last executing test programs:

1m39.591053529s ago: executing program 2 (id=12689):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}}, 0x2e)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0)

1m39.590601794s ago: executing program 2 (id=12691):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)

1m39.540299814s ago: executing program 2 (id=12692):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
unshare(0x20040400)
pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0xa, 0x10000000, 0x2, 0x8, 0xc2db, 0xb}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0)

1m39.53972354s ago: executing program 2 (id=12696):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x11, 0x4, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, 0x0, 0x0)
sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)="1479c369caf28b0c600d5d976b000089bdbf4075277f938a9d8616c6bf", 0x1d}], 0x2}, 0x4048081)
bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x2, {0x2, 0x0, 0x4}, 0x2}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0xa, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r7, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

1m38.541024376s ago: executing program 2 (id=12727):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0xb, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

1m38.479129561s ago: executing program 2 (id=12731):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, 'Z'}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

1m38.419018353s ago: executing program 32 (id=12731):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, 'Z'}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

32.263308135s ago: executing program 0 (id=14529):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0x4008af60, &(0x7f0000000040)={0xffffff7f, 0x7})

32.152522874s ago: executing program 0 (id=14531):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = epoll_create(0x7)
r2 = epoll_create1(0x0)
r3 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0x20000014})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000080))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, r7, 0x1, 0xfffffffc}, 0x14}}, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r8, 0x107, 0xb, 0x0, &(0x7f0000000300))
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000200))
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18070000000000000000000000000000711060000000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94)
ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0x4001af83, &(0x7f0000000040)={0x0, 0x7})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r9, 0xf504, 0x0)

32.093771403s ago: executing program 0 (id=14535):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0xf73, 0x4, 0x67d})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=<r3=>r1, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', <r5=>0x0, 0x4, 0x5, 0x9, 0x2, 0x48, @mcast2, @mcast1, 0x8000, 0x1, 0x7, 0x5}})
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @remote}, 0x2b, r5})
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r6, 0x4, 0x2, 0x9})
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="b9dabd21", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdb", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800)
r9 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200010600000000a1dd3f6e0c000024"], 0x1c}], 0x1}, 0x0)
r10 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0)
sendfile(r9, r10, &(0x7f0000000080)=0x4, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x3c, r12, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

31.234296407s ago: executing program 0 (id=14546):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0xa0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x4, 0xfffffffd)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200ff02000000000000000000000000000108000800028d"], 0x34}}, 0x0)
sendmsg$can_j1939(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="943c49cc3f5f7232cd6a1cea26f77360cc0701063ee83d9aea06c38e49062aaaebdc6769a8a6a2b2572e8563f66fdf51d16e3b1bc9039b49f32356ef532a9d3e6e87b24802d8a488ceb722d0db264d018ea00c9917bce4eb4b40164a89f8ea2b925f64b710ae4f4567d0ab13a627069aa93d9b0553dc5b154cdb8819da73ad7e36e43f42595e2ca70b2e5d71a7e087da9479de8f1f5ad442f1e6ca1b95a8a95762493b333058e65f4542bf7ee831e8a660934157f591f4c6c9bc05303ca31eaf449ba3b9d7d5d1e5d6661f7e6c9f8f", 0xcf}, 0x1, 0x0, 0x0, 0x24008800}, 0xc4)

31.165150517s ago: executing program 0 (id=14548):
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094)
r2 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x2c, 0x28, 0xd27, 0x1004001, 0x25dfdbf9, {0x0, 0x0, 0x900, r3, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xfb, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0)

31.16476633s ago: executing program 0 (id=14549):
unshare(0x6a040000) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x70}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600) (async)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0)
bind$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x2711, @local}, 0x10) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x4000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x30, 0x18, 0x0, 0x0, @binary="0dac0f0005ac0f005608936caaf06bec869c1eba340c8e5349c00de3bf542907da861ef4bbab00d0043522c1"}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) (async)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt(r6, 0x84, 0x80, 0x0, 0x0) (async)
sendmsg$AUDIT_TRIM(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f6, 0x100, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) (async)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

16.140848035s ago: executing program 33 (id=14549):
unshare(0x6a040000) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x70}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600) (async)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0)
bind$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x2711, @local}, 0x10) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x4000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x30, 0x18, 0x0, 0x0, @binary="0dac0f0005ac0f005608936caaf06bec869c1eba340c8e5349c00de3bf542907da861ef4bbab00d0043522c1"}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) (async)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt(r6, 0x84, 0x80, 0x0, 0x0) (async)
sendmsg$AUDIT_TRIM(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f6, 0x100, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) (async)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

1.841924245s ago: executing program 4 (id=15081):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x42d, @local, 0x7d}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x400448c9, 0x0)
sendmmsg$inet(r7, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000180)="5440caa287f3778894bb87ab40e30af2c3e6d4d14053d588f13464ba78f9136f50fc376cbaa57ca583288d768cee60fef7a96366e2e42fab59", 0x39}], 0x2}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x9, 0xffff}, {0xc}}}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYRESHEX=r2], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)

1.742794738s ago: executing program 4 (id=15083):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68ffffff", @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

1.742565734s ago: executing program 4 (id=15084):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x5, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)

1.630135853s ago: executing program 4 (id=15086):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES64=r1], 0x154}, 0x1, 0x0, 0x0, 0x40081}, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, r0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x25, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x218, 0x14, 0x1, 0x70bd2d, 0x0, "", [@nested={0x207, 0x0, 0x0, 0x1, [@generic="77273e417b3009a815e9152ce966702165ea3196bcec6ba4b0abf0018731d3d736", @generic="03b2b242f8c762d187a6852402a2c22160fd08cf61bc87c3158ca503f693d5fda534b375397d94e7a5", @generic="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", @generic="c6f7c5b183f7d0af47c5916b9f7e9017db195533c508ee7ad2c777e1eaf08d4b92281ead73ccbf53c3d41fb4d13dfa94f7c6ff516316f6170e9739a40ec3ac4b628c875b5b611834dad89811b2b747c3d36c2a0a3a30d908bd13fdd53ed8869babfb5cb1d290684d2cec34c5e7d358893ab00aa53800f024a51999d48f1f7c01b9d46406b900a0037a91a2393784ff82194712f19dd145bce5a08a827ecdca9eccc2d28f9f8f3976d16bd15cea091f358d2f63bededc8669c5d3f2df1b"]}]}, 0x218}], 0x1}, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/29, 0x1d}, 0xffff7fff}], 0x1, 0x20102, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00'})
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c000780060004400000000006000540100000000800084000000074"], 0x64}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000002c0)={'pim6reg0\x00'})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r6)
sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x14, r7, 0x0, 0xfffffffe, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2404c883}, 0x20060000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r6)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(r8, &(0x7f0000000340)=""/49, 0x31)
sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)

822.316303ms ago: executing program 4 (id=15106):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000056426e9250f6d9ff04dd3fe7ff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000c4080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000040)={'bond0\x00'})

720.317282ms ago: executing program 4 (id=15109):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/1486], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x42, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000180001000000000000000000020000000002000900200000ef158e4de4b3bf5a4436fd631b4a66c0f02ff8e41efca2532afdcc5359a063af68f960d3094be4965f37d96c8a054eee4d"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f2c0000000b0a01080000000000000000012300000900020073797a32000000080900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x24008000}, 0x24008004)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xd, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$alg(0x26, 0x5, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12100)
r6 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r9=>0x0})
bind$can_raw(r8, &(0x7f0000000000)={0x1d, r9}, 0x10)
r10 = socket(0x1, 0x2, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bind$unix(r10, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000001140)=[{{&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000a80)="b9da73b4814c18a1b3cf72a88ebe87fb46a67df92192d8f1567a670ec898c13a2878bcc21c3111cea6bf46a3ea81361cc6d6ac83280b40b6c5abb3a570cc30faced7a0b46a926b7e7b87eae856516a4e8b4a286b3df7f12899832df0c6f1f7487abae3f4fb8e3163f7273bdb63cbd4143ec05bc7fed8e3b68c2c964d90cc6797c28966495122ae2c2f8cceadd72ae42ad2d65b668d62db66bfba6f46bc9edb2dfaffaedd04a25aa83d554547580c66951b30f3a12f2ea0c1014ff5bcafa0d79d609fd42f6516a6c0648106da484075212a9641b8dcd3a59c7fd6fba94a817506", 0xe0}, {&(0x7f0000000b80)="a15a5659f71535e811412637f1364c70063e479fcad194da548d10be1e66611e83885e933e2bbfe191833022766c93965e108a846e2f25cce6ad8b9c283d669b9ab0d5ff3b6038eb523cda0d222f0c1bc210b89f91346e19e46c9d7daaf468483e863cae6904609ab1174794bb08228b92d62277790e60c457a30eeffe7652087bceb5f24c3f757ffe4e97004d02be6f2ccc616bf4844807bc0db9f83d6bab8dd2ea0e2a7f80b2f938361520176ac43dd037fe101f5596835c99a885ca24c5033e26f1d64423b2aa940d406f625d72", 0xcf}, {&(0x7f0000000c80)="9f918c5294df8b10d59e9e2364b5c690df073b8a652e6ef0758ec1d54e599d203169f8d3eba38086a0e6d8ce164d8f1ea0fc78e6378055b5a0eb93053a1ad04804ecb61cbae722283940d019639d5e819ed3c5542f5bb8c6af80d375a06960e9b7b1ed34d72986a0eff86f328775400724b624ee8890f9eb2e69620ac376718c4b93e5488e78830194da4c6364d8c5382a882c37", 0x94}], 0x3, &(0x7f0000000d80)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, r11, r0, r4, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8, 0x20000081}}], 0x2, 0x0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005e7a5737487c2b4f9ca0b62a61c6e2ce96f4107b0dfbfe2acbb9fbd87fa1c3e172adef4fd316f91ba1f368939e396222bab4bbd117cdf6c546461e98afdd0226f150f81ef5c2562b3d65640c38"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10)
recvmmsg(r10, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000180)={'vxcan1\x00'})

719.087829ms ago: executing program 1 (id=15110):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000002d000100000000000000000004000080350011809e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"], 0x4c}], 0x1}, 0x300) (async)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000002d000100000000000000000004000080350011809e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"], 0x4c}], 0x1}, 0x300)
socket$tipc(0x1e, 0x2, 0x0)
unshare(0x2a020400) (async)
unshare(0x2a020400)
r6 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40}}, 0xe8)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) (async)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'})

303.585365ms ago: executing program 1 (id=15112):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000000), 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000080000000000000000000a1400000010"], 0x28}}, 0x0)
sendmsg$can_bcm(r7, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r6}, 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="04000000000000000000010000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x2}, 0x0)
sendto$inet(r4, 0x0, 0x1a000, 0x0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0xa}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)

240.24396ms ago: executing program 1 (id=15114):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000310001072abd70000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x130, 0x3, 0xa, 0x2a240e74a46d00cf, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0xd0, 0xc, "f0cee652e18baabbbabbcae07805b79a95a275c922d930051ad65df6cd22b834f253f7f5b07a87f14b417f8cf1bfd1e3dd19573a027a53a162b95f06cb95f2dd0ca27e0db139520d1755548f0331757c8b02fcfccc998d9c14218c18d2d6293c33eeca08219d07b6ae4c54567e929b9cd3966fccd3384d316164b2d54bd17559f456537894db47c6199b31cbecbe17baddea2eabb4480e399d12e7c2de1aa61bbdf2f02de30f296de79b2fbcbd36c45f412907e2825985d975d4b7a94c9f65dea108860eec361e932f70bab3"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}], {0x14}}, 0x18c}, 0x1, 0x0, 0x0, 0x4050}, 0x88d1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000002060102000000000000000000000000140007800500140080ff000008001240120500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0)
r3 = socket$inet(0x2, 0x2, 0x1)
bind$unix(r3, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec720039", @ANYRES16=0x0, @ANYBLOB="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"], 0x104}}, 0x40)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18085100000000090000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00d0ff0000000000660000000000000018000000f8ffffff00000000000000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222}, 0x94)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a00010027bd7000000000000220200000000000002045"], 0x24}}, 0x48010)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x0, 0x8, 0xa, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0x0, 0x2}, 0x70bd28, 0x0, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
bind$llc(r4, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000140), 0x4)
getsockopt$bt_hci(r7, 0x11a, 0x2, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000080), 0x1)

160.901387ms ago: executing program 3 (id=15116):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r2, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xc, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24008054)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000981201002c090000000000000096f9c9d2001c000780060011004e2300e20b32a64dd8b029e30006690f00110000"], 0x4c}}, 0x4010)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={@mcast1, 0x58, r4})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r6, &(0x7f0000000f40)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89b0, &(0x7f0000000040)={'bond0\x00'})

157.200916ms ago: executing program 3 (id=15117):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7f}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x104d}], 0x1)

129.662582ms ago: executing program 1 (id=15118):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb2, &(0x7f0000000180)=""/178, 0x0, 0x25, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000580)={0xfffffffd, "98c963d4d71988a78228817da582199194b06d7cc1c3c64a46655406c0464774db779b3536bca596e5ca90acca3f1c76a05e70806b36863ecbbcd57571adae421abec11301ed96b458c8a8a8d58c4001b619bc78591834dc235c23035ee6b3f8941c3c5e48c770038f1e9b708f5ae83fa0bfb547cdbe5e6c4541dd68fa26d4ef"})
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000000900030073797a32000000000900010073797a300000000008030000060a010400000000000000000100000008000b400000000008000b40000000040900010073797a300000"], 0x37c}}, 0x0)
r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x80000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100))

82.536613ms ago: executing program 3 (id=15119):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x50bd26, 0x25dfdbf8, {{0x55, 0x0, 0x900}, {@val={0x8, 0x1, 0xa}, @val={0x8, 0x3, r1}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)

82.049241ms ago: executing program 1 (id=15120):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x2b, 0xb, 0x0, 0x0, {0x6}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x24}}, 0xc00) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0}) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x38, r12, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2000}}}]}, 0x38}, 0x1, 0x2, 0x0, 0x20040080}, 0x800) (async)
sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x50, r9, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xd, 0xac, "9b42ba63684a1d6c17"}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x358}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x30, 0x1}, {0x9, 0x1}, {0x18}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)={0x20, r9, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) (async)
sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
sendmsg$nl_xfrm(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0401000000000000000000fe80000000000000000000008cffc87d0000001be0000002000000000000000000000000ffff00"/59, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0)

81.236158ms ago: executing program 3 (id=15121):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x6000000, 0x40000}, 0x8000)

1.645911ms ago: executing program 3 (id=15122):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd70001330b2bf8967b3b60d2f799062170cf8e825ec5fd0f4dee5430d36f3094ffd1ae28375000083f2000000000000000000000000464b1fe6da5f3bb5c07bb26ef6bfff1b9b5d56e2440d651232b969e01e626443af332d55c948aff18d426c727e"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={<r4=>0x0, @rand_addr, @multicast2}, &(0x7f0000000140)=0xc)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', r4, r5, 0x4, 0x2, 0x2}, 0x50)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x49, 0x3, "d8307a54cad2d1b55d1d6f88613992e9a1d9cbfb8a452e5db078da7b0dfc517bfe366401feebf9e229f1e097f14a09f41b5c74f7cb57925e09f9c0a019f40ae9b769e465f1"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELRULE={0x2bc, 0x8, 0xa, 0x1, 0x0, 0x0, {0xa}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6005}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xc}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x1d8, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0xffffffffffffffd7, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x26}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xeb}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x5c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xe0}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_QUOTA_FLAGS={0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x0, 0x2, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x58, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x44, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x34, 0x1, "99fe1f00da94ed0744c9b75a561df4e7360a92d1f5472fa7f565fd81c616d66fe9243262e02cf0c14453c599ab35f779"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}, {0x3c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x7c}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_USERDATA={0x81, 0x7, 0x1, 0x0, "6794a8d3a61bdd05d846391f59a2dd5037c1f8028f82ae3639f3c0d582d9535f02e53d7ba6ae13eb6732c0333d4acd10b7b9c3e982012d7557543a283c70abf04dd5690413ecc9008cef1b4b151e584068dda8afad4ef997f4a5bcef5bf7f4f64b7f3f8b156a844754c10e0e0b5c75e767caf24227d1fb02ea2f55fa59"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0xb8, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x4a, 0x6, "fcad52b71ec06a59386cfebe26dd04af2ff5e2634b56865d3b43ba189c29bad632a70ac7c75ec8c3f2a8ab0fef529e6532e5c9d9e8bd080dfc26ed1fc6ab742b3bfcd2be42e5"}, @NFTA_TABLE_USERDATA={0x3a, 0x6, "fe5a6004258a3e35cfbcfe2860cb441efc802c1c00a4197d65d69996719c08044411f2a768f8fc8f8e15d5b251aeb7f9c151680cca63"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x18, 0x6, "84be874dac23abd6a798b4b85e35fb0ccfffc4fe"}]}], {0x14}}, 0x4a8}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)

1.174699ms ago: executing program 3 (id=15123):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x2c, 0x21, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_FLOW={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0xd00, 0x0, 0x40008c4}, 0x8000)

0s ago: executing program 1 (id=15124):
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r2=>0x0, 0x6, 0x6, 0x4, 0x36, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x10, 0x40, 0x5, 0x9}})
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
read(r3, &(0x7f00000015c0)=""/94, 0xffffffffffffff74)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@remote, @remote, @local, 0x8, 0x84f, 0x4, 0x100, 0x1, 0x20, r2}) (async)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@remote, @remote, @local, 0x8, 0x84f, 0x4, 0x100, 0x1, 0x20, r2})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000880)={0x0, 0x3}, 0x8)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x18c, r6, 0x2, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
clock_gettime(0x0, &(0x7f0000000200)) (async)
clock_gettime(0x0, &(0x7f0000000200)={<r7=>0x0, <r8=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94)
recvmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/167, 0xa7}], 0x1}}], 0x1, 0x1, &(0x7f0000000240)={r7, r8+10000000})

kernel console output (not intermixed with test programs):

dm_validate_partition_table(): Disk read failed.
[  375.500453][T24697] Dev nbd0: unable to read RDB block 0
[  375.503209][T24697]  nbd0: unable to read partition table
[  375.768080][   T12] tipc: Resetting bearer <eth:syzkaller0>
[  376.063113][   T12] tipc: Disabling bearer <eth:syzkaller0>
[  376.228235][   T12] bond1 (unregistering): Released all slaves
[  376.234644][   T12] bond2 (unregistering): Released all slaves
[  376.241500][   T12] bond3 (unregistering): Released all slaves
[  376.248208][   T12] bond4 (unregistering): Released all slaves
[  376.257080][   T12] bond0 (unregistering): Released all slaves
[  376.264830][   T12] bond5 (unregistering): Released all slaves
[  376.272672][   T12] bond6 (unregistering): Released all slaves
[  376.283983][   T12] bond7 (unregistering): Released all slaves
[  376.340247][   T12] k*]: left promiscuous mode
[  376.371920][   T12] tipc: Disabling bearer <udp:syz2>
[  376.378972][   T12] tipc: Disabling bearer <eth:team0>
[  376.380916][   T12] tipc: Left network mode
[  376.525550][T31019] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  376.714094][T31043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11156'.
[  376.777667][T31050] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.11159'.
[  376.838914][   T12] hsr_slave_0: left promiscuous mode
[  376.867967][   T12] hsr_slave_1: left promiscuous mode
[  376.938688][   T12] pim6reg9 (unregistering): left allmulticast mode
[  376.947931][T31070] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11170'.
[  376.988490][T31076] validate_nla: 83 callbacks suppressed
[  376.988502][T31076] netlink: 'syz.2.11173': attribute type 32 has an invalid length.
[  377.212458][ T1091] smc: removing ib device syz1
[  377.230975][ T5846] lo speed is unknown, defaulting to 1000
[  377.233320][ T5846] infiniband syz2: ib_query_port failed (-19)
[  377.733482][ T5714] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  377.739077][ T5714] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.743934][ T5714] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  377.747600][ T5714] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.759273][ T5714] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  377.769198][ T5714] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.800015][T31132] pimreg: entered allmulticast mode
[  377.901704][T31150] wg1 speed is unknown, defaulting to 1000
[  377.904340][T31150] wg1 speed is unknown, defaulting to 1000
[  377.906580][T31150] wg1 speed is unknown, defaulting to 1000
[  377.915491][T31150] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  377.935701][T31150] wg1 speed is unknown, defaulting to 1000
[  377.938508][T31150] wg1 speed is unknown, defaulting to 1000
[  377.941200][T31150] wg1 speed is unknown, defaulting to 1000
[  377.943859][T31150] wg1 speed is unknown, defaulting to 1000
[  377.946626][T31150] wg1 speed is unknown, defaulting to 1000
[  378.074768][T31166] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11208'.
[  378.077443][T31168] tunl0: Caught tx_queue_len zero misconfig
[  378.276533][T31183] wg1 speed is unknown, defaulting to 1000
[  378.690730][T31228] syzkaller0: left promiscuous mode
[  378.695884][T31228] syzkaller0: left allmulticast mode
[  378.993318][T31256] wg1 speed is unknown, defaulting to 1000
[  379.029959][T31257] wg1 speed is unknown, defaulting to 1000
[  379.667345][T31280] __nla_validate_parse: 2 callbacks suppressed
[  379.667360][T31280] netlink: 256 bytes leftover after parsing attributes in process `syz.0.11253'.
[  379.674917][T31280] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11253'.
[  379.718496][T31282] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  380.088344][T30567] Bluetooth: hci2: link tx timeout
[  380.093041][T30567] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  380.095610][T30567] Bluetooth: hci2: link tx timeout
[  380.097635][T30567] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  380.100168][T30567] Bluetooth: hci2: link tx timeout
[  380.101760][T30567] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  380.104211][T30567] Bluetooth: hci2: link tx timeout
[  380.105813][T30567] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  380.108614][T30567] Bluetooth: hci2: link tx timeout
[  380.110741][T30567] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  380.114217][T30567] Bluetooth: hci2: link tx timeout
[  380.116353][T30567] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  380.303320][T31322] netlink: 'syz.2.11272': attribute type 1 has an invalid length.
[  380.308978][T31322] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11272'.
[  380.371662][T31330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11275'.
[  380.394749][T31332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11276'.
[  381.483562][T31392] batadv_slave_0: entered promiscuous mode
[  381.485636][T31392] batadv_slave_0: entered allmulticast mode
[  381.543979][T31396] batadv2: entered promiscuous mode
[  381.602509][T31402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11309'.
[  381.604008][T31303] Set syz1 is full, maxelem 65536 reached
[  381.685855][T31416] netlink: 'syz.2.11316': attribute type 8 has an invalid length.
[  381.688338][T31416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11316'.
[  381.985006][T31459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11334'.
[  382.119481][T30567] Bluetooth: hci2: command 0x0406 tx timeout
[  382.897811][T31475] bridge2: the hash_elasticity option has been deprecated and is always 16
[  382.904761][T31475] bridge2: entered allmulticast mode
[  383.038391][T31492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11346'.
[  383.136222][T31496] wg1 speed is unknown, defaulting to 1000
[  383.190081][T31502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11350'.
[  383.357034][T31510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.391716][T31512] netlink: 'syz.1.11354': attribute type 10 has an invalid length.
[  383.396098][T31512] bond0: (slave dummy0): Releasing backup interface
[  383.412048][T31512] dummy0: left promiscuous mode
[  383.414245][T31512] dummy0: left allmulticast mode
[  383.420175][T31512] netlink: 'syz.1.11354': attribute type 10 has an invalid length.
[  383.428288][T31512] dummy0: entered promiscuous mode
[  383.431902][T31512] dummy0: entered allmulticast mode
[  383.434558][T31512] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  383.540168][T31522] tipc: Failed to remove unknown binding: 66,1,1/559058054:2086039488/2086039490
[  383.546091][T31522] tipc: Failed to remove unknown binding: 66,1,1/559058054:2086039488/2086039490
[  383.552619][T31524] IPv6: Can't replace route, no match found
[  384.001423][T31563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.004729][T31563] syzkaller0: entered promiscuous mode
[  384.007034][T31563] syzkaller0: entered allmulticast mode
[  384.016812][T31563] tipc: Resetting bearer <eth:syzkaller0>
[  384.019782][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.023091][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.027155][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.030221][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.036463][T31562] tipc: Resetting bearer <eth:syzkaller0>
[  384.043057][T31562] tipc: Disabling bearer <eth:syzkaller0>
[  384.102074][T31574] delete_channel: no stack
[  384.135403][T31579] netlink: 'syz.2.11387': attribute type 1 has an invalid length.
[  384.839552][T30567] Bluetooth: hci2: command 0x0406 tx timeout
[  385.798168][T31677] __nla_validate_parse: 7 callbacks suppressed
[  385.798188][T31677] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.11425'.
[  386.135243][T31696] lo: Caught tx_queue_len zero misconfig
[  386.195497][T31700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11436'.
[  386.305944][T31708] macsec0: entered allmulticast mode
[  386.308824][T31708] veth1_macvtap: entered allmulticast mode
[  386.311482][T31708] macsec0: left allmulticast mode
[  386.313518][T31708] veth1_macvtap: left allmulticast mode
[  387.940713][T31883] netlink: 'syz.2.11520': attribute type 13 has an invalid length.
[  387.947384][T31883] netlink: 'syz.2.11520': attribute type 17 has an invalid length.
[  387.952545][T31883] netlink: 'syz.2.11520': attribute type 27 has an invalid length.
[  389.022762][T32008] batadv0: entered promiscuous mode
[  389.024948][T32008] debugfs: 'hsr1' already exists in 'hsr'
[  389.026881][T32008] Cannot create hsr debugfs directory
[  389.029910][T32008] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  389.033397][T32008] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  389.037562][T32008] hsr1: entered allmulticast mode
[  389.040823][T32008] batadv0: entered allmulticast mode
[  389.044782][T32008] batadv0: left promiscuous mode
[  389.133427][T32012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.352796][T32028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.815193][T32083] bond0: option tlb_dynamic_lb: invalid value (3)
[  390.096591][T32106] sctp: [Deprecated]: syz.2.11618 (pid 32106) Use of int in maxseg socket option.
[  390.096591][T32106] Use struct sctp_assoc_value instead
[  390.114566][T32112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11621'.
[  390.240678][T32127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11628'.
[  390.278437][T32131] netlink: 788 bytes leftover after parsing attributes in process `syz.0.11630'.
[  390.519139][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  390.594668][T32166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11646'.
[  390.817588][T32203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11663'.
[  390.823366][T32203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11663'.
[  390.860672][T32211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11667'.
[  390.871738][T32213] netlink: 'syz.1.11668': attribute type 1 has an invalid length.
[  390.891786][T32213] 8021q: adding VLAN 0 to HW filter on device bond16
[  390.897875][T32213] bond15: (slave bond16): making interface the new active one
[  390.903533][T32213] bond15: (slave bond16): Enslaving as an active interface with an up link
[  391.045929][T32242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.048604][T32242] syzkaller0: entered promiscuous mode
[  391.056653][T32242] syzkaller0: entered allmulticast mode
[  391.066260][T32242] tipc: Resetting bearer <eth:syzkaller0>
[  391.070685][T32240] tipc: Resetting bearer <eth:syzkaller0>
[  391.075909][T32240] tipc: Disabling bearer <eth:syzkaller0>
[  391.162869][T32250] nbd: socks must be embedded in a SOCK_ITEM attr
[  391.474447][T32269] syzkaller1: entered promiscuous mode
[  391.476331][T32269] syzkaller1: entered allmulticast mode
[  391.559128][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  394.271829][T32402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11749'.
[  394.298352][T32402] netlink: 23932 bytes leftover after parsing attributes in process `syz.2.11749'.
[  395.627343][T32474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11779'.
[  395.797063][T32501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11792'.
[  395.797682][T32498] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  395.804512][T32501] openvswitch: netlink: Flow key attr not present in new flow.
[  395.810043][T32503] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  395.812969][T32503] syzkaller0: entered promiscuous mode
[  395.814779][T32503] syzkaller0: entered allmulticast mode
[  396.051797][T32533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11806'.
[  396.064441][T32533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11806'.
[  396.073425][T32533] bridge16: entered promiscuous mode
[  396.075646][T32533] macsec4: entered promiscuous mode
[  396.077127][T32537] netlink: 'syz.2.11808': attribute type 2 has an invalid length.
[  396.077854][T32533] macsec4: entered allmulticast mode
[  396.080932][T32537] netlink: 'syz.2.11808': attribute type 8 has an invalid length.
[  396.086992][T32537] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11808'.
[  396.090379][T32533] bridge16: entered allmulticast mode
[  396.093513][T32533] bridge16: port 1(macsec4) entered blocking state
[  396.097201][T32533] bridge16: port 1(macsec4) entered disabled state
[  396.101775][T32533] bridge16: left allmulticast mode
[  396.103662][T32533] bridge16: left promiscuous mode
[  396.326844][T32550] netlink: 'syz.1.11813': attribute type 4 has an invalid length.
[  396.724668][T32606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11836'.
[  396.728228][T32606] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  397.437263][T32711] syzkaller0: left promiscuous mode
[  397.439582][T32711] syzkaller0: left allmulticast mode
[  397.601283][T32722] netlink: 'syz.1.11888': attribute type 25 has an invalid length.
[  397.991116][T32742] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.357094][  T320] bridge3: entered promiscuous mode
[  398.360584][  T320] bridge3: entered allmulticast mode
[  398.471457][   T33] audit: type=1800 audit(1756094819.370:12): pid=327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11918" name="memory.events" dev="tmpfs" ino=4013 res=0 errno=0
[  398.523493][  T343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11926'.
[  398.748424][  T375] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11942'.
[  399.133955][  T437] dvmrp1: left allmulticast mode
[  399.136084][  T437] pimreg: left allmulticast mode
[  399.243443][  T439] rdma_rxe: rxe_newlink: failed to add lo
[  399.942463][  T441] wg1 speed is unknown, defaulting to 1000
[  400.026193][  T455] team_slave_1: Caught tx_queue_len zero misconfig
[  400.052477][  T458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11980'.
[  400.311622][  T497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11998'.
[  400.508537][  T522] netlink: 'syz.2.12010': attribute type 7 has an invalid length.
[  400.511573][  T522] netlink: 'syz.2.12010': attribute type 8 has an invalid length.
[  400.534611][  T525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12011'.
[  400.553915][  T527] netlink: 'syz.2.12012': attribute type 1 has an invalid length.
[  400.608160][  T531] syzkaller1: entered promiscuous mode
[  400.612011][  T531] syzkaller1: entered allmulticast mode
[  400.692083][  T533] tun0: tun_chr_ioctl cmd 2148553947
[  401.005403][  T552] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12023'.
[  401.126653][  T563] __nla_validate_parse: 1 callbacks suppressed
[  401.126672][  T563] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12027'.
[  401.154866][  T566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12029'.
[  401.528146][  T611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12048'.
[  401.529039][  T612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12049'.
[  401.534967][  T612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12049'.
[  401.784822][  T648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12066'.
[  402.174187][  T706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12093'.
[  402.184040][  T706] pim6reg: entered allmulticast mode
[  402.186551][  T706] pim6reg: left allmulticast mode
[  402.307630][  T718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12098'.
[  402.492411][  T730] wg1 speed is unknown, defaulting to 1000
[  403.300689][  T786] netlink: 'syz.1.12128': attribute type 13 has an invalid length.
[  403.303736][  T786] netlink: 'syz.1.12128': attribute type 17 has an invalid length.
[  403.313426][  T786] tunl0: left promiscuous mode
[  403.506034][  T786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  403.520127][  T797] syzkaller1: entered promiscuous mode
[  403.522466][  T797] syzkaller1: entered allmulticast mode
[  403.661468][  T814] wg1 speed is unknown, defaulting to 1000
[  403.832139][  T830] netlink: 'syz.1.12144': attribute type 39 has an invalid length.
[  403.943243][  T840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12149'.
[  404.244112][  T878] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  404.554198][  T930] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12187'.
[  404.890267][  T976] gretap2: entered promiscuous mode
[  405.914643][ T1029] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  406.060902][ T1046] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  406.290116][ T1078] __nla_validate_parse: 5 callbacks suppressed
[  406.290129][ T1078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12244'.
[  406.421572][ T1088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12247'.
[  406.425342][ T1088] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  406.558644][ T1102] netlink: 'syz.2.12251': attribute type 10 has an invalid length.
[  406.572589][ T1102] team0: Port device 0! added
[  406.577482][ T1102] netlink: 'syz.2.12251': attribute type 10 has an invalid length.
[  406.591172][ T1102] team0: Port device 0! removed
[  407.031762][ T1065] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  407.278544][ T1176] netlink: 'syz.0.12280': attribute type 39 has an invalid length.
[  408.105176][ T1222] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12302'.
[  408.108043][ T1222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12302'.
[  408.118950][ T1222] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12302'.
[  408.582870][ T1232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.632893][ T1238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12309'.
[  408.792838][ T1255] wg1 speed is unknown, defaulting to 1000
[  408.820519][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12319'.
[  408.954586][ T1276] netlink: 'syz.2.12325': attribute type 10 has an invalid length.
[  409.060147][ T1296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12336'.
[  409.063199][ T1296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12336'.
[  409.317790][ T1315] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12345'.
[  409.428652][ T1335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.434370][ T1335] syzkaller0: entered promiscuous mode
[  409.436264][ T1335] syzkaller0: entered allmulticast mode
[  409.443625][ T1335] tipc: Resetting bearer <eth:syzkaller0>
[  409.447113][ T1333] tipc: Resetting bearer <eth:syzkaller0>
[  409.452102][ T1333] tipc: Disabling bearer <eth:syzkaller0>
[  409.547352][ T1348] netlink: 'syz.0.12359': attribute type 2 has an invalid length.
[  409.637329][ T1353] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  409.700608][ T1368] netlink: 'syz.0.12366': attribute type 3 has an invalid length.
[  410.275408][ T1419] wg1 speed is unknown, defaulting to 1000
[  410.320845][ T5907] IPVS: starting estimator thread 0...
[  410.409137][ T1423] IPVS: using max 92 ests per chain, 220800 per kthread
[  410.512387][ T1457] netlink: 'syz.1.12405': attribute type 1 has an invalid length.
[  410.619123][ T1466] netlink: 'syz.2.12409': attribute type 10 has an invalid length.
[  410.622180][ T1466] veth0_vlan: entered allmulticast mode
[  410.624911][ T1466] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  410.763259][ T1476] bridge_slave_0: entered promiscuous mode
[  410.787795][ T1478] wg1: left promiscuous mode
[  410.794066][ T1478] mac80211_hwsim hwsim24 wlan0: left promiscuous mode
[  410.797265][ T1478] ipvlan2: left promiscuous mode
[  410.801051][ T1478] bond4: left promiscuous mode
[  410.802850][ T1478] bridge2: left promiscuous mode
[  410.804728][ T1478] bridge3: left promiscuous mode
[  410.935693][ T1499] netlink: 'syz.2.12425': attribute type 21 has an invalid length.
[  410.938570][ T1499] netlink: 'syz.2.12425': attribute type 5 has an invalid length.
[  410.944627][ T1499] netlink: 'syz.2.12425': attribute type 6 has an invalid length.
[  410.993690][ T1505] wg1 speed is unknown, defaulting to 1000
[  411.067150][ T1515] wg1 speed is unknown, defaulting to 1000
[  411.975549][ T1543] __nla_validate_parse: 11 callbacks suppressed
[  411.975667][ T1543] netlink: 100 bytes leftover after parsing attributes in process `syz.2.12441'.
[  412.143371][ T1562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12447'.
[  412.376245][ T1575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12452'.
[  412.751199][ T1597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12463'.
[  412.755192][ T1597] smc: net device bond0 applied user defined pnetid SYZ
[  413.234292][ T1609] veth0_vlan: left allmulticast mode
[  413.251233][ T1609] vlan0: left promiscuous mode
[  413.314680][ T1609] veth3: left promiscuous mode
[  413.323411][ T1609] bond4: left promiscuous mode
[  413.328493][ T1609] batadv1: left promiscuous mode
[  413.332296][ T1609] batadv1: left allmulticast mode
[  413.340154][ T1609] bridge2: left allmulticast mode
[  413.372529][ T5887] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  413.375664][ T5887] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  413.386785][ T5887] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  413.390495][ T5887] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  413.393397][ T5887] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  413.396302][ T5887] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  413.400981][ T5887] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  413.404067][ T5887] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  413.691752][ T1651] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12486'.
[  413.695038][ T1649] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  413.701306][ T1649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12485'.
[  413.704335][ T1649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12485'.
[  413.841243][ T1673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12497'.
[  413.856341][ T1673] bridge17: port 1(veth23) entered blocking state
[  413.859256][ T1673] bridge17: port 1(veth23) entered disabled state
[  413.861903][ T1673] veth23: entered allmulticast mode
[  413.864593][ T1673] veth23: entered promiscuous mode
[  413.871020][ T1673] veth0_to_bond: left allmulticast mode
[  413.873336][ T1673] bridge17: port 2(veth0_to_bond) entered blocking state
[  413.876204][ T1673] bridge17: port 2(veth0_to_bond) entered disabled state
[  413.879284][ T1673] veth0_to_bond: entered allmulticast mode
[  413.882079][ T1673] veth0_to_bond: entered promiscuous mode
[  414.030397][ T1683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12501'.
[  414.335576][ T1700] veth24: entered promiscuous mode
[  414.337803][ T1700] veth24: entered allmulticast mode
[  414.706001][ T1714] netlink: 'syz.2.12515': attribute type 3 has an invalid length.
[  414.708646][ T1714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12515'.
[  414.991874][ T1729] netlink: zone id is out of range
[  414.994015][ T1729] netlink: zone id is out of range
[  414.996182][ T1729] netlink: zone id is out of range
[  414.998482][ T1729] netlink: zone id is out of range
[  415.000857][ T1729] netlink: zone id is out of range
[  415.002676][ T1729] netlink: zone id is out of range
[  415.004601][ T1729] netlink: zone id is out of range
[  415.006738][ T1729] netlink: zone id is out of range
[  415.009613][ T1729] netlink: zone id is out of range
[  415.011823][ T1729] netlink: zone id is out of range
[  415.508529][ T1759] netlink: 'syz.2.12535': attribute type 1 has an invalid length.
[  415.978693][ T1842] netlink: 'syz.1.12574': attribute type 21 has an invalid length.
[  415.985630][ T1842] netlink: 'syz.1.12574': attribute type 4 has an invalid length.
[  415.988734][ T1842] netlink: 'syz.1.12574': attribute type 5 has an invalid length.
[  416.288033][ T1883] netlink: 'syz.2.12595': attribute type 12 has an invalid length.
[  416.307161][ T1884] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  416.325903][ T1884] syzkaller0: entered promiscuous mode
[  416.328207][ T1884] syzkaller0: entered allmulticast mode
[  416.364783][ T1884] tipc: Resetting bearer <eth:syzkaller0>
[  416.370316][ T1882] tipc: Resetting bearer <eth:syzkaller0>
[  416.378350][ T1882] tipc: Disabling bearer <eth:syzkaller0>
[  416.849417][ T1946] sctp: [Deprecated]: syz.0.12625 (pid 1946) Use of struct sctp_assoc_value in delayed_ack socket option.
[  416.849417][ T1946] Use struct sctp_sack_info instead
[  417.468014][ T1999] tipc: New replicast peer: 208.253.78.183
[  417.470374][ T1999] tipc: Enabled bearer <udp:s>, priority 10
[  417.515939][ T2003] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  417.818353][ T2026] __nla_validate_parse: 7 callbacks suppressed
[  417.818366][ T2026] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12662'.
[  418.102291][ T2070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12680'.
[  418.105893][ T2070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12680'.
[  418.144014][ T2076] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12683'.
[  418.147045][ T2076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12683'.
[  418.395429][ T2102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12696'.
[  418.402833][ T2111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12700'.
[  418.406099][ T2111] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5)
[  418.589106][ T5907] tipc: Node number set to 159403139
[  418.986489][ T2162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12719'.
[  419.159682][ T2165] IPVS: Error connecting to the multicast addr
[  419.255007][ T2171] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12725'.
[  419.621588][T30567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  419.624637][T30567] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  419.627725][T30567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  419.633685][T30567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  419.636639][T30567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  419.670454][ T2202] wg1 speed is unknown, defaulting to 1000
[  419.757970][ T2202] chnl_net:caif_netlink_parms(): no params data found
[  419.853549][ T2202] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.856473][ T2202] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.866504][ T2202] bridge_slave_0: entered allmulticast mode
[  419.871618][ T2202] bridge_slave_0: entered promiscuous mode
[  419.882411][ T2202] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.885249][ T2202] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.888213][ T2202] bridge_slave_1: entered allmulticast mode
[  419.899932][ T2202] bridge_slave_1: entered promiscuous mode
[  419.926213][ T2202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  419.932786][ T2202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  419.961240][ T2202] team0: Port device team_slave_0 added
[  419.965098][ T2202] team0: Port device team_slave_1 added
[  419.983424][ T2202] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.986258][ T2202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.998303][ T2202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  420.004386][ T2202] batman_adv: batadv0: Adding interface: batadv_slave_1
[  420.007199][ T2202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  420.019298][ T2202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  420.053842][ T2202] hsr_slave_0: entered promiscuous mode
[  420.056075][ T2202] hsr_slave_1: entered promiscuous mode
[  420.058088][ T2202] debugfs: 'hsr0' already exists in 'hsr'
[  420.062132][ T2202] Cannot create hsr debugfs directory
[  420.217541][ T2202] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  420.225102][ T2202] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  420.231046][ T2202] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  420.235911][ T2202] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  420.258408][ T2202] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.261266][ T2202] bridge0: port 2(bridge_slave_1) entered forwarding state
[  420.264048][ T2202] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.266884][ T2202] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.306015][ T2202] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.317300][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.323775][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.333645][ T2202] 8021q: adding VLAN 0 to HW filter on device team0
[  420.339467][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.342017][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.350225][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.353030][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  420.375810][ T2202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  420.384747][ T2202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  420.422496][ T2275] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12764'.
[  420.514575][ T2202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  420.541122][ T2288] netlink: 'syz.0.12769': attribute type 21 has an invalid length.
[  420.543736][ T2202] veth0_vlan: entered promiscuous mode
[  420.552685][ T2202] veth1_vlan: entered promiscuous mode
[  420.568140][ T2202] veth0_macvtap: entered promiscuous mode
[  420.571968][ T2202] veth1_macvtap: entered promiscuous mode
[  420.587261][ T2202] batman_adv: batadv0: Interface activated: batadv_slave_0
[  420.594512][ T2202] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.606290][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.614049][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.617606][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.622861][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.712940][ T6007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.715395][ T6007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.740548][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.745000][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.765812][ T2309] wg1 speed is unknown, defaulting to 1000
[  421.028028][ T2337] netlink: 'syz.1.12786': attribute type 11 has an invalid length.
[  421.719132][ T5233] Bluetooth: hci2: command tx timeout
[  423.004959][ T2406] __nla_validate_parse: 3 callbacks suppressed
[  423.004973][ T2406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12815'.
[  423.016795][ T2406] macvtap1: entered promiscuous mode
[  423.022763][ T2406] macvtap1: entered allmulticast mode
[  423.143406][   T33] audit: type=1800 audit(1756094844.040:13): pid=2414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12816" name="memory.events" dev="tmpfs" ino=10126 res=0 errno=0
[  423.254647][ T2430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12825'.
[  423.352557][ T2449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12832'.
[  423.388382][ T2453] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  423.454734][ T2465] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  423.810257][ T5233] Bluetooth: hci2: command 0x041b tx timeout
[  423.814953][ T2509] netlink: 704 bytes leftover after parsing attributes in process `syz.1.12855'.
[  423.914854][ T2520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12858'.
[  423.921024][ T2520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12858'.
[  424.120922][ T2525] netlink: 140 bytes leftover after parsing attributes in process `syz.1.12859'.
[  424.780682][ T2580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12879'.
[  425.000540][ T2596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12885'.
[  425.065810][ T2602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12888'.
[  425.879880][ T5233] Bluetooth: hci2: command 0x041b tx timeout
[  426.177297][ T2774] netlink: 'syz.1.12951': attribute type 16 has an invalid length.
[  426.185591][ T2774] netlink: 'syz.1.12951': attribute type 17 has an invalid length.
[  426.238590][ T2785] IPv6: NLM_F_REPLACE set, but no existing node found!
[  426.387195][ T2774] tipc: Resetting bearer <eth:syzkaller0>
[  426.455915][ T2805] tipc: Started in network mode
[  426.457816][ T2805] tipc: Node identity 2a0e8770e6f5, cluster identity 4711
[  426.468963][ T2805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  426.478026][ T2792] syzkaller0: entered promiscuous mode
[  426.480491][ T2792] syzkaller0: entered allmulticast mode
[  426.497690][ T2792] tipc: Resetting bearer <eth:syzkaller0>
[  426.510868][ T2791] tipc: Resetting bearer <eth:syzkaller0>
[  426.521227][ T2791] tipc: Disabling bearer <eth:syzkaller0>
[  426.557511][ T2820] netlink: 'syz.0.12968': attribute type 10 has an invalid length.
[  427.175998][ T2938] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode
[  427.182258][ T2938] bond0: (slave dummy0): Releasing backup interface
[  427.185074][ T2938] dummy0: left promiscuous mode
[  427.187208][ T2938] dummy0: left allmulticast mode
[  427.193934][ T2938] veth0_to_bond: left allmulticast mode
[  427.196080][ T2938] veth0_to_bond: left promiscuous mode
[  427.198914][ T2938] bridge17: port 2(veth0_to_bond) entered disabled state
[  427.203159][ T2938] bond10: (slave bridge8): Releasing backup interface
[  427.206008][ T2938] bridge8: left promiscuous mode
[  427.207696][ T2938] bridge8: left allmulticast mode
[  427.212164][ T2938] bond11: (slave geneve6): Releasing backup interface
[  427.215998][ T2938] bond14: (slave ip6gretap4): Releasing active interface
[  427.218570][ T2938] bond14: (slave ip6gretap4): the permanent HWaddr of slave - 9e:6f:aa:8e:de:e6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  427.226066][ T2938] bond14: (slave veth21): Releasing active interface
[  427.229954][ T2938] bond15: (slave bond16): Releasing backup interface
[  427.234505][ T2938] veth23: left allmulticast mode
[  427.236839][ T2938] veth23: left promiscuous mode
[  427.238769][ T2938] bridge17: port 1(veth23) entered disabled state
[  427.246399][ T2938] netlink: 'syz.1.13010': attribute type 10 has an invalid length.
[  427.252010][ T2938] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  427.255950][ T2938] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  427.925552][ T2954] tipc: New replicast peer: 255.255.255.255
[  427.928580][ T2954] tipc: Enabled bearer <udp:syz2>, priority 10
[  427.959508][ T5233] Bluetooth: hci2: command 0x041b tx timeout
[  428.890479][ T2979] tunl0: entered promiscuous mode
[  428.892700][ T2979] __nla_validate_parse: 9 callbacks suppressed
[  428.892715][ T2979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13028'.
[  428.903045][ T2979] net_ratelimit: 298 callbacks suppressed
[  428.903065][ T2979] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  428.957354][ T2988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13033'.
[  429.295191][ T3030] tap0: tun_chr_ioctl cmd 2147767521
[  429.485410][ T3048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13061'.
[  429.915937][ T3065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13069'.
[  430.039161][ T5233] Bluetooth: hci2: command 0x041b tx timeout
[  430.425829][ T3070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13071'.
[  430.954364][ T3089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13079'.
[  430.957690][ T3089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13079'.
[  430.961819][ T3089] netlink: 'syz.3.13079': attribute type 18 has an invalid length.
[  431.825704][    C1] vcan0: j1939_tp_rxtimer: 0xffff888106da2c00: rx timeout, send abort
[  431.829352][    C1] vcan0: j1939_tp_rxtimer: 0xffff888106da3000: rx timeout, send abort
[  431.833092][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888106da2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  431.839175][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888106da3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  432.296846][ T3119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13091'.
[  432.300205][ T3119] netlink: 'syz.1.13091': attribute type 5 has an invalid length.
[  432.303264][ T3119] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13091'.
[  432.309524][ T3119] geneve8: entered promiscuous mode
[  432.311394][ T3119] geneve8: entered allmulticast mode
[  432.313976][ T1618] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  432.317355][ T1618] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  432.371528][ T3118] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  432.411548][ T3118] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  432.462027][ T1618] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  432.468802][ T1618] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  432.475039][ T1618] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  432.482268][ T1618] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  432.549365][ T3123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13093'.
[  432.552908][ T3123] netlink: 'syz.1.13093': attribute type 12 has an invalid length.
[  432.682708][ T3141] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode
[  432.688315][ T3141] bond0: (slave geneve3): Releasing active interface
[  432.696441][ T3141] netlink: 'syz.0.13102': attribute type 10 has an invalid length.
[  432.700947][ T3141] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  432.704131][ T3141] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  434.106407][ T3222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.111315][ T3222] syzkaller0: entered promiscuous mode
[  434.113089][ T3222] syzkaller0: entered allmulticast mode
[  434.123984][ T3222] tipc: Resetting bearer <eth:syzkaller0>
[  434.124836][ T3224] IPVS: length: 100 != 8
[  434.129290][ T3221] tipc: Resetting bearer <eth:syzkaller0>
[  434.135327][ T3221] tipc: Disabling bearer <eth:syzkaller0>
[  434.195116][ T3232] __nla_validate_parse: 1 callbacks suppressed
[  434.195128][ T3232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13144'.
[  434.463540][T31124] IPVS: starting estimator thread 0...
[  434.548971][ T3279] IPVS: using max 92 ests per chain, 220800 per kthread
[  434.569038][ T3287] Bluetooth: hci1: Opcode 0x080f failed: -4
[  434.695633][ T3294] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13172'.
[  435.058183][ T3334] wg1 speed is unknown, defaulting to 1000
[  435.525664][ T3392] macvtap0: refused to change device tx_queue_len
[  436.580040][ T1618] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  436.583741][ T1618] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  436.587008][ T1618] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  436.594319][ T1618] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  436.600774][T30567] Bluetooth: hci1: command 0x0405 tx timeout
[  437.506529][ T3496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13261'.
[  437.677444][ T3522] netlink: 'syz.0.13272': attribute type 11 has an invalid length.
[  437.791946][ T3538] netlink: 65520 bytes leftover after parsing attributes in process `syz.1.13278'.
[  437.794883][ T3538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13278'.
[  437.959331][   T33] audit: type=1800 audit(1756094858.860:14): pid=3545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13280" name="memory.events" dev="tmpfs" ino=22989 res=0 errno=0
[  438.024064][ T3555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13286'.
[  438.132437][ T3563] dvmrp1: tun_chr_ioctl cmd 1074025677
[  438.134348][ T3563] dvmrp1: linktype set to 773
[  438.866344][ T3599] netlink: 'syz.3.13307': attribute type 1 has an invalid length.
[  438.871109][ T3599] netlink: 15 bytes leftover after parsing attributes in process `syz.3.13307'.
[  439.319344][ T3640] wg1 speed is unknown, defaulting to 1000
[  439.369321][ T3653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13331'.
[  439.463888][ T3663] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  439.468275][ T3663] syzkaller0: entered promiscuous mode
[  439.472223][ T3663] syzkaller0: entered allmulticast mode
[  440.755816][ T3711] netlink: 'syz.3.13360': attribute type 3 has an invalid length.
[  440.826790][ T3719] netlink: 596 bytes leftover after parsing attributes in process `syz.3.13364'.
[  440.972871][ T3740] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  440.992038][ T3742] netlink: 96 bytes leftover after parsing attributes in process `syz.0.13374'.
[  441.452330][ T3787] syzkaller1: entered allmulticast mode
[  441.890407][ T3755] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  442.411862][ T3816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13404'.
[  443.342090][ T3890] netlink: 'syz.3.13439': attribute type 10 has an invalid length.
[  443.352364][ T3890] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.356104][ T3890] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  443.360828][ T3890] netlink: 'syz.3.13439': attribute type 10 has an invalid length.
[  443.363758][ T3890] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13439'.
[  443.367154][ T3890] batadv0: entered promiscuous mode
[  443.375097][ T3890] batadv0: entered allmulticast mode
[  443.382897][ T3890] bond0: (slave batadv0): Releasing backup interface
[  443.389564][ T3890] bridge0: port 3(batadv0) entered blocking state
[  443.391885][ T3890] bridge0: port 3(batadv0) entered disabled state
[  443.829192][ T1618] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  443.833015][ T1618] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  444.267854][ T3908] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  444.292333][ T3908] netlink: 'syz.0.13446': attribute type 4 has an invalid length.
[  444.986155][ T3970] netlink: 'syz.0.13474': attribute type 3 has an invalid length.
[  445.015909][ T3972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13475'.
[  445.021218][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13475'.
[  445.024974][ T3972] netlink: 'syz.0.13475': attribute type 1 has an invalid length.
[  445.028296][ T3972] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13475'.
[  445.050089][ T3972] nbd: socks must be embedded in a SOCK_ITEM attr
[  445.052906][ T3972] block nbd0: shutting down sockets
[  445.714478][ T4015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13496'.
[  445.978349][ T4046] wg1 speed is unknown, defaulting to 1000
[  446.228312][ T4071] wg1 speed is unknown, defaulting to 1000
[  446.581258][ T4123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13545'.
[  446.620234][ T4130] netlink: 'syz.0.13548': attribute type 21 has an invalid length.
[  446.623049][ T4130] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13548'.
[  446.671907][ T4139] netlink: 'syz.3.13552': attribute type 10 has an invalid length.
[  446.674693][ T4139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13552'.
[  446.683555][ T4139] team0: Port device geneve0 added
[  446.764281][ T4150] netlink: 10 bytes leftover after parsing attributes in process `syz.3.13556'.
[  446.876149][ T4168] netlink: 256 bytes leftover after parsing attributes in process `syz.3.13566'.
[  446.879800][ T4168] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13566'.
[  448.441522][ T4280] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  448.471562][ T4282] netlink: 'syz.3.13618': attribute type 1 has an invalid length.
[  448.474736][ T4282] netlink: 'syz.3.13618': attribute type 1 has an invalid length.
[  448.746089][ T4307] netlink: 'syz.3.13629': attribute type 10 has an invalid length.
[  448.752994][ T4307] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  448.787890][ T4310] netlink: 'syz.0.13630': attribute type 1 has an invalid length.
[  449.109050][ T4331] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  449.113878][ T4331] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  449.117771][ T4331] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  449.502157][ T4354] netlink: 'syz.1.13651': attribute type 10 has an invalid length.
[  449.505954][ T4354] netlink: 'syz.1.13651': attribute type 10 has an invalid length.
[  449.511611][ T4354] dummy0: entered promiscuous mode
[  449.513742][ T4354] dummy0: entered allmulticast mode
[  449.516038][ T4354] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  450.626903][ T4431] __nla_validate_parse: 6 callbacks suppressed
[  450.626924][ T4431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13687'.
[  452.173693][ T4518] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  452.568213][ T4540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13735'.
[  452.900096][ T4577] netlink: 'syz.0.13752': attribute type 1 has an invalid length.
[  452.996909][ T4583] netlink: 324 bytes leftover after parsing attributes in process `syz.0.13754'.
[  453.550654][ T4609] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13763'.
[  453.850095][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13778'.
[  453.902907][ T4646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13781'.
[  453.906575][ T4646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13781'.
[  453.910443][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13781'.
[  454.037704][ T4661] netlink: 'syz.0.13788': attribute type 16 has an invalid length.
[  454.044309][ T4661] netlink: 'syz.0.13788': attribute type 17 has an invalid length.
[  454.321976][ T4689] netlink: 'syz.3.13800': attribute type 11 has an invalid length.
[  454.477429][ T4695] wg1 speed is unknown, defaulting to 1000
[  454.636513][ T4702] wg1 speed is unknown, defaulting to 1000
[  454.924365][ T4722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13812'.
[  454.928305][ T4723] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13813'.
[  455.074361][ T4732] netlink: 'syz.0.13818': attribute type 1 has an invalid length.
[  455.106593][ T4736] tap0: tun_chr_ioctl cmd 1074025677
[  455.110128][ T4736] tap0: linktype set to 780
[  455.188517][ T4751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.445385][ T4778] netlink: 'syz.3.13839': attribute type 10 has an invalid length.
[  455.449172][ T4778] team0: entered promiscuous mode
[  455.451533][ T4778] team_slave_0: entered promiscuous mode
[  455.454132][ T4778] team_slave_1: entered promiscuous mode
[  455.456651][ T4778] geneve0: entered promiscuous mode
[  455.459425][ T4778] bridge0: port 4(team0) entered blocking state
[  455.462241][ T4778] bridge0: port 4(team0) entered disabled state
[  455.465174][ T4778] team0: entered allmulticast mode
[  455.467415][ T4778] team_slave_0: entered allmulticast mode
[  455.471456][ T4778] team_slave_1: entered allmulticast mode
[  455.473988][ T4778] geneve0: entered allmulticast mode
[  455.478282][ T4778] bridge0: port 4(team0) entered blocking state
[  455.481039][ T4778] bridge0: port 4(team0) entered forwarding state
[  456.050814][ T4792] __nla_validate_parse: 2 callbacks suppressed
[  456.050832][ T4792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13846'.
[  456.102526][ T4796] netlink: 'syz.1.13848': attribute type 66 has an invalid length.
[  456.171806][ T4802] tipc: MTU too low for tipc bearer
[  456.214696][ T4808] sit5: entered promiscuous mode
[  456.431476][ T4826] wg1 speed is unknown, defaulting to 1000
[  456.453351][ T4830] veth5: entered promiscuous mode
[  456.863549][ T4860] syzkaller1: entered allmulticast mode
[  458.536158][ T4906] netlink: 84 bytes leftover after parsing attributes in process `syz.0.13893'.
[  459.447810][ T4968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13918'.
[  459.453537][ T4968] vlan1: entered promiscuous mode
[  459.455296][ T4968] gretap0: entered promiscuous mode
[  459.575587][ T4972] netlink: 'syz.3.13920': attribute type 9 has an invalid length.
[  459.578404][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13920'.
[  459.583789][ T4972] hsr0: entered promiscuous mode
[  459.585536][ T4972] macvlan2: entered promiscuous mode
[  459.587433][ T4972] macvlan2: entered allmulticast mode
[  459.590268][ T4972] hsr0: entered allmulticast mode
[  459.592045][ T4972] hsr_slave_0: entered allmulticast mode
[  459.594103][ T4972] hsr_slave_1: entered allmulticast mode
[  459.631509][ T4974] netlink: 'syz.3.13921': attribute type 1 has an invalid length.
[  459.633913][ T4974] netlink: 'syz.3.13921': attribute type 3 has an invalid length.
[  459.636672][ T4974] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13921'.
[  459.640726][ T4974] NCSI netlink: No device for ifindex 246
[  459.800128][ T4985] netlink: 'syz.3.13925': attribute type 16 has an invalid length.
[  459.803303][ T4985] netlink: 'syz.3.13925': attribute type 17 has an invalid length.
[  459.833712][ T4985] bridge0: port 4(team0) entered disabled state
[  459.836380][ T4985] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.839568][ T4985] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.922424][ T4985] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.927902][ T4985] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.945686][ T4997] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  459.992914][ T4985] hsr0: left allmulticast mode
[  459.994934][ T4985] hsr_slave_0: left allmulticast mode
[  459.997751][ T4985] hsr_slave_1: left allmulticast mode
[  460.009224][  T534] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.012919][  T534] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.017251][ T4996] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  460.022599][  T534] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.034127][  T534] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.064368][ T5007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13936'.
[  460.614967][ T5051] netlink: 'syz.3.13955': attribute type 1 has an invalid length.
[  461.083635][ T5085] wg1 speed is unknown, defaulting to 1000
[  461.381316][ T5104] wg1 speed is unknown, defaulting to 1000
[  461.435364][ T5116] netlink: 'syz.1.13985': attribute type 12 has an invalid length.
[  461.478576][ T5123] batadv3: entered promiscuous mode
[  461.654652][ T5145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13999'.
[  461.687698][ T5149] bridge0: port 1(erspan0) entered blocking state
[  461.690504][ T5149] bridge0: port 1(erspan0) entered disabled state
[  461.692747][ T5149] erspan0: entered allmulticast mode
[  461.695296][ T5149] erspan0: entered promiscuous mode
[  461.700244][ T5149] erspan0: left allmulticast mode
[  461.702014][ T5149] erspan0: left promiscuous mode
[  461.704317][ T5149] bridge0: port 1(erspan0) entered disabled state
[  461.842634][ T5169] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14011'.
[  461.978172][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14014'.
[  462.141164][ T5200] syz_tun: entered allmulticast mode
[  462.142991][ T5200] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  462.235240][  T534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.238626][  T534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.250861][  T534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.262603][  T534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.755278][ T5232] macsec4: entered promiscuous mode
[  462.757533][ T5232] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode
[  462.947800][ T5245] netlink: 232 bytes leftover after parsing attributes in process `syz.1.14042'.
[  463.252487][ T5276] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14055'.
[  463.258783][ T5276] batadv1: entered promiscuous mode
[  463.261559][ T5276] batadv1: entered allmulticast mode
[  463.423692][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14057'.
[  463.608725][ T5305] netlink: 'syz.1.14063': attribute type 83 has an invalid length.
[  463.629834][ T5305] wg1 speed is unknown, defaulting to 1000
[  463.806893][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14070'.
[  464.620737][ T5367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  466.664918][ T5419] netlink: 120 bytes leftover after parsing attributes in process `syz.1.14112'.
[  466.761089][ T5428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14114'.
[  466.765019][ T5428] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  466.768096][ T5428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.899307][ T5432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14116'.
[  466.954620][ T5432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14116'.
[  466.960335][ T5432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14116'.
[  466.964502][ T5432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14116'.
[  466.966843][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14117'.
[  466.997203][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14117'.
[  467.099671][ T5437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14117'.
[  467.166639][ T5445] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14119'.
[  467.217060][ T5447] vlan6: entered promiscuous mode
[  467.220110][ T5447] vlan6: entered allmulticast mode
[  467.222368][ T5447] hsr_slave_1: entered allmulticast mode
[  467.345323][ T5458] netlink: 'syz.3.14123': attribute type 1 has an invalid length.
[  467.425540][ T5464] bond0: (slave bond_slave_1): Releasing backup interface
[  467.442786][ T5463] bond0: (slave dummy0): Releasing backup interface
[  467.446003][ T5463] dummy0: left promiscuous mode
[  467.447952][ T5463] dummy0: left allmulticast mode
[  467.541511][ T5472] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  467.681776][ T5481] netlink: 'syz.3.14130': attribute type 4 has an invalid length.
[  467.722294][ T5485] 8021q: VLANs not supported on ipvlan1
[  467.732261][ T5485] macsec1: entered promiscuous mode
[  467.734394][ T5485] macsec1: entered allmulticast mode
[  467.831299][ T5487] vti0: entered promiscuous mode
[  467.833626][ T5487] vti0: entered allmulticast mode
[  468.082249][ T5499] vlan1: entered promiscuous mode
[  468.084151][ T5499] vlan1: entered allmulticast mode
[  468.085852][ T5499] hsr_slave_1: entered allmulticast mode
[  468.133537][ T5499] wg1 speed is unknown, defaulting to 1000
[  468.292164][ T5505] tipc: Failed to remove unknown binding: 66,1,1/0:750487827/750487829
[  468.299863][ T5505] tipc: Failed to remove unknown binding: 66,1,1/0:750487827/750487829
[  468.310661][ T5505] tipc: Failed to remove unknown binding: 66,1,1/0:750487827/750487829
[  468.406714][  T534] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  468.411093][  T534] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  468.432722][ T5515] 8021q: adding VLAN 0 to HW filter on device bond5
[  468.440804][  T534] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  468.444474][  T534] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  468.717517][ T5529] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  468.754715][ T5531] netlink: 'syz.1.14149': attribute type 30 has an invalid length.
[  468.767161][ T1618] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  468.770992][ T1618] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  468.774446][ T1618] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  468.777657][ T1618] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  468.781056][ T5531] netlink: 'syz.1.14149': attribute type 30 has an invalid length.
[  469.017078][ T5545] 8021q: adding VLAN 0 to HW filter on device bond18
[  469.032354][ T5545] macvlan2: entered promiscuous mode
[  469.034517][ T5545] macvlan2: entered allmulticast mode
[  469.038163][ T5545] bond18: entered promiscuous mode
[  469.040911][ T5545] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  469.045090][ T5545] bond18: left promiscuous mode
[  469.881530][ T5579] delete_channel: no stack
[  470.036312][ T5591] netlink: 'syz.3.14165': attribute type 1 has an invalid length.
[  470.051008][ T5591] 8021q: adding VLAN 0 to HW filter on device bond2
[  470.060595][ T5589] bond2: (slave ip6gretap1): making interface the new active one
[  470.064841][ T5589] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  470.378561][ T5611] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.414559][ T5611] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.453606][ T5611] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.504867][ T5611] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.566178][ T1618] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  470.576318][ T1618] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  470.586269][  T534] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  470.594354][  T534] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  470.675306][ T5619] veth7: entered promiscuous mode
[  470.690155][ T5617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.774243][ T5630] can: request_module (can-proto-0) failed.
[  470.802062][ T5633] IPVS: Error connecting to the multicast addr
[  470.866269][ T5648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  471.078371][ T5673] 8021q: adding VLAN 0 to HW filter on device bond19
[  471.095413][ T5673] bridge0: port 1(bond19) entered blocking state
[  471.098183][ T5673] bridge0: port 1(bond19) entered disabled state
[  471.103018][ T5673] bond19: entered allmulticast mode
[  471.107721][ T5673] bond19: entered promiscuous mode
[  471.137869][ T5677] xfrm1: entered allmulticast mode
[  471.179105][ T5679] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  471.181808][ T5679] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  471.184342][ T5679] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  471.600288][ T5700] netlink: 'syz.1.14194': attribute type 12 has an invalid length.
[  471.868078][ T5702] __nla_validate_parse: 45 callbacks suppressed
[  471.868091][ T5702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14195'.
[  471.933947][ T5706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14196'.
[  471.937750][ T5706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14196'.
[  471.972264][ T5708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14197'.
[  472.026641][ T5713] vlan0: entered promiscuous mode
[  472.059492][ T5717] netlink: 'syz.3.14199': attribute type 1 has an invalid length.
[  472.063778][ T5717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  472.337881][ T5697] Bluetooth: hci2: Opcode 0x080f failed: -4
[  472.385860][ T5729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14203'.
[  472.443739][ T5733] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  472.494576][ T5739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14207'.
[  472.749197][ T5759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14212'.
[  472.754433][ T5759] netlink: 'syz.1.14212': attribute type 1 has an invalid length.
[  472.757455][ T5759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14212'.
[  472.763522][T26673] block nbd0: Receive control failed (result -32)
[  472.900833][ T5766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  472.915413][ T5771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14214'.
[  473.055715][ T5776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.087196][ T5782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14219'.
[  473.249819][ T5804] pimreg3: entered allmulticast mode
[  473.373328][ T5818] netlink: 'syz.1.14230': attribute type 1 has an invalid length.
[  473.559263][ T5233] Bluetooth: hci2: command 0x041b tx timeout
[  473.923370][ T5840] netlink: 'syz.1.14238': attribute type 1 has an invalid length.
[  473.953951][ T5840] bond20: (slave bridge18): making interface the new active one
[  473.957741][ T5840] bond20: (slave bridge18): Enslaving as an active interface with an up link
[  474.054538][ T5848] IPVS: set_ctl: invalid protocol: 60 172.30.1.4:20003
[  474.364892][ T5898] netlink: 'syz.0.14248': attribute type 5 has an invalid length.
[  474.405014][ T5904] netlink: 'syz.3.14251': attribute type 10 has an invalid length.
[  474.421532][ T5904] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  474.426406][ T5904] team0: left allmulticast mode
[  474.428414][ T5904] team_slave_0: left allmulticast mode
[  474.432401][ T5904] team_slave_1: left allmulticast mode
[  474.434541][ T5904] geneve0: left allmulticast mode
[  474.436727][ T5904] bridge0: port 4(team0) entered disabled state
[  474.446040][ T5904] bridge0: port 3(batadv0) entered disabled state
[  474.458290][ T5904] bridge_slave_1: left allmulticast mode
[  474.460905][ T5904] bridge_slave_1: left promiscuous mode
[  474.463146][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.467781][ T5904] bridge_slave_0: left allmulticast mode
[  474.471914][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.481746][ T5904] bond0: (slave bridge0): Releasing backup interface
[  474.512373][ T5919] mac80211_hwsim hwsim40 wlan1: left allmulticast mode
[  474.754732][ T5940] netlink: 'syz.3.14261': attribute type 29 has an invalid length.
[  475.621611][ T5962] syzkaller0: entered promiscuous mode
[  475.623917][ T5962] syzkaller0: entered allmulticast mode
[  475.844627][ T5973] openvswitch: netlink: Flow key attr not present in new flow.
[  475.902844][ T5978] netlink: 'syz.0.14269': attribute type 30 has an invalid length.
[  476.184924][ T5992] pim6reg1: entered promiscuous mode
[  476.199921][ T5992] pim6reg1: entered allmulticast mode
[  476.398793][ T6013] pimreg: entered allmulticast mode
[  476.407050][ T6015] netlink: 'syz.1.14282': attribute type 16 has an invalid length.
[  476.410624][ T6015] netlink: 'syz.1.14282': attribute type 17 has an invalid length.
[  476.436116][ T6015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  476.451602][ T6013] geneve3: entered promiscuous mode
[  476.459313][ T6013] dvmrp8: entered allmulticast mode
[  476.464273][ T6013] pimreg: left allmulticast mode
[  476.466328][ T6013] dvmrp8: left allmulticast mode
[  476.653251][ T6022] netlink: 'syz.1.14285': attribute type 3 has an invalid length.
[  476.654537][ T6020] dvmrp0: entered allmulticast mode
[  476.669825][ T6024] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  476.674212][ T6024] syzkaller0: entered promiscuous mode
[  476.680270][ T6024] syzkaller0: entered allmulticast mode
[  476.700789][ T6024] tipc: Resetting bearer <eth:syzkaller0>
[  476.712790][ T6023] tipc: Resetting bearer <eth:syzkaller0>
[  476.722523][ T6023] tipc: Disabling bearer <eth:syzkaller0>
[  476.825955][ T6050] tunl0: left promiscuous mode
[  476.835355][ T6050] gretap0: refused to change device tx_queue_len
[  476.837681][ T6050] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  477.228246][ T6067] can: request_module (can-proto-4) failed.
[  477.367206][ T6084] __nla_validate_parse: 19 callbacks suppressed
[  477.367222][ T6084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14304'.
[  477.373969][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14304'.
[  477.638508][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14306'.
[  477.657432][ T6092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  477.665361][ T6092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.717196][ T6092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  477.726958][ T6092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.778297][ T6092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  477.783763][ T6092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.804686][ T6101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  477.808061][ T6101] syzkaller0: entered promiscuous mode
[  477.810799][ T6101] syzkaller0: entered allmulticast mode
[  477.818255][ T6101] tipc: Resetting bearer <eth:syzkaller0>
[  477.822066][ T6100] tipc: Resetting bearer <eth:syzkaller0>
[  477.827464][ T6100] tipc: Disabling bearer <eth:syzkaller0>
[  477.833570][ T6092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  477.837193][ T6092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.902942][ T6107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  477.914576][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  477.918134][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  477.923441][ T6107] syzkaller0: entered promiscuous mode
[  477.925751][ T6107] syzkaller0: entered allmulticast mode
[  477.939718][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  477.942945][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  477.953962][ T1618] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  477.957183][ T1618] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  477.964161][ T6107] tipc: Resetting bearer <eth:syzkaller0>
[  477.979185][ T6106] tipc: Resetting bearer <eth:syzkaller0>
[  477.987963][ T6106] tipc: Disabling bearer <eth:syzkaller0>
[  477.993052][ T1618] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  477.996408][ T1618] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.101681][ T6119] bond0: (slave bond_slave_0): Releasing backup interface
[  478.105398][ T6119] team_slave_0: left promiscuous mode
[  478.108538][ T6119] team0: Port device team_slave_0 removed
[  478.111911][ T6119] team_slave_1: left promiscuous mode
[  478.115213][ T6119] team0: Port device team_slave_1 removed
[  478.117819][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_0
[  478.121463][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_1
[  478.125135][ T6119] geneve0: left promiscuous mode
[  478.128388][ T6119] team0: Port device geneve0 removed
[  478.132152][ T6119] bond0: (slave wlan1): Releasing backup interface
[  478.137552][ T6119] bond2: (slave ip6gretap1): Releasing active interface
[  478.162462][ T6119] team0: Mode changed to "broadcast"
[  478.173281][ T6128] validate_nla: 5 callbacks suppressed
[  478.173299][ T6128] netlink: 'syz.0.14321': attribute type 1 has an invalid length.
[  478.201397][ T6133] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14322'.
[  478.211631][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14322'.
[  478.215387][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14322'.
[  478.220268][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14322'.
[  478.452644][ T6162] sit0: entered promiscuous mode
[  478.455011][ T6162] netlink: 'syz.0.14327': attribute type 1 has an invalid length.
[  478.458304][ T6162] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14327'.
[  478.465024][ T6162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  478.598060][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14333'.
[  478.612280][ T6180] netlink: 'syz.0.14333': attribute type 10 has an invalid length.
[  478.617443][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14333'.
[  478.617554][ T6177] netlink: zone id is out of range
[  478.621289][ T6180] netlink: 'syz.0.14333': attribute type 2 has an invalid length.
[  478.623510][ T6177] netlink: zone id is out of range
[  478.626586][ T6180] netlink: 'syz.0.14333': attribute type 1 has an invalid length.
[  478.628482][ T6177] netlink: zone id is out of range
[  478.628492][ T6177] netlink: zone id is out of range
[  478.628498][ T6177] netlink: zone id is out of range
[  478.628504][ T6177] netlink: zone id is out of range
[  478.671604][ T6183] netlink: 'syz.0.14334': attribute type 11 has an invalid length.
[  478.709359][ T6188] netlink: 'syz.0.14336': attribute type 5 has an invalid length.
[  478.822421][ T6193] bridge8: port 1(veth0_to_bond) entered blocking state
[  478.825524][ T6193] bridge8: port 1(veth0_to_bond) entered disabled state
[  478.828604][ T6193] veth0_to_bond: entered allmulticast mode
[  478.832017][ T6193] veth0_to_bond: entered promiscuous mode
[  478.866935][ T6198] netlink: 'syz.0.14338': attribute type 16 has an invalid length.
[  478.870300][ T6198] netlink: 'syz.0.14338': attribute type 3 has an invalid length.
[  479.385442][ T6239] netlink: 'syz.0.14353': attribute type 21 has an invalid length.
[  479.482765][ T6249] pim6reg1: entered promiscuous mode
[  479.485118][ T6249] pim6reg1: entered allmulticast mode
[  479.779499][ T6285] netlink: 'syz.0.14369': attribute type 1 has an invalid length.
[  479.827295][ T6278] 8021q: adding VLAN 0 to HW filter on device bond8
[  479.831793][ T6278] bond7: (slave bond8): making interface the new active one
[  479.835461][ T6278] bond7: (slave bond8): Enslaving as an active interface with an up link
[  479.848372][ T6278] bond7: (slave gretap2): Enslaving as a backup interface with an up link
[  479.855515][ T6278] 8021q: adding VLAN 0 to HW filter on device bond7
[  479.918685][ T6299] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  480.700085][ T6325] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  480.811298][ T6332] batadv1: entered promiscuous mode
[  480.814408][ T6332] 8021q: adding VLAN 0 to HW filter on device batadv1
[  481.002507][ T6354] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.055342][ T6365] bond3: entered promiscuous mode
[  481.057389][ T6365] 8021q: adding VLAN 0 to HW filter on device bond3
[  481.066114][ T6365] bond3 (unregistering): Released all slaves
[  481.075487][ T6354] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.153608][ T6354] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.205557][ T6354] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.304129][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  481.312209][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  481.318004][   T33] audit: type=1800 audit(1756094902.210:15): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.14400" name="memory.events" dev="tmpfs" ino=2683 res=0 errno=0
[  481.327784][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  481.341296][ T1618] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  481.548357][ T6395] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.603952][ T6395] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.618562][ T6402] wg1 speed is unknown, defaulting to 1000
[  481.652449][ T6395] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.718373][ T6395] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.960272][T30567] Bluetooth: hci2: command 0x041b tx timeout
[  482.714574][   T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  482.721141][ T6490] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  482.834792][ T6499] __nla_validate_parse: 30 callbacks suppressed
[  482.834809][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14445'.
[  482.870351][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14446'.
[  482.906780][ T6503] team0: left promiscuous mode
[  482.909556][ T6503] batadv0: left promiscuous mode
[  482.913065][ T6503] vlan0: left promiscuous mode
[  482.916171][ T6503] veth5: left promiscuous mode
[  482.918175][ T6503] macvlan2: left promiscuous mode
[  482.922009][ T6503] macsec1: left promiscuous mode
[  482.924102][ T6503] vti0: left promiscuous mode
[  482.926015][ T6503] vlan1: left promiscuous mode
[  482.929760][ T6503] geneve3: left promiscuous mode
[  482.932336][ T6503] batadv1: left promiscuous mode
[  482.943887][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  482.955146][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  482.963112][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  482.971486][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  483.032088][ T6508] net_ratelimit: 15 callbacks suppressed
[  483.032111][ T6508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  483.132793][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14455'.
[  483.136196][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14455'.
[  483.139575][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14455'.
[  483.388708][ T6556] wg1 speed is unknown, defaulting to 1000
[  483.532616][ T6556] validate_nla: 5 callbacks suppressed
[  483.532632][ T6556] netlink: 'syz.3.14466': attribute type 13 has an invalid length.
[  483.538095][ T6556] netlink: 'syz.3.14466': attribute type 17 has an invalid length.
[  483.583952][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.588058][ T6556] 8021q: adding VLAN 0 to HW filter on device team0
[  483.595817][ T6556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  483.605643][ T6570] netlink: 'syz.1.14471': attribute type 1 has an invalid length.
[  483.608579][ T6570] netlink: 'syz.1.14471': attribute type 2 has an invalid length.
[  483.622858][ T6570] netlink: 'syz.1.14471': attribute type 1 has an invalid length.
[  483.626090][ T6570] netlink: 'syz.1.14471': attribute type 2 has an invalid length.
[  483.713957][ T6581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  483.717203][ T6581] IPv6: NLM_F_CREATE should be set when creating new route
[  483.762994][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14479'.
[  483.779643][ T6588] netlink: 'syz.3.14478': attribute type 10 has an invalid length.
[  483.782820][ T6588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14478'.
[  483.786493][ T6588] dummy0: entered promiscuous mode
[  483.787974][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14480'.
[  483.794215][ T6588] dummy0: entered allmulticast mode
[  483.801178][ T6588] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  483.825433][ T6588] netlink: 4472 bytes leftover after parsing attributes in process `syz.3.14478'.
[  483.839149][ T6594] netlink: 80 bytes leftover after parsing attributes in process `syz.1.14482'.
[  483.865185][ T6596] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  484.077887][ T6611] netlink: 'syz.3.14489': attribute type 6 has an invalid length.
[  484.086702][ T6609] 8021q: adding VLAN 0 to HW filter on device bond21
[  484.093877][ T6611] netlink: 'syz.3.14489': attribute type 6 has an invalid length.
[  484.214045][ T6630] netlink: 'syz.0.14496': attribute type 2 has an invalid length.
[  484.349942][ T6641] dvmrp8: entered allmulticast mode
[  484.357517][ T6641] dvmrp8: left allmulticast mode
[  484.413161][ T6655] unknown channel width for channel at 909000KHz?
[  484.415917][ T6653] unknown channel width for channel at 909000KHz?
[  484.512907][ T6665] IPVS: Scheduler module ip_vs_sip not found
[  484.552220][ T6676] openvswitch: netlink: Key type 81 is out of range max 32
[  484.577779][ T6680] tipc: Failed to remove unknown binding: 66,1,1/0:3877464866/3877464868
[  484.620830][ T6692] 8021q: adding VLAN 0 to HW filter on device bond22
[  484.635111][ T6692] gretap3: entered promiscuous mode
[  484.646925][ T6692] bond22: (slave gretap3): making interface the new active one
[  484.651221][ T6692] bond22: (slave gretap3): Enslaving as an active interface with an up link
[  484.660703][ T6692] macvlan2: entered promiscuous mode
[  484.662938][ T6692] macvlan2: entered allmulticast mode
[  484.665660][ T6692] bond22: entered promiscuous mode
[  484.668182][ T6692] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  484.674671][ T6692] bond22: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  484.682638][ T6692] bond22: left promiscuous mode
[  484.784879][ T6710] netem: change failed
[  485.788004][   T33] audit: type=1800 audit(1756094906.680:16): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14533" name="memory.events" dev="tmpfs" ino=2998 res=0 errno=0
[  485.890432][ T6754] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  485.974557][ T6759] bridge0: port 2(erspan0) entered blocking state
[  485.977269][ T6759] bridge0: port 2(erspan0) entered disabled state
[  485.981432][ T6759] erspan0: entered allmulticast mode
[  485.983865][ T6759] erspan0: entered promiscuous mode
[  485.987937][ T6759] erspan0: left allmulticast mode
[  485.990722][ T6759] erspan0: left promiscuous mode
[  485.992561][ T6759] bridge0: port 2(erspan0) entered disabled state
[  486.599132][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  486.654070][ T6778] batadv_slave_1: entered promiscuous mode
[  486.706576][ T6788] wg1 speed is unknown, defaulting to 1000
[  486.751425][ T6793] ip6tnl0: Master is either lo or non-ether device
[  486.837140][ T6799] wg1 speed is unknown, defaulting to 1000
[  486.843446][ T6798] wg1 speed is unknown, defaulting to 1000
[  486.910394][ T6806] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.933757][ T6806] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.966508][ T6808] IPVS: Error connecting to the multicast addr
[  486.996288][ T6806] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  487.062492][ T6806] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  487.135830][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  487.146497][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  487.160491][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  487.163201][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  487.450615][ T6841] 8021q: adding VLAN 0 to HW filter on device bond23
[  487.799409][ T5233] Bluetooth: hci2: command 0x041b tx timeout
[  488.122180][ T6855] __nla_validate_parse: 24 callbacks suppressed
[  488.122197][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14573'.
[  488.128088][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14573'.
[  488.132837][ T6855] block nbd3: not configured, cannot reconfigure
[  488.463664][ T6888] Unsupported ieee802154 address type: 0
[  488.541611][ T6896] syzkaller0: entered promiscuous mode
[  488.544252][ T6896] syzkaller0: entered allmulticast mode
[  488.670333][ T6907] !: renamed from dummy0 (while UP)
[  488.746781][ T6917] wg1 speed is unknown, defaulting to 1000
[  488.841604][ T6934] IPVS: length: 199 != 8
[  488.871643][ T6938] syzkaller1: entered promiscuous mode
[  488.874399][ T6938] syzkaller1: entered allmulticast mode
[  488.883811][ T6938] only policy match revision 0 supported
[  488.883920][ T6938] unable to load match
[  488.997954][ T6950] vlan0: entered promiscuous mode
[  489.030953][ T6956] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  489.060150][ T6957] wg1 speed is unknown, defaulting to 1000
[  489.075722][ T6959] syzkaller0: left promiscuous mode
[  489.077502][ T6959] syzkaller0: left allmulticast mode
[  489.301705][ T6972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.440757][ T6976] syzkaller1: entered promiscuous mode
[  489.442672][ T6976] syzkaller1: entered allmulticast mode
[  490.273321][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14613'.
[  490.304996][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14616'.
[  490.309472][ T7000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14616'.
[  490.365984][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14620'.
[  490.392874][ T7013] netem: change failed
[  490.445885][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14625'.
[  490.462082][ T7017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14624'.
[  490.475150][ T5907] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  490.484081][ T5907] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  490.485193][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14627'.
[  490.498020][ T7026] netlink: 56 bytes leftover after parsing attributes in process `syz.1.14627'.
[  490.503421][ T7023] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.507375][ T7023] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.590968][ T7023] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.594554][ T7023] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.661569][ T7023] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.665360][ T7023] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.701731][ T7023] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.704931][ T7023] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.748803][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  490.752341][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.762990][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  490.765719][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.772280][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  490.774955][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.777602][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  490.789364][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  490.844847][ T7044] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  490.874500][ T7049] veth1_to_bridge: entered allmulticast mode
[  491.703461][ T7049] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  491.792513][ T7080] validate_nla: 5 callbacks suppressed
[  491.792528][ T7080] netlink: 'syz.1.14645': attribute type 5 has an invalid length.
[  491.807299][ T7084] netlink: 'syz.1.14645': attribute type 5 has an invalid length.
[  491.826293][ T7083] syzkaller0: entered promiscuous mode
[  491.828033][ T7083] syzkaller0: entered allmulticast mode
[  492.001857][ T7090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  492.702375][ T7096] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  492.953868][ T7126] pimreg3: entered allmulticast mode
[  493.152110][ T7146] __nla_validate_parse: 10 callbacks suppressed
[  493.152138][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14666'.
[  493.476686][ T7168] 8021q: adding VLAN 0 to HW filter on device bond3
[  493.479728][ T7168] bridge0: port 1(bond3) entered blocking state
[  493.481885][ T7168] bridge0: port 1(bond3) entered disabled state
[  493.484088][ T7168] bond3: entered allmulticast mode
[  493.486762][ T7168] bond3: entered promiscuous mode
[  493.489446][ T7168] bridge0: port 1(bond3) entered blocking state
[  493.492094][ T7168] bridge0: port 1(bond3) entered forwarding state
[  493.574816][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14677'.
[  493.606735][ T7179] netlink: 'syz.3.14678': attribute type 10 has an invalid length.
[  493.611325][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14678'.
[  493.615136][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14678'.
[  493.672812][ T7183] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14680'.
[  493.699898][ T7139] bridge0: port 1(bond3) entered disabled state
[  493.704858][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14681'.
[  493.717364][ T7187] wg1 speed is unknown, defaulting to 1000
[  493.844677][ T7190] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  493.849280][ T7190] syzkaller0: entered promiscuous mode
[  493.851946][ T7190] syzkaller0: entered allmulticast mode
[  493.866071][ T7190] tipc: Resetting bearer <eth:syzkaller0>
[  493.875133][ T7189] tipc: Resetting bearer <eth:syzkaller0>
[  493.881255][ T7189] tipc: Disabling bearer <eth:syzkaller0>
[  494.072779][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14686'.
[  494.117752][ T7209] netlink: 788 bytes leftover after parsing attributes in process `syz.3.14688'.
[  494.154013][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14689'.
[  494.171096][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14689'.
[  494.199108][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  495.225391][ T7234] netlink: 'syz.3.14696': attribute type 1 has an invalid length.
[  495.593263][ T7253] netlink: 'syz.3.14704': attribute type 41 has an invalid length.
[  496.092708][ T7281] netlink: 'syz.3.14714': attribute type 1 has an invalid length.
[  496.108325][ T7281] 8021q: adding VLAN 0 to HW filter on device bond4
[  496.121131][ T7283] 8021q: adding VLAN 0 to HW filter on device bond4
[  496.124621][ T7283] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address
[  496.129790][ T7283] bond4: (slave vxcan5): Error -95 calling set_mac_address
[  496.293119][ T7290] netlink: 'syz.1.14716': attribute type 11 has an invalid length.
[  496.342739][ T7302] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  496.349984][ T7302] tipc: Resetting bearer <eth:syzkaller0>
[  496.360027][ T7307] tipc: Disabling bearer <eth:syzkaller0>
[  496.476957][ T7319] tun0: tun_chr_ioctl cmd 2148045848
[  496.481576][ T7319] tun0: tun_chr_ioctl cmd 21731
[  496.701116][ T7332] team0: Unable to change to the same mode the team is in
[  496.707961][ T7332] tipc: Enabled bearer <eth:team0>, priority 0
[  496.717089][ T5887] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  496.721044][ T5887] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  496.724266][ T5887] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  496.727289][ T5887] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  496.842754][ T5887] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  497.733216][ T7359] siw: device registration error -23
[  497.739267][   T10] tipc: Node number set to 3439036272
[  497.913728][ T7379] macvlan3: entered allmulticast mode
[  497.916051][ T7379] veth1_vlan: entered allmulticast mode
[  497.918994][ T7379] veth1_vlan: left allmulticast mode
[  497.940529][ T7380] macvlan3: entered allmulticast mode
[  497.942442][ T7380] veth1_vlan: entered allmulticast mode
[  497.945694][ T7380] veth1_vlan: left allmulticast mode
[  498.188239][ T7389] __nla_validate_parse: 24 callbacks suppressed
[  498.188252][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14749'.
[  498.648645][ T7391] netlink: 'syz.1.14750': attribute type 1 has an invalid length.
[  498.654366][ T7391] netlink: 204 bytes leftover after parsing attributes in process `syz.1.14750'.
[  498.658118][ T7391] netlink: 'syz.1.14750': attribute type 1 has an invalid length.
[  498.778345][ T7397] netlink: 'syz.1.14752': attribute type 1 has an invalid length.
[  499.269517][ T7414] wg1 speed is unknown, defaulting to 1000
[  499.473630][ T7413] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14759'.
[  499.779903][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14761'.
[  499.883322][ T7426] wg1 speed is unknown, defaulting to 1000
[  500.572911][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14769'.
[  500.723863][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14770'.
[  500.736995][ T7446] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14770'.
[  500.832222][ T7457] netlink: 'syz.3.14775': attribute type 1 has an invalid length.
[  500.834921][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14775'.
[  500.875881][ T7457] syzkaller0: entered promiscuous mode
[  500.878098][ T7457] syzkaller0: entered allmulticast mode
[  501.002858][ T7479] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  501.011258][ T7479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14781'.
[  501.069510][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14782'.
[  501.228614][ T7507] netlink: 'syz.3.14792': attribute type 2 has an invalid length.
[  501.261133][ T7514] netlink: 'syz.3.14794': attribute type 4 has an invalid length.
[  501.270960][ T7514] netlink: 'syz.3.14794': attribute type 4 has an invalid length.
[  501.661687][ T7558] netlink: 'syz.3.14805': attribute type 16 has an invalid length.
[  501.664765][ T7558] netlink: 'syz.3.14805': attribute type 17 has an invalid length.
[  501.675551][ T7558] tipc: Resetting bearer <eth:team0>
[  501.679758][ T7558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  501.833565][T30567] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  501.836568][T30567] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  501.839567][T30567] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  501.843013][T30567] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  501.845981][T30567] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  501.868346][ T7564] wg1 speed is unknown, defaulting to 1000
[  501.960851][ T7564] chnl_net:caif_netlink_parms(): no params data found
[  502.015885][ T7564] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.019723][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.022512][ T7564] bridge_slave_0: entered allmulticast mode
[  502.025520][ T7564] bridge_slave_0: entered promiscuous mode
[  502.030551][ T7564] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.033114][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.035832][ T7564] bridge_slave_1: entered allmulticast mode
[  502.040074][ T7564] bridge_slave_1: entered promiscuous mode
[  502.063433][ T7564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  502.070292][ T7564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.092171][ T7564] team0: Port device team_slave_0 added
[  502.097219][ T7564] team0: Port device team_slave_1 added
[  502.120067][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_0
[  502.122428][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  502.131566][ T7564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  502.136957][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_1
[  502.141242][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  502.150076][ T7564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  502.184678][ T7564] hsr_slave_0: entered promiscuous mode
[  502.187424][ T7564] hsr_slave_1: entered promiscuous mode
[  502.190189][ T7564] debugfs: 'hsr0' already exists in 'hsr'
[  502.192093][ T7564] Cannot create hsr debugfs directory
[  502.289624][ T7564] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  502.296836][ T7564] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  502.304102][ T7564] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  502.311220][ T7564] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  502.401948][ T7564] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.421318][ T7564] 8021q: adding VLAN 0 to HW filter on device team0
[  502.436122][ T7139] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.439118][ T7139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  502.460901][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.464165][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  502.497959][ T7582] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  502.503428][ T7582] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.507195][ T7582] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  502.556486][ T7584] 8021q: adding VLAN 0 to HW filter on device batadv2
[  502.565267][ T7584] team0: Port device batadv2 added
[  502.574255][ T7582] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  502.582956][ T7582] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.588518][ T7582] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  502.654027][ T7582] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  502.657567][ T7582] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.662841][ T7582] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  502.680582][ T7564] 8021q: adding VLAN 0 to HW filter on device batadv0
[  502.737131][ T7582] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  502.745156][ T7582] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.751949][ T7582] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  502.831161][ T7564] veth0_vlan: entered promiscuous mode
[  502.838049][ T7564] veth1_vlan: entered promiscuous mode
[  502.848090][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  502.853572][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  502.856357][   T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  502.874073][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  502.876850][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  502.895776][   T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  502.901343][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  502.905851][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  502.911661][   T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  502.923931][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  502.927749][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  502.932863][   T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  502.954479][ T7564] veth0_macvtap: entered promiscuous mode
[  502.971498][ T7564] veth1_macvtap: entered promiscuous mode
[  502.987267][ T7564] batman_adv: batadv0: Interface activated: batadv_slave_0
[  502.997582][ T7564] batman_adv: batadv0: Interface activated: batadv_slave_1
[  503.008778][  T534] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  503.019328][  T534] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  503.028246][  T534] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  503.039694][  T534] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  503.087403][ T7138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.091063][ T7138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.126698][ T7625] netlink: 'syz.1.14823': attribute type 3 has an invalid length.
[  503.131212][ T7138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.133994][ T7138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.205824][ T7631] bridge0: port 3(netdevsim2) entered blocking state
[  503.208267][ T7631] bridge0: port 3(netdevsim2) entered disabled state
[  503.211629][ T7631] netdevsim netdevsim4 netdevsim2: entered allmulticast mode
[  503.215033][ T7631] netdevsim netdevsim4 netdevsim2: entered promiscuous mode
[  503.217902][ T7631] bridge0: port 3(netdevsim2) entered blocking state
[  503.220394][ T7631] bridge0: port 3(netdevsim2) entered forwarding state
[  503.231337][ T7631] batadv1: entered promiscuous mode
[  503.354754][ T7636] __nla_validate_parse: 6 callbacks suppressed
[  503.354781][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14826'.
[  503.704324][ T7645] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14828'.
[  503.805037][ T7645] Set syz0 is full, maxelem 0 reached
[  503.879448][T30567] Bluetooth: hci3: command tx timeout
[  503.932926][ T7655] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14832'.
[  504.101093][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14835'.
[  504.104420][ T7666] tipc: Disabling bearer <udp:syz2>
[  505.048612][ T7676] macvlan2: entered allmulticast mode
[  505.054173][ T7676] veth1_vlan: entered allmulticast mode
[  505.059986][ T7676] veth1_vlan: left allmulticast mode
[  505.128369][ T7690] wg1 speed is unknown, defaulting to 1000
[  505.197338][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14848'.
[  505.254829][ T7706] syzkaller1: entered promiscuous mode
[  505.256683][ T7706] syzkaller1: entered allmulticast mode
[  505.267664][ T7696] openvswitch: netlink: IPv4 tun info is not correct
[  505.272358][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14847'.
[  505.959184][T30567] Bluetooth: hci3: command tx timeout
[  506.193231][ T7743] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14861'.
[  506.297859][ T7754] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  506.316577][ T7758] netlink: del zone limit has 4 unknown bytes
[  506.381108][ T7767] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14867'.
[  506.600576][ T7779] syzkaller0: entered promiscuous mode
[  506.602485][ T7779] syzkaller0: entered allmulticast mode
[  507.180286][ T7782] validate_nla: 1 callbacks suppressed
[  507.180314][ T7782] netlink: 'syz.3.14874': attribute type 29 has an invalid length.
[  507.247070][ T7788] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14877'.
[  507.259644][ T7788] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14877'.
[  507.287425][ T7793] openvswitch: netlink: IP tunnel dst address not specified
[  507.337137][ T7797] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  507.424154][ T7801] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  507.452731][ T7808] netlink: 'syz.4.14883': attribute type 1 has an invalid length.
[  507.513834][ T7812] IPv6: NLM_F_CREATE should be specified when creating new route
[  507.534164][ T7812] netlink: 'syz.1.14884': attribute type 17 has an invalid length.
[  507.554504][ T7816] sctp: [Deprecated]: syz.3.14885 (pid 7816) Use of int in maxseg socket option.
[  507.554504][ T7816] Use struct sctp_assoc_value instead
[  507.706257][ T7842] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  507.709666][ T7842] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  507.976414][ T7857] netlink: 'syz.1.14898': attribute type 2 has an invalid length.
[  508.040158][T30567] Bluetooth: hci3: command tx timeout
[  508.480490][ T7873] __nla_validate_parse: 8 callbacks suppressed
[  508.480510][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14903'.
[  508.526384][ T7878] tipc: Started in network mode
[  508.527987][ T7878] tipc: Node identity 22a7067b501d, cluster identity 4711
[  508.530914][ T7878] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  508.541643][ T7878] syzkaller0: entered promiscuous mode
[  508.543915][ T7878] syzkaller0: entered allmulticast mode
[  508.554486][ T7878] tipc: Resetting bearer <eth:syzkaller0>
[  508.570297][ T7877] tipc: Resetting bearer <eth:syzkaller0>
[  508.574769][ T7877] tipc: Disabling bearer <eth:syzkaller0>
[  508.598026][ T7880] IPv6: NLM_F_CREATE should be specified when creating new route
[  508.605135][ T7880] netlink: 'syz.3.14905': attribute type 17 has an invalid length.
[  508.648530][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14907'.
[  508.652076][ T7886] bond3: left allmulticast mode
[  508.653939][ T7886] bond3: left promiscuous mode
[  508.656479][ T7886] bridge0: port 1(bond3) entered disabled state
[  508.730755][ T7889] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14908'.
[  508.804084][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14910'.
[  508.808652][ T7896] netdevsim netdevsim4 netdevsim2: left allmulticast mode
[  508.811806][ T7896] netdevsim netdevsim4 netdevsim2: left promiscuous mode
[  508.814703][ T7896] bridge0: port 3(netdevsim2) entered disabled state
[  508.818815][ T7896] bridge_slave_1: left allmulticast mode
[  508.821218][ T7896] bridge_slave_1: left promiscuous mode
[  508.823409][ T7896] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.827389][ T7896] bridge_slave_0: left allmulticast mode
[  508.830117][ T7896] bridge_slave_0: left promiscuous mode
[  508.832593][ T7896] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.974673][ T7905] netlink: 'syz.1.14913': attribute type 17 has an invalid length.
[  509.062116][ T7913] netlink: 'syz.4.14916': attribute type 1 has an invalid length.
[  509.073287][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14916'.
[  509.078787][ T7915] netlink: 'syz.4.14916': attribute type 1 has an invalid length.
[  509.182137][ T7920] netlink: 'syz.4.14918': attribute type 10 has an invalid length.
[  509.188451][ T7920] team0: Cannot enslave team device to itself
[  509.192587][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14918'.
[  509.330648][ T7929] IPv6: NLM_F_CREATE should be specified when creating new route
[  509.336988][ T7929] netlink: 'syz.4.14921': attribute type 17 has an invalid length.
[  509.432387][ T7937] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  509.528788][ T7944] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  509.559067][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  509.640064][ T7960] sctp: [Deprecated]: syz.3.14931 (pid 7960) Use of int in max_burst socket option.
[  509.640064][ T7960] Use struct sctp_assoc_value instead
[  509.704518][ T7966] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14933'.
[  509.711199][ T7966] openvswitch: netlink: IP tunnel dst address not specified
[  509.761509][ T7973] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14935'.
[  509.856119][ T7981] bridge: RTM_NEWNEIGH with invalid ether address
[  509.923769][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14940'.
[  510.119426][T30567] Bluetooth: hci3: command tx timeout
[  510.745518][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14948'.
[  510.985376][ T8034] wg1 speed is unknown, defaulting to 1000
[  511.139119][ T8059] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  511.157233][ T8063] wg1 speed is unknown, defaulting to 1000
[  511.195176][ T8067] IPv6: NLM_F_REPLACE set, but no existing node found!
[  511.297256][ T8071] 1{X: renamed from 30{X
[  511.315212][ T8071] 1{X: entered allmulticast mode
[  511.318102][ T8071] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  511.504769][ T8082] 8021q: adding VLAN 0 to HW filter on device bond24
[  511.665106][ T8104] bridge0: port 1(erspan0) entered blocking state
[  511.668210][ T8104] bridge0: port 1(erspan0) entered disabled state
[  511.671481][ T8104] erspan0: entered allmulticast mode
[  511.674907][ T8104] erspan0: entered promiscuous mode
[  511.680268][ T8104] erspan0: left allmulticast mode
[  511.682443][ T8104] erspan0: left promiscuous mode
[  511.684682][ T8104] bridge0: port 1(erspan0) entered disabled state
[  512.456987][ T8129] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  512.536903][ T8138] validate_nla: 9 callbacks suppressed
[  512.537061][ T8138] netlink: 'syz.1.14996': attribute type 142 has an invalid length.
[  512.592148][ T8144] x9: renamed from bridge_slave_0
[  512.597952][ T8144] netlink: 'syz.3.14998': attribute type 5 has an invalid length.
[  512.608572][ T8147] vlan1: entered promiscuous mode
[  512.616181][ T8147] vlan1: entered allmulticast mode
[  512.620179][ T8147] veth0_vlan: entered allmulticast mode
[  512.873600][ T8175] smc: net device bond0 erased user defined pnetid SYZ
[  512.984327][ T8189] netlink: 'syz.1.15010': attribute type 21 has an invalid length.
[  512.987209][ T8189] netlink: 'syz.1.15010': attribute type 5 has an invalid length.
[  512.990609][ T8189] netlink: 'syz.1.15010': attribute type 6 has an invalid length.
[  513.447128][ T8255] netlink: 'syz.3.15029': attribute type 1 has an invalid length.
[  513.485309][ T8257] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  514.347129][ T8280] __nla_validate_parse: 18 callbacks suppressed
[  514.347151][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15039'.
[  514.527210][ T8299] pim6reg1: entered promiscuous mode
[  514.533284][ T8299] pim6reg1: entered allmulticast mode
[  514.545647][ T8295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15045'.
[  514.596853][ T8303] TCP: TCP_TX_DELAY enabled
[  514.611340][ T8303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  514.636328][ T8303] syzkaller0: entered promiscuous mode
[  514.639238][ T8303] syzkaller0: entered allmulticast mode
[  514.667947][ T8307] netlink: 'syz.3.15051': attribute type 9 has an invalid length.
[  514.705610][ T8303] tipc: Resetting bearer <eth:syzkaller0>
[  514.718660][ T8302] tipc: Resetting bearer <eth:syzkaller0>
[  514.726140][ T8302] tipc: Disabling bearer <eth:syzkaller0>
[  514.741955][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15052'.
[  514.978052][ T8342] pim6reg1: entered allmulticast mode
[  515.012142][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15063'.
[  515.049068][ T8350] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  515.108207][ T8358] 8021q: adding VLAN 0 to HW filter on device bond1
[  515.201285][ T8371] erspan0: entered promiscuous mode
[  515.270140][ T8373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15074'.
[  515.447623][ T8381] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  515.454782][ T8381] netlink: 'syz.4.15077': attribute type 4 has an invalid length.
[  515.535297][ T8381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  515.544780][ T8381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  515.628292][ T1618] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  515.635147][ T1618] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  515.646616][ T1618] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  515.650868][ T1618] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  515.777718][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15080'.
[  516.034523][ T8396] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  516.044956][ T8396] netlink: 'syz.4.15081': attribute type 4 has an invalid length.
[  516.075048][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15082'.
[  516.121004][ T8405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  516.124214][ T8405] IPv6: NLM_F_CREATE should be set when creating new route
[  516.127310][ T8405] IPv6: NLM_F_CREATE should be set when creating new route
[  516.139012][ T8405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  516.180195][ T8411] netlink: 516 bytes leftover after parsing attributes in process `syz.4.15086'.
[  516.232395][ T8417] netlink: 256 bytes leftover after parsing attributes in process `syz.3.15088'.
[  516.431711][ T8432] siw: device registration error -23
[  516.433334][ T8431] siw: device registration error -23
[  516.496127][ T8439] sit0: entered promiscuous mode
[  516.503499][ T8439] netlink: 'syz.1.15097': attribute type 1 has an invalid length.
[  516.506221][ T8439] netlink: 1 bytes leftover after parsing attributes in process `syz.1.15097'.
[  516.605411][ T8447] wg1 speed is unknown, defaulting to 1000
[  516.814282][ T8454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.078372][ T8468] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  517.095236][ T8468] bridge0: port 1(erspan0) entered blocking state
[  517.099863][ T8468] bridge0: port 1(erspan0) entered disabled state
[  517.102399][ T8468] erspan0: entered allmulticast mode
[  517.104765][ T8468] erspan0: left allmulticast mode
[  517.118386][ T8477] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  517.132998][ T8477] CPU: 0 UID: 0 PID: 8477 Comm: syz.1.15110 Not tainted syzkaller #0 PREEMPT(full) 
[  517.133018][ T8477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  517.133026][ T8477] Call Trace:
[  517.133031][ T8477]  <TASK>
[  517.133036][ T8477]  dump_stack_lvl+0x189/0x250
[  517.133058][ T8477]  ? __pfx_dump_stack_lvl+0x10/0x10
[  517.133067][ T8477]  ? __pfx__printk+0x10/0x10
[  517.133080][ T8477]  ? kernfs_root+0x1c/0x230
[  517.133092][ T8477]  ? kernfs_path_from_node+0x2f/0x290
[  517.133100][ T8477]  ? kernfs_path_from_node+0x250/0x290
[  517.133108][ T8477]  ? kernfs_path_from_node+0x2f/0x290
[  517.133116][ T8477]  sysfs_warn_dup+0x8e/0xa0
[  517.133127][ T8477]  sysfs_do_create_link_sd+0xc0/0x110
[  517.133136][ T8477]  device_add_class_symlinks+0x1cf/0x240
[  517.133147][ T8477]  device_add+0x475/0xb50
[  517.133157][ T8477]  wiphy_register+0x1ba6/0x28d0
[  517.133185][ T8477]  ? __pfx_wiphy_register+0x10/0x10
[  517.133226][ T8477]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  517.133243][ T8477]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  517.133257][ T8477]  ieee80211_register_hw+0x3425/0x4080
[  517.133276][ T8477]  ? ieee80211_register_hw+0x14c1/0x4080
[  517.133288][ T8477]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  517.133300][ T8477]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  517.133319][ T8477]  ? __hrtimer_setup+0x187/0x210
[  517.133331][ T8477]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  517.133350][ T8477]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  517.133370][ T8477]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  517.133383][ T8477]  ? trace_kmalloc+0x1f/0xd0
[  517.133398][ T8477]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  517.133413][ T8477]  ? kstrndup+0xbf/0x160
[  517.133430][ T8477]  hwsim_new_radio_nl+0xea4/0x1b10
[  517.133446][ T8477]  ? __pfx___nla_validate_parse+0x10/0x10
[  517.133470][ T8477]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  517.133487][ T8477]  ? __nla_parse+0x40/0x60
[  517.133498][ T8477]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  517.133513][ T8477]  genl_family_rcv_msg_doit+0x215/0x300
[  517.133524][ T8477]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  517.133570][ T8477]  ? bpf_lsm_capable+0x9/0x20
[  517.133587][ T8477]  ? security_capable+0x7e/0x2e0
[  517.133608][ T8477]  genl_rcv_msg+0x60e/0x790
[  517.133625][ T8477]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.133640][ T8477]  ? __kasan_slab_alloc+0x6c/0x80
[  517.133652][ T8477]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  517.133661][ T8477]  ? __netlink_lookup+0xbd/0x810
[  517.133668][ T8477]  ? rcu_is_watching+0x15/0xb0
[  517.133679][ T8477]  netlink_rcv_skb+0x208/0x470
[  517.133692][ T8477]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.133701][ T8477]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  517.133714][ T8477]  ? lock_release+0x4b/0x3e0
[  517.133728][ T8477]  ? down_read+0x1ad/0x2e0
[  517.133752][ T8477]  genl_rcv+0x28/0x40
[  517.133762][ T8477]  netlink_unicast+0x82f/0x9e0
[  517.133774][ T8477]  ? __pfx_netlink_unicast+0x10/0x10
[  517.133784][ T8477]  ? netlink_sendmsg+0x642/0xb30
[  517.133794][ T8477]  ? skb_put+0x11b/0x210
[  517.133804][ T8477]  netlink_sendmsg+0x805/0xb30
[  517.133817][ T8477]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.133828][ T8477]  ? futex_unqueue+0x22/0x240
[  517.133838][ T8477]  ? aa_sock_msg_perm+0xf1/0x1d0
[  517.133846][ T8477]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  517.133855][ T8477]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.133866][ T8477]  __sock_sendmsg+0x21c/0x270
[  517.133879][ T8477]  ____sys_sendmsg+0x505/0x830
[  517.133890][ T8477]  ? __pfx_____sys_sendmsg+0x10/0x10
[  517.133900][ T8477]  ? import_iovec+0x74/0xa0
[  517.133911][ T8477]  ___sys_sendmsg+0x21f/0x2a0
[  517.133919][ T8477]  ? __pfx____sys_sendmsg+0x10/0x10
[  517.133929][ T8477]  ? futex_wait+0x285/0x360
[  517.133946][ T8477]  ? __fget_files+0x2a/0x420
[  517.133954][ T8477]  ? __fget_files+0x3a0/0x420
[  517.133962][ T8477]  __x64_sys_sendmsg+0x19b/0x260
[  517.133971][ T8477]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  517.133981][ T8477]  ? rcu_is_watching+0x15/0xb0
[  517.133989][ T8477]  ? rcu_is_watching+0x15/0xb0
[  517.133997][ T8477]  do_syscall_64+0xfa/0x3b0
[  517.134012][ T8477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.134021][ T8477]  ? exc_page_fault+0x9f/0xf0
[  517.134034][ T8477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.134042][ T8477] RIP: 0033:0x7fe847d8ebe9
[  517.134053][ T8477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  517.134062][ T8477] RSP: 002b:00007fe848c38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  517.134073][ T8477] RAX: ffffffffffffffda RBX: 00007fe847fb6090 RCX: 00007fe847d8ebe9
[  517.134079][ T8477] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000011
[  517.134085][ T8477] RBP: 00007fe847e11e19 R08: 0000000000000000 R09: 0000000000000000
[  517.134090][ T8477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  517.134096][ T8477] R13: 00007fe847fb6128 R14: 00007fe847fb6090 R15: 00007ffd5dc6e7f8
[  517.134105][ T8477]  </TASK>
[  517.321265][ T8476] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  517.326646][ T8476] CPU: 0 UID: 0 PID: 8476 Comm: syz.1.15110 Not tainted syzkaller #0 PREEMPT(full) 
[  517.326666][ T8476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  517.326674][ T8476] Call Trace:
[  517.326679][ T8476]  <TASK>
[  517.326688][ T8476]  dump_stack_lvl+0x189/0x250
[  517.326711][ T8476]  ? __pfx_dump_stack_lvl+0x10/0x10
[  517.326736][ T8476]  ? __pfx__printk+0x10/0x10
[  517.326752][ T8476]  ? kernfs_root+0x1c/0x230
[  517.326764][ T8476]  ? kernfs_path_from_node+0x2f/0x290
[  517.326773][ T8476]  ? kernfs_path_from_node+0x250/0x290
[  517.326786][ T8476]  ? kernfs_path_from_node+0x2f/0x290
[  517.326796][ T8476]  sysfs_warn_dup+0x8e/0xa0
[  517.326810][ T8476]  sysfs_do_create_link_sd+0xc0/0x110
[  517.326819][ T8476]  device_add_class_symlinks+0x1cf/0x240
[  517.326832][ T8476]  device_add+0x475/0xb50
[  517.326842][ T8476]  wiphy_register+0x1ba6/0x28d0
[  517.326862][ T8476]  ? __pfx_wiphy_register+0x10/0x10
[  517.326872][ T8476]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  517.326885][ T8476]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  517.326896][ T8476]  ieee80211_register_hw+0x3425/0x4080
[  517.326911][ T8476]  ? ieee80211_register_hw+0x14c1/0x4080
[  517.326921][ T8476]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  517.326931][ T8476]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  517.326947][ T8476]  ? __hrtimer_setup+0x187/0x210
[  517.326956][ T8476]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  517.326973][ T8476]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  517.326990][ T8476]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  517.326999][ T8476]  ? trace_kmalloc+0x1f/0xd0
[  517.327012][ T8476]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  517.327022][ T8476]  ? kstrndup+0xbf/0x160
[  517.327035][ T8476]  hwsim_new_radio_nl+0xea4/0x1b10
[  517.327046][ T8476]  ? __pfx___nla_validate_parse+0x10/0x10
[  517.327064][ T8476]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  517.327076][ T8476]  ? __nla_parse+0x40/0x60
[  517.327087][ T8476]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  517.327101][ T8476]  genl_family_rcv_msg_doit+0x215/0x300
[  517.327112][ T8476]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  517.327123][ T8476]  ? bpf_lsm_capable+0x9/0x20
[  517.327139][ T8476]  ? security_capable+0x7e/0x2e0
[  517.327154][ T8476]  genl_rcv_msg+0x60e/0x790
[  517.327163][ T8476]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.327172][ T8476]  ? __kasan_slab_alloc+0x6c/0x80
[  517.327183][ T8476]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  517.327195][ T8476]  ? __netlink_lookup+0xbd/0x810
[  517.327202][ T8476]  ? rcu_is_watching+0x15/0xb0
[  517.327215][ T8476]  netlink_rcv_skb+0x208/0x470
[  517.327228][ T8476]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.327237][ T8476]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  517.327249][ T8476]  ? lock_release+0x4b/0x3e0
[  517.327264][ T8476]  ? down_read+0x1ad/0x2e0
[  517.327272][ T8476]  genl_rcv+0x28/0x40
[  517.327281][ T8476]  netlink_unicast+0x82f/0x9e0
[  517.327294][ T8476]  ? __pfx_netlink_unicast+0x10/0x10
[  517.327304][ T8476]  ? netlink_sendmsg+0x642/0xb30
[  517.327315][ T8476]  ? skb_put+0x11b/0x210
[  517.327324][ T8476]  netlink_sendmsg+0x805/0xb30
[  517.327338][ T8476]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.327350][ T8476]  ? futex_unqueue+0x22/0x240
[  517.327360][ T8476]  ? aa_sock_msg_perm+0xf1/0x1d0
[  517.327369][ T8476]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  517.327378][ T8476]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.327389][ T8476]  __sock_sendmsg+0x21c/0x270
[  517.327402][ T8476]  ____sys_sendmsg+0x505/0x830
[  517.327413][ T8476]  ? __pfx_____sys_sendmsg+0x10/0x10
[  517.327423][ T8476]  ? import_iovec+0x74/0xa0
[  517.327436][ T8476]  ___sys_sendmsg+0x21f/0x2a0
[  517.327446][ T8476]  ? __pfx____sys_sendmsg+0x10/0x10
[  517.327455][ T8476]  ? futex_wait+0x285/0x360
[  517.327473][ T8476]  ? __fget_files+0x2a/0x420
[  517.327481][ T8476]  ? __fget_files+0x3a0/0x420
[  517.327490][ T8476]  __x64_sys_sendmsg+0x19b/0x260
[  517.327499][ T8476]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  517.327510][ T8476]  ? rcu_is_watching+0x15/0xb0
[  517.327544][ T8476]  do_syscall_64+0xfa/0x3b0
[  517.327557][ T8476]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.327567][ T8476]  ? exc_page_fault+0x9f/0xf0
[  517.327581][ T8476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.327590][ T8476] RIP: 0033:0x7fe847d8ebe9
[  517.327601][ T8476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  517.327610][ T8476] RSP: 002b:00007fe848c59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  517.327624][ T8476] RAX: ffffffffffffffda RBX: 00007fe847fb5fa0 RCX: 00007fe847d8ebe9
[  517.327630][ T8476] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000011
[  517.327635][ T8476] RBP: 00007fe847e11e19 R08: 0000000000000000 R09: 0000000000000000
[  517.327640][ T8476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  517.327646][ T8476] R13: 00007fe847fb6038 R14: 00007fe847fb5fa0 R15: 00007ffd5dc6e7f8
[  517.327655][ T8476]  </TASK>
[  517.769914][ T8514] validate_nla: 1 callbacks suppressed
[  517.769934][ T8514] netlink: 'syz.1.15120': attribute type 1 has an invalid length.
[  517.879394][   T12] unregister_netdevice: waiting for lo to become free. Usage count = 3
[  517.882852][   T12] ref_tracker: netdev@ffff88810a0ca610 has 1/1 users at
[  517.882852][   T12]      ib_device_set_netdev+0x31f/0x6d0
[  517.882852][   T12]      rxe_register_device+0x1c7/0x310
[  517.882852][   T12]      rxe_net_add+0x81/0x110
[  517.882852][   T12]      rxe_newlink+0xdd/0x190
[  517.882852][   T12]      nldev_newlink+0x4a5/0x5a0
[  517.882852][   T12]      rdma_nl_rcv+0x6ae/0x980
[  517.882852][   T12]      netlink_unicast+0x82f/0x9e0
[  517.882852][   T12]      netlink_sendmsg+0x805/0xb30
[  517.882852][   T12]      __sock_sendmsg+0x21c/0x270
[  517.882852][   T12]      ____sys_sendmsg+0x505/0x830
[  517.882852][   T12]      ___sys_sendmsg+0x21f/0x2a0
[  517.882852][   T12]      __x64_sys_sendmsg+0x19b/0x260
[  517.882852][   T12]      do_syscall_64+0xfa/0x3b0
[  517.882852][   T12]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.882852][   T12] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)

VM DIAGNOSIS:
04:08:58  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33be060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df0670 RSP=ffffc900000f6e50
R8 =ffff888020788237 R9 =1ffff110040f1046 R10=dffffc0000000000 R11=ffffffff854f1f70
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f1fe7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe848ae56c0 CR3=0000000029d80000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7f5ca380cdb48c7e 4dd120fbb79a6655
XMM06=3e551e2bf30eb573 667715594219aed2 XMM07=af37631e823130b7 d3dd7315e6d97024
XMM08=0452e5eed26e6068 761c79e627f39e29 XMM09=0000000000000000 00007fe847e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dad3ec28154a2900 RBX=ffffffff819683b8 RCX=dad3ec28154a2900 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38330 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020006000
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f37603b7dac CR3=0000000125506000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000316e61637876
XMM02=00007ff7d1f87498 00007ff7d1f87470 XMM03=00007ff7d1f874a8 00007ff7d1f874a0
XMM04=00007ff7d2aed100 00007ff7d1f87460 XMM05=00007ff7d1f87478 00007ff7d1f874c0
XMM06=00007ff7d1f874b8 00007ff7d1f874b0 XMM07=00007ff7d1f874a8 00007ff7d1f874a0
XMM08=34edb1b7e96069a0 75d380afc6b85b2f XMM09=0000000000000000 00007ff7d1e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
