  264.354992][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'.
[  264.383303][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'.
[  264.395039][T12862] netlink: 'syz.2.1832': attribute type 1 has an invalid length.
[  264.502265][T12862] bond26: (slave geneve5): making interface the new active one
[  264.505491][T12862] bond26: (slave geneve5): Enslaving as an active interface with an up link
[  264.508426][   T13] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0
[  264.513500][   T13] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0
[  264.519949][   T13] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0
[  264.527437][   T13] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0
[  264.569763][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'.
[  265.704181][T12904] netlink: zone id is out of range
[  265.706992][T12905] netlink: zone id is out of range
[  265.766562][T12904] netlink: set zone limit has 4 unknown bytes
[  265.794666][T12905] netlink: set zone limit has 4 unknown bytes
[  266.272797][T12925] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  266.951787][T12961] netlink: 'syz.1.1856': attribute type 15 has an invalid length.
[  267.504040][T12994] batadv_slave_0: Caught tx_queue_len zero misconfig
[  267.508257][T12994] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  268.177225][T13020] __nla_validate_parse: 15 callbacks suppressed
[  268.177281][T13020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1868'.
[  268.224798][T13022] netlink: 'syz.2.1869': attribute type 12 has an invalid length.
[  268.379178][T13036] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1872'.
[  268.387954][T13036] netlink: 'syz.1.1872': attribute type 9 has an invalid length.
[  268.393784][T13036] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1872'.
[  268.406044][T13036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1872'.
[  268.577923][T13046] netlink: 'syz.1.1874': attribute type 1 has an invalid length.
[  268.646557][T13034] block nbd7: server does not support multiple connections per device.
[  268.652987][T13034] block nbd7: shutting down sockets
[  268.682375][ T5679] 
[  268.683423][ T5679] ======================================================
[  268.685943][ T5679] WARNING: possible circular locking dependency detected
[  268.688056][ T5679] syzkaller #0 Not tainted
[  268.689780][ T5679] ------------------------------------------------------
[  268.692134][ T5679] kworker/0:4/5679 is trying to acquire lock:
[  268.693973][ T5679] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  268.697337][ T5679] 
[  268.697337][ T5679] but task is already holding lock:
[  268.700191][ T5679] ffff888172699530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_mca_work+0x52/0x440
[  268.703601][ T5679] 
[  268.703601][ T5679] which lock already depends on the new lock.
[  268.703601][ T5679] 
[  268.707607][ T5679] 
[  268.707607][ T5679] the existing dependency chain (in reverse order) is:
[  268.711087][ T5679] 
[  268.711087][ T5679] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[  268.713988][ T5679]        __mutex_lock+0x1a3/0x1550
[  268.715990][ T5679]        __ipv6_dev_mc_inc+0x4e/0xa50
[  268.718048][ T5679]        addrconf_join_solict+0x104/0x190
[  268.720348][ T5679]        __ipv6_dev_ac_inc+0x87b/0xaf0
[  268.722480][ T5679]        ipv6_sock_ac_join+0x6a8/0x880
[  268.724532][ T5679]        do_ipv6_setsockopt+0x203a/0x3150
[  268.726780][ T5679]        ipv6_setsockopt+0x59/0x170
[  268.728846][ T5679]        do_sock_setsockopt+0x17c/0x1b0
[  268.731075][ T5679]        __x64_sys_setsockopt+0x13d/0x1b0
[  268.733336][ T5679]        do_syscall_64+0x15f/0xf80
[  268.735390][ T5679]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.737898][ T5679] 
[  268.737898][ T5679] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  268.740894][ T5679]        lock_sock_nested+0x41/0x100
[  268.742972][ T5679]        inet_shutdown+0x6a/0x390
[  268.744883][ T5679]        nbd_mark_nsock_dead+0x2e9/0x560
[  268.747154][ T5679]        sock_shutdown+0x15e/0x260
[  268.749205][ T5679]        nbd_clear_sock+0x24/0x170
[  268.750894][ T5679]        nbd_config_put+0x2dd/0x580
[  268.752951][ T5679]        nbd_genl_connect+0x19d5/0x1cf0
[  268.755063][ T5679]        genl_family_rcv_msg_doit+0x22a/0x330
[  268.757485][ T5679]        genl_rcv_msg+0x61c/0x7a0
[  268.759500][ T5679]        netlink_rcv_skb+0x232/0x4b0
[  268.761622][ T5679]        genl_rcv+0x28/0x40
[  268.763447][ T5679]        netlink_unicast+0x75c/0x8e0
[  268.765537][ T5679]        netlink_sendmsg+0x813/0xb40
[  268.767685][ T5679]        ____sys_sendmsg+0x972/0x9f0
[  268.769764][ T5679]        ___sys_sendmsg+0x2a5/0x360
[  268.771820][ T5679]        __x64_sys_sendmsg+0x1bd/0x2a0
[  268.773930][ T5679]        do_syscall_64+0x15f/0xf80
[  268.775998][ T5679]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.778528][ T5679] 
[  268.778528][ T5679] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  268.781078][ T5679]        __mutex_lock+0x1a3/0x1550
[  268.783084][ T5679]        nbd_queue_rq+0x37b/0x1100
[  268.785050][ T5679]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  268.787466][ T5679]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  268.790178][ T5679]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  268.792765][ T5679]        blk_mq_run_hw_queue+0x348/0x4f0
[  268.794704][ T5679]        blk_mq_dispatch_list+0xd16/0xe10
[  268.796778][ T5679]        blk_mq_flush_plug_list+0x48d/0x570
[  268.799149][ T5679]        __blk_flush_plug+0x3ed/0x4d0
[  268.801264][ T5679]        __submit_bio+0x28d/0x580
[  268.803256][ T5679]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  268.805638][ T5679]        block_read_full_folio+0x599/0x830
[  268.807936][ T5679]        filemap_read_folio+0x137/0x3b0
[  268.810142][ T5679]        do_read_cache_folio+0x358/0x590
[  268.812403][ T5679]        read_part_sector+0xb6/0x2b0
[  268.814528][ T5679]        adfspart_check_ICS+0xb1/0x960
[  268.816655][ T5679]        bdev_disk_changed+0x817/0x1770
[  268.818605][ T5679]        blkdev_get_whole+0x380/0x510
[  268.820704][ T5679]        bdev_open+0x31e/0xd30
[  268.822598][ T5679]        blkdev_open+0x470/0x610
[  268.824524][ T5679]        do_dentry_open+0x785/0x14e0
[  268.826583][ T5679]        vfs_open+0x3b/0x340
[  268.828407][ T5679]        path_openat+0x2e08/0x3860
[  268.830414][ T5679]        do_file_open+0x23e/0x4a0
[  268.832407][ T5679]        do_sys_openat2+0x113/0x200
[  268.834459][ T5679]        __x64_sys_openat+0x138/0x170
[  268.836586][ T5679]        do_syscall_64+0x15f/0xf80
[  268.838525][ T5679]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.841118][ T5679] 
[  268.841118][ T5679] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  268.843975][ T5679]        __mutex_lock+0x1a3/0x1550
[  268.845902][ T5679]        nbd_queue_rq+0xc6/0x1100
[  268.847923][ T5679]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  268.850227][ T5679]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  268.852883][ T5679]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  268.855290][ T5679]        blk_mq_run_hw_queue+0x348/0x4f0
[  268.857354][ T5679]        blk_mq_dispatch_list+0xd16/0xe10
[  268.859596][ T5679]        blk_mq_flush_plug_list+0x48d/0x570
[  268.862079][ T5679]        __blk_flush_plug+0x3ed/0x4d0
[  268.864167][ T5679]        __submit_bio+0x28d/0x580
[  268.866115][ T5679]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  268.868520][ T5679]        block_read_full_folio+0x599/0x830
[  268.870865][ T5679]        filemap_read_folio+0x137/0x3b0
[  268.872969][ T5679]        do_read_cache_folio+0x358/0x590
[  268.875063][ T5679]        read_part_sector+0xb6/0x2b0
[  268.876682][ T5679]        adfspart_check_ICS+0xb1/0x960
[  268.878344][ T5679]        bdev_disk_changed+0x817/0x1770
[  268.879988][ T5679]        blkdev_get_whole+0x380/0x510
[  268.881951][ T5679]        bdev_open+0x31e/0xd30
[  268.883569][ T5679]        blkdev_open+0x470/0x610
[  268.885145][ T5679]        do_dentry_open+0x785/0x14e0
[  268.886763][ T5679]        vfs_open+0x3b/0x340
[  268.888178][ T5679]        path_openat+0x2e08/0x3860
[  268.889705][ T5679]        do_file_open+0x23e/0x4a0
[  268.891188][ T5679]        do_sys_openat2+0x113/0x200
[  268.892707][ T5679]        __x64_sys_openat+0x138/0x170
[  268.894276][ T5679]        do_syscall_64+0x15f/0xf80
[  268.896217][ T5679]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.898698][ T5679] 
[  268.898698][ T5679] -> #3 (set->srcu){.+.+}-{0:0}:
[  268.901431][ T5679]        __synchronize_srcu+0xca/0x300
[  268.903546][ T5679]        elevator_switch+0x1e8/0x7a0
[  268.905600][ T5679]        elevator_change+0x2cc/0x450
[  268.907610][ T5679]        elevator_set_default+0x36c/0x430
[  268.909359][ T5679]        blk_register_queue+0x3e9/0x4e0
[  268.911403][ T5679]        __add_disk+0x677/0xd50
[  268.913178][ T5679]        add_disk_fwnode+0xfb/0x480
[  268.915845][ T5679]        nbd_dev_add+0x72c/0xb50
[  268.918730][ T5679]        nbd_init+0x168/0x1f0
[  268.920189][ T5679]        do_one_initcall+0x250/0x870
[  268.921958][ T5679]        do_initcall_level+0x104/0x190
[  268.923763][ T5679]        do_initcalls+0x59/0xa0
[  268.925615][ T5679]        kernel_init_freeable+0x2a6/0x3e0
[  268.927688][ T5679]        kernel_init+0x1d/0x1d0
[  268.929392][ T5679]        ret_from_fork+0x514/0xb70
[  268.930987][ T5679]        ret_from_fork_asm+0x1a/0x30
[  268.932689][ T5679] 
[  268.932689][ T5679] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  268.935319][ T5679]        __mutex_lock+0x1a3/0x1550
[  268.937212][ T5679]        elevator_change+0x1b3/0x450
[  268.938843][ T5679]        elevator_set_none+0xb5/0x140
[  268.940464][ T5679]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  268.942433][ T5679]        nbd_start_device+0x17f/0xb10
[  268.944099][ T5679]        nbd_genl_connect+0x165b/0x1cf0
[  268.945753][ T5679]        genl_family_rcv_msg_doit+0x22a/0x330
[  268.947718][ T5679]        genl_rcv_msg+0x61c/0x7a0
[  268.949240][ T5679]        netlink_rcv_skb+0x232/0x4b0
[  268.950829][ T5679]        genl_rcv+0x28/0x40
[  268.952149][ T5679]        netlink_unicast+0x75c/0x8e0
[  268.952934][T13046] 8021q: adding VLAN 0 to HW filter on device bond13
[  268.953700][ T5679]        netlink_sendmsg+0x813/0xb40
[  268.953715][ T5679]        ____sys_sendmsg+0x972/0x9f0
[  268.953732][ T5679]        ___sys_sendmsg+0x2a5/0x360
[  268.953748][ T5679]        __x64_sys_sendmsg+0x1bd/0x2a0
[  268.953765][ T5679]        do_syscall_64+0x15f/0xf80
[  268.953782][ T5679]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.953797][ T5679] 
[  268.953797][ T5679] -> #1 (&q->q_usage_counter(io)#55){++++}-{0:0}:
[  268.953817][ T5679]        blk_alloc_queue+0x546/0x680
[  268.972519][ T5679]        __blk_mq_alloc_disk+0x197/0x390
[  268.974192][ T5679]        nbd_dev_add+0x499/0xb50
[  268.975689][ T5679]        nbd_init+0x168/0x1f0
[  268.977124][ T5679]        do_one_initcall+0x250/0x870
[  268.978735][ T5679]        do_initcall_level+0x104/0x190
[  268.980376][ T5679]        do_initcalls+0x59/0xa0
[  268.981886][ T5679]        kernel_init_freeable+0x2a6/0x3e0
[  268.983700][ T5679]        kernel_init+0x1d/0x1d0
[  268.985416][ T5679]        ret_from_fork+0x514/0xb70
[  268.986918][ T5679]        ret_from_fork_asm+0x1a/0x30
[  268.988533][ T5679] 
[  268.988533][ T5679] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  268.990869][ T5679]        __lock_acquire+0x15a5/0x2cf0
[  268.992529][ T5679]        lock_acquire+0x106/0x350
[  268.994058][ T5679]        fs_reclaim_acquire+0x71/0x100
[  268.995737][ T5679]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  268.997638][ T5679]        __alloc_skb+0x1d0/0x7d0
[  268.999122][ T5679]        igmp6_send+0x197/0x1170
[  269.000612][ T5679]        mld_mca_work+0x2a2/0x440
[  269.002124][ T5679]        process_scheduled_works+0xb5d/0x1860
[  269.003939][ T5679]        worker_thread+0xa53/0xfc0
[  269.005453][ T5679]        kthread+0x388/0x470
[  269.006790][ T5679]        ret_from_fork+0x514/0xb70
[  269.008306][ T5679]        ret_from_fork_asm+0x1a/0x30
[  269.009819][ T5679] 
[  269.009819][ T5679] other info that might help us debug this:
[  269.009819][ T5679] 
[  269.012771][ T5679] Chain exists of:
[  269.012771][ T5679]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[  269.012771][ T5679] 
[  269.016565][ T5679]  Possible unsafe locking scenario:
[  269.016565][ T5679] 
[  269.018820][ T5679]        CPU0                    CPU1
[  269.020450][ T5679]        ----                    ----
[  269.022045][ T5679]   lock(&idev->mc_lock);
[  269.023443][ T5679]                                lock(sk_lock-AF_INET6);
[  269.025836][ T5679]                                lock(&idev->mc_lock);
[  269.027873][ T5679]   lock(fs_reclaim);
[  269.029310][ T5679] 
[  269.029310][ T5679]  *** DEADLOCK ***
[  269.029310][ T5679] 
[  269.032473][ T5679] 3 locks held by kworker/0:4/5679:
[  269.034498][ T5679]  #0: ffff8881724a6540 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  269.038334][ T5679]  #1: ffffc90006437c40 ((work_completion)(&(&mc->mca_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  269.042229][ T5679]  #2: ffff888172699530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_mca_work+0x52/0x440
[  269.045412][ T5679] 
[  269.045412][ T5679] stack backtrace:
[  269.047111][ T5679] CPU: 0 UID: 0 PID: 5679 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) 
[  269.047122][ T5679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.047128][ T5679] Workqueue: mld mld_mca_work
[  269.047143][ T5679] Call Trace:
[  269.047147][ T5679]  <TASK>
[  269.047152][ T5679]  dump_stack_lvl+0xe8/0x150
[  269.047163][ T5679]  print_circular_bug+0x2e1/0x300
[  269.047175][ T5679]  check_noncircular+0x12e/0x150
[  269.047186][ T5679]  __lock_acquire+0x15a5/0x2cf0
[  269.047194][ T5679]  ? lockdep_unlock+0x5d/0xd0
[  269.047201][ T5679]  ? __lock_acquire+0x146e/0x2cf0
[  269.047209][ T5679]  ? check_noncircular+0xda/0x150
[  269.047220][ T5679]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  269.047230][ T5679]  lock_acquire+0x106/0x350
[  269.047237][ T5679]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  269.047247][ T5679]  ? lock_acquire+0x106/0x350
[  269.047256][ T5679]  fs_reclaim_acquire+0x71/0x100
[  269.047267][ T5679]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  269.047276][ T5679]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  269.047322][ T5679]  ? __alloc_skb+0x1d0/0x7d0
[  269.047331][ T5679]  ? __local_bh_enable_ip+0xd0/0x130
[  269.047340][ T5679]  __alloc_skb+0x1d0/0x7d0
[  269.047355][ T5679]  igmp6_send+0x197/0x1170
[  269.047365][ T5679]  ? lockdep_unlock+0x5d/0xd0
[  269.047374][ T5679]  ? __pfx_igmp6_send+0x10/0x10
[  269.047382][ T5679]  ? mld_mca_work+0x52/0x440
[  269.047391][ T5679]  ? __pfx___mutex_lock+0x10/0x10
[  269.047402][ T5679]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  269.047413][ T5679]  ? process_scheduled_works+0xa70/0x1860
[  269.047421][ T5679]  ? process_scheduled_works+0xa70/0x1860
[  269.047430][ T5679]  mld_mca_work+0x2a2/0x440
[  269.047438][ T5679]  ? process_scheduled_works+0xa70/0x1860
[  269.047446][ T5679]  process_scheduled_works+0xb5d/0x1860
[  269.047459][ T5679]  ? __pfx_process_scheduled_works+0x10/0x10
[  269.047471][ T5679]  ? assign_work+0x3d5/0x5e0
[  269.047483][ T5679]  worker_thread+0xa53/0xfc0
[  269.047503][ T5679]  kthread+0x388/0x470
[  269.047520][ T5679]  ? __pfx_worker_thread+0x10/0x10
[  269.047533][ T5679]  ? __pfx_kthread+0x10/0x10
[  269.047547][ T5679]  ret_from_fork+0x514/0xb70
[  269.047564][ T5679]  ? __pfx_ret_from_fork+0x10/0x10
[  269.047576][ T5679]  ? __switch_to+0xc79/0x1410
[  269.047597][ T5679]  ? __pfx_kthread+0x10/0x10
[  269.047612][ T5679]  ret_from_fork_asm+0x1a/0x30
[  269.047625][ T5679]  </TASK>
[  269.216077][T13043] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  269.220887][T13043] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
