last executing test programs:

2m23.64043826s ago: executing program 1 (id=3966):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
socketpair(0x5, 0xb, 0x35d, &(0x7f0000000040))
unshare(0x6a040000) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20)

2m23.581315813s ago: executing program 1 (id=3968):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff1f000000", @ANYRES32=r5, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r5, @ANYBLOB="08000c0000ff"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {0xfffffffffffffffd}], 0x2}}], 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000047c0)=r1, 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r8)
sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x9d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000200)=r7)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x48010)

2m23.441967039s ago: executing program 1 (id=3972):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="14000000100001000000000000000000f4ff000a20000000000a01030000000000000000010000010900010073797a3100000000540000001b0a01040000000000000000010000000900030073797a31000000780900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970258adf2e3000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

2m23.426183067s ago: executing program 1 (id=3975):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x4, 0x4, 0x92}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r1, &(0x7f0000000240), &(0x7f0000000300)=""/249}, 0x20)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x20, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x20}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r5, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0008d6bd7000fedbdf25010000001400080076657468315f766c616e000000000005000000000000000005000d00010000000800180000000000"], 0x40}}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00'})
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'vlan0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f00000007c0)=ANY=[@ANYBLOB="e90c610faca2bbbbbbbbbbbb0800450000240000e000031190780000000000000000a78d0000001090787101000000000000"], 0x0)

2m23.358001621s ago: executing program 1 (id=3978):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r1=>0x0})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=<r2=>r0, 0x6, 0x1, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], <r3=>0x0}, 0x40)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0xffffffffffffffff, r2, 0x0, 0x2, &(0x7f0000000180)='#\x00'}, 0x30)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r5=>0x0}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex=r1, 0xffffffffffffffff, 0x13, 0x0, 0xffffffffffffffff, @void, @value=r4, @void, @void, r3}, 0x20)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'dvmrp1\x00', 0x8000})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0)
shutdown(r8, 0x1)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r2)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r9, 0x20, 0x70bd2b, 0x100, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000080000000000001000000097000100ffffffff95"], &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000440)={'syztnl1\x00', r1, 0x20, 0x700, 0x8, 0x6, {{0x11, 0x4, 0x1, 0x5, 0x44, 0x67, 0x0, 0x6, 0x2f, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0xea, 0x3, 0x4, [{@multicast2, 0x51}, {@rand_addr=0x64010101, 0x3a}, {@rand_addr=0x64010100, 0x800}]}, @generic={0x86, 0x10, "bb30a63e09c73f8bf1c7a6cc16a0"}, @ssrr={0x89, 0x3, 0x47}, @noop]}}}}})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x80000001}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}]}]}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x17c, 0x14, 0xa, 0x1902, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x47, 0x8, "7bf8512cae3a63dc0cccfb976d30d550c5fa10f3a7a5612aef5c483e6788184b7398dd9cc48152196632f669b96c432e97a8e97cf923a232da5c50a4cae7fc369fb332"}, @NFTA_OBJ_USERDATA={0x7f, 0x8, "3c421c2897ff61e26ec390ca9102805d390805962325164a0f92352d99343ff1c54c9e12f3bb063e16caaf44c3493c6b18d2cc49a33ec702e93cf277df5fec64a6be4ca433cee1ca8eb03a317421e20850a4e41993cf47136f9735accc3d557269230f05a0d0e505327ea90fe5808b73ae549e2bea27bc6e4414f8"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x63, 0x8, "cc12279b95ff226fd37f242e3a927aea76c87530f5f3b677ed90094aa6837d6d01de2580a7104ac249acf15147c35308668d5c2383f0f14aa2070d74ee876979b5a42e9dc688ef07e708c1c88531f45e35f645f4042a104b15a452f5682bfe"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x1b0, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x154, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x21c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x77}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xd0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x24, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xcc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x600000}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6d0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b0000000000060002404e22000008000500", @ANYRES32=r1], 0x4c}}, 0x20000004)

2m23.191358139s ago: executing program 1 (id=3982):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1)
sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2, 0x1, 0x4, 0x4}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100))

2m23.109783608s ago: executing program 32 (id=3982):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1)
sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2, 0x1, 0x4, 0x4}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100))

1m21.317565378s ago: executing program 3 (id=5322):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x325080, 0x0)
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xc223, 0x3})
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x1409, 0x35f75463f6f9a3fa, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], <r4=>0x0, 0x82, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@bridge_delneigh={0x60, 0x1d, 0x400, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x0, r3, 0x10, 0x42, 0x1}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x0, 0xfffff801, 0x5}}, @NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010101}]}, 0x60}, 0x1, 0x0, 0x0, 0x40810}, 0x48000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r4, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt(r1, 0x7, 0x7000000, &(0x7f00000006c0)=""/167, &(0x7f0000000780)=0xa7)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000840))
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x800, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000008c0)={'virt_wifi0\x00', @broadcast})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xc4, 0xa, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xffffffffffffffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x20008020)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000ac0)={0x6, 'batadv0\x00', {0x2}, 0x327})
pipe(&(0x7f0000000b00)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x70, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xb}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010)
sendmsg$nl_route_sched(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=@getqdisc={0x38, 0x26, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0x6}, {0x6, 0xfff2}, {0xfff9, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x4000000)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r9)
r11 = gettid()
r12 = gettid()
r13 = gettid()
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000e00)=<r14=>0x0)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000001000)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x15c, r10, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r14}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x811)
openat$cgroup_ro(r0, &(0x7f0000001040)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000001100)={0x0, 0x8}, &(0x7f0000001140)=0x8)

1m21.316938388s ago: executing program 3 (id=5323):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="14000000100001000000000000f5ff000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000780900010073797a3100000000100004800800014000000005080002401b2fd2c5140003006970258adf2e3000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

1m21.257873894s ago: executing program 3 (id=5324):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r11], 0x68}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)

1m21.083514911s ago: executing program 3 (id=5325):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a3100000000540000001b0a010400f4000000000000010000000900030073797a31000000780900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970258adf2e3000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

1m21.08326573s ago: executing program 3 (id=5326):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x108, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x31, 0xc5, "a733d4adbef14228d3fa18327656b4a3eabf865e6440cd7bc31abed39bd60c75b223f44adbdd98ee0619218bfd"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xa}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x24000000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x607d8000)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149)

1m21.027557736s ago: executing program 3 (id=5327):
r0 = socket(0xa, 0x3, 0x3a)
getsockopt$MRT6(r0, 0x29, 0xd0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000400))
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x16}})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x500}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="140100001eb8231d4b9d0b904095e01609b6960265090000002df7000500006df1580d02039e4e2825ed6ebbcf749d195d88768872778a62f7cee20d8d7ee92a247ca24c78c965b116ce39c3517f2fe73e83468204a328ceb672346e20e3519086134fab478f0024e94062b9507de0cb492afa69d0362e31035808e50ad0e2a227ec76efc0046e0918fbed6e870c7dda15076e9f3f605e2f0b6618d312722484004ce771890704d8b8d59cfd6cfa500ddffcd7b55954700118e4d900e1aca5a9e93e488c04197efa613e28b9aff85256a214a2e620375a2bbf7659a0ac71c3129e95de2f10e0db51261f53a33affc786c9bf"], 0x114}], 0x1, 0x0, 0xfffffcb9}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x370, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff, 0x0, 0xff], [0x0, 0xffffff00], 'wg0\x00', 'geneve0\x00', {0xff}, {0xff}, 0x87, 0x6, 0x7, 0xc}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@icmp6={{0x28}, {0xb, "adb7"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x10, 0x1ff, 0x1, 'snmp\x00', 'syz1\x00', {0x9}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0xc, 0x7, 'snmp_trap\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000001c0), 0x12)
r10 = openat$cgroup_freezer_state(r8, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r10, &(0x7f0000000340)='FROZEN\x00', 0x7)
r11 = socket(0x10, 0x3, 0x0)
r12 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x800000003b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4880}, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x80800)

1m6.035219452s ago: executing program 33 (id=5327):
r0 = socket(0xa, 0x3, 0x3a)
getsockopt$MRT6(r0, 0x29, 0xd0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000400))
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x16}})
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x500}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="140100001eb8231d4b9d0b904095e01609b6960265090000002df7000500006df1580d02039e4e2825ed6ebbcf749d195d88768872778a62f7cee20d8d7ee92a247ca24c78c965b116ce39c3517f2fe73e83468204a328ceb672346e20e3519086134fab478f0024e94062b9507de0cb492afa69d0362e31035808e50ad0e2a227ec76efc0046e0918fbed6e870c7dda15076e9f3f605e2f0b6618d312722484004ce771890704d8b8d59cfd6cfa500ddffcd7b55954700118e4d900e1aca5a9e93e488c04197efa613e28b9aff85256a214a2e620375a2bbf7659a0ac71c3129e95de2f10e0db51261f53a33affc786c9bf"], 0x114}], 0x1, 0x0, 0xfffffcb9}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x370, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff, 0x0, 0xff], [0x0, 0xffffff00], 'wg0\x00', 'geneve0\x00', {0xff}, {0xff}, 0x87, 0x6, 0x7, 0xc}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@icmp6={{0x28}, {0xb, "adb7"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x10, 0x1ff, 0x1, 'snmp\x00', 'syz1\x00', {0x9}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0xc, 0x7, 'snmp_trap\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000001c0), 0x12)
r10 = openat$cgroup_freezer_state(r8, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r10, &(0x7f0000000340)='FROZEN\x00', 0x7)
r11 = socket(0x10, 0x3, 0x0)
r12 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x800000003b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4880}, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x80800)

6.422376935s ago: executing program 0 (id=6861):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080005"], 0x20}}, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000000000000000f1ff02000008000100"], 0x1c}}, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
socket(0x2, 0x80805, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x8, 0xf, 0x0, 0x0, @pid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r7, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0xe9, 0x0, &(0x7f0000000740)=""/233, 0x6, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='\t', 0x2, 0x0, 0x6}, 0x50)
connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x18}}, 0x10)
sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, 0x1, 0x9, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3ff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xd}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
getpeername$l2tp6(r0, 0x0, 0x0)

5.562160358s ago: executing program 0 (id=6870):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x61, 0x40, 0x4, 0x1, {{0x19, 0x4, 0x0, 0x9, 0x64, 0x64, 0x0, 0x81, 0x4, 0x0, @empty, @loopback, {[@rr={0x7, 0x7, 0x52, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0xc, 0x8a, 0x3, 0x9, [{@remote, 0x3}]}, @timestamp_prespec={0x44, 0x34, 0xa4, 0x3, 0x7, [{@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x1}, {@private=0xa010101}, {@multicast1, 0x1ff}, {@loopback, 0xbb14}]}, @lsrr={0x83, 0x7, 0xfc, [@multicast2]}]}}}}}) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newnexthop={0x18, 0x68, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x30}}, 0x18}}, 0x0)

5.561920739s ago: executing program 0 (id=6871):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a0104000000f400000000010000000900030073797a31000000780900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970258adf2e3000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

5.492386061s ago: executing program 0 (id=6873):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25060000000800010000000100be00000000000000", @ANYRES32=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0x90)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair(0x23, 0x5, 0x1, &(0x7f00000000c0))
unshare(0x400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000001103000000ffffffff000000000100000d010000000000000001000000020000000000000802000000000061"], 0x0, 0x4c}, 0x20)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="c87af9708c11d98d3e815b8a06f7c991f5060ab7d2c48940fff2a4f8a53ebc9c188fa62255d7c32c46ee60846cf1bf6165d9fe835bde8ed457cefa3aec0e7942c385e128585fb7f9837179a61d51b6e41cb087ca72f0217ee5931ef26f5227a43e219b8be929cc8e12f96399e93545cf0b2a7214609be316ff40fd3a05a4c550ab25534d8b7c3d3d7e65768d98d1bee74aad6f91f7fe6b5caaac42bb9e4b937bf0b7063fc3264c59413e1e8368e7f71442686d4fe4f9b96d89117fabb7fb21c810c634b7304b3aa9d6fa", 0xca}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}})
socketpair$unix(0x1, 0x16bc7fec8e6ce820, 0x0, &(0x7f0000000000))

5.490003797s ago: executing program 0 (id=6875):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000040)=@buf={0x0, &(0x7f0000002bc0)})
recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0)

5.401689991s ago: executing program 0 (id=6877):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0}) (async)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000540)={0x2, &(0x7f0000000040)=[{0x8, 0xd1, 0x3, 0x1ff}, {0x1, 0xc0, 0x4, 0x7}]}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0xffffffff, 0x10000}, 0x28) (async)
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)={r3}) (async, rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="4000a6000a000200aaaaaaaaaabb0000040005"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0x3}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async, rerun: 32)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async, rerun: 32)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async, rerun: 32)
r9 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) (async)
setsockopt$inet_tcp_int(r8, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 64)
connect$inet(r8, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async, rerun: 64)
sendto$inet(r8, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) (async)
splice(r8, 0x0, r7, 0x0, 0x30fea7, 0xa)

1.51004617s ago: executing program 2 (id=6930):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x60bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x200}}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xb60e}]}, 0x50}, 0x1, 0x0, 0x0, 0x48051}, 0x40)

1.451701674s ago: executing program 2 (id=6932):
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x2004a041)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000140)=0x1, 0x4)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="d93da021ed338e9deb45b6caed3fe700", 0x10)

1.450943413s ago: executing program 2 (id=6934):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x4444)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312c", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf251200000008000300", @ANYRES32=r4, @ANYBLOB="0a000600180211000001000014001180040007000600040002"], 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4)
setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0x8)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r7, 0x891a, 0x0)
getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000080)=0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', r8, 0x0, 0xa000, 0x0, 0x0, {{0x1e, 0x4, 0x0, 0x3, 0x78, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x9, 0xfffffffffffffffd, [{0x6, 0x3, "c7"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xdb, 0x0, 0x3, [0x2, 0x2, 0xeac, 0x2]}, @rr={0x7, 0x7, 0x55, [@private=0xa010102]}, @ra={0x94, 0x4, 0xfffd}, @noop, @rr={0x7, 0x27, 0x8a, [@multicast1, @broadcast, @multicast1, @multicast1, @local, @multicast2, @rand_addr=0x64010102, @remote, @private=0xa010100]}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x64, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})

1.352140083s ago: executing program 2 (id=6936):
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x38}}, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, r4, 0x20, 0x66, 0x8}, [@NDA_DST_MAC={0xa}, @NDA_PROTOCOL={0x5, 0xc, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1804}, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "8053e7eeb87c6375", "0dee47b49df8d449e11633a06f4679fc", "c0ce6b9a", "684976da3acd6bac"}, 0x28)
setsockopt(r2, 0x2, 0x7, &(0x7f0000000a00)="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", 0x1000)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)

1.051324859s ago: executing program 4 (id=6946):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x3c, r2, 0x6e5, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f00000000c0))
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={<r3=>0x0, 0xffc0, 0x0, 0x8, 0x4}, &(0x7f0000000280)=0x18)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r3, 0x6}, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/197, 0xc5}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/176, 0xb0}], 0x5, &(0x7f0000004000)=""/4096, 0x1000}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfe, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x80, 0x0, 0x8, 0x200000000, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x81000000}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x19, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079106f00000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xffffffffffffffff)
r7 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="00020201"], 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$inet6(r7, &(0x7f0000001440)={0xa, 0xffff, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x5, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00', @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x3ec0)

942.185681ms ago: executing program 4 (id=6947):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xcc, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}, @CTA_FILTER_ORIG_FLAGS={0xffffffffffffff2c, 0x1, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x810}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x111}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40800}, 0x200080d0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000", @ANYRES32=r0], 0x30}}, 0x0)

937.117358ms ago: executing program 4 (id=6948):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@tipc=@name, &(0x7f0000000000)=0x80, 0x101800)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000200)=0x9a0, 0x4)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000002c0)={0x1f, 0x4, 0x2}, 0x6)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

872.131103ms ago: executing program 4 (id=6949):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711877000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10608000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x78, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x28, 0x21}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x700000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]]}, 0x78}, 0x1, 0x0, 0x0, 0x40925}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
unshare(0x20000400)
r7 = socket$alg(0x26, 0x5, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r9 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r9, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
recvmsg$kcm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0)
sendmsg$kcm(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x10008014)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x8, 0x70bd26, 0x25dfdbfb, {0x7, r5}, ["", "", "", "", "", ""]}, 0x18}}, 0x41810) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x8, 0x70bd26, 0x25dfdbfb, {0x7, r5}, ["", "", "", "", "", ""]}, 0x18}}, 0x41810)
nanosleep(&(0x7f0000000000), &(0x7f0000000040)) (async)
nanosleep(&(0x7f0000000000), &(0x7f0000000040))

490.416399ms ago: executing program 2 (id=6950):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
socket(0x10, 0x80002, 0x0) (async)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xdb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv6_getroute={0x1048, 0x1a, 0x10, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x20, 0xf0, 0x0, 0x1, 0xfe, 0x7, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0x2000, 0x24, 0xa, r2}}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}, @RTA_UID={0x8, 0x19, r4}, @RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x1048}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x0)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000180)={0x0, 0x0, 0x30, r2, 0x1}, 0xc)

490.063044ms ago: executing program 2 (id=6951):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x5d4c, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x1, 0x0, @empty}}, 0x5c)
r5 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xd44263be89ee4aba}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x7}, 0x38)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0xf, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000300000000000000000004000f60030002000000850000008900000018010003696c6c2500000000002020207b1af8ff00000000bfa10000c720030000000007010000f8ffffffb702000008000000b703000009000000850000000600000018350000040000000000000000000000950000000000000047491183e5b7f7cb91ad4ca96cfddc12c595946c0a8a08a33e964ff1e087690bb598ac09"], 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0x2, 0x1d1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
sendmsg$inet(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)

581.144µs ago: executing program 4 (id=6952):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a31000000005400fff4030a01040000000000000000010000000900030073797a31000000780900010073797a3100000000100004800800014000000005080002401b2fd2c5140003006970258adf2e3000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

0s ago: executing program 4 (id=6953):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0xb0, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x30, 0xf, [@random={0xff, 0x2a, "baf7a750654c42aef847e6d410aa3fb66ecc860c4696a377ad611c103e7fcf858650ec50863609f55dde"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x79c}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x460}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x667}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x55b}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xaa, 0xbe, "169f457b01ec8dda7623ae7da65525068a491ebb3171cd78aa8526c8bcd732dc7a2b7e0505f395b877d12d13d98d3a72987a81a6c3bfb9012a1005d9a76164f6fcec764646e35664c6c41ac75cb46ffb87816801bc3a8e94a3e1c7511b5bf06b95084f3d3e828eedb7959495dfd41b50d6f56dd5d6e6a0ee6fe78621a2b0f52870317bf3a8035a11ff9e31c4c1306b468d178cd26655b7f182a69c0f23edc25566ccd0881305"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, [{0x60}, {0x6c}, {0x12}, {0x6}, {0xb}, {0x18, 0x1}, {0x6c}, {0x4, 0x1}, {0x18}, {0x9}, {0x0, 0x1}, {0x34, 0x1}, {0x30, 0x1}, {0x3}, {0x5}, {0x5}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000001}, 0x8850)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x90, r6, 0x205, 0x24000000, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{}, {}, @device_b, @device_b, @from_mac=@device_b}, 0x0, @random=0xd6db, 0x5d7f, @void, @void, @val={0x3, 0x1, 0xb8}, @val={0x4, 0x6, {0xb, 0x2e, 0x100, 0x3}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x40009, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x308, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x0)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x38, r3, 0x302, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x23}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x855}, 0x40)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x800}]]}}}]}, 0x48}}, 0x0)

kernel console output (not intermixed with test programs):

843] team0: Cannot enslave team device to itself
[  253.928791][T17858] syzkaller1: entered promiscuous mode
[  253.932935][T17858] syzkaller1: entered allmulticast mode
[  254.238962][T17893] ip6gre5: entered allmulticast mode
[  254.255840][T17894] bond0: option arp_validate: invalid value (18446744073491447809)
[  254.554354][T17927] xt_TPROXY: Can be used only with -p tcp or -p udp
[  254.886658][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  254.891939][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  254.894927][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  254.897801][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  254.901929][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  254.923362][T17938] C speed is unknown, defaulting to 1000
[  255.080702][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[  255.103169][T17938] chnl_net:caif_netlink_parms(): no params data found
[  255.159648][T17938] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.165570][T17938] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.166208][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  255.167906][T17938] bridge_slave_0: entered allmulticast mode
[  255.174080][T17938] bridge_slave_0: entered promiscuous mode
[  255.177633][T17938] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.179925][T17938] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.183237][T17938] bridge_slave_1: entered allmulticast mode
[  255.185983][T17938] bridge_slave_1: entered promiscuous mode
[  255.208551][T17938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.214118][T17938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.238340][T17938] team0: Port device team_slave_0 added
[  255.243131][T17938] team0: Port device team_slave_1 added
[  255.263663][T17938] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.265862][T17938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.275552][T17938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.280129][T17938] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.283313][T17938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.291462][T17938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.322264][T17938] hsr_slave_0: entered promiscuous mode
[  255.324620][T17938] hsr_slave_1: entered promiscuous mode
[  255.326757][T17938] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  255.329131][T17938] Cannot create hsr debugfs directory
[  255.384421][T17947] validate_nla: 3 callbacks suppressed
[  255.384434][T17947] netlink: 'syz.2.3985': attribute type 3 has an invalid length.
[  255.389099][T17947] openvswitch: netlink: Multiple metadata blocks provided
[  255.453060][T17938] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  255.461326][T17938] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  255.473751][T17938] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  255.478889][T17938] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  255.554480][T17938] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.574394][T17938] 8021q: adding VLAN 0 to HW filter on device team0
[  255.582906][T17960] netlink: 'syz.0.3987': attribute type 1 has an invalid length.
[  255.584613][ T9608] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.587426][ T9608] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.614106][ T9608] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.616238][ T9608] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.644458][T17965] __nla_validate_parse: 21 callbacks suppressed
[  255.644470][T17965] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3987'.
[  255.646117][T17938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  255.704421][T17968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3989'.
[  255.785922][T17938] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.817775][T17938] veth0_vlan: entered promiscuous mode
[  255.824828][T17938] veth1_vlan: entered promiscuous mode
[  255.831702][T17977] nbd1: detected capacity change from 0 to 63
[  255.852420][T17938] veth0_macvtap: entered promiscuous mode
[  255.856588][T17938] veth1_macvtap: entered promiscuous mode
[  255.859528][T12819] block nbd1: Receive control failed (result -104)
[  255.878404][T17938] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.888511][T17938] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.893009][T17938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.895671][T17938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.898330][T17938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.901917][T17938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.906903][T17988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3994'.
[  255.911908][T17984] netlink: 'syz.2.3994': attribute type 21 has an invalid length.
[  255.935748][T17984] netlink: 'syz.2.3994': attribute type 6 has an invalid length.
[  255.938142][T17984] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3994'.
[  256.005607][T17993] netlink: 'syz.2.3996': attribute type 1 has an invalid length.
[  256.010732][ T9610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.012125][T17993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3996'.
[  256.013275][ T9610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.035607][ T9608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.037993][ T9608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.154392][T18008] x_tables: duplicate underflow at hook 1
[  256.188814][T18015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4002'.
[  256.191894][T18015] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4002'.
[  256.209104][T18015] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  256.239248][T18019] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4003'.
[  256.247813][T18021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.384239][T18036] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  256.389056][T18036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  256.458524][T18042] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4012'.
[  256.464241][T18044] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4013'.
[  256.920730][ T5829] Bluetooth: hci1: command tx timeout
[  257.541550][T18094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.583583][T18100] netlink: 'syz.2.4031': attribute type 1 has an invalid length.
[  257.586308][T18100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.669210][T18097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.676327][T18097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.683091][T18097] bond0 (unregistering): Released all slaves
[  258.404462][T18110] IPVS: length: 248 != 8
[  258.534189][T18117] netlink: 'syz.2.4035': attribute type 1 has an invalid length.
[  258.556891][T18119] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  258.561090][T18119] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  259.001018][ T5829] Bluetooth: hci1: command tx timeout
[  259.075408][T18140] netlink: 'syz.2.4043': attribute type 2 has an invalid length.
[  259.213032][T18147] netlink: 'syz.3.4046': attribute type 3 has an invalid length.
[  259.572523][T18158] netlink: 'syz.0.4050': attribute type 2 has an invalid length.
[  259.870146][   T33] audit: type=1107 audit(1753090816.093:18): pid=18197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  259.872841][T18203] nft_compat: unsupported protocol 0
[  259.881969][   T33] audit: type=1107 audit(1753090816.093:19): pid=18197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  260.010796][T18216] veth17: entered promiscuous mode
[  260.035590][T18218] C speed is unknown, defaulting to 1000
[  261.082347][ T5829] Bluetooth: hci1: command tx timeout
[  261.314957][T18265] __nla_validate_parse: 16 callbacks suppressed
[  261.314970][T18265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4080'.
[  261.335540][T18264] validate_nla: 2 callbacks suppressed
[  261.335553][T18264] netlink: 'syz.2.4083': attribute type 1 has an invalid length.
[  261.339552][T18264] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4083'.
[  261.352745][T18254] netlink: 'syz.0.4080': attribute type 3 has an invalid length.
[  261.355238][T18254] netlink: 'syz.0.4080': attribute type 3 has an invalid length.
[  261.489915][T18283] netlink: 'syz.0.4085': attribute type 29 has an invalid length.
[  261.567434][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4087'.
[  261.600696][T18290] netlink: 410 bytes leftover after parsing attributes in process `syz.2.4087'.
[  261.654245][T18296] netlink: 'syz.0.4092': attribute type 4 has an invalid length.
[  261.712638][T18303] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4094'.
[  261.845207][T18313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4098'.
[  261.848282][T18313] netlink: 'syz.0.4098': attribute type 1 has an invalid length.
[  261.852403][T18327] netlink: 'syz.3.4101': attribute type 1 has an invalid length.
[  261.854091][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4098'.
[  261.854782][T18327] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4101'.
[  261.858509][T18313] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4098'.
[  261.864887][T18313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4098'.
[  261.867893][T18313] netlink: 'syz.0.4098': attribute type 1 has an invalid length.
[  262.120579][T18338] block nbd3: server does not support multiple connections per device.
[  262.123676][T18338] block nbd3: shutting down sockets
[  262.242737][T18358] netlink: 'syz.0.4110': attribute type 1 has an invalid length.
[  262.348634][T18371] netlink: 'syz.2.4114': attribute type 2 has an invalid length.
[  262.436241][T18381] C speed is unknown, defaulting to 1000
[  263.160620][ T5829] Bluetooth: hci1: command tx timeout
[  264.645992][T18444] xt_HMARK: proto mask must be zero with L3 mode
[  265.181510][T18488] syzkaller1: entered allmulticast mode
[  265.453498][T18503] team0: Mode changed to "activebackup"
[  265.456399][T18503] vlan0: entered promiscuous mode
[  265.458117][T18503] veth1_to_bridge: entered promiscuous mode
[  265.638394][T18506] netlink: 'syz.2.4156': attribute type 11 has an invalid length.
[  265.647170][T18506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.805700][T18512] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.809387][T18512] 8021q: VLANs not supported on nlmon0
[  266.038797][    T9] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  266.179852][T18542] gre0: entered allmulticast mode
[  266.628073][T18572] __nla_validate_parse: 24 callbacks suppressed
[  266.628086][T18572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4181'.
[  266.708842][T18579] batadv_slave_0: entered promiscuous mode
[  266.712396][T18578] batadv_slave_0: left promiscuous mode
[  267.202985][T18588] Unknown options in mask 700
[  267.242474][T18592] validate_nla: 64 callbacks suppressed
[  267.242488][T18592] netlink: 'syz.3.4188': attribute type 1 has an invalid length.
[  267.246666][T18592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4188'.
[  267.310225][T18604] netlink: 'syz.0.4191': attribute type 19 has an invalid length.
[  267.364645][T18612] xt_HMARK: proto mask must be zero with L3 mode
[  267.438919][T18615] netlink: 'syz.3.4195': attribute type 39 has an invalid length.
[  267.478821][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4194'.
[  267.552729][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4194'.
[  267.588046][T18624] netlink: 'syz.3.4196': attribute type 1 has an invalid length.
[  267.590760][T18624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4196'.
[  267.796971][T18632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4200'.
[  267.808116][T18632] netlink: 'syz.3.4200': attribute type 1 has an invalid length.
[  267.814200][T18632] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4200'.
[  267.824464][T18632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4200'.
[  267.896090][T18637] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4201'.
[  268.043385][T18651] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  268.099284][T18648] C speed is unknown, defaulting to 1000
[  268.316263][T18663] gre0: left allmulticast mode
[  268.365455][T18666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4207'.
[  268.392615][T18663] wg1: left promiscuous mode
[  268.394067][T18663] wg1: left allmulticast mode
[  268.398726][T18663] wg2: left promiscuous mode
[  268.400218][T18663] wg2: left allmulticast mode
[  268.446103][T18663] batadv_slave_1: left promiscuous mode
[  268.474291][T18663] 0: left allmulticast mode
[  268.476720][T18663] hsr_slave_0: left allmulticast mode
[  268.478709][T18663] hsr_slave_1: left allmulticast mode
[  268.499767][T18663] vlan0: left promiscuous mode
[  268.525145][T18663] macsec0: left promiscuous mode
[  268.534373][T18663] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.536927][T18663] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.539558][T18663] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.542526][T18663] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.553560][T18663] ip6gre1: left allmulticast mode
[  268.559257][T18663] gretap1: left promiscuous mode
[  268.564509][T18663] vlan2: left allmulticast mode
[  268.566059][T18663] veth1: left allmulticast mode
[  268.639804][T18663] bond0: left promiscuous mode
[  268.643872][T18663] vti0: left promiscuous mode
[  268.645385][T18663] vti0: left allmulticast mode
[  268.651371][T18663] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  268.653936][T18663] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  268.656501][T18663] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  268.659037][T18663] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  268.665664][T18663] bridge7: left allmulticast mode
[  268.670041][T18663] tipc: Resetting bearer <eth:syzkaller0>
[  268.675197][T18663] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode
[  268.677402][T18663] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode
[  268.689699][T18663] ipvlan2: left promiscuous mode
[  268.763786][T18672] bridge1: entered allmulticast mode
[  268.807174][T18677] netlink: 'syz.3.4211': attribute type 31 has an invalid length.
[  268.914361][T18681] : entered promiscuous mode
[  269.021610][T18690] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  269.076719][T18690] bond19: entered promiscuous mode
[  269.078470][T18690] bond19: entered allmulticast mode
[  269.084493][T18690] 8021q: adding VLAN 0 to HW filter on device bond19
[  269.296259][T18716] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  269.299512][T18716] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode
[  269.302802][T18716] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode
[  269.306242][T18716] tipc: Resetting bearer <eth:syzkaller0>
[  269.524634][T18732] bridge0: port 1(erspan0) entered blocking state
[  269.527090][T18732] bridge0: port 1(erspan0) entered disabled state
[  269.529317][T18732] erspan0: entered allmulticast mode
[  269.534036][T18732] erspan0: left allmulticast mode
[  269.909287][T18742] netlink: 'syz.3.4234': attribute type 1 has an invalid length.
[  270.268325][T18775] xt_hashlimit: size too large, truncated to 1048576
[  270.526380][T18775] bond0 (unregistering): Released all slaves
[  271.111190][T18801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.556236][T18822] netlink: 'syz.3.4263': attribute type 1 has an invalid length.
[  271.875690][T18855] netlink: 'syz.3.4272': attribute type 1 has an invalid length.
[  271.878121][T18855] __nla_validate_parse: 21 callbacks suppressed
[  271.878129][T18855] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4272'.
[  271.948540][T18853] netlink: 'syz.0.4271': attribute type 16 has an invalid length.
[  271.951809][T18853] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.4271'.
[  272.346890][T18897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4281'.
[  272.349667][T18897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4281'.
[  272.396826][T18900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4282'.
[  272.399563][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4282'.
[  272.427873][T18904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4283'.
[  272.446551][   T61] block nbd2: Possible stuck request ffff888022ac8000: control (read@0,1024B). Runtime 90 seconds
[  272.449854][   T61] block nbd2: Possible stuck request ffff888022ac8200: control (read@1024,1024B). Runtime 90 seconds
[  272.453519][   T61] block nbd2: Possible stuck request ffff888022ac8400: control (read@2048,1024B). Runtime 90 seconds
[  272.456914][   T61] block nbd2: Possible stuck request ffff888022ac8600: control (read@3072,1024B). Runtime 90 seconds
[  272.604062][T18924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4291'.
[  272.607126][T18924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4291'.
[  272.793108][T18947] netlink: 30 bytes leftover after parsing attributes in process `syz.2.4301'.
[  272.876459][T18955] netlink: 'syz.0.4305': attribute type 1 has an invalid length.
[  272.928744][T18958] C speed is unknown, defaulting to 1000
[  273.018595][T18965] netlink: del zone limit has 4 unknown bytes
[  273.053057][T18974] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  273.207895][T18987] netlink: 'syz.0.4314': attribute type 1 has an invalid length.
[  273.212563][T18981] C speed is unknown, defaulting to 1000
[  273.596515][T19010] netlink: 'syz.2.4321': attribute type 12 has an invalid length.
[  273.599003][T19014] netlink: 'syz.2.4321': attribute type 12 has an invalid length.
[  273.612148][T19016] netlink: 'syz.0.4322': attribute type 12 has an invalid length.
[  274.024426][T19044] ieee802154 phy1 wpan1: encryption failed: -22
[  274.026760][T19044] netlink: 'syz.2.4332': attribute type 29 has an invalid length.
[  274.464871][T19061] IPv6: NLM_F_CREATE should be specified when creating new route
[  274.747504][T19083] geneve4: entered promiscuous mode
[  274.984441][T19109] netlink: 'syz.3.4355': attribute type 1 has an invalid length.
[  275.125247][T19130] netlink: 'syz.3.4362': attribute type 1 has an invalid length.
[  275.159728][T19130] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.419616][T19154] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  275.426470][T19153] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  275.538899][T19173] netlink: 'syz.0.4375': attribute type 1 has an invalid length.
[  275.797169][T19192] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  275.802157][T19192] netlink: 'syz.0.4383': attribute type 21 has an invalid length.
[  276.138993][T19217] 0: left allmulticast mode
[  276.166908][T19217] vlan0: left promiscuous mode
[  276.168875][T19217] veth1_to_bridge: left promiscuous mode
[  276.202015][T19223] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  276.204788][T19223] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  276.207395][T19223] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  276.209935][T19223] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  276.645816][T19255] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  276.756772][T19262] 0: renamed from hsr_slave_1
[  276.765218][T19262] 0: entered allmulticast mode
[  276.767169][T19262] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  276.855235][ T5835] IPVS: starting estimator thread 0...
[  276.883758][T19273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  276.886252][T19273] IPv6: NLM_F_CREATE should be set when creating new route
[  276.888743][T19273] IPv6: NLM_F_CREATE should be set when creating new route
[  276.943079][T19271] IPVS: using max 38 ests per chain, 91200 per kthread
[  276.984629][T19284] __nla_validate_parse: 23 callbacks suppressed
[  276.984642][T19284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4419'.
[  276.999417][T19284] tipc: Cannot configure node identity twice
[  277.099690][T19295] C speed is unknown, defaulting to 1000
[  277.273335][T19302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4421'.
[  277.331617][T19310] veth0_to_bond: entered promiscuous mode
[  277.479540][T19295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4424'.
[  277.486521][T19295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  277.515918][T19315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4428'.
[  277.558605][T19317] xt_TPROXY: Can be used only with -p tcp or -p udp
[  277.600204][T19319] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4430'.
[  277.702237][T19323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4432'.
[  278.039824][T19333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4436'.
[  278.053545][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4436'.
[  278.104810][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4438'.
[  278.117689][T19339] Cannot find add_set index 2 as target
[  278.174763][T19343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4440'.
[  278.199186][T19346] x_tables: duplicate underflow at hook 3
[  279.224278][T19412] bond_slave_1: tun_chr_ioctl cmd 1074025677
[  279.226235][T19412] bond_slave_1: linktype set to 804
[  279.318522][T19417] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  279.634693][   T33] audit: type=1800 audit(1753090835.863:20): pid=19453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4478" name="blkio.bfq.time_recursive" dev="tmpfs" ino=823 res=0 errno=0
[  279.661150][   T33] audit: type=1800 audit(1753090835.863:21): pid=19453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4478" name="blkio.bfq.time_recursive" dev="tmpfs" ino=823 res=0 errno=0
[  279.717041][T19461] validate_nla: 1 callbacks suppressed
[  279.717054][T19461] netlink: 'syz.3.4481': attribute type 1 has an invalid length.
[  279.834147][T19477] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  279.945835][T19486] xt_CT: No such helper "snmp"
[  279.957178][T19486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.994700][T19491] netlink: 'syz.2.4492': attribute type 1 has an invalid length.
[  280.026998][T19497] Cannot find add_set index 0 as target
[  280.163180][T19507] ipvlan2: entered promiscuous mode
[  280.165056][T19507] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  280.170864][T19507] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  280.236672][T19512] netlink: 'syz.2.4498': attribute type 1 has an invalid length.
[  280.439745][T19526] netlink: 'syz.3.4504': attribute type 1 has an invalid length.
[  282.093534][T19597] __nla_validate_parse: 17 callbacks suppressed
[  282.093547][T19597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4533'.
[  282.098135][T19597] openvswitch: netlink: Flow key attr not present in new flow.
[  282.133005][T19601] netlink: 'syz.0.4535': attribute type 12 has an invalid length.
[  282.142499][T19606] netlink: 'syz.3.4536': attribute type 1 has an invalid length.
[  282.178069][T19608] syzkaller1: tun_chr_ioctl cmd 1074025677
[  282.180642][T19608] syzkaller1: linktype set to 778
[  282.188179][T19608] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4538'.
[  282.212380][T19612] veth3: entered promiscuous mode
[  282.248185][T19615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4539'.
[  282.252358][T19606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4536'.
[  282.255180][T19615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4539'.
[  282.519336][T19645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4549'.
[  282.525921][T19645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4549'.
[  282.529722][T19642] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8
[  282.606042][T19649] netlink: 'syz.2.4550': attribute type 1 has an invalid length.
[  282.608423][T19649] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4550'.
[  282.625862][T19652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4551'.
[  282.725714][T19665] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4556'.
[  282.916466][T19684] netlink: 'syz.2.4561': attribute type 1 has an invalid length.
[  282.919023][T19684] netlink: 'syz.2.4561': attribute type 2 has an invalid length.
[  282.993596][T19692] netlink: 'syz.2.4564': attribute type 1 has an invalid length.
[  283.312575][ T5843] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  283.312900][T19731] xt_hashlimit: invalid rate
[  284.315840][T19771] openvswitch: netlink: Flow key attr not present in new flow.
[  285.593562][T19855] bond0: invalid ARP target 0.0.0.0 specified for addition
[  285.595867][T19855] bond0: option arp_ip_target: invalid value (0)
[  285.900701][ T1231] block nbd1: Possible stuck request ffff888022a40000: control (read@0,1024B). Runtime 30 seconds
[  285.904111][ T1231] block nbd1: Possible stuck request ffff888022a40200: control (read@1024,1024B). Runtime 30 seconds
[  285.911811][ T1231] block nbd1: Possible stuck request ffff888022a40400: control (read@2048,1024B). Runtime 30 seconds
[  285.915175][ T1231] block nbd1: Possible stuck request ffff888022a40600: control (read@3072,1024B). Runtime 30 seconds
[  285.956786][T19896] x_tables: duplicate underflow at hook 2
[  286.028991][T19906] openvswitch: netlink: Flow key attr not present in new flow.
[  286.253856][T19930] validate_nla: 2 callbacks suppressed
[  286.253870][T19930] netlink: 'syz.0.4640': attribute type 1 has an invalid length.
[  286.532415][T19948] openvswitch: netlink: Flow key attr not present in new flow.
[  286.859399][T19962] netlink: 'syz.2.4647': attribute type 1 has an invalid length.
[  287.025629][T19969] netlink: 'syz.2.4649': attribute type 3 has an invalid length.
[  287.028171][T19969] netlink: 'syz.2.4649': attribute type 3 has an invalid length.
[  287.033672][T19969] netlink: 'syz.2.4649': attribute type 5 has an invalid length.
[  287.142697][T19969] __nla_validate_parse: 26 callbacks suppressed
[  287.142708][T19969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4649'.
[  287.173468][T19972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4650'.
[  287.225575][T19977] tipc: Started in network mode
[  287.227288][T19977] tipc: Node identity d26f18a11093, cluster identity 4711
[  287.229637][T19977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.233005][T19977] syzkaller0: entered promiscuous mode
[  287.234722][T19977] syzkaller0: entered allmulticast mode
[  287.244387][T19977] tipc: Resetting bearer <eth:syzkaller0>
[  287.247276][T19976] tipc: Resetting bearer <eth:syzkaller0>
[  287.263883][T19976] tipc: Disabling bearer <eth:syzkaller0>
[  287.389582][T19988] netlink: 'syz.3.4655': attribute type 1 has an invalid length.
[  287.392892][T19988] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4655'.
[  287.396334][T19990] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4656'.
[  287.399241][T19990] openvswitch: netlink: Flow key attr not present in new flow.
[  287.442417][T19990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4656'.
[  287.636514][   T33] audit: type=1800 audit(1753090843.863:22): pid=20009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4663" name="blkio.bfq.time_recursive" dev="tmpfs" ino=7836 res=0 errno=0
[  287.732615][T20013] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4665'.
[  287.735582][T20013] openvswitch: netlink: Flow key attr not present in new flow.
[  287.784618][T20013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4665'.
[  288.038932][T20036] dvmrp0: left allmulticast mode
[  288.190097][T20052] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4675'.
[  289.056657][T20094] netlink: 'syz.3.4689': attribute type 1 has an invalid length.
[  289.066426][T20094] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4689'.
[  289.081990][T20095] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  289.084824][T20095] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  289.087344][T20095] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  289.089886][T20095] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  289.094851][T20095] geneve3: entered promiscuous mode
[  289.124351][T20089] C speed is unknown, defaulting to 1000
[  289.218739][T20107] netlink: 488 bytes leftover after parsing attributes in process `syz.2.4693'.
[  289.274954][T20110] syzkaller1: entered promiscuous mode
[  289.279199][T20110] syzkaller1: entered allmulticast mode
[  289.482216][T20119] netlink: 'syz.0.4697': attribute type 10 has an invalid length.
[  289.487331][T20119] team0: entered promiscuous mode
[  289.488943][T20119] team0: entered allmulticast mode
[  289.491500][T20119] 8021q: adding VLAN 0 to HW filter on device team0
[  289.493996][T20119] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  289.693965][T20131] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9
[  290.456416][T20215] netlink: 'syz.0.4730': attribute type 1 has an invalid length.
[  290.493013][T20221] sctp: [Deprecated]: syz.2.4728 (pid 20221) Use of int in max_burst socket option deprecated.
[  290.493013][T20221] Use struct sctp_assoc_value instead
[  290.519020][T20225] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.523755][T20225] sch_fq: defrate 257 ignored.
[  290.650259][T20233] xt_policy: neither incoming nor outgoing policy selected
[  291.002461][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  291.737918][T20275] pimreg: entered allmulticast mode
[  291.742057][T20275] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  291.977322][T20298] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  292.193540][T20322] netlink: 'syz.0.4770': attribute type 1 has an invalid length.
[  292.196101][T20322] netlink: 'syz.0.4770': attribute type 1 has an invalid length.
[  292.227920][T20324] __nla_validate_parse: 86 callbacks suppressed
[  292.227932][T20324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4771'.
[  292.249503][T20327] netlink: 'syz.3.4772': attribute type 11 has an invalid length.
[  292.294513][T20329] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  292.311861][T20329] CPU: 1 UID: 0 PID: 20329 Comm: syz.0.4773 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  292.311878][T20329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.311883][T20329] Call Trace:
[  292.311888][T20329]  <TASK>
[  292.311893][T20329]  dump_stack_lvl+0x189/0x250
[  292.311912][T20329]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.311922][T20329]  ? __pfx__printk+0x10/0x10
[  292.311934][T20329]  ? kernfs_path_from_node+0x2c/0x260
[  292.311944][T20329]  ? kernfs_path_from_node+0x2c/0x260
[  292.311951][T20329]  ? kernfs_path_from_node+0x2c/0x260
[  292.311960][T20329]  ? kernfs_path_from_node+0x22c/0x260
[  292.311967][T20329]  ? kernfs_path_from_node+0x2c/0x260
[  292.311976][T20329]  sysfs_warn_dup+0x8e/0xa0
[  292.311990][T20329]  sysfs_do_create_link_sd+0xc0/0x110
[  292.311999][T20329]  device_add_class_symlinks+0x1cf/0x240
[  292.312014][T20329]  device_add+0x475/0xb50
[  292.312028][T20329]  wiphy_register+0x199a/0x26b0
[  292.312047][T20329]  ? __pfx_wiphy_register+0x10/0x10
[  292.312057][T20329]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  292.312072][T20329]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  292.312086][T20329]  ieee80211_register_hw+0x33e1/0x4120
[  292.312107][T20329]  ? ieee80211_register_hw+0x14d1/0x4120
[  292.312123][T20329]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  292.312137][T20329]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.312156][T20329]  ? __hrtimer_setup+0x187/0x210
[  292.312166][T20329]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  292.312181][T20329]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  292.312207][T20329]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  292.312218][T20329]  ? trace_kmalloc+0x1f/0xd0
[  292.312228][T20329]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  292.312239][T20329]  ? kstrndup+0xbf/0x160
[  292.312253][T20329]  hwsim_new_radio_nl+0xea4/0x1b10
[  292.312266][T20329]  ? __pfx___nla_validate_parse+0x10/0x10
[  292.312283][T20329]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  292.312301][T20329]  ? __nla_parse+0x40/0x60
[  292.312313][T20329]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  292.312327][T20329]  genl_family_rcv_msg_doit+0x215/0x300
[  292.312339][T20329]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  292.312354][T20329]  ? bpf_lsm_capable+0x9/0x20
[  292.312367][T20329]  ? security_capable+0x7e/0x2e0
[  292.312379][T20329]  genl_rcv_msg+0x60e/0x790
[  292.312391][T20329]  ? __pfx_genl_rcv_msg+0x10/0x10
[  292.312399][T20329]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  292.312443][T20329]  netlink_rcv_skb+0x208/0x470
[  292.312455][T20329]  ? __pfx_genl_rcv_msg+0x10/0x10
[  292.312464][T20329]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  292.312484][T20329]  ? down_read+0x1ad/0x2e0
[  292.312495][T20329]  genl_rcv+0x28/0x40
[  292.312502][T20329]  netlink_unicast+0x75c/0x8e0
[  292.312518][T20329]  netlink_sendmsg+0x805/0xb30
[  292.312534][T20329]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.312547][T20329]  ? aa_sock_msg_perm+0x94/0x160
[  292.312557][T20329]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  292.312566][T20329]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.312578][T20329]  __sock_sendmsg+0x21c/0x270
[  292.312590][T20329]  ____sys_sendmsg+0x505/0x830
[  292.312605][T20329]  ? __pfx_____sys_sendmsg+0x10/0x10
[  292.312622][T20329]  ? import_iovec+0x74/0xa0
[  292.312635][T20329]  ___sys_sendmsg+0x21f/0x2a0
[  292.312649][T20329]  ? __pfx____sys_sendmsg+0x10/0x10
[  292.312685][T20329]  ? __fget_files+0x2a/0x420
[  292.312693][T20329]  ? __fget_files+0x3a0/0x420
[  292.312705][T20329]  __x64_sys_sendmsg+0x19b/0x260
[  292.312719][T20329]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  292.312737][T20329]  ? rcu_is_watching+0x15/0xb0
[  292.312749][T20329]  ? do_syscall_64+0xbe/0x3b0
[  292.312761][T20329]  do_syscall_64+0xfa/0x3b0
[  292.312769][T20329]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.312778][T20329]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.312786][T20329]  ? exc_page_fault+0x9f/0xf0
[  292.312794][T20329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.312803][T20329] RIP: 0033:0x7f629178e9a9
[  292.312812][T20329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.312819][T20329] RSP: 002b:00007f62925dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.312829][T20329] RAX: ffffffffffffffda RBX: 00007f62919b5fa0 RCX: 00007f629178e9a9
[  292.312835][T20329] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  292.312840][T20329] RBP: 00007f6291810ca1 R08: 0000000000000000 R09: 0000000000000000
[  292.312845][T20329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.312850][T20329] R13: 0000000000000000 R14: 00007f62919b5fa0 R15: 00007fffdabfba58
[  292.312876][T20329]  </TASK>
[  292.568162][T20335] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.602072][T20333] netlink: 'syz.3.4774': attribute type 2 has an invalid length.
[  292.632296][T20335] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.687750][T20353] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4781'.
[  292.691218][T20335] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.695612][T20353] openvswitch: netlink: Flow key attr not present in new flow.
[  292.703419][T20353] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4781'.
[  292.755307][T20355] netlink: 'syz.0.4782': attribute type 1 has an invalid length.
[  292.757720][T20355] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4782'.
[  292.803816][T20335] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.895523][T20335] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.907686][T20335] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.919473][T20335] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.930620][T20335] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.999295][T20375] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4788'.
[  293.003259][T20375] openvswitch: netlink: Flow key attr not present in new flow.
[  293.006715][T20375] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4788'.
[  293.017257][T20373] tap0: tun_chr_ioctl cmd 1074025680
[  293.021737][T20373] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.033282][T20373] D: renamed from syzkaller0
[  293.036202][T20373] tipc: Disabling bearer <eth:syzkaller0>
[  293.149887][T20385] xt_CT: No such helper "pptp"
[  293.158200][T20385] --map-set only usable from mangle table
[  293.225026][T20385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4793'.
[  293.232419][T20385] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  293.236537][T20385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4793'.
[  293.263738][T20392] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4796'.
[  293.266596][T20392] openvswitch: netlink: Flow key attr not present in new flow.
[  293.272164][T20392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4796'.
[  293.303820][T20394] netlink: 'syz.3.4797': attribute type 1 has an invalid length.
[  293.359871][T20396] netlink: 'syz.2.4798': attribute type 1 has an invalid length.
[  293.363577][T20396] netlink: 'syz.2.4798': attribute type 1 has an invalid length.
[  293.366025][T20396] netlink: 'syz.2.4798': attribute type 1 has an invalid length.
[  293.368422][T20396] netlink: 'syz.2.4798': attribute type 1 has an invalid length.
[  293.372182][T20396] netlink: 'syz.2.4798': attribute type 1 has an invalid length.
[  293.375018][T20396] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  293.737741][T20434] C: renamed from team_slave_0
[  293.741717][T20434] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  294.032353][T20455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.832033][T20537] IPv6: NLM_F_CREATE should be specified when creating new route
[  295.749845][T20563] ip6gretap0: entered promiscuous mode
[  295.753527][T20563] macsec1: entered promiscuous mode
[  295.755664][T20563] macsec1: entered allmulticast mode
[  295.757421][T20563] ip6gretap0: entered allmulticast mode
[  295.812458][T20574] sctp: [Deprecated]: syz.2.4859 (pid 20574) Use of struct sctp_assoc_value in delayed_ack socket option.
[  295.812458][T20574] Use struct sctp_sack_info instead
[  295.823332][T20576] sctp: [Deprecated]: syz.2.4859 (pid 20576) Use of struct sctp_assoc_value in delayed_ack socket option.
[  295.823332][T20576] Use struct sctp_sack_info instead
[  295.861732][T20567] nbd: must specify a size in bytes for the device
[  295.994854][T20591] bpq0: entered promiscuous mode
[  295.996841][T20591] bpq0: entered allmulticast mode
[  296.042466][T20601] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  296.346999][T20631] mac80211_hwsim hwsim24 syzkaller0: Caught tx_queue_len zero misconfig
[  296.386085][T20637] 0: renamed from hsr_slave_1 (while UP)
[  296.392790][T20637] 0: entered allmulticast mode
[  296.395414][T20637] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  296.586246][T20654] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  296.764581][T20679] xt_cgroup: invalid path, errno=-2
[  296.835444][T20685] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  297.146111][T20698] batadv_slave_1: entered promiscuous mode
[  297.154860][T20697] batadv_slave_1: left promiscuous mode
[  297.226975][T20723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.366903][T20740] __nla_validate_parse: 79 callbacks suppressed
[  297.366916][T20740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4914'.
[  297.433656][T20742] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  297.437787][T20742] Bluetooth: MGMT ver 1.23
[  297.465175][T20744] validate_nla: 38 callbacks suppressed
[  297.465188][T20744] netlink: 'syz.3.4916': attribute type 1 has an invalid length.
[  297.479359][T20748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4917'.
[  297.484701][T20748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4917'.
[  297.573833][T20753] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  297.589219][T20753] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4919'.
[  297.662807][T20757] netlink: 'syz.3.4920': attribute type 1 has an invalid length.
[  297.666094][T20757] netlink: 'syz.3.4920': attribute type 10 has an invalid length.
[  297.669268][T20757] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4920'.
[  297.674284][T20757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4920'.
[  297.677896][T20757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4920'.
[  298.177329][T20761] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4922'.
[  298.323428][T20770] tipc: Resetting bearer <eth:syzkaller0>
[  298.338763][T20770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4925'.
[  298.359776][T20770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4925'.
[  298.791636][T20814] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[  299.287844][T20839] Cannot find add_set index 3 as target
[  299.295189][T20839] netlink: 'syz.3.4950': attribute type 1 has an invalid length.
[  299.480772][ T5829] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  299.484257][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[  299.766542][T20883] netlink: 'syz.3.4965': attribute type 7 has an invalid length.
[  300.035050][T20908] netlink: 'syz.0.4972': attribute type 1 has an invalid length.
[  300.202314][T20924] gtp1: entered promiscuous mode
[  300.212966][T20924] openvswitch: netlink: IP tunnel dst address not specified
[  300.242986][T20928] tipc: Resetting bearer <eth:syzkaller0>
[  300.455649][T20944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.458664][T20943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.549166][T20961] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  300.935561][T20991] C speed is unknown, defaulting to 1000
[  300.979138][   T54] Bluetooth: hci1: link tx timeout
[  300.981481][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  300.986126][   T54] Bluetooth: hci1: link tx timeout
[  300.987659][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  300.990015][   T54] Bluetooth: hci1: link tx timeout
[  300.992109][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  300.994422][   T54] Bluetooth: hci1: link tx timeout
[  300.996046][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  300.998353][   T54] Bluetooth: hci1: link tx timeout
[  300.999879][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  301.002764][   T54] Bluetooth: hci1: link tx timeout
[  301.004278][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  301.006553][   T54] Bluetooth: hci1: link tx timeout
[  301.008141][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  301.011226][   T54] Bluetooth: hci1: link tx timeout
[  301.013429][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  301.015736][   T54] Bluetooth: hci1: link tx timeout
[  301.017311][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  301.019711][   T54] Bluetooth: hci1: link tx timeout
[  301.021991][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  301.025700][   T54] Bluetooth: hci1: link tx timeout
[  301.027307][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  301.029687][   T54] Bluetooth: hci1: link tx timeout
[  301.032140][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  301.034453][   T54] Bluetooth: hci1: link tx timeout
[  301.036044][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  301.139058][T20996] netlink: 'syz.2.5003': attribute type 12 has an invalid length.
[  301.444848][T21001] vti0: entered promiscuous mode
[  301.680535][ T5890] tipc: Node number set to 3271301281
[  301.933507][T21050] syzkaller0: entered allmulticast mode
[  302.227233][T21085] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.342810][T21096] C speed is unknown, defaulting to 1000
[  302.520708][   T61] block nbd2: Possible stuck request ffff888022ac8000: control (read@0,1024B). Runtime 120 seconds
[  302.523981][   T61] block nbd2: Possible stuck request ffff888022ac8200: control (read@1024,1024B). Runtime 120 seconds
[  302.527177][   T61] block nbd2: Possible stuck request ffff888022ac8400: control (read@2048,1024B). Runtime 120 seconds
[  302.530474][   T61] block nbd2: Possible stuck request ffff888022ac8600: control (read@3072,1024B). Runtime 120 seconds
[  302.553034][T21109] __nla_validate_parse: 38 callbacks suppressed
[  302.553045][T21109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5040'.
[  302.676323][T21119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5044'.
[  302.683728][T21119] atomic_op ffff88803941c998 conn xmit_atomic 0000000000000000
[  302.803757][T21128] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5047'.
[  302.825044][T21128] C speed is unknown, defaulting to 1000
[  302.871830][T21129] xt_l2tp: unknown flags: 10
[  302.952426][T21131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5048'.
[  303.002909][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  303.784117][T21156] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5057'.
[  303.892256][T21165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5059'.
[  303.895057][T21165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5059'.
[  304.126228][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5064'.
[  304.165702][T21188] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5066'.
[  304.287542][T21193] netlink: 'syz.0.5068': attribute type 2 has an invalid length.
[  304.292160][T21193] netlink: 'syz.0.5068': attribute type 8 has an invalid length.
[  304.299674][T21193] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5068'.
[  304.313063][T21196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.384160][T21230] netlink: 'syz.2.5082': attribute type 1 has an invalid length.
[  305.937009][T21219] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  306.279186][T21306] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  306.346740][T21312] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  306.374313][T21312] tipc: Resetting bearer <eth:syzkaller0>
[  306.450825][T21324] netlink: 'syz.2.5112': attribute type 11 has an invalid length.
[  306.691279][T21341] xt_cgroup: invalid path, errno=-2
[  307.158202][T21375] sctp: [Deprecated]: syz.2.5126 (pid 21375) Use of int in max_burst socket option.
[  307.158202][T21375] Use struct sctp_assoc_value instead
[  307.368754][T21390] 8021q: adding VLAN 0 to HW filter on device bond11
[  307.512569][T21407] x_tables: duplicate underflow at hook 4
[  307.571776][T21409] __nla_validate_parse: 24 callbacks suppressed
[  307.571792][T21409] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5138'.
[  307.707190][T21422] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5143'.
[  307.734258][T21419] netlink: 'syz.0.5142': attribute type 10 has an invalid length.
[  307.936069][T21443] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  307.942591][T21442] delete_channel: no stack
[  308.004894][T21452] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  308.007568][T21448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5153'.
[  308.049009][T21456] tap0: tun_chr_ioctl cmd 1074025675
[  308.051202][T21456] tap0: persist disabled
[  308.123078][ T5829] Bluetooth: hci1: command 0x0406 tx timeout
[  308.172689][T21462] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5158'.
[  308.180706][T21469] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5158'.
[  308.248918][T21475] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  308.278848][T21475] tipc: Resetting bearer <eth:syzkaller0>
[  308.281924][T21478] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5160'.
[  308.287136][T21474] tipc: Resetting bearer <eth:syzkaller0>
[  309.512812][T21474] tipc: Disabling bearer <eth:syzkaller0>
[  309.523829][T21485] syzkaller1: entered promiscuous mode
[  309.530935][T21485] syzkaller1: entered allmulticast mode
[  309.534084][T21489] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5162'.
[  309.732632][T21514] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5168'.
[  309.755664][T21516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5167'.
[  309.854681][T21530] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5172'.
[  310.080214][T21563] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode
[  310.082562][T21563] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode
[  310.085116][T21563] tipc: Resetting bearer <eth:syzkaller0>
[  310.146673][T21571] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  310.150500][T21571] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode
[  310.152847][T21571] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode
[  310.155602][T21571] tipc: Resetting bearer <eth:syzkaller0>
[  310.642346][T21609] sctp: [Deprecated]: syz.0.5200 (pid 21609) Use of int in max_burst socket option.
[  310.642346][T21609] Use struct sctp_assoc_value instead
[  311.251214][T21651] netlink: 'syz.2.5214': attribute type 2 has an invalid length.
[  311.257418][T21651] : entered promiscuous mode
[  311.380160][T21656] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  311.963512][T21692] netlink: 'syz.2.5230': attribute type 8 has an invalid length.
[  312.245202][T21709] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.247832][T21709] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.250526][T21709] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.253041][T21709] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.261210][T21709] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  312.263736][T21709] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  312.266327][T21709] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  312.268852][T21709] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  312.526120][T21729] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[  312.617882][T21736] __nla_validate_parse: 28 callbacks suppressed
[  312.617898][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5244'.
[  312.626467][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5244'.
[  312.636416][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5244'.
[  312.644730][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5244'.
[  312.651478][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5244'.
[  312.654278][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5244'.
[  312.656966][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5244'.
[  312.659804][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5244'.
[  312.664315][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5244'.
[  312.667000][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5244'.
[  312.747325][T21741] syzkaller0: entered promiscuous mode
[  312.749005][T21741] syzkaller0: entered allmulticast mode
[  312.827452][T21694] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  313.923658][T21752] C speed is unknown, defaulting to 1000
[  314.208346][T21770] netlink: 'syz.2.5254': attribute type 1 has an invalid length.
[  314.216735][T21769] netlink: 'syz.2.5254': attribute type 1 has an invalid length.
[  314.224670][T21770] 8021q: adding VLAN 0 to HW filter on device bond12
[  314.605270][T21799] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  314.607789][T21799] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  314.610441][T21799] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  314.612905][T21799] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  314.805419][T21825] C speed is unknown, defaulting to 1000
[  314.977972][T21837] netlink: 'syz.3.5275': attribute type 1 has an invalid length.
[  315.239109][T21862] netlink: 'syz.3.5284': attribute type 30 has an invalid length.
[  315.274069][T21862] batadv_slave_1: entered promiscuous mode
[  315.274897][T21866] netlink: 'syz.2.5285': attribute type 1 has an invalid length.
[  315.276173][T21862] batadv_slave_1: left promiscuous mode
[  315.288883][T21862] xt_l2tp: v2 doesn't support IP mode
[  315.612646][T21890] No such timeout policy "syz0"
[  315.666070][T21894] netlink: 'syz.2.5294': attribute type 1 has an invalid length.
[  315.778542][   T33] audit: type=1800 audit(1753090872.003:23): pid=21907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5298" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2223 res=0 errno=0
[  315.845260][T21913] netlink: 'syz.2.5301': attribute type 11 has an invalid length.
[  315.847781][T21913] netlink: 'syz.2.5301': attribute type 11 has an invalid length.
[  315.962985][ T1231] block nbd1: Possible stuck request ffff888022a40000: control (read@0,1024B). Runtime 60 seconds
[  315.966155][ T1231] block nbd1: Possible stuck request ffff888022a40200: control (read@1024,1024B). Runtime 60 seconds
[  315.969384][ T1231] block nbd1: Possible stuck request ffff888022a40400: control (read@2048,1024B). Runtime 60 seconds
[  315.973075][ T1231] block nbd1: Possible stuck request ffff888022a40600: control (read@3072,1024B). Runtime 60 seconds
[  316.050635][   T33] audit: type=1800 audit(1753090872.283:24): pid=21929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5307" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9524 res=0 errno=0
[  316.052119][T21931] netlink: 'syz.3.5308': attribute type 1 has an invalid length.
[  316.095542][T21934] sctp: [Deprecated]: syz.2.5310 (pid 21934) Use of int in max_burst socket option.
[  316.095542][T21934] Use struct sctp_assoc_value instead
[  316.136291][T21934] netlink: 'syz.2.5310': attribute type 1 has an invalid length.
[  316.368494][T21967] netlink: 'syz.3.5319': attribute type 1 has an invalid length.
[  316.537966][T21980] netlink: 'syz.3.5324': attribute type 1 has an invalid length.
[  316.554878][T21980] 8021q: adding VLAN 0 to HW filter on device bond4
[  316.571524][T21980] 8021q: adding VLAN 0 to HW filter on device bond4
[  316.574210][T21980] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  316.578330][T21980] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  316.604167][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  316.619344][T21982] veth3: entered promiscuous mode
[  316.624962][T21982] bond4: (slave veth3): Enslaving as an active interface with a down link
[  316.631256][T21980] erspan0: entered allmulticast mode
[  316.640192][T21980] bond4: (slave erspan0): making interface the new active one
[  316.644372][T21980] bond4: (slave erspan0): Enslaving as an active interface with an up link
[  316.737931][   T33] audit: type=1800 audit(1753090872.963:25): pid=21988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5326" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2314 res=0 errno=0
[  316.774585][T21990] x_tables: duplicate underflow at hook 3
[  317.208031][T22016] netlink: 'syz.2.5337': attribute type 14 has an invalid length.
[  317.368036][T22024] batadv_slave_1: entered promiscuous mode
[  318.141807][T22022] batadv_slave_1: left promiscuous mode
[  318.234520][T22038] __nla_validate_parse: 68 callbacks suppressed
[  318.234531][T22038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5345'.
[  318.239184][T22038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5345'.
[  318.287572][T22040] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5346'.
[  318.306511][   T33] audit: type=1800 audit(1753090874.533:26): pid=22042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5347" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9577 res=0 errno=0
[  318.394285][T22049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5349'.
[  318.399180][T22047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5350'.
[  318.517184][T22063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5354'.
[  318.522410][T22063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5354'.
[  318.613303][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5355'.
[  319.354156][T22069] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5356'.
[  319.416912][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5358'.
[  319.419795][T22073] openvswitch: netlink: Missing key (keys=40, expected=100)
[  319.448228][   T33] audit: type=1800 audit(1753090875.673:27): pid=22075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5359" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9023 res=0 errno=0
[  319.455902][T22075] TCP: TCP_TX_DELAY enabled
[  319.617176][T22083] netlink: 'syz.2.5362': attribute type 1 has an invalid length.
[  319.753022][   T33] audit: type=1800 audit(1753090875.983:28): pid=22098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5368" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9629 res=0 errno=0
[  319.907565][T22102] netlink: 'syz.2.5369': attribute type 4 has an invalid length.
[  321.640736][ T5279] udevd[5279]: worker [13443] /devices/virtual/block/nbd1 is taking a long time
[  321.661329][T22123] netlink: 'syz.0.5376': attribute type 7 has an invalid length.
[  322.073172][T22151] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.383179][   T33] audit: type=1800 audit(1753090878.613:29): pid=22168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5394" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9171 res=0 errno=0
[  323.113736][T22229] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  323.399088][T22252] __nla_validate_parse: 18 callbacks suppressed
[  323.399098][T22252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5421'.
[  323.407646][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5421'.
[  323.442770][T22254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5422'.
[  323.918672][T22273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5428'.
[  323.946112][T22275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5429'.
[  323.948917][T22275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5429'.
[  324.082497][T22285] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  324.085399][T22285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5433'.
[  324.558259][T22295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5437'.
[  324.562287][T22295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5437'.
[  324.593077][   T33] audit: type=1800 audit(1753090880.823:30): pid=22297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5438" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9337 res=0 errno=0
[  324.789337][T22306] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  325.054087][   T33] audit: type=1800 audit(1753090881.283:31): pid=22321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5446" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9696 res=0 errno=0
[  325.986458][T22334] syzkaller1: entered promiscuous mode
[  325.988180][T22334] syzkaller1: entered allmulticast mode
[  326.128484][T22357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5459'.
[  326.495272][   T33] audit: type=1800 audit(1753090882.723:32): pid=22387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5470" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9455 res=0 errno=0
[  326.674062][T22401] netlink: 'syz.0.5476': attribute type 1 has an invalid length.
[  326.687824][T22401] bond22 (unregistering): Released all slaves
[  326.941245][T22413] veth21: entered promiscuous mode
[  327.006217][T22417] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  327.008612][T22417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.408795][T22435] nbd: nbd2 already in use
[  327.412425][T22435] block nbd2: NBD_DISCONNECT
[  327.413898][T22435] block nbd2: Send disconnect failed -32
[  327.420622][T22435] block nbd2: shutting down sockets
[  327.424993][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  327.427759][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  327.430147][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  327.432894][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[  327.435214][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  327.437847][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[  327.438577][T22442] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  327.440163][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  327.445195][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[  327.452735][   T33] audit: type=1800 audit(1753090883.673:33): pid=22442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5491" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9486 res=0 errno=0
[  327.459582][T12619] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  327.464313][T12619] Buffer I/O error on dev nbd2, logical block 0, async page read
[  327.467211][T12619] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  327.469867][T12619] Buffer I/O error on dev nbd2, logical block 1, async page read
[  327.476403][T12619] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  327.486616][T12619] Buffer I/O error on dev nbd2, logical block 2, async page read
[  327.489061][T12619] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  327.500438][T12619] Buffer I/O error on dev nbd2, logical block 3, async page read
[  327.502977][T12619] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  327.505650][T12619] Buffer I/O error on dev nbd2, logical block 0, async page read
[  327.507253][T22446] xt_CT: No such helper "netbios-ns"
[  327.508017][T12619] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  327.519708][T12619] Buffer I/O error on dev nbd2, logical block 1, async page read
[  327.526663][T12619] ldm_validate_partition_table(): Disk read failed.
[  327.530517][T12619] Dev nbd2: unable to read RDB block 0
[  327.533326][T12619]  nbd2: unable to read partition table
[  327.541494][T12619] ldm_validate_partition_table(): Disk read failed.
[  327.548591][T12619] Dev nbd2: unable to read RDB block 0
[  327.553822][T12619]  nbd2: unable to read partition table
[  327.758206][T22466] veth21: entered promiscuous mode
[  327.762212][   T33] audit: type=1800 audit(1753090883.993:34): pid=22466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5500" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9513 res=0 errno=0
[  327.818909][T22471] netlink: 'syz.0.5501': attribute type 1 has an invalid length.
[  328.132360][   T33] audit: type=1800 audit(1753090884.363:35): pid=22495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5509" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9550 res=0 errno=0
[  328.146338][ T5891] hid-generic 0005:0C45:1012.0003: item fetching failed at offset 0/1
[  328.149123][ T5891] hid-generic 0005:0C45:1012.0003: probe with driver hid-generic failed with error -22
[  328.514454][T22537] bridge_slave_0: entered promiscuous mode
[  329.352727][   T33] audit: type=1800 audit(1753090885.583:36): pid=22558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5528" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9587 res=0 errno=0
[  329.499294][T22566] netlink: 'syz.0.5530': attribute type 21 has an invalid length.
[  329.504630][T22566] __nla_validate_parse: 12 callbacks suppressed
[  329.504646][T22566] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5530'.
[  329.509521][T22566] netlink: 'syz.0.5530': attribute type 4 has an invalid length.
[  329.509555][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5531'.
[  329.512424][T22566] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5530'.
[  329.527055][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5531'.
[  329.558125][T22569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5532'.
[  329.576818][T22570] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5530'.
[  329.640901][ T5829] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  330.476331][T22581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5537'.
[  330.479096][T22581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5537'.
[  330.487162][T22583] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5538'.
[  330.697199][T22607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5545'.
[  330.724299][T22607] 8021q: adding VLAN 0 to HW filter on device bond14
[  330.728703][T22607] bond0: (slave bond14): Enslaving as an active interface with an up link
[  330.882730][T22620] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[  331.272907][T22644] netlink: 'syz.2.5561': attribute type 1 has an invalid length.
[  331.291521][T22644] bond0: (slave bond14): Releasing backup interface
[  331.762466][T22673] xt_CT: No such helper "snmp"
[  331.767211][T22675] netlink: 'syz.0.5572': attribute type 1 has an invalid length.
[  331.972263][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  331.972587][T22696] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.979726][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  331.982831][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  331.988661][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  331.992519][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  332.019732][T22695] C speed is unknown, defaulting to 1000
[  332.057458][T22705] openvswitch: netlink: Key type 137 is out of range max 32
[  332.258408][   T33] audit: type=1800 audit(1753090888.483:37): pid=22728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5586" name="memory.events" dev="tmpfs" ino=9670 res=0 errno=0
[  332.299723][T22733] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20003
[  332.308578][T22695] chnl_net:caif_netlink_parms(): no params data found
[  332.365966][T22695] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.368205][T22695] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.379151][T22695] bridge_slave_0: entered allmulticast mode
[  332.382946][T22695] bridge_slave_0: entered promiscuous mode
[  332.386733][T22695] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.388936][T22695] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.391924][T22695] bridge_slave_1: entered allmulticast mode
[  332.394646][T22695] bridge_slave_1: entered promiscuous mode
[  332.429340][T22742] netlink: 'syz.2.5590': attribute type 1 has an invalid length.
[  332.434216][T22695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.439160][T22695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.469401][T22695] team0: Port device team_slave_0 added
[  332.474478][T22695] team0: Port device team_slave_1 added
[  332.503428][T22695] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.505539][T22695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.513146][T22695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.518853][T22695] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.521655][T22695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.529576][T22695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.563938][T22695] hsr_slave_0: entered promiscuous mode
[  332.566237][T22695] hsr_slave_1: entered promiscuous mode
[  332.568377][T22695] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  332.571752][T22695] Cannot create hsr debugfs directory
[  332.658128][T22758] macsec0: entered promiscuous mode
[  332.659782][T22758] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  332.667738][T22758] macsec0: entered allmulticast mode
[  332.669323][T22758] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  332.708465][T22761] netlink: 'syz.2.5596': attribute type 1 has an invalid length.
[  332.728812][T22695] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  332.742928][T22695] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  332.748676][T22695] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  332.755038][T22695] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  332.855262][T22695] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.878240][T22695] 8021q: adding VLAN 0 to HW filter on device team0
[  332.887464][T22791] Timeout policy `syz1' can only be used by L3 protocol number 0
[  332.888547][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.891879][T22791] xt_ecn: cannot match TCP bits for non-tcp packets
[  332.892229][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.907497][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.909712][ T7197] bridge0: port 2(bridge_slave_1) entered forwarding state
[  333.044001][T22695] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.133911][T22813] netlink: 'syz.2.5604': attribute type 1 has an invalid length.
[  333.161475][T22695] veth0_vlan: entered promiscuous mode
[  333.175639][T22695] veth1_vlan: entered promiscuous mode
[  333.218338][T22695] veth0_macvtap: entered promiscuous mode
[  333.223532][T22695] veth1_macvtap: entered promiscuous mode
[  333.237458][T22695] batman_adv: batadv0: Interface activated: batadv_slave_0
[  333.253088][T22695] batman_adv: batadv0: Interface activated: batadv_slave_1
[  333.261266][T22695] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.265031][T22695] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.267647][T22695] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  333.273631][T22695] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  333.347406][ T7196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  333.352932][ T7196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.375285][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  333.377997][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.499013][T22836] tipc: Started in network mode
[  333.501692][T22836] tipc: Node identity ae75e0165437, cluster identity 4711
[  333.503955][T22836] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.518228][T22836] tipc: Disabling bearer <eth:syzkaller0>
[  333.875019][T22870] xt_limit: Overflow, try lower: 262144/524288
[  334.041239][   T54] Bluetooth: hci3: command tx timeout
[  334.152055][T22901] xt_addrtype: ipv6 does not support BROADCAST matching
[  334.194852][T22905] netlink: 'syz.2.5633': attribute type 20 has an invalid length.
[  334.197287][T22905] netlink: 'syz.2.5633': attribute type 21 has an invalid length.
[  334.218140][T22909] lo: entered allmulticast mode
[  334.219928][T22909] lo: left allmulticast mode
[  334.444966][T22937] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.847672][T22965] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[  334.944911][T22977] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  334.953765][T22974] __nla_validate_parse: 22 callbacks suppressed
[  334.953775][T22974] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5659'.
[  335.019166][T22981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5662'.
[  335.021903][T22983] netlink: 'syz.4.5663': attribute type 3 has an invalid length.
[  335.152245][T22992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5666'.
[  335.159211][T22992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5666'.
[  335.238129][T22997] syzkaller0: entered promiscuous mode
[  335.239979][T22997] syzkaller0: entered allmulticast mode
[  335.247860][T23000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5669'.
[  335.253300][T23000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5669'.
[  335.427198][T23010] netlink: 'syz.0.5673': attribute type 3 has an invalid length.
[  336.121579][   T54] Bluetooth: hci3: command tx timeout
[  336.695774][T23031] sctp: [Deprecated]: syz.0.5679 (pid 23031) Use of struct sctp_assoc_value in delayed_ack socket option.
[  336.695774][T23031] Use struct sctp_sack_info instead
[  336.833942][T23042] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5681'.
[  337.007726][T23051] netlink: 'syz.4.5684': attribute type 1 has an invalid length.
[  337.010228][T23051] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5684'.
[  337.014705][T23051] netlink: 97 bytes leftover after parsing attributes in process `syz.4.5684'.
[  338.200713][   T54] Bluetooth: hci3: command tx timeout
[  338.354111][T23071] netlink: 'syz.4.5693': attribute type 1 has an invalid length.
[  338.356548][T23071] netlink: 'syz.4.5693': attribute type 1 has an invalid length.
[  338.358826][T23071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5693'.
[  338.485508][T23087] netlink: 'syz.2.5699': attribute type 8 has an invalid length.
[  338.679390][T23102] netlink: 'syz.2.5703': attribute type 2 has an invalid length.
[  338.758255][T23108] sctp: [Deprecated]: syz.4.5707 (pid 23108) Use of struct sctp_assoc_value in delayed_ack socket option.
[  338.758255][T23108] Use struct sctp_sack_info instead
[  338.765814][T23107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  338.956301][T23120] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  339.359170][T23138] ip6tnl0: mtu greater than device maximum
[  339.385033][T23136] siw: device registration error -23
[  339.487222][T23150] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  339.534698][T23153] netlink: 'syz.0.5723': attribute type 10 has an invalid length.
[  339.583486][T23154] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  339.623917][T23162] netlink: 'syz.2.5730': attribute type 1 has an invalid length.
[  339.942595][T23185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.079385][T23193] netlink: 'syz.0.5742': attribute type 29 has an invalid length.
[  340.087887][T23193] netlink: 'syz.0.5742': attribute type 29 has an invalid length.
[  340.153831][T23198] openvswitch: netlink: Missing key (keys=40, expected=80)
[  340.157641][T23197] __nla_validate_parse: 11 callbacks suppressed
[  340.157653][T23197] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5743'.
[  340.166613][T23197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5743'.
[  340.247623][T23201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5743'.
[  340.255849][T23201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5743'.
[  340.259621][T23203] xt_bpf: check failed: parse error
[  340.285581][   T54] Bluetooth: hci3: command tx timeout
[  340.354630][T23209] netlink: 'syz.4.5747': attribute type 14 has an invalid length.
[  340.393914][T23212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5749'.
[  340.396731][T23212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5749'.
[  340.584005][T23227] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5753'.
[  340.642961][T23231] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  340.897838][T23256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5764'.
[  340.901036][T23256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5764'.
[  340.906530][T23251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5762'.
[  341.195175][T23283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  341.197404][T23283] IPv6: NLM_F_CREATE should be set when creating new route
[  341.655318][T23296] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  341.664061][T23296] tipc: Bearer <udp:s>: trying with adjusted priority
[  341.669525][T23296] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  342.116382][T23345] validate_nla: 10 callbacks suppressed
[  342.116401][T23345] netlink: 'syz.4.5796': attribute type 4 has an invalid length.
[  342.152030][T23346] netlink: 'syz.2.5794': attribute type 13 has an invalid length.
[  342.154414][T23346] netlink: 'syz.2.5794': attribute type 17 has an invalid length.
[  342.165512][T23348] x_tables: duplicate underflow at hook 1
[  342.206334][T23346] 8021q: adding VLAN 0 to HW filter on device team0
[  342.242723][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  342.311804][T23346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  342.475743][T23370] netlink: 'syz.0.5803': attribute type 4 has an invalid length.
[  342.995025][T23387] netlink: 'syz.2.5808': attribute type 1 has an invalid length.
[  343.463619][T23415] netlink: 'syz.2.5818': attribute type 1 has an invalid length.
[  343.622745][T23432] v: renamed from veth0_vlan
[  343.707664][T23439] wireguard0: entered promiscuous mode
[  343.709446][T23439] wireguard0: entered allmulticast mode
[  343.817348][T23458] ip6t_srh: unknown srh invflags 4000
[  343.907001][T23469] syzkaller1: entered promiscuous mode
[  343.908813][T23469] syzkaller1: entered allmulticast mode
[  343.962088][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  343.991910][T23475] syzkaller1: entered promiscuous mode
[  343.993596][T23475] syzkaller1: entered allmulticast mode
[  344.310132][T23499] netlink: 'syz.4.5847': attribute type 1 has an invalid length.
[  344.434977][T23513] netlink: 'syz.2.5852': attribute type 10 has an invalid length.
[  344.566251][T23524] netlink: 'syz.2.5858': attribute type 1 has an invalid length.
[  344.583384][T23524] 8021q: adding VLAN 0 to HW filter on device bond16
[  344.588274][T23524] batadv_slave_1: entered promiscuous mode
[  344.595297][T23524] bond16: (slave batadv_slave_1): Enslaving as an active interface with a down link
[  344.858883][T23557] netlink: 'syz.4.5867': attribute type 8 has an invalid length.
[  344.899015][T23560] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  345.680001][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  345.964893][T23627] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  346.041987][ T1231] block nbd1: Possible stuck request ffff888022a40000: control (read@0,1024B). Runtime 90 seconds
[  346.045206][ T1231] block nbd1: Possible stuck request ffff888022a40200: control (read@1024,1024B). Runtime 90 seconds
[  346.048386][ T1231] block nbd1: Possible stuck request ffff888022a40400: control (read@2048,1024B). Runtime 90 seconds
[  346.051842][ T1231] block nbd1: Possible stuck request ffff888022a40600: control (read@3072,1024B). Runtime 90 seconds
[  346.109057][T23635] ieee802154 phy1 wpan1: encryption failed: -22
[  346.442117][T23654] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  346.455640][T23654] __nla_validate_parse: 25 callbacks suppressed
[  346.455656][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5900'.
[  346.791654][T23678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5911'.
[  346.794390][T23678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5911'.
[  346.852172][T23687] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5914'.
[  346.897637][T23695] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5916'.
[  346.903248][T23696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5917'.
[  347.074554][T23714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5922'.
[  347.079267][T23714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5922'.
[  347.156346][T23720] validate_nla: 2 callbacks suppressed
[  347.156356][T23720] netlink: 'syz.0.5925': attribute type 21 has an invalid length.
[  347.160932][T23720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5925'.
[  347.398782][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  347.506308][T23741] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5930'.
[  348.179911][T23792] netlink: 'syz.4.5948': attribute type 1 has an invalid length.
[  348.452498][T23804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.507357][T23804] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.573769][T23804] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.622328][T23824] netlink: 'syz.2.5960': attribute type 1 has an invalid length.
[  348.660026][T23804] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.793653][T23804] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.800366][T23834] tap0: tun_chr_ioctl cmd 1074025677
[  348.803837][T23834] tap0: linktype set to 780
[  348.823824][T23804] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.834253][T23804] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.842206][T23804] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.936619][T23846] netlink: 'syz.0.5969': attribute type 1 has an invalid length.
[  348.961632][T23846] bond22: (slave bridge11): making interface the new active one
[  348.964524][T23846] bond22: (slave bridge11): Enslaving as an active interface with an up link
[  349.015392][T23855] netlink: 'syz.2.5972': attribute type 1 has an invalid length.
[  349.218312][T23874] ieee802154 phy1 wpan1: encryption failed: -22
[  349.293857][T23882] ipvlan2: entered promiscuous mode
[  349.308468][T23882] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  349.402398][T23898] netlink: 'syz.4.5987': attribute type 3 has an invalid length.
[  349.455439][T23900] pimreg: left allmulticast mode
[  349.508818][T23900] 8021q: adding VLAN 0 to HW filter on device team0
[  349.512939][T23900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  349.530847][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  349.608610][T23921] netlink: 'syz.2.5995': attribute type 1 has an invalid length.
[  349.642612][T23925] netlink: 'syz.4.5997': attribute type 3 has an invalid length.
[  349.644977][T23925] netlink: 'syz.4.5997': attribute type 4 has an invalid length.
[  349.722853][   T54] Bluetooth: hci3: command tx timeout
[  349.902803][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  349.956503][T23950] netlink: 'syz.2.6005': attribute type 4 has an invalid length.
[  350.396588][T23970] erspan0: left promiscuous mode
[  350.414656][T23970] team0: left promiscuous mode
[  350.416228][T23970] team0: left allmulticast mode
[  350.418072][T23970] 8021q: adding VLAN 0 to HW filter on device team0
[  350.423846][T23970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  350.452472][T23970] C speed is unknown, defaulting to 1000
[  350.452982][ T5843] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  350.457007][ T5843] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  350.482278][ T5835] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  350.964793][ T5835] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  351.481081][ T5835] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  351.980723][T23994] __nla_validate_parse: 43 callbacks suppressed
[  351.980733][T23994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6023'.
[  351.985806][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  352.049180][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6027'.
[  352.073345][T24009] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6028'.
[  352.085183][T24011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6029'.
[  352.087998][T24011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6029'.
[  352.170186][T24017] validate_nla: 4 callbacks suppressed
[  352.170198][T24017] netlink: 'syz.4.6032': attribute type 1 has an invalid length.
[  352.183535][T24017] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6032'.
[  352.237411][T24024] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6035'.
[  352.275633][T24028] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6037'.
[  352.295025][T24029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6036'.
[  352.297770][T24029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6036'.
[  352.301050][T24029] netlink: 'syz.4.6036': attribute type 4 has an invalid length.
[  352.396572][T24033] nbd: nbd0 already in use
[  352.517216][T24049] netlink: 'syz.0.6044': attribute type 4 has an invalid length.
[  352.754214][T24068] netlink: 'syz.0.6053': attribute type 3 has an invalid length.
[  352.881620][T24079] netlink: 'syz.0.6058': attribute type 21 has an invalid length.
[  352.886327][T24079] netlink: 'syz.0.6058': attribute type 1 has an invalid length.
[  352.906410][T24076] netlink: 'syz.4.6057': attribute type 7 has an invalid length.
[  352.908894][T24076] netlink: 'syz.4.6057': attribute type 8 has an invalid length.
[  352.928686][T24076] netlink: 'syz.4.6057': attribute type 83 has an invalid length.
[  353.003072][T24003] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  353.009425][T24003] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  353.155052][T24095] netlink: 'syz.0.6062': attribute type 3 has an invalid length.
[  353.351780][T22789] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  353.565594][T24130] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  353.833453][T24162] bridge0: port 1(ipvlan4) entered blocking state
[  353.835594][T24162] bridge0: port 1(ipvlan4) entered disabled state
[  353.837700][T24162] ipvlan4: entered allmulticast mode
[  353.839376][T24162] bridge0: entered allmulticast mode
[  353.846795][T24162] ipvlan4: left allmulticast mode
[  353.848455][T24162] bridge0: left allmulticast mode
[  354.760512][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  355.613873][T24291] ip6tnl1: entered promiscuous mode
[  355.615833][T24291] ip6tnl1: entered allmulticast mode
[  355.690084][T24300] xt_ecn: cannot match TCP bits for non-tcp packets
[  356.332334][T24346] 8021q: adding VLAN 0 to HW filter on device bond23
[  356.352759][T24346] veth23: entered promiscuous mode
[  356.357248][T24346] bond23: (slave veth23): Enslaving as an active interface with a down link
[  356.390592][T24346] erspan0: entered allmulticast mode
[  356.633797][T24374] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  356.636193][T24374] batman_adv: batadv0: Removing interface: batadv_slave_0
[  356.641670][T24374] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.647121][T24374] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.856262][T24392] gtp0: entered promiscuous mode
[  356.857870][T24392] gtp0: entered allmulticast mode
[  357.080149][T24413] __nla_validate_parse: 47 callbacks suppressed
[  357.080160][T24413] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6169'.
[  357.090693][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  357.898304][T24436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6177'.
[  357.996048][T24444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6181'.
[  357.998793][T24444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6181'.
[  358.038308][T24447] validate_nla: 21 callbacks suppressed
[  358.038318][T24447] netlink: 'syz.4.6183': attribute type 3 has an invalid length.
[  358.088216][T24452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6185'.
[  358.093251][T24452] netlink: 'syz.2.6185': attribute type 1 has an invalid length.
[  358.095618][T24452] netlink: 'syz.2.6185': attribute type 2 has an invalid length.
[  358.098002][T24452] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6185'.
[  358.196337][T24460] SET target dimension over the limit!
[  358.199740][T24462] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6189'.
[  358.203612][T24463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6190'.
[  358.206548][T24463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6190'.
[  358.255126][T24465] netlink: 'syz.0.6192': attribute type 3 has an invalid length.
[  358.258266][T24465] netlink: 'syz.0.6192': attribute type 4 has an invalid length.
[  358.273489][T24471] bpq0: left promiscuous mode
[  358.275533][T24471] bpq0: left allmulticast mode
[  358.347405][T24479] tipc: Resetting bearer <eth:syzkaller0>
[  358.351568][T24479] bond22: (slave bridge11): Releasing active interface
[  358.358072][T24479] bond23: (slave veth23): Releasing active interface
[  358.371498][ T5890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  358.384404][T24482] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6195'.
[  358.455633][T24489] unknown channel width for channel at 909000KHz?
[  358.458568][T24489] unknown channel width for channel at 909000KHz?
[  358.463826][T24489] unknown channel width for channel at 909000KHz?
[  358.582398][T24495] bond16: (slave batadv_slave_1): Releasing active interface
[  358.632541][ T5890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  358.694956][T24513] netlink: 'syz.2.6202': attribute type 1 has an invalid length.
[  358.856087][T24525] bond0: entered promiscuous mode
[  359.010034][T24524] bond0: left promiscuous mode
[  359.165663][T24551] syzkaller0: entered promiscuous mode
[  359.167448][T24551] syzkaller0: entered allmulticast mode
[  360.321526][T24565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.324371][T24566] syzkaller0: entered promiscuous mode
[  360.326068][T24566] syzkaller0: entered allmulticast mode
[  360.331081][T24563] tipc: Resetting bearer <eth:syzkaller0>
[  360.334587][T24562] tipc: Resetting bearer <eth:syzkaller0>
[  360.351035][T24562] tipc: Disabling bearer <eth:syzkaller0>
[  360.446425][T24584] netlink: 'syz.4.6213': attribute type 2 has an invalid length.
[  360.595838][T24608] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  360.616428][T24611] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  360.739536][T24636] netlink: 'syz.0.6227': attribute type 1 has an invalid length.
[  360.959963][T24661] macsec1: entered promiscuous mode
[  360.962231][T24661] macsec1: entered allmulticast mode
[  361.056239][T24670] netlink: 'syz.4.6237': attribute type 1 has an invalid length.
[  361.066174][T24674] netlink: 'syz.2.6239': attribute type 1 has an invalid length.
[  361.130573][T24672] nbd2: detected capacity change from 0 to 127
[  361.135004][T12819] block nbd2: Receive control failed (result -104)
[  361.259122][T24684] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10
[  361.417387][T24701] C speed is unknown, defaulting to 1000
[  361.586930][T24723] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  362.032669][T24744] 8021q: adding VLAN 0 to HW filter on device bond17
[  362.045096][T24744] bond17: (slave bridge17): making interface the new active one
[  362.048400][T24744] bond17: (slave bridge17): Enslaving as an active interface with an up link
[  362.062717][T24744] macvlan0: entered promiscuous mode
[  362.064506][T24744] macvlan0: entered allmulticast mode
[  362.066710][T24744] bond17: entered promiscuous mode
[  362.068466][T24744] bridge17: entered promiscuous mode
[  362.071135][T24744] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  362.073803][T24744] bond17: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  362.079130][T24744] bond17: left promiscuous mode
[  362.080982][T24744] bridge17: left promiscuous mode
[  362.392423][T24770] __nla_validate_parse: 20 callbacks suppressed
[  362.392434][T24770] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6270'.
[  362.524556][T24775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6272'.
[  362.527565][T24775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6272'.
[  362.589189][T24784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  362.591663][T24784] IPv6: NLM_F_CREATE should be set when creating new route
[  362.599973][T24777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6271'.
[  362.685163][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6276'.
[  362.782018][T24801] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6280'.
[  362.787634][T24803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6282'.
[  362.792165][T24803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6282'.
[  362.927142][T24820] C speed is unknown, defaulting to 1000
[  363.062376][T24839] 8021q: VLANs not supported on wg1
[  363.088069][T24847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6292'.
[  363.096626][T24847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6292'.
[  363.107191][T24849] validate_nla: 9 callbacks suppressed
[  363.107200][T24849] netlink: 'syz.4.6293': attribute type 1 has an invalid length.
[  363.112218][T24849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  363.482264][T24885] netlink: 'syz.4.6306': attribute type 1 has an invalid length.
[  363.578521][T24889] C speed is unknown, defaulting to 1000
[  363.960600][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  364.071603][T24922] netlink: 'syz.0.6316': attribute type 1 has an invalid length.
[  364.683585][T24951] netem: incorrect gi model size
[  364.685437][T24951] netem: change failed
[  364.700791][T24955] netlink: 'syz.2.6325': attribute type 1 has an invalid length.
[  364.767007][T24963] vxcan1: entered allmulticast mode
[  364.770144][T24963] vxcan1: left allmulticast mode
[  365.137692][T25009] bridge0: port 1(ipvlan3) entered blocking state
[  365.139729][T25009] bridge0: port 1(ipvlan3) entered disabled state
[  365.150544][T25009] ipvlan3: entered allmulticast mode
[  365.152143][T25009] bridge0: entered allmulticast mode
[  365.154810][T25009] ipvlan3: left allmulticast mode
[  365.156275][T25009] bridge0: left allmulticast mode
[  365.159709][T25015] can: request_module (can-proto-3) failed.
[  365.195502][T25007] C speed is unknown, defaulting to 1000
[  365.212325][T25020] xt_l2tp: v2 tid > 0xffff: 4294967295
[  365.890408][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  366.029709][T25080] Bluetooth: MGMT ver 1.23
[  366.613974][T25111] netlink: 'syz.0.6374': attribute type 1 has an invalid length.
[  366.617925][T25111] netlink: 'syz.0.6374': attribute type 1 has an invalid length.
[  366.627787][T25111] netlink: 'syz.0.6374': attribute type 2 has an invalid length.
[  366.683516][T25120] netlink: 'syz.2.6377': attribute type 1 has an invalid length.
[  366.766050][T25126] ieee802154 phy1 wpan1: encryption failed: -22
[  366.950591][T25138] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  366.981483][T25140] netlink: 'syz.0.6385': attribute type 1 has an invalid length.
[  367.119596][T25148] netlink: 'syz.0.6388': attribute type 5 has an invalid length.
[  367.641754][T25172] x_tables: duplicate underflow at hook 2
[  367.652324][T25172] __nla_validate_parse: 33 callbacks suppressed
[  367.652332][T25172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6398'.
[  367.673773][T25172] syzkaller1: entered allmulticast mode
[  367.693167][T25174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6399'.
[  367.696198][T25174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6399'.
[  367.751523][T25177] xt_cgroup: xt_cgroup: no path or classid specified
[  368.061843][T25200] xt_CONNSECMARK: invalid mode: 254
[  368.200055][T25215] sctp: [Deprecated]: syz.2.6413 (pid 25215) Use of int in max_burst socket option.
[  368.200055][T25215] Use struct sctp_assoc_value instead
[  368.362655][T25237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6419'.
[  368.365524][T25237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6419'.
[  368.395807][T25240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6420'.
[  368.423701][T25243] validate_nla: 1 callbacks suppressed
[  368.423712][T25243] netlink: 'syz.2.6422': attribute type 30 has an invalid length.
[  368.429091][T25243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6422'.
[  368.461598][T25245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6423'.
[  368.528395][T25254] netlink: 'syz.2.6426': attribute type 1 has an invalid length.
[  368.537300][T25254] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6426'.
[  368.546239][T25254] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  368.557899][T25256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6427'.
[  369.388857][T25269] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  369.393555][T25269] syzkaller0: entered promiscuous mode
[  369.395542][T25269] syzkaller0: entered allmulticast mode
[  369.409024][T25269] tipc: Resetting bearer <eth:syzkaller0>
[  369.602465][T25284] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.635065][T25284] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.680837][T25284] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.721264][T25284] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.777767][T25284] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  369.786606][T25284] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  369.794369][T25284] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  369.803371][T25284] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  369.835694][T25292] netlink: 'syz.0.6439': attribute type 1 has an invalid length.
[  369.898674][T25296] netlink: 'syz.0.6440': attribute type 5 has an invalid length.
[  370.421729][ T5890] tipc: Node number set to 686212291
[  370.426701][T25308] netlink: 'syz.2.6446': attribute type 1 has an invalid length.
[  371.641607][T25345] netlink: 'syz.2.6458': attribute type 1 has an invalid length.
[  371.745100][T25349] sit4: entered promiscuous mode
[  371.820952][T25357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.834633][T25355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.850895][ T5835] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  371.938946][T25369] netlink: 'syz.2.6466': attribute type 1 has an invalid length.
[  371.981586][T25372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.985049][T25372] syzkaller0: entered promiscuous mode
[  371.988234][T25372] syzkaller0: entered allmulticast mode
[  372.008461][T25372] netlink: 'syz.4.6467': attribute type 5 has an invalid length.
[  372.034710][T25372] tipc: Resetting bearer <eth:syzkaller0>
[  372.039477][T25371] tipc: Resetting bearer <eth:syzkaller0>
[  372.052460][T25371] tipc: Disabling bearer <eth:syzkaller0>
[  372.119052][T25381] netlink: 'syz.4.6471': attribute type 7 has an invalid length.
[  372.150131][T25385] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  372.351653][T25411] nbd: must specify a size in bytes for the device
[  372.515606][T25427] netlink: 'syz.0.6490': attribute type 3 has an invalid length.
[  372.646864][T25436] "syz.4.6489" (25436) uses obsolete ecb(arc4) skcipher
[  372.732307][T25447] __nla_validate_parse: 24 callbacks suppressed
[  372.732318][T25447] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6495'.
[  372.760612][T22788] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  372.835394][T25449] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  373.476847][T25461] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  373.565111][T25471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6506'.
[  373.634058][T25476] validate_nla: 2 callbacks suppressed
[  373.634069][T25476] netlink: 'syz.0.6508': attribute type 9 has an invalid length.
[  373.686194][T25480] vlan3: entered promiscuous mode
[  373.688209][T25480] bridge0: entered promiscuous mode
[  373.696835][T25480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6509'.
[  373.703976][T25480] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6509'.
[  373.745658][T25484] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6511'.
[  373.802863][T25486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6512'.
[  373.862604][T25491] netlink: 'syz.2.6514': attribute type 1 has an invalid length.
[  373.878931][T25491] 8021q: adding VLAN 0 to HW filter on device bond18
[  373.902974][T25491] bond18: entered promiscuous mode
[  373.908668][T25491] netlink: 'syz.2.6514': attribute type 2 has an invalid length.
[  373.911294][T25491] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6514'.
[  373.993180][T25508] nftables ruleset with unbound chain
[  374.232545][T25530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  374.253576][T25542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6525'.
[  374.312894][T25545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6526'.
[  374.407926][T25547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.414725][T25547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6527'.
[  374.422611][T25547] siw: device registration error -23
[  374.529862][T25556] bond17: (slave bridge17): Releasing active interface
[  374.561128][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  374.793122][T25576] netlink: 'syz.0.6537': attribute type 1 has an invalid length.
[  375.000946][T25452] Bluetooth: hci2: command 0x0405 tx timeout
[  375.065585][T25607] netlink: 'syz.2.6547': attribute type 1 has an invalid length.
[  375.177364][T25615] xt_TPROXY: Can be used only with -p tcp or -p udp
[  375.320555][T25635] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  375.332376][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  375.469197][T25648] C speed is unknown, defaulting to 1000
[  375.883089][T25679] netlink: 'syz.2.6569': attribute type 9 has an invalid length.
[  375.898244][T25679] netlink: 'syz.2.6569': attribute type 6 has an invalid length.
[  376.121685][ T1231] block nbd1: Possible stuck request ffff888022a40000: control (read@0,1024B). Runtime 120 seconds
[  376.125022][ T1231] block nbd1: Possible stuck request ffff888022a40200: control (read@1024,1024B). Runtime 120 seconds
[  376.128417][ T1231] block nbd1: Possible stuck request ffff888022a40400: control (read@2048,1024B). Runtime 120 seconds
[  376.131730][ T1231] block nbd1: Possible stuck request ffff888022a40600: control (read@3072,1024B). Runtime 120 seconds
[  376.320386][T25694] netlink: 'syz.0.6574': attribute type 1 has an invalid length.
[  376.322856][T25694] block nbd3: Unsupported socket: shutdown callout must be supported.
[  376.478770][T25696] gtp2: entered promiscuous mode
[  376.480785][T25696] gtp2: entered allmulticast mode
[  376.514701][T25700] netlink: 'syz.0.6576': attribute type 1 has an invalid length.
[  376.800151][T25723] IPVS: length: 8 != 446622349272
[  376.989683][T25739] netlink: 'syz.2.6585': attribute type 1 has an invalid length.
[  378.009167][T25763] __nla_validate_parse: 25 callbacks suppressed
[  378.009182][T25763] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6593'.
[  378.047451][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  378.380913][T25779] block nbd3: server does not support multiple connections per device.
[  378.385421][T25779] block nbd3: shutting down sockets
[  378.416553][T25791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6601'.
[  378.666146][T25823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6610'.
[  378.669614][T25823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6610'.
[  378.692943][T25825] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  378.708041][T25827] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6612'.
[  378.883409][T25841] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6618'.
[  378.921933][T25851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6619'.
[  378.927579][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6619'.
[  378.942718][T25842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6617'.
[  378.965391][T25853] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6620'.
[  379.912831][T25906] validate_nla: 2 callbacks suppressed
[  379.912850][T25906] netlink: 'syz.2.6633': attribute type 1 has an invalid length.
[  380.133329][T25910] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  380.203146][T25920] netlink: 'syz.4.6638': attribute type 21 has an invalid length.
[  380.272787][T25924] wg1 speed is unknown, defaulting to 1000
[  380.274630][T25924] wg1 speed is unknown, defaulting to 1000
[  380.277426][T25924] wg1 speed is unknown, defaulting to 1000
[  380.298017][T25924] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  380.331082][T25924] wg1 speed is unknown, defaulting to 1000
[  380.333937][T25924] wg1 speed is unknown, defaulting to 1000
[  380.339687][T25924] wg1 speed is unknown, defaulting to 1000
[  380.353820][T25924] wg1 speed is unknown, defaulting to 1000
[  380.356567][T25924] wg1 speed is unknown, defaulting to 1000
[  380.531472][T25958] tipc: Failed to remove unknown binding: 66,1,1/686212291:3621190089/3621190091
[  380.535981][T25958] tipc: Failed to remove unknown binding: 66,1,1/686212291:3621190089/3621190091
[  380.539076][T25958] tipc: Failed to remove unknown binding: 66,1,1/686212291:3621190089/3621190091
[  380.735873][T25981] ipvlan4: entered promiscuous mode
[  380.739641][T25981] smc: net device bond0 applied user defined pnetid SYZ2
[  380.759926][T25981] ipvlan5: entered promiscuous mode
[  380.826309][T25993] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  381.006066][T26021] netlink: del zone limit has 8 unknown bytes
[  381.082952][T26034] netlink: 'syz.4.6675': attribute type 1 has an invalid length.
[  381.086177][T26029] C speed is unknown, defaulting to 1000
[  381.223606][T26039] C speed is unknown, defaulting to 1000
[  381.224582][T26029] wg1 speed is unknown, defaulting to 1000
[  381.391652][T26039] wg1 speed is unknown, defaulting to 1000
[  381.614617][T26065] netlink: 'syz.0.6682': attribute type 1 has an invalid length.
[  381.743273][T26074] SET target dimension over the limit!
[  381.807616][T26082] netlink: 'syz.2.6688': attribute type 1 has an invalid length.
[  381.924274][T26091] macvlan0: entered allmulticast mode
[  381.926990][T26091] netlink: 'syz.0.6691': attribute type 1 has an invalid length.
[  381.929754][T26091] netlink: 'syz.0.6691': attribute type 2 has an invalid length.
[  381.984800][T26097] ieee802154 phy1 wpan1: encryption failed: -22
[  382.034540][T26106] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  382.037540][T26106] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  382.095464][T26112] xt_CT: No such helper "snmp_trap"
[  382.520647][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  382.654361][T26129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.657113][T26129] syzkaller0: entered promiscuous mode
[  382.658870][T26129] syzkaller0: entered allmulticast mode
[  382.675124][T26129] tipc: Resetting bearer <eth:syzkaller0>
[  382.679539][T26128] tipc: Resetting bearer <eth:syzkaller0>
[  382.695752][T26128] tipc: Disabling bearer <eth:syzkaller0>
[  383.032848][T26156] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  383.136329][T26173] netlink: 'syz.4.6717': attribute type 1 has an invalid length.
[  383.139097][T26173] __nla_validate_parse: 28 callbacks suppressed
[  383.139105][T26173] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6717'.
[  383.170798][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  383.303736][T26195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.309584][T26195] syzkaller0: entered promiscuous mode
[  383.313261][T26195] syzkaller0: entered allmulticast mode
[  383.366520][T26195] tipc: Resetting bearer <eth:syzkaller0>
[  383.372551][T26194] tipc: Resetting bearer <eth:syzkaller0>
[  383.385556][T26194] tipc: Disabling bearer <eth:syzkaller0>
[  383.418866][T26204] netlink: 'syz.0.6726': attribute type 1 has an invalid length.
[  383.432726][T26204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6726'.
[  383.743497][T26238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6737'.
[  383.746595][T26240] Cannot find set identified by id 0 to match
[  383.748619][T26238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6737'.
[  383.789721][T26244] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  383.853300][T26251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6743'.
[  383.859952][T26251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6743'.
[  383.967679][T26260] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6745'.
[  383.995090][T26263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6746'.
[  383.998648][T26263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6746'.
[  384.008479][T26263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6746'.
[  384.029918][T26267] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  384.044829][T26269] bpq0: entered promiscuous mode
[  384.059519][T26269] pim6reg: entered allmulticast mode
[  384.064919][T26269] pim6reg: left allmulticast mode
[  384.206794][T26274] netlink: 'syz.0.6747': attribute type 1 has an invalid length.
[  384.943561][T26301] can: request_module (can-proto-3) failed.
[  385.095256][T26315] validate_nla: 1 callbacks suppressed
[  385.095268][T26315] netlink: 'syz.2.6761': attribute type 1 has an invalid length.
[  385.119179][T26315] xt_CT: No such helper "snmp"
[  385.478524][T26331] xt_hashlimit: size too large, truncated to 1048576
[  385.585451][T26349] bond0: entered promiscuous mode
[  385.587048][T26349] bond_slave_0: entered promiscuous mode
[  385.588902][T26349] bond_slave_1: entered promiscuous mode
[  386.462340][T26375] x_tables: unsorted underflow at hook 4
[  386.605633][T26379] bridge_slave_0: left promiscuous mode
[  386.612515][T26379] geneve3: left promiscuous mode
[  386.620110][T26379] veth21: left promiscuous mode
[  386.631025][T26379] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  386.633313][T26379] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  386.635456][T26379] macsec0: left promiscuous mode
[  386.644236][T26379] ipvlan2: left promiscuous mode
[  386.652850][T26379] tipc: Resetting bearer <eth:syzkaller0>
[  386.656981][T26379] syzkaller0: left promiscuous mode
[  386.673579][T26379] sit4: left promiscuous mode
[  386.695244][T26379] bond18: left promiscuous mode
[  387.032974][T26408] netlink: 'syz.0.6788': attribute type 1 has an invalid length.
[  387.265880][T26421] netlink: 'syz.4.6792': attribute type 1 has an invalid length.
[  388.125102][T26500] 8021q: adding VLAN 0 to HW filter on device team0
[  388.135299][T26500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  388.141162][ T5835] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  388.199017][T26514] __nla_validate_parse: 15 callbacks suppressed
[  388.199029][T26514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6821'.
[  388.260095][T26517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6822'.
[  388.272231][T26517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6822'.
[  388.423028][T26536] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  388.426386][T26536] syzkaller0: entered promiscuous mode
[  388.487123][T26544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6830'.
[  388.489933][T26544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6830'.
[  388.531747][T26547] netlink: 'syz.0.6829': attribute type 1 has an invalid length.
[  388.547852][T26547] 8021q: adding VLAN 0 to HW filter on device bond26
[  388.552048][T26547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6829'.
[  388.668400][T26552] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6832'.
[  388.671883][T26552] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6832'.
[  388.674825][T26552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6832'.
[  388.678136][T26552] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6832'.
[  388.734846][T26560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.090736][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  389.200968][ T5835] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  389.342782][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  389.690640][T26569] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  389.709775][T26578] pim6reg1: entered promiscuous mode
[  389.719720][T26578] pim6reg1: entered allmulticast mode
[  390.120796][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  390.123634][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  390.220645][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  390.280770][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  390.400447][T26607] netlink: 'syz.0.6846': attribute type 21 has an invalid length.
[  390.403293][T26607] netlink: 'syz.0.6846': attribute type 5 has an invalid length.
[  390.557957][T26612] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  390.596398][T26612] C speed is unknown, defaulting to 1000
[  390.714705][T26612] wg1 speed is unknown, defaulting to 1000
[  391.158460][T26643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.201142][T26648] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.204615][T26648] syzkaller0: entered promiscuous mode
[  391.206385][T26648] syzkaller0: entered allmulticast mode
[  391.214682][T26648] tipc: Resetting bearer <eth:syzkaller0>
[  391.218926][T26648] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  391.223746][T26647] tipc: Resetting bearer <eth:syzkaller0>
[  391.237375][T26647] tipc: Disabling bearer <eth:syzkaller0>
[  391.376647][T26656] openvswitch: netlink: IPv4 tun info is not correct
[  392.167606][T26685] bridge0: entered allmulticast mode
[  392.305457][T26697] netlink: 'syz.2.6874': attribute type 13 has an invalid length.
[  392.368032][T26702] 8021q: adding VLAN 0 to HW filter on device bond27
[  392.573882][T26723] netlink: 'syz.4.6881': attribute type 4 has an invalid length.
[  392.680206][T26735] netlink: 'syz.4.6883': attribute type 72 has an invalid length.
[  392.758645][T26742] sctp: [Deprecated]: syz.4.6887 (pid 26742) Use of int in maxseg socket option.
[  392.758645][T26742] Use struct sctp_assoc_value instead
[  392.767060][T26744] netlink: 'syz.2.6888': attribute type 1 has an invalid length.
[  392.813712][T26744] 8021q: adding VLAN 0 to HW filter on device bond19
[  392.818865][T26750] netlink: 'syz.4.6889': attribute type 1 has an invalid length.
[  392.829730][T26751] bond19: (slave veth25): Enslaving as an active interface with a down link
[  392.849632][ T9610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  392.852887][ T9610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  392.982865][T26763] netlink: 'syz.4.6892': attribute type 1 has an invalid length.
[  393.039789][T26767] 0: renamed from hsr_slave_1 (while UP)
[  393.046001][T26767] 0: entered allmulticast mode
[  393.048224][T26767] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  393.303871][T26785] netlink: 'syz.4.6898': attribute type 12 has an invalid length.
[  393.306454][T26785] __nla_validate_parse: 44 callbacks suppressed
[  393.306463][T26785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6898'.
[  393.312604][T26785] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  393.644162][T26804] netlink: 'syz.4.6903': attribute type 1 has an invalid length.
[  393.647016][T26804] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6903'.
[  394.440535][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  395.465707][T26842] sctp: [Deprecated]: syz.4.6913 (pid 26842) Use of struct sctp_assoc_value in delayed_ack socket option.
[  395.465707][T26842] Use struct sctp_sack_info instead
[  395.716768][T26851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6915'.
[  395.737588][T26851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6915'.
[  395.748614][T26851] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  395.752436][T26851] team0: Device ipvlan1 is already an upper device of the team interface
[  395.844437][T26854] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6916'.
[  395.914217][T26860] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  396.183661][T26877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6926'.
[  396.186534][T26877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6926'.
[  396.194670][T26877] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  396.197219][T26877] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  396.199721][T26877] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  396.203441][T26877] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  396.215105][T26879] netlink: 'syz.2.6927': attribute type 1 has an invalid length.
[  396.217450][T26879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6927'.
[  396.243791][T26884] netlink: 'syz.4.6928': attribute type 3 has an invalid length.
[  396.246221][T26884] netlink: 'syz.4.6928': attribute type 4 has an invalid length.
[  396.248530][T26884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6928'.
[  396.443214][T26903] netlink: 'syz.4.6937': attribute type 1 has an invalid length.
[  396.445754][T26903] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6937'.
[  396.596838][T26914] smc: net device bond0 applied user defined pnetid SYZ2
[  397.901294][    C1] ------------[ cut here ]------------
[  397.903569][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  397.907744][    C1] WARNING: CPU: 1 PID: 26948 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  397.910973][    C1] Modules linked in:
[  397.912780][    C1] CPU: 1 UID: 0 PID: 26948 Comm: syz.2.6951 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  397.918611][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  397.922642][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  397.925110][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 00 2c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 32 9a 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  397.932758][    C1] RSP: 0018:ffffc900001e0538 EFLAGS: 00010246
[  397.935420][    C1] RAX: 5f621ff454fa8100 RBX: 000000000000000c RCX: ffff8880214f3980
[  397.938576][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  397.941798][    C1] RBP: dffffc0000000000 R08: ffff888136624293 R09: 1ffff11026cc4852
[  397.944959][    C1] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: ffff88810ec0fb28
[  397.948051][    C1] R13: 0000000000000000 R14: ffff888123640e40 R15: ffff8881236430d8
[  397.950634][    C1] FS:  00007ffaaf9f66c0(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[  397.953375][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  397.955444][    C1] CR2: 00007f79a5662348 CR3: 0000000127216000 CR4: 00000000000006f0
[  397.957932][    C1] Call Trace:
[  397.959059][    C1]  <IRQ>
[  397.959986][    C1]  rate_control_send_low+0x194/0x7a0
[  397.961726][    C1]  rate_control_get_rate+0x20b/0x5d0
[  397.963401][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  397.965207][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  397.967175][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  397.968797][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  397.970593][    C1]  ieee80211_beacon_get_ap+0x1478/0x19e0
[  397.972299][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  397.974211][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  397.976038][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  397.977750][    C1]  __ieee80211_beacon_get+0x1179/0x17b0
[  397.979459][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  397.981217][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  397.982871][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  397.984710][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  397.986411][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  397.988562][    C1]  __iterate_interfaces+0x2ab/0x590
[  397.990131][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  397.992044][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  397.994217][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  397.996048][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  397.998128][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  397.999719][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  398.001621][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  398.003229][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  398.004899][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  398.006658][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  398.008209][    C1]  handle_softirqs+0x286/0x870
[  398.009688][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  398.011270][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  398.012920][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  398.014588][    C1]  __irq_exit_rcu+0xca/0x1f0
[  398.016047][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  398.017678][    C1]  irq_exit_rcu+0x9/0x30
[  398.019029][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  398.020862][    C1]  </IRQ>
[  398.021788][    C1]  <TASK>
[  398.022723][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  398.024565][    C1] RIP: 0010:__sanitizer_cov_trace_switch+0x8f/0x130
[  398.026471][    C1] Code: 00 00 00 41 57 41 56 41 54 53 48 8b 54 24 20 65 4c 8b 04 25 08 a0 9f 92 45 31 c9 eb 08 49 ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 <65> 44 8b 1d d9 6d df 10 41 81 e3 00 01 ff 00 74 13 41 81 fb 00 01
[  398.032463][    C1] RSP: 0018:ffffc9000680eca0 EFLAGS: 00000216
[  398.034350][    C1] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000005
[  398.036845][    C1] RDX: ffffffff81c20095 RSI: ffffffff8e194720 RDI: 0000000000000004
[  398.039275][    C1] RBP: 0000005ca543aafc R08: ffff8880214f3980 R09: 000000000000001a
[  398.041736][    C1] R10: 000000000000001a R11: 0000000000000002 R12: dffffc0000000000
[  398.044197][    C1] R13: ffff88810069d010 R14: ffff88810069d7f4 R15: 00000000001057e4
[  398.046662][    C1]  ? rb_event_length+0x45/0x400
[  398.048207][    C1]  rb_event_length+0x45/0x400
[  398.049673][    C1]  rb_read_data_buffer+0x438/0x580
[  398.051303][    C1]  check_buffer+0x28a/0x750
[  398.052706][    C1]  __rb_reserve_next+0x592/0xdb0
[  398.054293][    C1]  ring_buffer_lock_reserve+0xbb5/0x1010
[  398.056026][    C1]  ? rb_commit+0x781/0x7e0
[  398.057419][    C1]  trace_event_buffer_lock_reserve+0x1d0/0x6f0
[  398.059331][    C1]  ? tracing_gen_ctx_irq_test+0xc6/0x160
[  398.061084][    C1]  trace_event_buffer_reserve+0x248/0x340
[  398.062826][    C1]  ? __pfx_trace_event_buffer_reserve+0x10/0x10
[  398.064738][    C1]  trace_event_raw_event_bpf_trace_printk+0x100/0x260
[  398.066840][    C1]  ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10
[  398.069127][    C1]  ? __asan_memcpy+0x40/0x70
[  398.070652][    C1]  ? bstr_printf+0xa7c/0xb70
[  398.072104][    C1]  trace_bpf_trace_printk+0x170/0x1d0
[  398.073755][    C1]  bpf_trace_printk+0x11e/0x190
[  398.075292][    C1]  ? __lock_acquire+0xab9/0xd20
[  398.076803][    C1]  ? __pfx_bpf_trace_printk+0x10/0x10
[  398.078470][    C1]  ? bpf_trace_run2+0x186/0x4b0
[  398.080004][    C1]  bpf_prog_9e1c00255e17e72e+0x39/0x3f
[  398.081792][    C1]  bpf_trace_run2+0x284/0x4b0
[  398.083213][    C1]  ? bpf_trace_run2+0x186/0x4b0
[  398.084715][    C1]  ? __pfx_bpf_trace_run2+0x10/0x10
[  398.086330][    C1]  ? __bpf_trace_contention_begin+0xcd/0x130
[  398.088204][    C1]  __bpf_trace_contention_begin+0xdc/0x130
[  398.090032][    C1]  ? __pfx___bpf_trace_contention_begin+0x10/0x10
[  398.092094][    C1]  ? unix_stream_read_generic+0x1784/0x2350
[  398.093937][    C1]  ? unix_stream_read_generic+0x1784/0x2350
[  398.095820][    C1]  ? __lock_acquire+0xab9/0xd20
[  398.097357][    C1]  trace_contention_begin+0xf4/0x120
[  398.099010][    C1]  __mutex_lock+0x193/0xe80
[  398.100468][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  398.102123][    C1]  ? unix_stream_read_generic+0x1784/0x2350
[  398.103937][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  398.105489][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  398.107226][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.108811][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  398.110471][    C1]  unix_stream_read_generic+0x1784/0x2350
[  398.112252][    C1]  ? __pfx_unix_stream_read_generic+0x10/0x10
[  398.114182][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[  398.116091][    C1]  unix_stream_recvmsg+0x15d/0x1b0
[  398.117671][    C1]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  398.119417][    C1]  ? __pfx_unix_stream_read_actor+0x10/0x10
[  398.121341][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  398.122886][    C1]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  398.124533][    C1]  ? security_socket_recvmsg+0x7e/0x2e0
[  398.126248][    C1]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  398.128012][    C1]  sock_recvmsg+0x22c/0x270
[  398.129443][    C1]  ____sys_recvmsg+0x1c9/0x460
[  398.131034][    C1]  ? __pfx_____sys_recvmsg+0x10/0x10
[  398.132697][    C1]  ? import_iovec+0x74/0xa0
[  398.134139][    C1]  ___sys_recvmsg+0x1b5/0x510
[  398.135628][    C1]  ? __pfx____sys_recvmsg+0x10/0x10
[  398.137183][    C1]  ? __fget_files+0x3a0/0x420
[  398.138622][    C1]  __x64_sys_recvmsg+0x198/0x260
[  398.140088][    C1]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  398.141840][    C1]  ? __sys_socketpair+0x4a9/0x560
[  398.143422][    C1]  ? do_syscall_64+0xbe/0x3b0
[  398.144890][    C1]  do_syscall_64+0xfa/0x3b0
[  398.146328][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.147939][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.149817][    C1]  ? exc_page_fault+0x9f/0xf0
[  398.151374][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.153130][    C1] RIP: 0033:0x7ffab1b8e9a9
[  398.154482][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  398.160424][    C1] RSP: 002b:00007ffaaf9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  398.163045][    C1] RAX: ffffffffffffffda RBX: 00007ffab1db5fa0 RCX: 00007ffab1b8e9a9
[  398.165469][    C1] RDX: 0000000040002002 RSI: 0000200000000000 RDI: 000000000000000d
[  398.167897][    C1] RBP: 00007ffab1c10ca1 R08: 0000000000000000 R09: 0000000000000000
[  398.170428][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.172866][    C1] R13: 0000000000000000 R14: 00007ffab1db5fa0 R15: 00007ffee4e0dfe8
[  398.175226][    C1]  </TASK>
[  398.176175][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  398.178275][    C1] CPU: 1 UID: 0 PID: 26948 Comm: syz.2.6951 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  398.182092][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  398.185207][    C1] Call Trace:
[  398.186260][    C1]  <IRQ>
[  398.187169][    C1]  dump_stack_lvl+0x99/0x250
[  398.188611][    C1]  ? __asan_memcpy+0x40/0x70
[  398.190063][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  398.191679][    C1]  ? __pfx__printk+0x10/0x10
[  398.193144][    C1]  panic+0x2db/0x790
[  398.194401][    C1]  ? __pfx_panic+0x10/0x10
[  398.195799][    C1]  __warn+0x31b/0x4b0
[  398.197070][    C1]  ? __rate_control_send_low+0x5df/0x820
[  398.198819][    C1]  ? __rate_control_send_low+0x5df/0x820
[  398.200559][    C1]  report_bug+0x2be/0x4f0
[  398.201915][    C1]  ? __rate_control_send_low+0x5df/0x820
[  398.203655][    C1]  ? __rate_control_send_low+0x5df/0x820
[  398.205402][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  398.207165][    C1]  handle_bug+0x84/0x160
[  398.208489][    C1]  exc_invalid_op+0x1a/0x50
[  398.209875][    C1]  asm_exc_invalid_op+0x1a/0x20
[  398.211408][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  398.213353][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 00 2c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 32 9a 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  398.219199][    C1] RSP: 0018:ffffc900001e0538 EFLAGS: 00010246
[  398.221027][    C1] RAX: 5f621ff454fa8100 RBX: 000000000000000c RCX: ffff8880214f3980
[  398.223355][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  398.225650][    C1] RBP: dffffc0000000000 R08: ffff888136624293 R09: 1ffff11026cc4852
[  398.228004][    C1] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: ffff88810ec0fb28
[  398.230338][    C1] R13: 0000000000000000 R14: ffff888123640e40 R15: ffff8881236430d8
[  398.232708][    C1]  ? __rate_control_send_low+0x5de/0x820
[  398.234366][    C1]  rate_control_send_low+0x194/0x7a0
[  398.236000][    C1]  rate_control_get_rate+0x20b/0x5d0
[  398.237627][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  398.239441][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  398.241297][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  398.242958][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  398.244722][    C1]  ieee80211_beacon_get_ap+0x1478/0x19e0
[  398.246467][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  398.248333][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  398.250061][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  398.251766][    C1]  __ieee80211_beacon_get+0x1179/0x17b0
[  398.253462][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  398.255114][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  398.256746][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  398.258638][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  398.260305][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  398.262510][    C1]  __iterate_interfaces+0x2ab/0x590
[  398.264137][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  398.266030][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  398.268255][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  398.270149][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  398.272330][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  398.273898][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  398.275697][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  398.277318][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  398.279076][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  398.280870][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  398.282463][    C1]  handle_softirqs+0x286/0x870
[  398.283958][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  398.285442][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  398.287074][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  398.288684][    C1]  __irq_exit_rcu+0xca/0x1f0
[  398.290120][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  398.291719][    C1]  irq_exit_rcu+0x9/0x30
[  398.293035][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  398.294702][    C1]  </IRQ>
[  398.295628][    C1]  <TASK>
[  398.296551][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  398.298408][    C1] RIP: 0010:__sanitizer_cov_trace_switch+0x8f/0x130
[  398.300438][    C1] Code: 00 00 00 41 57 41 56 41 54 53 48 8b 54 24 20 65 4c 8b 04 25 08 a0 9f 92 45 31 c9 eb 08 49 ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 <65> 44 8b 1d d9 6d df 10 41 81 e3 00 01 ff 00 74 13 41 81 fb 00 01
[  398.306298][    C1] RSP: 0018:ffffc9000680eca0 EFLAGS: 00000216
[  398.308166][    C1] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000005
[  398.310587][    C1] RDX: ffffffff81c20095 RSI: ffffffff8e194720 RDI: 0000000000000004
[  398.312999][    C1] RBP: 0000005ca543aafc R08: ffff8880214f3980 R09: 000000000000001a
[  398.315397][    C1] R10: 000000000000001a R11: 0000000000000002 R12: dffffc0000000000
[  398.317820][    C1] R13: ffff88810069d010 R14: ffff88810069d7f4 R15: 00000000001057e4
[  398.320282][    C1]  ? rb_event_length+0x45/0x400
[  398.321803][    C1]  rb_event_length+0x45/0x400
[  398.323285][    C1]  rb_read_data_buffer+0x438/0x580
[  398.324875][    C1]  check_buffer+0x28a/0x750
[  398.326322][    C1]  __rb_reserve_next+0x592/0xdb0
[  398.327871][    C1]  ring_buffer_lock_reserve+0xbb5/0x1010
[  398.329618][    C1]  ? rb_commit+0x781/0x7e0
[  398.331022][    C1]  trace_event_buffer_lock_reserve+0x1d0/0x6f0
[  398.332916][    C1]  ? tracing_gen_ctx_irq_test+0xc6/0x160
[  398.334624][    C1]  trace_event_buffer_reserve+0x248/0x340
[  398.336364][    C1]  ? __pfx_trace_event_buffer_reserve+0x10/0x10
[  398.338293][    C1]  trace_event_raw_event_bpf_trace_printk+0x100/0x260
[  398.340369][    C1]  ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10
[  398.342627][    C1]  ? __asan_memcpy+0x40/0x70
[  398.344104][    C1]  ? bstr_printf+0xa7c/0xb70
[  398.345551][    C1]  trace_bpf_trace_printk+0x170/0x1d0
[  398.347193][    C1]  bpf_trace_printk+0x11e/0x190
[  398.348696][    C1]  ? __lock_acquire+0xab9/0xd20
[  398.350214][    C1]  ? __pfx_bpf_trace_printk+0x10/0x10
[  398.351807][    C1]  ? bpf_trace_run2+0x186/0x4b0
[  398.353295][    C1]  bpf_prog_9e1c00255e17e72e+0x39/0x3f
[  398.354962][    C1]  bpf_trace_run2+0x284/0x4b0
[  398.356462][    C1]  ? bpf_trace_run2+0x186/0x4b0
[  398.357998][    C1]  ? __pfx_bpf_trace_run2+0x10/0x10
[  398.359616][    C1]  ? __bpf_trace_contention_begin+0xcd/0x130
[  398.361493][    C1]  __bpf_trace_contention_begin+0xdc/0x130
[  398.363319][    C1]  ? __pfx___bpf_trace_contention_begin+0x10/0x10
[  398.365312][    C1]  ? unix_stream_read_generic+0x1784/0x2350
[  398.367148][    C1]  ? unix_stream_read_generic+0x1784/0x2350
[  398.368997][    C1]  ? __lock_acquire+0xab9/0xd20
[  398.370467][    C1]  trace_contention_begin+0xf4/0x120
[  398.372080][    C1]  __mutex_lock+0x193/0xe80
[  398.373512][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  398.375190][    C1]  ? unix_stream_read_generic+0x1784/0x2350
[  398.377033][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  398.378560][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  398.380295][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.381842][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  398.383412][    C1]  unix_stream_read_generic+0x1784/0x2350
[  398.385182][    C1]  ? __pfx_unix_stream_read_generic+0x10/0x10
[  398.386991][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[  398.388809][    C1]  unix_stream_recvmsg+0x15d/0x1b0
[  398.390334][    C1]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  398.392034][    C1]  ? __pfx_unix_stream_read_actor+0x10/0x10
[  398.393800][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  398.395336][    C1]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  398.396911][    C1]  ? security_socket_recvmsg+0x7e/0x2e0
[  398.398590][    C1]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  398.400228][    C1]  sock_recvmsg+0x22c/0x270
[  398.401623][    C1]  ____sys_recvmsg+0x1c9/0x460
[  398.403100][    C1]  ? __pfx_____sys_recvmsg+0x10/0x10
[  398.404717][    C1]  ? import_iovec+0x74/0xa0
[  398.406069][    C1]  ___sys_recvmsg+0x1b5/0x510
[  398.407492][    C1]  ? __pfx____sys_recvmsg+0x10/0x10
[  398.409091][    C1]  ? __fget_files+0x3a0/0x420
[  398.410479][    C1]  __x64_sys_recvmsg+0x198/0x260
[  398.411983][    C1]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  398.413638][    C1]  ? __sys_socketpair+0x4a9/0x560
[  398.415141][    C1]  ? do_syscall_64+0xbe/0x3b0
[  398.416530][    C1]  do_syscall_64+0xfa/0x3b0
[  398.417871][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.419470][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.421332][    C1]  ? exc_page_fault+0x9f/0xf0
[  398.422757][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.424518][    C1] RIP: 0033:0x7ffab1b8e9a9
[  398.425904][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  398.431675][    C1] RSP: 002b:00007ffaaf9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  398.434285][    C1] RAX: ffffffffffffffda RBX: 00007ffab1db5fa0 RCX: 00007ffab1b8e9a9
[  398.436742][    C1] RDX: 0000000040002002 RSI: 0000200000000000 RDI: 000000000000000d
[  398.439226][    C1] RBP: 00007ffab1c10ca1 R08: 0000000000000000 R09: 0000000000000000
[  398.441639][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.444079][    C1] R13: 0000000000000000 R14: 00007ffab1db5fa0 R15: 00007ffee4e0dfe8
[  398.446547][    C1]  </TASK>
[  398.448084][    C1] Kernel Offset: disabled
[  398.449446][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:42:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=cb5ce0eb174a3300 RDX=0000000000000000
RSI=ffffffff8be28c20 RDI=ffffffff8be28be0 RBP=ffffffff8172aae5 RSP=ffffc90006ae7548
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90006ae7738 R11=ffffffff81ad03a0
R12=0000000000000002 R13=ffffffff8e13f160 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8b6d7249 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555558e47500 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c252732 CR3=0000000029ff2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00080008802b002c 0000000000040810
XMM02=9684df58563a2e23 3a690f9bf04a6b39 XMM03=296740d44abb3b15 b41756684b88e3ec
XMM04=e58dffa097001a33 986703e203000001 XMM05=e58dffa097001a33 986703e203000001
XMM06=296740d44abb3b15 b41756684b88e3ec XMM07=9684df58563a2e23 3a690f9bf04a6b39
XMM08=02b1d08bd670e0b7 9a36db2c981a574e XMM09=0000000000000000 00007f4d32a11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfcd0
R8 =ffff888021690237 R9 =1ffff110042d2046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8ac R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ffaaf9f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f79a5662348 CR3=0000000127216000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8173aed9 ffffffff8173acbf
XMM02=0000000000000000 ffffffff8173acbf XMM03=e583114947000000 0000000095000000
XMM04=0a6c9495c512dcfd 6ca94cad91cbf7b7 XMM05=09ac98b50b6987e0 f14f963ea3088a0a
XMM06=6c9495c512dcfd6c a94cad91cbf7b7e5 XMM07=8311494700000000 0000009500000000
XMM08=0000000000000004 0000351800000006 XMM09=0000000000000000 00007ffab1c11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
