last executing test programs:

3.567062479s ago: executing program 0 (id=2932):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', 0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r2], 0x70}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create1(0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x40000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, r11, {}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20081054}, 0x24008088)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0xfffff001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
r12 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10)
write(r12, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070003000000000000000000080009000d000000", 0x24)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x1658, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1628, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x156c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xa, 0x8, 0xa5}, {0x2, 0x0, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4, 0x8, 0x8e}, {0xffffffffffffffff, 0x4, 0x6}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x10, 0x9, 0x1a9}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x8}, {0x2, 0x2, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x1c8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x400, 0x2, 0x400}, {0x55, 0x6, 0x1, "d1e20682118d"}}}, @TCF_EM_META={0xa4, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x5f, 0x1}, {0x8, 0x7f}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x2d, 0x3, [@TCF_META_TYPE_VAR="37142eea17387c1c", @TCF_META_TYPE_VAR="18a3134f7b87df", @TCF_META_TYPE_VAR='Gh', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x123c, @TCF_META_TYPE_VAR="b6a413", @TCF_META_TYPE_VAR="b5b85c496a328a943d", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="4123083ea5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x400, 0x3, 0x2}, {0x3, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="f1e721", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="9753fcd0", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="525066f54af24f90"]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="0efa6d10a1cc2578f4", @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_CONTAINER={0xc4, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x8}, "cd14212802a1ff6f647e4208efc11b16dbc55575b38225d2c2d62bed49b6cb05e8cea4430558d08c2e447db2628823af63bd1faece5e06128d49b839bd08315f96cb98b54904b9a72cf5107093620bc4aa0a42db731a13f1b423626b2da6f2a802715290a74e52ccaeafe01a9739aeef6b65ffa4278047392cad0d9a569e4caa21a281c6ba6d4df0d771686bb9dea8a494e4fe076b25fa0a05629c471c0751bfacf8d6d76ec3799358f542668664a7b9b7982b835a"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1}, {0x4a, 0x5, 0x8, 0x1, 0x6, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x3}, {0x40, 0x2, 0x2, "c602"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0x5}, {0x1000, 0x1, 0x1, 0x1, 0xa, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x22c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10c, 0x3, 0x0, 0x0, {{0xa4f, 0x0, 0x8}, "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"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x10, 0x1, 0x10}, {0x0, 0x0, 0x6, 0x4, 0xf, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x98, 0x1, 0x0, 0x0, {{0x81a5, 0x0, 0xa}, "8536d1153767d7a31ad777e147be77e81721d82b722bc0f482e4bbb6f214f701f1f0f8871d651c28ed58ad0d12ffe5824693d46184ccfee908f61a85705ad17ed6f0cec45a03f700d899ff58766d82e24de89f079084742f0ae4c7621357b31e26988fe0215a04a464d26d8727d9e43e5e119b977b2d5c5a879e31701840695388a04006613d194696f2"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x40, 0x3, 0x0, 0x0, {{0x81f3, 0x0, 0x2}, "c206220c0547432bc09d392e4f1d145589ed570855c2dd539001dbbf23a068fa60b6e5a684934ed4d6133d479c628056cfc0b4ed"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1}, {0x4e7, 0x9a97, 0x9, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x110c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x64, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x8}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x96}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x12, 0x5, "24c8e863f4dd0b282953a1bf31ba"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_META={0x58, 0x3, 0x0, 0x0, {{0x200, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xa, 0x1}, {0x4, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="df77fdc8dccb006a"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x6, 0x1}, {0x3, 0x2, 0x2}}}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="d71e46a8", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="c8fb", @TCF_META_TYPE_VAR="de15b2d5d5c9d265ad9d", @TCF_META_TYPE_VAR=',']}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x101}, {0x9, 0x8, 0x1, "80bc3f0e0e499212"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x800, 0x1, 0x955}, {0x85, 0x3, 0x1, 0x2, 0x9, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x2}, "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"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3}, {0x0, 0x5, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xac, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xa0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xd, 0x1, 0x2}, {0x7fffffff, 0xffffffff, 0x5, 0x2, 0x9, 0x0, 0x6}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x8, 0x2, 0xa}, {0x5, 0x8, 0x1, "abc00e12181f79fb"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x1658}}, 0x2000c800)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

3.387289215s ago: executing program 0 (id=2936):
socket(0x10, 0x803, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) (async)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

3.301483749s ago: executing program 1 (id=2938):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8004)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, 0x12, 0x200, 0x70bd25, 0x25dfdbfe, {0x9}, [@typed={0x9, 0x7, 0x0, 0x0, @str='syz2\x00'}, @nested={0xb1, 0x3a, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xbf, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x10f}, @typed={0x44, 0x153, 0x0, 0x0, @binary="68f47fc4e4f909d3f91d6af621cd8072e9504b53bf910150adfe97b1f1d9b385fab2b104ecde0f5d7265bcfdfb7859b24682a18ce4f0216dc678628de057cebc"}, @nested={0x4, 0xe5}, @generic="b351ebb5a4dda964ee4fdfa3f10ba2cc53a3f171b482ba76e1b8d2a4c2aa445df679b42443b381432645d9ead56f1d3dd4d490f34a112c9f9ada2613d4a3b114511f9c29500fdc48e13830192e55ffff3d"]}]}, 0xd4}}, 0x64000080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
r0 = socket(0x10, 0x3, 0x8)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x4de, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8004) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, 0x12, 0x200, 0x70bd25, 0x25dfdbfe, {0x9}, [@typed={0x9, 0x7, 0x0, 0x0, @str='syz2\x00'}, @nested={0xb1, 0x3a, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xbf, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x10f}, @typed={0x44, 0x153, 0x0, 0x0, @binary="68f47fc4e4f909d3f91d6af621cd8072e9504b53bf910150adfe97b1f1d9b385fab2b104ecde0f5d7265bcfdfb7859b24682a18ce4f0216dc678628de057cebc"}, @nested={0x4, 0xe5}, @generic="b351ebb5a4dda964ee4fdfa3f10ba2cc53a3f171b482ba76e1b8d2a4c2aa445df679b42443b381432645d9ead56f1d3dd4d490f34a112c9f9ada2613d4a3b114511f9c29500fdc48e13830192e55ffff3d"]}]}, 0xd4}}, 0x64000080) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async)
socket(0x10, 0x3, 0x8) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) (async)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x4de, 0x4) (async)

3.299255935s ago: executing program 0 (id=2940):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a}, 0x20) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a}, 0x20)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x80)
recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x22, 0x0, 0x0, &(0x7f0000000080)}, 0x9682}], 0x1, 0x12142, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xbf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)

3.298781567s ago: executing program 1 (id=2941):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
close(0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x1c, &(0x7f0000000900)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000001718655502112c324ef8947dedea2ca00000000b702000014000000b70600000400000085000000050000000000000035090100000000009500000000000000b702eb00230000007b9af8ff00000000b5090000000000807baaf0ff00000000ae8800000000000007080000f8ffffffbf8420000000000007040000f0ff00000000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind(r3, &(0x7f0000000500)=@ll={0x11, 0x8, 0x0, 0x1, 0x6, 0x6, @remote}, 0x80)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f0000000080)={0x57})
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000002c0))
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d576c00080000000400000008"], 0x24}}, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, 0x0, &(0x7f00000007c0))
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1400fdff2d000100000000000000000002001980"], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300)
read(r8, &(0x7f0000000080)=""/38, 0x26)
r11 = socket$inet6(0xa, 0x2, 0x28000)
ppoll(&(0x7f0000000000)=[{r11, 0x20}, {r11, 0x6478}, {r11, 0x1}], 0x3, 0x0, 0x0, 0x0)
shutdown(r11, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0)

3.230721927s ago: executing program 0 (id=2943):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x108}}, 0x0)

3.182974841s ago: executing program 0 (id=2944):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000580)={0x0, 0x39, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x4049000)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x204e20}, 0x6e) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000229bd9100fcdbdf250300000008000100ca55b9039ed5df93b974c223ad780cb659ab1cc7aae004ab88f587be80a2b8f3cffd580bfb5800f09e999382e9fb08803fe1f5d64489dba7bbd9f98c5ca7dfdfb986d88a51dc22d30a957617de00730ff6bb7e2e7f6cfee707648a7c860262dbcb182a3425c8b0902eb2cdb4cb5556e89f32af5963ece3f34cceaa3539f7f4986bd80d8b09109287229ae3d148edaf8ce24cd7df6feed281b6492a2cb272acfd830cc1b014995afbb01f91d78d8e38fd13266e3a088e212ab8d1484460e9645a9914ba3f23947fe1e4aadbaac032abafdf8fba4f21fac803f52b870d71119d", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20008050}, 0x20000000)
r4 = socket(0x1e, 0x4, 0x0) (async, rerun: 32)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async, rerun: 64)
listen(r5, 0xfffffffc) (rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
r9 = socket$kcm(0x2, 0x200000000000001, 0x106) (async)
getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000300)={@rand_addr, <r10=>0x0}, &(0x7f0000000340)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r11=>0x0}) (async, rerun: 32)
getsockopt$inet_mreqn(r8, 0x0, 0x3, &(0x7f00000005c0)={@remote, @loopback, <r12=>0x0}, &(0x7f0000000600)=0xc) (rerun: 32)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xec, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x884) (async)
sendmsg$kcm(r9, 0x0, 0x20040000) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async)
recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}, {&(0x7f0000000840)=""/144, 0x82}], 0x2, &(0x7f0000001fc0)=""/65, 0xfffffffffffffe76}, 0x1}], 0x1, 0x40002122, 0x0) (async)
sendmsg$tipc(r4, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1}, 0x4800) (async, rerun: 64)
syz_genetlink_get_family_id$ethtool(0x0, r4) (async, rerun: 64)
r14 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r14, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)

3.176375915s ago: executing program 0 (id=2947):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000082)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x480, 0x278, 0x98, 0x278, 0x278, 0x278, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e0}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x10}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) (async)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x480, 0x278, 0x98, 0x278, 0x278, 0x278, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e0}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x10}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socket(0x1e, 0x3, 0x40) (async)
r3 = socket(0x1e, 0x3, 0x40)
setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) (async)
setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4)
write(r3, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000800000000000000500010007000000090002"], 0x5c}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000800000000000000500010007000000090002"], 0x5c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0)
recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/17, 0x11}}], 0x1, 0x2002, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "27225a2148133ffb", "00000003098c5cf36a79f0000000006b", "6b38e6b1", "ce1216602926c810"}, 0x28)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read(r6, &(0x7f0000000080)=""/4, 0x4) (async)
read(r6, &(0x7f0000000080)=""/4, 0x4)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8801, 0x0) (async)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8801, 0x0)
socket(0x22, 0x800, 0x6)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xfffb, 0x2}, 0x6) (async)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xfffb, 0x2}, 0x6)

2.329264236s ago: executing program 1 (id=2960):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000580)={0x0, 0x39, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x4049000)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x204e20}, 0x6e)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000229bd9100fcdbdf250300000008000100ca55b9039ed5df93b974c223ad780cb659ab1cc7aae004ab88f587be80a2b8f3cffd580bfb5800f09e999382e9fb08803fe1f5d64489dba7bbd9f98c5ca7dfdfb986d88a51dc22d30a957617de00730ff6bb7e2e7f6cfee707648a7c860262dbcb182a3425c8b0902eb2cdb4cb5556e89f32af5963ece3f34cceaa3539f7f4986bd80d8b09109287229ae3d148edaf8ce24cd7df6feed281b6492a2cb272acfd830cc1b014995afbb01f91d78d8e38fd13266e3a088e212ab8d1484460e9645a9914ba3f23947fe1e4aadbaac032abafdf8fba4f21fac803f52b870d71119d", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20008050}, 0x20000000)
r4 = socket(0x1e, 0x4, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r5, 0xfffffffc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0100001c000180060001000200000008000300ac141437080006000300"/42], 0x30}, 0x1, 0xff07}, 0x2000000)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r8, 0x0, 0x20040000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r11 = accept4(r10, 0x0, 0x0, 0x0)
ioctl$int_in(r11, 0x5452, &(0x7f00000013c0)=0xc7f)
recvmsg$can_raw(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000005c0)=0x30)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.43284242s ago: executing program 1 (id=2965):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d03d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1bf4c727f30db4778beff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d571366", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x806}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/32, 0x20}], 0x1}, 0x1}], 0x2, 0x2101, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x0, 0x54d9, 0x7a, 0xf5, 0x8, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x3, 0x2, 0xb, 0x2000, r2, 0xa1, '\x00', 0x0, r4, 0x3, 0x3, 0x2, 0xb}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x41e02}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)

562.882293ms ago: executing program 1 (id=2968):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000040000008500000005000000bf0920000000000035090100000000009500000000000000b7020000230000007b9af8ff00000000b5090000000000807baaf0ff00000000ae8800000000000007080000f8ffffffbf8420000000000007040000f0ff", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind(r0, &(0x7f0000000500)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000080)={0x57})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000002c0))
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d576c00080000000400000008"], 0x24}}, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1400fdff2d000100000000000000000002001980"], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$BTRFS_IOC_GET_FEATURES(r12, 0x80189439, &(0x7f00000003c0))
sendmsg$TIPC_CMD_SHOW_STATS(r11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11002dbd7000fedbdf251200000008000300c660eea52d500c9220a72b980c36ed5e25897077fbaee29652da2f739ecdc38981751e22ad5a421f144fee73bbfaa933dc0bfe96f11938c58e938a58a06c94a7adc040778e16ed14a8feddbc0299a371659d6cea2a1f5aca0c6e45a89a8f7bbb20a600000000000000000000000000000000363958b46c0d7716b3a671e5bc1c94d5fc9b4f45", @ANYRES32=r13, @ANYBLOB="0600ed001c0400000600b500a80400000a000600ffffffffffff00000c0011800400050004000600"], 0x44}, 0x1, 0x0, 0x0, 0x20008004}, 0x40)
read(r7, &(0x7f0000000080)=""/38, 0x26)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="fbefb98600000000000000000000c655d65ec02aea05f8a4ea6ea5c9f966cb094b0c54b44ec076f0b66a9226b0647570c8e5e8a8db63014e9ac6f87136b1b0000000000000c79f0000000000", 0x0, 0xfffffe01, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffff86)
r14 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r14, &(0x7f00008a5ff0)={0x2, 0x0, @multicast2}, 0x7)

460.439445ms ago: executing program 2 (id=2969):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000000000000b60000003000007c3c002afdffff0000010000000003000000000100000003000000020000000000000000000002030000000b0000000000000b000000000000"], 0x0, 0x4a}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000a80)={{r1}, 0x0, 0x4, @unused=[0x8000, 0x688, 0x5, 0x5], @subvolid=0x8})
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b80)=@ipv4_delroute={0x34, 0x19, 0x300, 0x70bd28, 0x25dfdbfe, {0x2, 0x80, 0x14, 0xa, 0xfc, 0x0, 0xfd, 0x6}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_OIF={0x8, 0x4, r6}, @RTA_METRICS={0x6, 0x8, 0x0, 0x1, 's^'}]}, 0x34}, 0x1, 0x0, 0x0, 0x240008c4}, 0x2004c054)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000009300004802c0001800b00010065787468647200001c0002800800014000000014080006400000000205000200070000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a85cbeef62ad7f91a33e1f478677c54127c8fe826ae0b866b86974e8b47aa5d50e8c7bcfc01f38a46c9e336d009568ee9a99b16946721d2"], 0x84}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
r8 = socket(0x10, 0x4, 0x3)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r11, 0x106, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
setsockopt$packet_int(r10, 0x107, 0x13, &(0x7f0000000280), 0x4)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f00000008c0)={{r0, &(0x7f0000000540)='syzkaller0\x00', 0x0, &(0x7f0000000580)={@align=0x2000009, {0xfff, 0x1, 0x6, 0x9}}, 0x7, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0x1d4}, 0x7ffffffffffff64, &(0x7f0000000880)})
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a80)={0x6, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="00000085200000050000001817000000000000000b757e730991687918d7b8fc09db18e7e0991bdb22d655d2b07e31e76d1e3b83346330136ecc65785c9f6c839f73c3ac21d9076b697b978d621c1d0bd224f07070588392a1e327ac3438cc8a79aa4b0498ca266919a465b5b607e4e9e2aeb21e8c7e51b89057b33c910aa234b85486f524dd43e17b106bc07f17f577816e7307f41db4e0266a67f88dada5659e9bcad5507c9d3ff215466f6b6339f48e5427746e2eec1a6d094cc3245340b348b4cd99d13a9073ab3102ab98fd3ddf0e2b41549b801a4b800270b720cfa017a1501b5561108cab36ef055e141c434271b4d7025fd11e1e29", @ANYRES32, @ANYBLOB="0000000000000000186b0000030000000000000007000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xe6, &(0x7f0000000140)=""/230, 0x41100, 0xe, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0xf, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000280)=[{0x3, 0x3, 0xd, 0x8}, {0x1, 0x3, 0xa, 0xa}, {0x3, 0x2, 0x6, 0xb}, {0x5, 0x5, 0x2, 0x5}, {0x5, 0x4, 0xd}, {0x5, 0x2, 0xa, 0x2}], 0x10, 0x7}, 0x94)
ioctl$XFS_IOC_FSGROWFSLOG(r12, 0x4008586f, &(0x7f00000003c0)={0x5d, 0x901})

352.848196ms ago: executing program 1 (id=2970):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x400)
r1 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000500)={@initdev, @empty, @remote}, &(0x7f0000000040)=0xc)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0)
getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000340)=0x4)
r3 = socket$inet_sctp(0x2, 0x0, 0x84)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000200)={r6, 0xa1d}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380)={r6, 0xf, 0x4}, &(0x7f0000000440)=0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0)
unshare(0x28020300)
r8 = socket(0x40000000015, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x114, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r9, 0x5452, &(0x7f0000000300)=0x80000000)
listen(r9, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r10, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r9}, 0x20)
recvmmsg(r9, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0)
shutdown(r9, 0x1)
socket$packet(0x11, 0x3, 0x300)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000480), &(0x7f00000004c0)=0xc)

351.932128ms ago: executing program 2 (id=2971):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4a011}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x7, 0x7800, 0xff, 0x7ff, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x66, 0x0, 0x80, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}}}}})
socket$nl_netfilter(0x10, 0x3, 0xc)

222.444174ms ago: executing program 2 (id=2972):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100181208000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000100)={0x1, 0x6f, "405bcd8c4340a7308da3a018fce6d897989fab912ea61f3ee4d177c045815645576c4a26ea5cc6a355d2864003fff7405422d568b3c8c4870e6a747eabc5baf7eef6335e4d80d1f015ee2fa26bb682ebcbcbedc7e127fdf3c715ea7c233fb5da3b68c2bfaa0cf453ebb02265a8569c"})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="09000000010000", 0x7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000000c08000240000000120400040008000640000000030900010073797a30"], 0x10c}}, 0x810)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000026006bab9a3fe3d86e17aa31106b876c090000007ea60864160af36504001a0038001d004231a0e69e1d951293f4826e8c7df5157910e9e517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70ea1a3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc080)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x200}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x68, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6}, {0x5, 0x40, 0x2}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40050)
recvmsg$kcm(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newaddr={0x50, 0x14, 0x5a3, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x64, 0xfe, r5}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8a}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0x200, 0x4a04, 0x7, 0x10}}]}, 0x50}}, 0x8000)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
accept4(r3, 0x0, 0x0, 0x0)

102.705797ms ago: executing program 2 (id=2973):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000082)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x480, 0x278, 0x98, 0x278, 0x278, 0x278, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e0}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x10}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
socket$netlink(0x10, 0x3, 0x14)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x200000003, 0x6)
getsockopt$inet_buf(r3, 0x0, 0x50, 0x0, &(0x7f00000000c0))
r4 = socket(0x15, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4)
write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "27225a2148133ffb", "00000003098c5cf36a79f0000000006b", "6b38e6b1", "ce1216602926c810"}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
sendfile(r1, r5, 0x0, 0xffffffff004)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000100)=0x4)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2ec}}, 0x0)
close(r6)

85.763142ms ago: executing program 2 (id=2974):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004004}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000000c08000240000000120400040008000640000000030900010073797a30"], 0x10c}}, 0x0)

0s ago: executing program 2 (id=2975):
r0 = socket$inet(0xa, 0x801, 0x3)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x80000001)
r1 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0xb)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r2})
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000340)=0xfb78, 0x4)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x20040814)

kernel console output (not intermixed with test programs):

es leftover after parsing attributes in process `syz.0.224'.
[   79.914340][ T6406] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   80.805933][ T6421] xt_CT: No such helper "syz0"
[   80.950189][ T6427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.966121][ T6408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   83.085027][ T6437] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   83.123117][ T6437] netlink: 'syz.0.235': attribute type 1 has an invalid length.
[   83.128272][ T6437] netlink: 'syz.0.235': attribute type 1 has an invalid length.
[   83.130759][ T6437] netlink: 'syz.0.235': attribute type 8 has an invalid length.
[   83.275616][ T6449] netlink: 'syz.0.237': attribute type 4 has an invalid length.
[   83.300500][ T6449] netlink: 'syz.0.237': attribute type 4 has an invalid length.
[   83.510052][ T6474] __nla_validate_parse: 8 callbacks suppressed
[   83.510065][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'.
[   83.546988][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'.
[   83.649772][ T6490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.249'.
[   83.737071][ T6496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.252'.
[   83.741221][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'.
[   83.786474][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'.
[   83.849248][ T6506] netlink: 'syz.1.254': attribute type 13 has an invalid length.
[   83.852472][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'.
[   84.052011][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'.
[   84.088863][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'.
[   84.095956][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'.
[   84.278009][ T6534] ipt_rpfilter: unknown options
[   84.518490][ T6549] ipt_rpfilter: unknown options
[   84.633087][ T6554] bond0: (slave wlan0): Error: Device can not be enslaved while up
[   84.637979][ T6556] bond0: (slave wlan0): Error: Device can not be enslaved while up
[   84.667474][ T6564] netlink: 'syz.1.273': attribute type 11 has an invalid length.
[   84.671518][ T6564] netlink: 'syz.1.273': attribute type 11 has an invalid length.
[   84.765865][ T6570] netlink: 'syz.1.275': attribute type 3 has an invalid length.
[   84.853548][ T6578] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   84.940685][ T6588] veth0_macvtap: Caught tx_queue_len zero misconfig
[   85.059642][ T6601] netlink: 'syz.0.284': attribute type 2 has an invalid length.
[   85.152201][ T6607] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   85.355028][ T6630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   85.361589][ T6630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   85.363899][ T6630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   85.366114][ T6630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   85.368320][ T6630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   85.370750][ T6630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   85.372913][ T6630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   85.375390][ T6630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   85.377763][ T6630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   85.380078][ T6630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   86.159774][ T6646] netlink: 'syz.2.296': attribute type 1 has an invalid length.
[   86.257457][ T6646] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.262040][ T6653] netlink: 'syz.1.298': attribute type 1 has an invalid length.
[   86.298537][ T6653] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.337342][ T6658] netem: change failed
[   86.426677][ T6662] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   86.535772][ T6670] block nbd0: Unsupported socket: should be TCP or UNIX.
[   86.902790][ T6695] sctp: [Deprecated]: syz.1.313 (pid 6695) Use of struct sctp_assoc_value in delayed_ack socket option.
[   86.902790][ T6695] Use struct sctp_sack_info instead
[   86.961464][ T6702] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   87.009187][ T6705] ipt_rpfilter: unknown options
[   87.069893][   T24] cfg80211: failed to load regulatory.db
[   87.472320][ T6726] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   87.556410][ T6729] bridge_slave_0: left allmulticast mode
[   87.558313][ T6729] bridge_slave_0: left promiscuous mode
[   87.560276][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.568420][ T6729] bridge_slave_1: left allmulticast mode
[   87.570272][ T6729] bridge_slave_1: left promiscuous mode
[   87.573218][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.584730][ T6729] bond0: (slave bond_slave_0): Releasing backup interface
[   87.592650][ T6729] bond0: (slave bond_slave_1): Releasing backup interface
[   87.628649][ T6729] team0: Port device team_slave_0 removed
[   87.661637][ T6729] team0: Port device team_slave_1 removed
[   87.671832][ T6729] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.679240][ T6729] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.684300][ T6729] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.686715][ T6729] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.707596][ T6730] ip6gre1: entered allmulticast mode
[   87.716128][ T6730] team0: Port device ip6gre1 added
[   87.939403][ T6753] ipt_rpfilter: unknown options
[   87.943086][ T6753] ipt_rpfilter: unknown options
[   87.945221][ T6753] ipt_rpfilter: unknown options
[   87.947030][ T6753] ipt_rpfilter: unknown options
[   87.948643][ T6753] ipt_rpfilter: unknown options
[   87.952375][ T6753] ipt_rpfilter: unknown options
[   87.955135][ T6753] ipt_rpfilter: unknown options
[   88.251187][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.273546][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.283697][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.291977][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.302763][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.308847][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.315300][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.588056][ T6813] __nla_validate_parse: 34 callbacks suppressed
[   88.588076][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'.
[   88.625980][ T6813] bridge2: port 1(veth3) entered blocking state
[   88.628180][ T6813] bridge2: port 1(veth3) entered disabled state
[   88.630504][ T6813] veth3: entered allmulticast mode
[   88.635540][ T6813] veth3: entered promiscuous mode
[   88.643235][ T6813] bridge2: port 2(veth0_to_bond) entered blocking state
[   88.652036][ T6813] bridge2: port 2(veth0_to_bond) entered disabled state
[   88.655548][ T6813] veth0_to_bond: entered allmulticast mode
[   88.665589][ T6813] veth0_to_bond: entered promiscuous mode
[   88.686414][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.352'.
[   88.765803][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'.
[   88.807684][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'.
[   89.892971][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'.
[   92.112971][ T6867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   92.159836][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'.
[   92.279374][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'.
[   92.327686][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'.
[   92.512314][ T6921] net_ratelimit: 3323 callbacks suppressed
[   92.512329][ T6921] netlink: zone id is out of range
[   92.521877][ T6921] netlink: zone id is out of range
[   92.523898][ T6921] netlink: zone id is out of range
[   92.525659][ T6921] netlink: zone id is out of range
[   92.527397][ T6921] netlink: zone id is out of range
[   92.529199][ T6921] netlink: zone id is out of range
[   92.532726][ T6921] netlink: zone id is out of range
[   92.534745][ T6921] netlink: zone id is out of range
[   92.536748][ T6921] netlink: zone id is out of range
[   92.538417][ T6921] netlink: zone id is out of range
[   92.742776][ T6937] trusted_key: syz.0.389 sent an empty control message without MSG_MORE.
[   92.944197][ T6947] Driver unsupported XDP return value 0 on prog  (id 52) dev N/A, expect packet loss!
[   93.022554][ T6951] ip6tnl0: Caught tx_queue_len zero misconfig
[   93.107544][ T6956] netlink: 40 bytes leftover after parsing attributes in process `syz.2.396'.
[   93.719309][ T6972] netlink: 48 bytes leftover after parsing attributes in process `syz.0.401'.
[   93.722318][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'.
[   93.821800][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'.
[   93.988685][ T6982] lo: Caught tx_queue_len zero misconfig
[   94.106841][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'.
[   94.167754][ T6999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.410'.
[   94.188266][ T6997] syz_tun: entered allmulticast mode
[   94.211005][ T6997] ip6gre0: entered allmulticast mode
[   94.271495][ T7004] syzkaller0: entered promiscuous mode
[   94.276745][ T7004] syzkaller0: entered allmulticast mode
[   94.356344][ T7006] validate_nla: 3 callbacks suppressed
[   94.356372][ T7006] netlink: 'syz.1.412': attribute type 2 has an invalid length.
[   94.364005][ T7006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.412'.
[   94.368735][ T7004] can: request_module (can-proto-3) failed.
[   94.402230][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'.
[   94.430549][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.414'.
[   94.451228][ T7014] netlink: 'syz.1.415': attribute type 12 has an invalid length.
[   94.460354][ T7014] netlink: 'syz.1.415': attribute type 29 has an invalid length.
[   94.469113][ T7014] netlink: 148 bytes leftover after parsing attributes in process `syz.1.415'.
[   94.473886][ T7012] netlink: 48 bytes leftover after parsing attributes in process `syz.0.414'.
[   94.698760][ T7031] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   94.728747][ T7031] bond2 (unregistering): Released all slaves
[   94.817686][ T7029] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   94.826386][ T7029] bond2 (unregistering): Released all slaves
[   95.468662][ T7099] syzkaller0: entered promiscuous mode
[   95.470579][ T7099] syzkaller0: entered allmulticast mode
[   95.944252][ T7130] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.996707][ T7130] syzkaller0: entered promiscuous mode
[   96.000289][ T7130] syzkaller0: entered allmulticast mode
[   96.005803][ T7130] tipc: Resetting bearer <eth:syzkaller0>
[   96.027771][ T7129] tipc: Resetting bearer <eth:syzkaller0>
[   97.489299][ T7129] tipc: Disabling bearer <eth:syzkaller0>
[   97.506165][  T410] tipc: Node number set to 2802659516
[   98.976701][ T7229] __nla_validate_parse: 48 callbacks suppressed
[   98.976716][ T7229] netlink: 192 bytes leftover after parsing attributes in process `syz.1.483'.
[   99.058262][ T7236] tipc: Failed to obtain node identity
[   99.062169][ T7236] tipc: Enabling of bearer <ib:team0> rejected, failed to enable media
[   99.080550][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'.
[   99.179125][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'.
[   99.180521][ T7242] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.488'.
[   99.187923][ T7242] ksmbd: Unknown IPC event: 1, ignore.
[   99.540103][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.493'.
[  100.106186][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.501'.
[  100.113215][ T7292] rpfilter_check: 27 callbacks suppressed
[  100.113233][ T7292] ipt_rpfilter: unknown options
[  100.220486][ T7296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  100.226511][ T7295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  100.630071][ T7335] netlink: 'syz.1.512': attribute type 21 has an invalid length.
[  100.634926][ T7335] netlink: 'syz.1.512': attribute type 6 has an invalid length.
[  100.637629][ T7335] netlink: 132 bytes leftover after parsing attributes in process `syz.1.512'.
[  101.101248][ T7375] veth0_vlan: entered allmulticast mode
[  101.159894][ T7376] tipc: Started in network mode
[  101.161642][ T7376] tipc: Node identity 3ee84b18007c, cluster identity 4711
[  101.164247][ T7376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.212137][ T7376] syzkaller0: entered promiscuous mode
[  101.214572][ T7376] syzkaller0: entered allmulticast mode
[  101.217296][ T7376] tipc: Resetting bearer <eth:syzkaller0>
[  101.228056][ T7374] tipc: Resetting bearer <eth:syzkaller0>
[  101.261992][ T7387] ipt_rpfilter: unknown options
[  102.440005][ T7374] tipc: Disabling bearer <eth:syzkaller0>
[  102.445277][ T7393] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.528'.
[  102.449503][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.528'.
[  102.452486][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.528'.
[  102.455968][   T24] tipc: Node number set to 1049905944
[  102.718774][ T7426] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  103.510632][ T7465] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  103.531871][ T7465] syzkaller0: entered promiscuous mode
[  103.544209][ T7465] syzkaller0: entered allmulticast mode
[  103.560423][ T7472] netlink: 'syz.0.553': attribute type 21 has an invalid length.
[  103.941964][ T7506] netlink: 'syz.2.563': attribute type 1 has an invalid length.
[  103.944511][ T7506] net_ratelimit: 100 callbacks suppressed
[  103.944522][ T7506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.282305][ T7519] ipt_rpfilter: unknown options
[  104.435880][ T7528] __nla_validate_parse: 7 callbacks suppressed
[  104.435893][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.569'.
[  104.558536][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'.
[  104.572822][ T7532] gretap0: entered promiscuous mode
[  105.062609][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'.
[  105.146643][ T7580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.588'.
[  105.532874][ T7612] ipt_rpfilter: unknown options
[  105.580137][ T7607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  105.591286][ T7606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  106.246353][ T7653] xfrm0: entered promiscuous mode
[  106.248595][ T7653] xfrm0: entered allmulticast mode
[  107.925854][ T7675] macsec2: entered promiscuous mode
[  107.927561][ T7675] virt_wifi0: entered promiscuous mode
[  107.987082][ T7682] sctp: [Deprecated]: syz.1.619 (pid 7682) Use of int in max_burst socket option.
[  107.987082][ T7682] Use struct sctp_assoc_value instead
[  108.097414][ T7692] xt_hashlimit: max too large, truncated to 1048576
[  108.102352][ T7692] xt_hashlimit: overflow, try lower: 2/0
[  108.117622][ T7692] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  108.228892][ T7707] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  108.424021][ T7727] netlink: 'syz.2.632': attribute type 13 has an invalid length.
[  108.430256][ T7727] netlink: 'syz.2.632': attribute type 17 has an invalid length.
[  108.823953][ T7728] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.849524][ T7728] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.705189][ T7726] bridge2: port 2(veth0_to_bond) entered disabled state
[  109.771263][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.639'.
[  110.200149][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.204037][ T7727] 8021q: adding VLAN 0 to HW filter on device team0
[  110.209261][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.254852][ T7727] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  110.258436][ T7727] veth1_vlan: left promiscuous mode
[  110.261137][ T7727] veth0_vlan: left promiscuous mode
[  110.264803][ T7727] veth0_vlan: entered promiscuous mode
[  110.269291][ T7727] veth1_vlan: entered promiscuous mode
[  110.277708][ T7727] veth0_macvtap: left promiscuous mode
[  110.286839][ T7727] veth0_macvtap: entered promiscuous mode
[  110.296931][ T7727] veth1_macvtap: entered promiscuous mode
[  110.302990][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  110.309612][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  110.316290][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  110.322189][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  110.348494][ T7727] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.411117][   T52] bridge2: port 2(veth0_to_bond) entered blocking state
[  110.413433][   T52] bridge2: port 2(veth0_to_bond) entered forwarding state
[  110.429501][   T52] bridge2: port 1(veth3) entered blocking state
[  110.431692][   T52] bridge2: port 1(veth3) entered forwarding state
[  110.438316][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.443572][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.458987][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.467033][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.500620][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.513229][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.530701][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.536629][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.622895][ T7783] xt_ecn: cannot match TCP bits for non-tcp packets
[  110.789526][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'.
[  110.846616][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.649'.
[  110.922696][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'.
[  110.950704][ T7807] netlink: 128 bytes leftover after parsing attributes in process `syz.0.652'.
[  110.959041][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'.
[  111.104335][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'.
[  111.109713][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.657'.
[  111.259351][ T7830] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  111.473808][ T7841] x_tables: duplicate underflow at hook 2
[  111.480990][ T7842] x_tables: duplicate underflow at hook 2
[  111.542496][ T7847] openvswitch: netlink: Invalid VLAN frame
[  111.547822][ T7842] openvswitch: netlink: Invalid VLAN frame
[  111.558104][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'.
[  111.561084][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'.
[  111.751493][ T7860] bond2 (unregistering): Released all slaves
[  111.961733][ T7874] ipt_rpfilter: unknown options
[  112.348565][ T7916] xt_CONNSECMARK: invalid mode: 254
[  112.719802][ T7943] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  113.625994][ T7958] xt_hashlimit: size too large, truncated to 1048576
[  114.556770][ T8047] macsec3: entered promiscuous mode
[  114.559068][ T8047] bridge0: entered promiscuous mode
[  114.636486][ T8053] syz.2.715: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  114.651693][ T8053] CPU: 1 UID: 0 PID: 8053 Comm: syz.2.715 Not tainted syzkaller #0 PREEMPT(full) 
[  114.651709][ T8053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.651715][ T8053] Call Trace:
[  114.651721][ T8053]  <TASK>
[  114.651725][ T8053]  dump_stack_lvl+0xe8/0x150
[  114.651745][ T8053]  warn_alloc+0x249/0x340
[  114.651760][ T8053]  ? stack_trace_save+0xa9/0x100
[  114.651777][ T8053]  ? __pfx_warn_alloc+0x10/0x10
[  114.651793][ T8053]  ? kasan_save_track+0x4f/0x80
[  114.651811][ T8053]  ? kasan_save_track+0x3e/0x80
[  114.651823][ T8053]  ? __kasan_kmalloc+0x93/0xb0
[  114.651835][ T8053]  ? __kmalloc_cache_noprof+0x31c/0x660
[  114.651848][ T8053]  ? xskq_create+0x56/0x170
[  114.651860][ T8053]  ? xsk_setsockopt+0x54c/0x990
[  114.651868][ T8053]  ? do_sock_setsockopt+0x17c/0x1b0
[  114.651878][ T8053]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  114.651890][ T8053]  ? do_syscall_64+0x15f/0xf80
[  114.651904][ T8053]  __vmalloc_node_range_noprof+0x132/0x1750
[  114.651929][ T8053]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  114.651943][ T8053]  ? __kasan_kmalloc+0x93/0xb0
[  114.651956][ T8053]  vmalloc_user_noprof+0xad/0xe0
[  114.651967][ T8053]  ? xskq_create+0xbf/0x170
[  114.651977][ T8053]  xskq_create+0xbf/0x170
[  114.651989][ T8053]  xsk_init_queue+0x8a/0xe0
[  114.652034][ T8053]  xsk_setsockopt+0x54c/0x990
[  114.652046][ T8053]  ? __pfx_xsk_setsockopt+0x10/0x10
[  114.652056][ T8053]  ? __pfx_aa_sk_perm+0x10/0x10
[  114.652109][ T8053]  ? aa_sock_opt_perm+0xff/0x1a0
[  114.652124][ T8053]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  114.652138][ T8053]  ? __pfx_xsk_setsockopt+0x10/0x10
[  114.652148][ T8053]  do_sock_setsockopt+0x17c/0x1b0
[  114.652162][ T8053]  __x64_sys_setsockopt+0x13d/0x1b0
[  114.652173][ T8053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.652183][ T8053]  do_syscall_64+0x15f/0xf80
[  114.652196][ T8053]  ? trace_irq_disable+0x3b/0x140
[  114.652211][ T8053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.652219][ T8053] RIP: 0033:0x7f01b719cdd9
[  114.652228][ T8053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.652235][ T8053] RSP: 002b:00007f01b7f87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  114.652247][ T8053] RAX: ffffffffffffffda RBX: 00007f01b7415fa0 RCX: 00007f01b719cdd9
[  114.652254][ T8053] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  114.652259][ T8053] RBP: 00007f01b7232d69 R08: 0000000000000004 R09: 0000000000000000
[  114.652265][ T8053] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.652270][ T8053] R13: 00007f01b7416038 R14: 00007f01b7415fa0 R15: 00007fff18ac27e8
[  114.652285][ T8053]  </TASK>
[  114.750830][ T8053] Mem-Info:
[  114.751871][ T8053] active_anon:5496 inactive_anon:0 isolated_anon:0
[  114.751871][ T8053]  active_file:12289 inactive_file:38331 isolated_file:0
[  114.751871][ T8053]  unevictable:1768 dirty:51 writeback:0
[  114.751871][ T8053]  slab_reclaimable:9924 slab_unreclaimable:123098
[  114.751871][ T8053]  mapped:18277 shmem:2374 pagetables:941
[  114.751871][ T8053]  sec_pagetables:0 bounce:0
[  114.751871][ T8053]  kernel_misc_reclaimable:0
[  114.751871][ T8053]  free:1097178 free_pcp:16273 free_cma:0
[  114.765397][ T8053] Node 0 active_anon:9996kB inactive_anon:0kB active_file:15740kB inactive_file:147240kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48716kB dirty:16kB writeback:0kB shmem:4636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4064kB pagetables:1800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  114.775970][ T8053] Node 1 active_anon:11988kB inactive_anon:0kB active_file:33416kB inactive_file:6084kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24392kB dirty:188kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7864kB pagetables:1964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  114.788942][ T8053] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  114.800065][ T8053] lowmem_reserve[]: 0 1587 2117 2117 2117
[  114.800784][ T8055] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  114.802062][ T8053] Node 0 DMA32 free:1429472kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:76kB inactive_anon:0kB active_file:6808kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1625328kB mlocked:0kB bounce:0kB free_pcp:23664kB local_pcp:11796kB free_cma:0kB
[  114.802117][ T8053] lowmem_reserve[]: 0 0 530 530 530
[  114.817145][ T8053] Node 0 Normal free:25340kB boost:8192kB min:16704kB low:18832kB high:20960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9904kB inactive_anon:0kB active_file:8932kB inactive_file:147240kB unevictable:3536kB writepending:16kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:4628kB local_pcp:104kB free_cma:0kB
[  114.830331][ T8053] lowmem_reserve[]: 0 0 0 0 0
[  114.832326][ T8053] Node 1 Normal free:2918540kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11888kB inactive_anon:0kB active_file:33416kB inactive_file:6084kB unevictable:3536kB writepending:188kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:36400kB local_pcp:8292kB free_cma:0kB
[  114.832675][ T8055] __nla_validate_parse: 52 callbacks suppressed
[  114.832690][ T8055] netlink: 232 bytes leftover after parsing attributes in process `syz.2.715'.
[  114.843766][ T8053] lowmem_reserve[]: 0 0 0 0 0
[  114.843803][ T8053] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  114.843867][ T8053] Node 0 DMA32: 36*4kB (UM) 16*8kB (UME) 5*16kB (UME) 4*32kB (UE) 48*64kB (UE) 24*128kB (UME) 6*256kB (U) 4*512kB (UM) 6*1024kB (UME) 2*2048kB (UE) 344*4096kB (M) = 1429472kB
[  114.843951][ T8053] Node 0 Normal: 195*4kB (UME) 316*8kB (UME) 193*16kB (UME) 130*32kB (UM) 53*64kB (UME) 41*128kB (UM) 12*256kB (UME) 2*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 25340kB
[  114.868274][ T8053] Node 1 Normal: 921*4kB (UM) 242*8kB (UME) 305*16kB (UME) 438*32kB (UME) 220*64kB (UME) 68*128kB (UM) 20*256kB (UME) 6*512kB (UME) 4*1024kB (UME) 4*2048kB (UME) 696*4096kB (UM) = 2918596kB
[  114.874181][ T8053] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  114.877026][ T8053] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  114.879931][ T8053] 52994 total pagecache pages
[  114.881663][ T8053] 0 pages in swap cache
[  114.895067][ T8053] Free swap  = 124996kB
[  114.896788][ T8053] Total swap = 124996kB
[  114.898338][ T8053] 1834877 pages RAM
[  114.899707][ T8053] 0 pages HighMem/MovableOnly
[  114.901551][ T8053] 390246 pages reserved
[  114.903176][ T8053] 0 pages cma reserved
[  114.996285][ T8061] netlink: 'syz.1.717': attribute type 1 has an invalid length.
[  115.042153][ T8061] bond2: entered promiscuous mode
[  115.045921][ T8061] 8021q: adding VLAN 0 to HW filter on device bond2
[  115.060223][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.717'.
[  115.068727][ T8061] bond2: entered allmulticast mode
[  115.151734][ T8061] bond2: (slave bridge3): making interface the new active one
[  115.158422][ T8061] bridge3: entered promiscuous mode
[  115.160299][ T8061] bridge3: entered allmulticast mode
[  115.166452][ T8061] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  115.370140][ T8086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'.
[  115.408910][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.725'.
[  115.555562][ T8095] netlink: 128 bytes leftover after parsing attributes in process `syz.0.727'.
[  115.597370][ T8100] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  115.644573][   T33] audit: type=1804 audit(1778535074.389:2): pid=8102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.729" name="/newroot/273/memory.events" dev="tmpfs" ino=1411 res=1 errno=0
[  115.720691][ T8104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.730'.
[  115.768582][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'.
[  115.828074][ T8108] nftables ruleset with unbound chain
[  115.900257][ T5648] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  115.905856][ T5648] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  115.913004][ T5648] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  115.919569][ T5648] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  116.122352][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'.
[  116.171546][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'.
[  116.464037][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'.
[  116.515903][ T8164] netlink: 'syz.1.747': attribute type 1 has an invalid length.
[  116.805813][ T8176] tipc: Failed to remove unknown binding: 66,0,0/1049905944:3215657978/3215657980
[  116.810334][ T8176] tipc: Failed to remove unknown binding: 66,0,0/1049905944:3215657978/3215657979
[  116.815466][ T8176] tipc: Failed to remove unknown binding: 66,0,0/1049905944:3215657978/3215657980
[  116.819573][ T8176] tipc: Failed to remove unknown binding: 66,0,0/1049905944:3215657978/3215657979
[  117.729196][   T33] audit: type=1800 audit(1778535076.459:3): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.762" name="memory.events" dev="tmpfs" ino=996 res=0 errno=0
[  118.088362][ T8249] ipt_rpfilter: unknown options
[  118.238164][ T8268] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  118.381111][ T8273] netlink: set zone limit has 4 unknown bytes
[  118.912899][ T8326] xt_bpf: check failed: parse error
[  119.048399][ T8346] IPVS: length: 15 != 8
[  119.134234][ T8357] netlink: 'syz.2.805': attribute type 1 has an invalid length.
[  119.167017][ T8357] 8021q: adding VLAN 0 to HW filter on device bond3
[  119.559384][ T8396] x_tables: unsorted underflow at hook 1
[  119.607477][ T8398] xt_TCPMSS: Only works on TCP SYN packets
[  120.230498][ T8444] __nla_validate_parse: 20 callbacks suppressed
[  120.230512][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'.
[  120.449139][ T8460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  120.451478][ T8460] IPv6: NLM_F_CREATE should be set when creating new route
[  120.453830][ T8460] IPv6: NLM_F_CREATE should be set when creating new route
[  120.456631][ T8460] IPv6: NLM_F_CREATE should be set when creating new route
[  120.472328][ T8462] ipt_rpfilter: unknown options
[  121.221589][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.841'.
[  121.306011][ T8477] syzkaller0: entered promiscuous mode
[  121.308164][ T8477] syzkaller0: entered allmulticast mode
[  121.523167][ T8487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.844'.
[  122.835801][ T8494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.846'.
[  122.854012][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'.
[  122.902353][ T8498] bridge_slave_0: left allmulticast mode
[  122.915690][ T8498] bridge_slave_0: left promiscuous mode
[  122.925624][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.947130][ T8498] bridge_slave_1: left allmulticast mode
[  122.952527][ T8498] bridge_slave_1: left promiscuous mode
[  122.957835][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.962945][ T8498] bond0: (slave bond_slave_0): Releasing backup interface
[  122.967785][ T8498] bond0: (slave bond_slave_1): Releasing backup interface
[  122.972689][ T8498] team0: Port device team_slave_0 removed
[  122.982962][ T8498] team0: Port device team_slave_1 removed
[  122.990474][ T8498] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.994391][ T8498] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.000954][ T8498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  123.013854][ T8500] netlink: 76 bytes leftover after parsing attributes in process `syz.2.849'.
[  123.109873][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'.
[  123.130999][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.852'.
[  123.139760][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.852'.
[  123.174194][ T8516] openvswitch: netlink: Missing key (keys=40, expected=80)
[  123.757773][ T8551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.862'.
[  124.341340][ T8581] IPVS: Scheduler module ip_vs_sip not found
[  124.969332][ T8608] openvswitch: netlink: IP tunnel dst address not specified
[  124.976702][ T8608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.977899][ T8605] bond4 (unregistering): Released all slaves
[  125.338962][ T8633] netlink: 'syz.0.889': attribute type 3 has an invalid length.
[  125.346183][ T8633] netlink: 'syz.0.889': attribute type 3 has an invalid length.
[  125.372505][ T8633] __nla_validate_parse: 6 callbacks suppressed
[  125.372519][ T8633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.889'.
[  125.471243][ T8645] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[  125.548721][ T8650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.895'.
[  125.552989][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'.
[  125.651550][ T8659] ipt_rpfilter: unknown options
[  125.698034][ T8663] netlink: 34 bytes leftover after parsing attributes in process `syz.2.898'.
[  125.729575][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.898'.
[  125.826726][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'.
[  125.833879][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'.
[  126.008324][ T8683] ipt_rpfilter: unknown options
[  126.100497][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.908'.
[  126.122401][ T8694] 8021q: adding VLAN 0 to HW filter on device bond4
[  126.234549][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.908'.
[  126.244922][ T8700] tipc: Failed to obtain node identity
[  126.247071][ T8700] tipc: Enabling of bearer <ib:ip6gre0> rejected, failed to enable media
[  126.302595][ T8704] ipt_rpfilter: unknown options
[  126.304531][ T8705] ipt_rpfilter: unknown options
[  126.357304][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.911'.
[  126.369332][ T8708] ipt_rpfilter: unknown options
[  126.477940][ T8714] syzkaller0: entered promiscuous mode
[  126.479813][ T8714] syzkaller0: entered allmulticast mode
[  128.236498][ T8763] netlink: 'syz.2.928': attribute type 8 has an invalid length.
[  128.347334][ T8775] xt_l2tp: missing protocol rule (udp|l2tpip)
[  128.445195][ T8779] ipt_rpfilter: unknown options
[  129.232061][ T8804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.237740][ T7739] IPVS: starting estimator thread 0...
[  129.334407][ T8805] IPVS: using max 65 ests per chain, 156000 per kthread
[  129.352848][ T8811] xt_hashlimit: size too large, truncated to 1048576
[  129.355732][ T8812] xt_hashlimit: size too large, truncated to 1048576
[  129.356352][ T8811] xt_hashlimit: invalid interval
[  129.358255][ T8812] xt_hashlimit: invalid interval
[  129.836740][ T8847] netlink: 'syz.1.951': attribute type 21 has an invalid length.
[  129.839321][ T8847] netlink: 'syz.1.951': attribute type 22 has an invalid length.
[  129.841889][ T8847] netlink: 'syz.1.951': attribute type 23 has an invalid length.
[  129.940516][ T8854] netlink: 'syz.0.954': attribute type 1 has an invalid length.
[  130.178679][ T8876] netlink: 'syz.1.958': attribute type 62 has an invalid length.
[  130.595010][ T8913] ipt_rpfilter: unknown options
[  130.753547][ T8928] __nla_validate_parse: 9 callbacks suppressed
[  130.753561][ T8928] netlink: 76 bytes leftover after parsing attributes in process `syz.1.973'.
[  130.759559][ T8928] syzkaller0: entered promiscuous mode
[  130.761398][ T8928] syzkaller0: entered allmulticast mode
[  130.770667][ T8928] tc action pedit offset must be on 32 bit boundaries
[  130.772921][ T8928] tc action pedit offset must be on 32 bit boundaries
[  130.775425][ T8928] tc action pedit offset must be on 32 bit boundaries
[  130.778197][ T8928] tc action pedit offset must be on 32 bit boundaries
[  130.780849][ T8928] tc action pedit offset must be on 32 bit boundaries
[  130.783569][ T8928] tc action pedit offset must be on 32 bit boundaries
[  130.786207][ T8928] tc action pedit offset must be on 32 bit boundaries
[  130.788852][ T8928] tc action pedit offset must be on 32 bit boundaries
[  130.791485][ T8928] tc action pedit offset must be on 32 bit boundaries
[  130.794205][ T8928] tc action pedit offset must be on 32 bit boundaries
[  130.796825][ T8928] 0: reclassify loop, rule prio 0, protocol 800
[  131.018375][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'.
[  131.057881][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'.
[  131.171155][ T8943] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  131.183238][ T8943] bond2 (unregistering): Released all slaves
[  131.380613][ T8973] netlink: 44 bytes leftover after parsing attributes in process `syz.1.982'.
[  131.497431][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'.
[  131.580721][ T8994] bridge0: port 1(syz_tun) entered blocking state
[  131.586174][ T8994] bridge0: port 1(syz_tun) entered disabled state
[  131.590877][ T8994] syz_tun: entered promiscuous mode
[  131.606059][ T8996] netlink: 48 bytes leftover after parsing attributes in process `syz.0.992'.
[  131.662180][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'.
[  131.669056][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'.
[  131.696424][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'.
[  131.702009][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'.
[  132.271699][ T9036] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20002
[  132.662398][ T9057] can: request_module (can-proto-0) failed.
[  133.111127][ T9103] ipt_rpfilter: unknown options
[  134.005608][ T9147] netlink: 'syz.1.1039': attribute type 8 has an invalid length.
[  134.316553][ T9167] ipt_rpfilter: unknown options
[  135.347856][ T9182] ipip0: entered promiscuous mode
[  135.768642][ T9216] __nla_validate_parse: 22 callbacks suppressed
[  135.768653][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'.
[  136.084568][ T9233] ipt_rpfilter: unknown options
[  136.132900][ T9235] ipt_rpfilter: unknown options
[  138.254827][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  138.257879][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  138.833080][ T9222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  139.072535][ T9262] veth0_virt_wifi: entered allmulticast mode
[  139.206735][ T9257] netlink: 'syz.2.1071': attribute type 1 has an invalid length.
[  139.274827][ T9257] veth0_to_bond: left allmulticast mode
[  139.277032][ T9257] veth0_to_bond: left promiscuous mode
[  139.279365][ T9257] bridge2: port 2(veth0_to_bond) entered disabled state
[  139.306973][ T9257] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  139.406199][ T9285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1082'.
[  139.660001][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'.
[  139.881957][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'.
[  139.897137][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1092'.
[  139.987277][ T9325] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  140.271278][ T9350] syzkaller0: entered promiscuous mode
[  140.274493][ T9350] syzkaller0: entered allmulticast mode
[  140.459318][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'.
[  142.151581][ T9383] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  142.348860][ T9399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.388379][ T9406] netlink: 'syz.0.1114': attribute type 1 has an invalid length.
[  142.708120][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1121'.
[  142.909123][ T9432] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1123'.
[  143.341215][ T9442] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1126'.
[  143.510650][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'.
[  143.892757][ T9465] bridge2: port 1(veth3) entered disabled state
[  143.931225][ T5648] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.947193][ T5648] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.960688][ T5648] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.975620][ T5648] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.987197][ T5648] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.994584][ T5648] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.001690][ T5648] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.012557][ T5648] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.034660][ T9482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1137'.
[  144.503175][ T9520] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1148'.
[  144.516087][ T9520] netlink: 'syz.0.1148': attribute type 1 has an invalid length.
[  144.701557][ T9526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1151'.
[  144.707285][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1151'.
[  144.749488][ T9532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1153'.
[  144.754498][ T9532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1153'.
[  144.883981][ T9542] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[  145.030653][ T9546] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  145.259165][ T9562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.278907][ T9565] syzkaller0: entered promiscuous mode
[  145.287212][ T9565] syzkaller0: entered allmulticast mode
[  149.940148][ T9622] __nla_validate_parse: 2 callbacks suppressed
[  149.940166][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'.
[  150.045538][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1189'.
[  150.102605][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1191'.
[  150.219002][ T9659] ipt_rpfilter: unknown options
[  151.005069][ T9652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  151.080075][ T9668] netlink: 'syz.0.1199': attribute type 1 has an invalid length.
[  151.096706][ T9668] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1199'.
[  151.121280][ T9668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1199'.
[  151.126452][ T9668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1199'.
[  151.218629][ T9682] netlink: 'syz.1.1203': attribute type 2 has an invalid length.
[  151.222234][ T9682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1203'.
[  151.265608][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1202'.
[  151.272855][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'.
[  151.349604][ T9688] syzkaller1: entered promiscuous mode
[  151.351598][ T9688] syzkaller1: entered allmulticast mode
[  151.355643][ T9688] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1206'.
[  151.469203][ T9695] bridge3: entered promiscuous mode
[  151.475805][ T9695] bridge3: entered allmulticast mode
[  151.748786][ T9727] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4
[  152.256167][ T9767] netlink: 'syz.1.1232': attribute type 11 has an invalid length.
[  154.033235][ T9793] ip6t_srh: unknown srh match flags  4000
[  154.850789][ T9822] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.857965][ T9822] 8021q: adding VLAN 0 to HW filter on device team0
[  154.866650][ T9822] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.908412][ T9822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  154.911741][ T9822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  154.922223][ T9822] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  155.002930][ T9836] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  155.036859][ T9840] Cannot find del_set index 8192 as target
[  155.118178][ T9843] __nla_validate_parse: 68 callbacks suppressed
[  155.118192][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'.
[  155.257123][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'.
[  155.260444][ T9860] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  155.379290][ T9877] netlink: 'syz.2.1263': attribute type 11 has an invalid length.
[  155.801970][ T9911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1275'.
[  155.928484][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'.
[  156.128024][ T9956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1285'.
[  156.132168][ T9951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1284'.
[  156.232550][ T9964] ipt_rpfilter: unknown options
[  156.465910][ T9980] bond6 (unregistering): Released all slaves
[  156.475109][ T9989] ipt_rpfilter: unknown options
[  156.558326][ T9993] ipt_rpfilter: unknown options
[  156.562063][ T9992] ipt_rpfilter: unknown options
[  156.701121][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1300'.
[  156.862288][T10015] tipc: Started in network mode
[  156.867064][T10015] tipc: Node identity ac14140f, cluster identity 4711
[  156.870764][T10015] tipc: New replicast peer: 255.255.255.255
[  156.875970][T10015] tipc: Enabled bearer <udp:syz2>, priority 10
[  156.968827][T10021] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002
[  156.978961][T10024] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002
[  156.994322][T10012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1303'.
[  157.082750][T10035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1310'.
[  157.210672][T10045] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1314'.
[  157.360061][T10059] bond3: entered promiscuous mode
[  157.361750][T10059] bond3: entered allmulticast mode
[  157.367421][T10059] 8021q: adding VLAN 0 to HW filter on device bond3
[  157.383241][T10065] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  157.551456][T10090] ipt_rpfilter: unknown options
[  157.667457][T10098] netlink: 'syz.1.1330': attribute type 1 has an invalid length.
[  157.846080][T10109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.849546][T10109] syzkaller0: entered promiscuous mode
[  157.851977][T10109] syzkaller0: entered allmulticast mode
[  157.883220][T10109] tipc: Resetting bearer <eth:syzkaller0>
[  157.895111][   T10] tipc: Node number set to 2886997007
[  157.899108][T10107] tipc: Resetting bearer <eth:syzkaller0>
[  157.916255][T10107] tipc: Disabling bearer <eth:syzkaller0>
[  158.150137][T10128] netlink: 'syz.0.1339': attribute type 29 has an invalid length.
[  158.158938][T10128] netlink: 'syz.0.1339': attribute type 29 has an invalid length.
[  158.168218][T10128] netlink: 'syz.0.1339': attribute type 32 has an invalid length.
[  158.584508][T10154] netlink: 'syz.1.1348': attribute type 29 has an invalid length.
[  171.988193][T10185] __nla_validate_parse: 69 callbacks suppressed
[  171.988210][T10185] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1358'.
[  172.001772][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1358'.
[  172.167902][T10202] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1361'.
[  172.182962][T10202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1361'.
[  172.259866][T10208] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1363'.
[  172.262984][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'.
[  172.295944][T10210] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1364'.
[  172.301110][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'.
[  172.308650][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1364'.
[  172.451164][T10215] ipt_rpfilter: unknown options
[  172.630965][T10221] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1369'.
[  172.721146][T10226] ipt_rpfilter: unknown options
[  173.708659][T10288] syzkaller0: entered promiscuous mode
[  173.710962][T10288] syzkaller0: entered allmulticast mode
[  173.977439][T10307] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  174.087696][T10315] syzkaller1: entered promiscuous mode
[  174.089779][T10315] syzkaller1: entered allmulticast mode
[  175.307462][T10331] netlink: 'syz.1.1397': attribute type 10 has an invalid length.
[  176.160395][T10357] syzkaller0: entered promiscuous mode
[  176.163215][T10357] syzkaller0: entered allmulticast mode
[  176.415862][T10383] netlink: zone id is out of range
[  176.418140][T10383] netlink: zone id is out of range
[  176.420535][T10383] netlink: zone id is out of range
[  176.422887][T10383] netlink: zone id is out of range
[  176.425270][T10383] netlink: zone id is out of range
[  176.427008][T10383] netlink: zone id is out of range
[  176.428727][T10383] netlink: zone id is out of range
[  176.430782][T10383] netlink: zone id is out of range
[  176.434783][T10383] netlink: zone id is out of range
[  176.436913][T10383] netlink: zone id is out of range
[  177.321530][T10415] bond3: entered allmulticast mode
[  177.326212][T10415] 8021q: adding VLAN 0 to HW filter on device bond3
[  177.351856][T10420] __nla_validate_parse: 114 callbacks suppressed
[  177.351878][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1425'.
[  177.621044][T10453] syzkaller1: entered promiscuous mode
[  177.627519][T10453] syzkaller1: entered allmulticast mode
[  177.898844][T10467] syzkaller0: entered promiscuous mode
[  177.901186][T10467] syzkaller0: entered allmulticast mode
[  178.271391][T10505] netlink: 'syz.1.1448': attribute type 15 has an invalid length.
[  178.280777][T10505] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1448'.
[  178.436826][T10515] netlink: 'syz.1.1449': attribute type 13 has an invalid length.
[  178.439972][T10515] netlink: 'syz.1.1449': attribute type 17 has an invalid length.
[  179.559792][T10515] ip6gre0: left allmulticast mode
[  179.586704][T10515] bridge0: port 1(syz_tun) entered blocking state
[  179.588929][T10515] bridge0: port 1(syz_tun) entered listening state
[  179.595192][T10515] bridge0: left promiscuous mode
[  179.602806][T10515] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.610330][T10515] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.639645][T10515] veth1_to_batadv: left allmulticast mode
[  179.647299][T10515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  179.651389][T10515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  179.659652][T10515] veth0_virt_wifi: left allmulticast mode
[  179.662833][T10515] veth1_vlan: left promiscuous mode
[  179.666749][T10515] veth0_vlan: left promiscuous mode
[  179.669396][T10515] veth0_vlan: entered promiscuous mode
[  179.678180][T10515] veth1_vlan: entered promiscuous mode
[  179.686366][T10515] veth1_macvtap: left promiscuous mode
[  179.689547][T10515] veth0_macvtap: left promiscuous mode
[  179.702743][T10515] veth0_macvtap: entered promiscuous mode
[  179.713146][T10515] veth1_macvtap: entered promiscuous mode
[  179.720584][T10515] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  179.769645][ T5648] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.779162][ T5648] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.782373][ T5648] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.790640][ T5648] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.877070][T10532] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1454'.
[  180.418610][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1456'.
[  180.488550][T10549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1459'.
[  180.535816][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1460'.
[  180.538630][T10552] vlan0: entered promiscuous mode
[  180.567279][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1461'.
[  180.578734][T10549] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1459'.
[  180.581722][T10549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1459'.
[  180.612910][  T410] bridge0: entered promiscuous mode
[  180.806421][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'.
[  180.970246][T10597] pimreg: entered allmulticast mode
[  180.991289][T10597] pimreg: left allmulticast mode
[  181.020986][T10603] bridge0: port 1(erspan0) entered blocking state
[  181.023686][T10603] bridge0: port 1(erspan0) entered disabled state
[  181.027663][T10603] erspan0: entered allmulticast mode
[  181.032645][T10603] erspan0: entered promiscuous mode
[  181.035337][T10603] bridge0: port 1(erspan0) entered blocking state
[  181.037852][T10603] bridge0: port 1(erspan0) entered forwarding state
[  181.797610][T10661] IPVS: length: 15 != 8
[  182.030759][T10677] net_ratelimit: 16 callbacks suppressed
[  182.030803][T10677] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  182.038130][T10677] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.101102][T10683] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  182.268679][T10697] syzkaller0: entered promiscuous mode
[  182.270381][T10697] syzkaller0: entered allmulticast mode
[  182.625465][T10713] __nla_validate_parse: 14 callbacks suppressed
[  182.625477][T10713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1513'.
[  182.691237][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1515'.
[  182.695163][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1515'.
[  183.673177][T10717] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  183.675162][T10718] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  183.958858][T10755] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1524'.
[  183.999977][T10755] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1524'.
[  184.019437][T10767] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1527'.
[  184.022207][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1527'.
[  184.089962][T10777] tun0: tun_chr_ioctl cmd 1074025672
[  184.091919][T10777] tun0: ignored: set checksum disabled
[  184.134885][T10779] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1533'.
[  184.142006][T10779] netlink: 'syz.1.1533': attribute type 1 has an invalid length.
[  184.185097][T10779] bond4: (slave bridge4): making interface the new active one
[  184.188876][T10779] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  184.268407][T10788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1536'.
[  184.358167][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'.
[  184.873159][T10840] nft_compat: unsupported protocol 0
[  185.008980][T10850] netlink: 'syz.2.1552': attribute type 4 has an invalid length.
[  185.015147][T10851] netem: change failed
[  185.100860][T10858] sctp: [Deprecated]: syz.1.1554 (pid 10858) Use of int in maxseg socket option.
[  185.100860][T10858] Use struct sctp_assoc_value instead
[  185.215021][T10871] syzkaller0: entered promiscuous mode
[  185.216762][T10871] syzkaller0: entered allmulticast mode
[  185.631502][T10906] syzkaller0: entered promiscuous mode
[  185.633757][T10906] syzkaller0: entered allmulticast mode
[  185.738130][T10918] ipt_rpfilter: unknown options
[  186.250151][T10956] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0
[  187.173797][T11002] bond6: Removing last arp target with arp_interval on
[  187.943374][T11055] __nla_validate_parse: 77 callbacks suppressed
[  187.943389][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1615'.
[  188.381799][T11074] syzkaller0: entered promiscuous mode
[  188.384912][T11074] syzkaller0: entered allmulticast mode
[  188.448281][T11074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1621'.
[  189.175405][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'.
[  189.180645][T11083] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1623'.
[  189.186346][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'.
[  189.457510][T11096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1627'.
[  189.520579][T11102] macsec4: entered promiscuous mode
[  189.522567][T11102] macsec4: entered allmulticast mode
[  189.536374][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1628'.
[  189.596019][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1629'.
[  189.634050][T11104] bond5: entered promiscuous mode
[  189.637455][T11104] 8021q: adding VLAN 0 to HW filter on device bond5
[  189.654409][T11109] netlink: 'syz.0.1631': attribute type 1 has an invalid length.
[  189.665655][T11104] bridge6: entered promiscuous mode
[  189.668608][T11104] bond5: (slave bridge6): Enslaving as an active interface with an up link
[  189.678270][T11104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1629'.
[  189.715092][T11111] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1632'.
[  191.474798][T11206] netlink: 'syz.0.1655': attribute type 1 has an invalid length.
[  191.534812][ T5619] Bluetooth: hci0: command 0x0406 tx timeout
[  191.536990][ T5611] Bluetooth: hci1: command 0x0406 tx timeout
[  192.289385][T11216] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  192.330756][T11216] netlink: 'syz.2.1660': attribute type 6 has an invalid length.
[  192.578672][T11242] ip6gre2: entered promiscuous mode
[  192.581288][T11242] ip6gre2: entered allmulticast mode
[  192.589169][T11242] netlink: 'syz.0.1668': attribute type 6 has an invalid length.
[  192.603467][T11242] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  192.607796][T11242] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  192.631280][T11244] 8021q: VLANs not supported on syzkaller1
[  192.640040][T11244] syzkaller1: entered promiscuous mode
[  192.642197][T11244] syzkaller1: entered allmulticast mode
[  192.797046][T11251] x_tables: duplicate underflow at hook 3
[  192.957526][T11265] netlink: 'syz.2.1675': attribute type 2 has an invalid length.
[  192.960633][T11265] __nla_validate_parse: 24 callbacks suppressed
[  192.960646][T11265] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1675'.
[  192.967534][T11265] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1675'.
[  192.973901][T11267] netlink: 'syz.2.1675': attribute type 2 has an invalid length.
[  192.977571][T11267] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1675'.
[  193.845432][T11316] syzkaller0: entered promiscuous mode
[  193.847329][T11316] syzkaller0: entered allmulticast mode
[  193.886605][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'.
[  193.897745][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'.
[  193.902121][T11320] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1694'.
[  193.912087][T11321] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1694'.
[  193.969342][T11327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1696'.
[  194.007830][T11335] ipt_rpfilter: unknown options
[  194.438604][T11354] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1706'.
[  194.469493][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1707'.
[  194.951265][T11397] netlink: 'syz.1.1713': attribute type 4 has an invalid length.
[  194.964780][T11394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  194.968966][T11397] netlink: 'syz.1.1713': attribute type 4 has an invalid length.
[  194.977014][T11390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  194.985856][T11397] syzkaller1: entered promiscuous mode
[  194.987917][T11397] syzkaller1: entered allmulticast mode
[  195.151055][T11407] ksmbd: Unknown IPC event: 1, ignore.
[  196.090734][T11434] netlink: 'syz.2.1728': attribute type 8 has an invalid length.
[  196.276771][T11450] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20002
[  196.551426][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881137e6000: rx timeout, send abort
[  196.556824][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881137e6000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  196.633154][T11468] netlink: 'syz.2.1737': attribute type 7 has an invalid length.
[  196.636163][T11468] netlink: 'syz.2.1737': attribute type 7 has an invalid length.
[  196.968453][T11482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.004610][T11484] ipt_rpfilter: unknown options
[  197.044353][T11489] ipt_rpfilter: unknown options
[  197.647577][T11515] erspan0: entered promiscuous mode
[  198.154635][T11519] ipt_rpfilter: unknown options
[  198.272646][T11526] __nla_validate_parse: 11 callbacks suppressed
[  198.272657][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'.
[  198.355752][T11530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1756'.
[  198.364061][T11531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1756'.
[  198.472236][T11538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1759'.
[  198.739559][T11549] netlink: 'syz.0.1763': attribute type 1 has an invalid length.
[  198.742273][T11549] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1763'.
[  198.854037][T11553] netlink: 'syz.1.1762': attribute type 13 has an invalid length.
[  198.864889][T11553] netlink: 'syz.1.1762': attribute type 17 has an invalid length.
[  198.897883][T11552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1763'.
[  198.918999][T11552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1763'.
[  199.107179][T11551] bridge0: port 1(syz_tun) entered disabled state
[  199.378047][T11553] erspan0: left promiscuous mode
[  199.449225][T11553] bridge0: port 1(syz_tun) entered blocking state
[  199.451709][T11553] bridge0: port 1(syz_tun) entered listening state
[  199.466499][T11553] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.504776][T11553] veth1_vlan: left promiscuous mode
[  199.507568][T11553] veth0_vlan: left promiscuous mode
[  199.510162][T11553] veth0_vlan: entered promiscuous mode
[  199.515268][T11553] veth1_vlan: entered promiscuous mode
[  199.520582][T11553] veth1_macvtap: left promiscuous mode
[  199.523038][T11553] veth0_macvtap: left promiscuous mode
[  199.526338][T11553] veth0_macvtap: entered promiscuous mode
[  199.529753][T11553] veth1_macvtap: entered promiscuous mode
[  199.538587][T11553] 8021q: adding VLAN 0 to HW filter on device bond1
[  199.557996][T11553] bond2: left promiscuous mode
[  199.559825][T11553] bridge3: left promiscuous mode
[  199.561570][T11553] bond2: left allmulticast mode
[  199.563177][T11553] bridge3: left allmulticast mode
[  199.565493][T11553] 8021q: adding VLAN 0 to HW filter on device bond2
[  199.574545][T11553] ipip0: left promiscuous mode
[  199.584919][T11553] bond3: left promiscuous mode
[  199.586523][T11553] bond3: left allmulticast mode
[  199.588373][T11553] 8021q: adding VLAN 0 to HW filter on device bond3
[  199.595192][T11553] 8021q: adding VLAN 0 to HW filter on device eth0
[  199.603675][T11553] 8021q: adding VLAN 0 to HW filter on device eth1
[  199.612317][T11553] 8021q: adding VLAN 0 to HW filter on device eth2
[  199.629769][T11553] 8021q: adding VLAN 0 to HW filter on device eth3
[  199.641329][T11553] ip6gretap0: entered promiscuous mode
[  199.654051][T11553] 8021q: adding VLAN 0 to HW filter on device bond4
[  199.672049][T11553] bond5: left promiscuous mode
[  199.673805][T11553] bridge6: left promiscuous mode
[  199.676055][T11553] 8021q: adding VLAN 0 to HW filter on device bond5
[  199.679960][T11553] erspan0: entered promiscuous mode
[  199.704362][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  199.747067][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1764'.
[  199.810213][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  199.820547][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  199.848217][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  199.860598][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  200.017994][T11581] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1766'.
[  200.104368][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'.
[  200.147705][T11593] IPVS: length: 528 != 8
[  201.879769][T11712] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20004
[  201.885590][T11713] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20004
[  201.934918][T11717] netlink: 'syz.0.1799': attribute type 1 has an invalid length.
[  201.937452][T11717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  202.839480][T11732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.868012][T11732] syzkaller0: entered promiscuous mode
[  202.869824][T11732] syzkaller0: entered allmulticast mode
[  202.871977][T11732] tipc: Resetting bearer <eth:syzkaller0>
[  202.931226][   T27] tipc: Resetting bearer <eth:syzkaller0>
[  202.935560][T11731] tipc: Resetting bearer <eth:syzkaller0>
[  203.561519][T11744] openvswitch: netlink: IPv6 tunnel dst address is zero
[  203.741722][T11749] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  204.420689][T11731] tipc: Disabling bearer <eth:syzkaller0>
[  204.617096][T11763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.683611][T11768] __nla_validate_parse: 14 callbacks suppressed
[  204.683622][T11768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1815'.
[  204.707227][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1815'.
[  204.921951][T11778] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1819'.
[  204.934027][T11779] geneve2: entered promiscuous mode
[  204.943773][ T5648] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 39759 - 0
[  204.949796][ T5648] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 39759 - 0
[  204.957437][ T5648] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 39759 - 0
[  204.966750][ T5648] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 39759 - 0
[  204.991246][T11785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1819'.
[  205.012374][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1820'.
[  205.076357][T11790] veth1_macvtap: left promiscuous mode
[  205.079146][T11790] veth0_macvtap: left promiscuous mode
[  205.082010][T11790] veth0_macvtap: entered promiscuous mode
[  205.089599][T11790] veth1_macvtap: entered promiscuous mode
[  205.183134][T11790] 8021q: adding VLAN 0 to HW filter on device bond1
[  205.222485][T11790] 8021q: adding VLAN 0 to HW filter on device bond2
[  205.234170][T11790] 8021q: adding VLAN 0 to HW filter on device bond3
[  205.258165][T11790] 8021q: adding VLAN 0 to HW filter on device batadv1
[  205.261961][T11790] 8021q: adding VLAN 0 to HW filter on device bond4
[  205.269334][T11790] 8021q: adding VLAN 0 to HW filter on device bond5
[  205.279040][T11790] 8021q: adding VLAN 0 to HW filter on device bond6
[  205.290933][T11790] 8021q: adding VLAN 0 to HW filter on device eth0
[  205.298639][T11790] 8021q: adding VLAN 0 to HW filter on device eth1
[  205.311849][T11790] 8021q: adding VLAN 0 to HW filter on device eth2
[  205.330743][T11790] 8021q: adding VLAN 0 to HW filter on device eth3
[  205.348330][   T26] bridge2: port 1(veth3) entered blocking state
[  205.350760][   T26] bridge2: port 1(veth3) entered forwarding state
[  205.442826][ T5648] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  205.449348][ T5648] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  205.463983][ T5648] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  205.467580][ T5648] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  205.476790][ T5648] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  205.480153][ T5648] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  205.487196][ T5648] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  205.491644][ T5648] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  205.496268][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'.
[  205.499784][T11798] netlink: 'syz.2.1823': attribute type 11 has an invalid length.
[  205.513208][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'.
[  205.523911][T11798] netlink: 'syz.2.1823': attribute type 11 has an invalid length.
[  205.542981][T11806] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1825'.
[  205.978290][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1832'.
[  206.022587][T11827] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1833'.
[  206.118401][T11832] syzkaller1: entered promiscuous mode
[  206.120740][T11832] syzkaller1: entered allmulticast mode
[  206.127930][T11832] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  206.585699][T11863] netlink: 'syz.0.1839': attribute type 21 has an invalid length.
[  206.840288][T11887] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  210.908112][T11929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  211.638721][T12008] __nla_validate_parse: 11 callbacks suppressed
[  211.638734][T12008] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1876'.
[  211.709053][T12020] rdma_op ffff88810de449f0 conn xmit_rdma 0000000000000000
[  211.722675][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1879'.
[  211.750383][T12024] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  211.799047][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1885'.
[  211.802647][T12031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1884'.
[  211.806122][T12031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1884'.
[  211.843049][T12038] netem: incorrect gi model size
[  211.846992][T12038] netem: change failed
[  211.880853][T12043] ipt_rpfilter: unknown options
[  211.898625][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'.
[  211.902188][T12043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1889'.
[  211.906839][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'.
[  211.909753][T12043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1889'.
[  212.009561][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1892'.
[  212.195287][T12069] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  213.016847][T12129] x_tables: duplicate underflow at hook 1
[  214.532958][T12259] netlink: 'syz.2.1947': attribute type 21 has an invalid length.
[  214.540312][T12259] netlink: 'syz.2.1947': attribute type 6 has an invalid length.
[  214.787913][T12275] veth5: entered allmulticast mode
[  214.795576][T12275] bond7: (slave veth5): Enslaving as an active interface with an up link
[  214.815259][T12275] bond7 (unregistering): (slave veth5): Releasing backup interface
[  214.824254][T12275] bond7 (unregistering): Released all slaves
[  214.845082][T12257] nicvf0: tun_chr_ioctl cmd 1074812117
[  215.057920][T12293] tipc: MTU too low for tipc bearer
[  215.859811][T12380] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  216.924098][T12443] __nla_validate_parse: 32 callbacks suppressed
[  216.924114][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2003'.
[  216.955738][T12443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2003'.
[  217.111103][T12454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2007'.
[  217.194760][T12458] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  217.277058][T12461] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2010'.
[  218.840488][T12486] sit1: entered promiscuous mode
[  218.848604][T12486] netlink: 'syz.1.2017': attribute type 25 has an invalid length.
[  218.971088][T12500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2023'.
[  218.983425][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  218.992186][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2022'.
[  219.040586][T12506] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2026'.
[  219.171962][T12527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2032'.
[  219.181461][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'.
[  219.226294][T12531] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2033'.
[  219.944047][T12589] ipt_rpfilter: unknown options
[  220.042110][T12591] tipc: Disabling bearer <udp:syz2>
[  220.401362][T12629] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  220.407600][T12629] bond7 (unregistering): Released all slaves
[  220.507493][T12638] sctp: [Deprecated]: syz.1.2062 (pid 12638) Use of int in max_burst socket option deprecated.
[  220.507493][T12638] Use struct sctp_assoc_value instead
[  220.655275][T12659] netlink: 'syz.1.2067': attribute type 1 has an invalid length.
[  220.664819][T12659] netlink: 'syz.1.2067': attribute type 1 has an invalid length.
[  220.680875][T12659] netlink: 'syz.1.2067': attribute type 1 has an invalid length.
[  220.687687][T12660] bond0: entered promiscuous mode
[  220.694492][T12660] bond0: left promiscuous mode
[  220.775114][T12674] netlink: 'syz.0.2071': attribute type 2 has an invalid length.
[  221.537004][T12718] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  221.589951][T12733] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  221.992524][T12759] ipt_rpfilter: unknown options
[  222.152860][T12765] netlink: 'syz.1.2096': attribute type 21 has an invalid length.
[  222.160280][T12765] __nla_validate_parse: 53 callbacks suppressed
[  222.160289][T12765] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2096'.
[  222.177133][T12765] netlink: 'syz.1.2096': attribute type 4 has an invalid length.
[  222.188944][T12765] netlink: 'syz.1.2096': attribute type 3 has an invalid length.
[  222.196961][T12765] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2096'.
[  222.317894][T12772] nft_compat: unsupported protocol 5
[  222.321169][T12771] nft_compat: unsupported protocol 5
[  222.369095][T12777] geneve2: entered allmulticast mode
[  222.938917][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'.
[  222.987730][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'.
[  223.445207][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2107'.
[  223.477828][T12809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2108'.
[  223.480746][T12809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2108'.
[  223.573947][T12817] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2110'.
[  223.637386][T12823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2112'.
[  223.844815][T12680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  223.903472][T12839] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  223.947816][T12844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2118'.
[  224.306554][T12883] block nbd0: Receive control failed (result -32)
[  224.310298][   T55] block nbd0: Receive control failed (result -32)
[  224.406049][T12892] netlink: 'syz.2.2130': attribute type 1 has an invalid length.
[  224.425166][T12892] 8021q: adding VLAN 0 to HW filter on device bond7
[  224.492857][T12892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  225.999435][T12985] netlink: 'syz.2.2159': attribute type 6 has an invalid length.
[  226.004350][T12985] netlink: 'syz.2.2159': attribute type 6 has an invalid length.
[  226.799330][T13018] netlink: 'syz.1.2168': attribute type 1 has an invalid length.
[  226.802501][T13018] netlink: 'syz.1.2168': attribute type 11 has an invalid length.
[  227.232753][T13022] __nla_validate_parse: 15 callbacks suppressed
[  227.232776][T13022] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2169'.
[  227.243198][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2169'.
[  227.777207][T13053] ipt_rpfilter: unknown options
[  227.781658][T13054] ipt_rpfilter: unknown options
[  227.890791][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2180'.
[  227.958484][T13075] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  228.004102][T13077] xt_CT: No such helper "syz0"
[  228.007314][T13077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2183'.
[  228.037234][T13077] tipc: Enabled bearer <ib:team0>, priority 12
[  228.111128][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2185'.
[  228.191645][T13093] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  228.355989][T13106] syzkaller0: entered promiscuous mode
[  228.363528][T13106] syzkaller0: entered allmulticast mode
[  228.454261][T13119] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  228.536802][T13126] dummy0: mtu less than device minimum
[  228.859021][T13150] ipt_rpfilter: unknown options
[  228.995946][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'.
[  229.006161][T13163] syzkaller0: entered promiscuous mode
[  229.008368][T13163] syzkaller0: entered allmulticast mode
[  229.029912][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2210'.
[  229.406591][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2216'.
[  229.412041][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2216'.
[  229.415456][T13183] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2216'.
[  229.768629][T13210] netlink: 'syz.1.2224': attribute type 21 has an invalid length.
[  229.775965][    C1] bridge0: port 1(syz_tun) entered learning state
[  229.948469][T13221] nbd: must specify a device to reconfigure
[  230.243433][T13253] netlink: 'syz.1.2234': attribute type 1 has an invalid length.
[  230.260076][T13253] 8021q: adding VLAN 0 to HW filter on device bond7
[  230.280337][T13253] bond7: (slave gretap1): making interface the new active one
[  230.285680][T13253] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  230.351966][T13253] syz.1.2234 (13253) used greatest stack depth: 20152 bytes left
[  230.488374][T13263] ipt_rpfilter: unknown options
[  231.689917][T13309] netlink: 'syz.0.2249': attribute type 1 has an invalid length.
[  231.720722][T13309] bond4: entered promiscuous mode
[  231.723222][T13309] 8021q: adding VLAN 0 to HW filter on device bond4
[  231.828875][T13316] ipt_rpfilter: unknown options
[  233.070090][T13370] __nla_validate_parse: 18 callbacks suppressed
[  233.070103][T13370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2271'.
[  233.354637][T13388] sctp: [Deprecated]: syz.0.2275 (pid 13388) Use of struct sctp_assoc_value in delayed_ack socket option.
[  233.354637][T13388] Use struct sctp_sack_info instead
[  234.076344][T13421] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2282'.
[  234.079906][T13421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2282'.
[  234.263214][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2287'.
[  234.268779][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2288'.
[  234.431856][T13461] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2294'.
[  234.449250][T13461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2294'.
[  234.507747][T13468] netlink: 'syz.0.2296': attribute type 1 has an invalid length.
[  234.552765][T13468] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address
[  234.560454][T13468] bond5: (slave vxcan5): Setting fail_over_mac to active for active-backup mode
[  234.571338][T13468] bond5: (slave vxcan5): making interface the new active one
[  234.582540][T13468] bond5: (slave vxcan5): Enslaving as an active interface with an up link
[  234.599591][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2296'.
[  234.613150][T13468] bond5 (unregistering): (slave vxcan5): Releasing backup interface
[  234.627632][T13468] bond5 (unregistering): Released all slaves
[  235.551526][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.554851][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.558612][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.562554][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.566909][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.570707][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.574887][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.578670][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.582382][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.586452][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.590222][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.594143][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.597801][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.600689][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.603504][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.606583][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.610242][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.614391][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.618526][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.628082][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.643642][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.654496][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.662103][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.666325][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.670290][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.672996][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.676758][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.679867][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.685118][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.688653][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.692225][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.698742][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.711740][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.716521][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.721238][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.725183][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.728535][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.731741][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.735135][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.738769][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.741909][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.745656][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.749042][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.752317][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.766528][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.769459][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.772004][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.776049][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.778550][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.781204][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.785566][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.788468][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.795131][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.804183][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.813868][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.818807][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.822383][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.826263][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.829147][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.831640][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.834237][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.836755][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.839267][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.841747][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  235.846022][T13523] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  236.396058][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2321'.
[  236.518131][T13565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2324'.
[  236.792480][T13579] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  236.796164][T13579] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  238.136392][T13631] ipt_rpfilter: unknown options
[  238.172587][T13633] sctp: [Deprecated]: syz.1.2351 (pid 13633) Use of int in max_burst socket option deprecated.
[  238.172587][T13633] Use struct sctp_assoc_value instead
[  238.192796][T13636] __nla_validate_parse: 7 callbacks suppressed
[  238.192807][T13636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2350'.
[  238.212887][T13638] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2348'.
[  238.235656][T13638] IPv6: sit2: Disabled Multicast RS
[  238.238388][T13636] openvswitch: netlink: Message has 36 unknown bytes.
[  238.244482][T13643] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2353'.
[  238.247899][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2353'.
[  238.361909][T13665] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2359'.
[  238.366330][T13667] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2359'.
[  238.377576][T13669] sctp: [Deprecated]: syz.0.2358 (pid 13669) Use of int in max_burst socket option deprecated.
[  238.377576][T13669] Use struct sctp_assoc_value instead
[  238.395838][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2357'.
[  238.409963][T13668] netlink: 'syz.2.2357': attribute type 12 has an invalid length.
[  238.415229][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2357'.
[  238.421039][T13668] netlink: 'syz.2.2357': attribute type 12 has an invalid length.
[  238.426287][T13668] syzkaller0: entered promiscuous mode
[  238.428180][T13668] syzkaller0: entered allmulticast mode
[  238.487237][T13678] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2362'.
[  238.490225][T13678] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  238.500535][T13678] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  238.506193][T13678] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  238.657061][T13694] ipt_rpfilter: unknown options
[  238.737807][T13703] netlink: 'syz.0.2372': attribute type 13 has an invalid length.
[  238.742249][T13703] netlink: 'syz.0.2372': attribute type 17 has an invalid length.
[  238.830843][T13703] xfrm0: left promiscuous mode
[  238.832809][T13703] xfrm0: left allmulticast mode
[  238.868972][T13703] veth0_vlan: left allmulticast mode
[  238.877236][T13703] vlan0: left promiscuous mode
[  238.941829][T13703] 8021q: adding VLAN 0 to HW filter on device bond1
[  238.947486][T13703] ip6gre1: left allmulticast mode
[  238.959047][T13703] macsec2: left promiscuous mode
[  238.961205][T13703] macsec3: left promiscuous mode
[  238.968906][T13703] 8021q: adding VLAN 0 to HW filter on device bond2
[  238.975968][T13703] bond3: left allmulticast mode
[  238.978914][T13703] 8021q: adding VLAN 0 to HW filter on device batadv1
[  238.982471][T13703] 8021q: adding VLAN 0 to HW filter on device batadv2
[  238.986801][T13703] virt_wifi0: entered allmulticast mode
[  238.989189][T13703] macsec4: left promiscuous mode
[  238.990776][T13703] macsec4: left allmulticast mode
[  238.992292][T13703] virt_wifi0: left allmulticast mode
[  238.995758][T13703] ip6gre2: left promiscuous mode
[  238.997307][T13703] ip6gre2: left allmulticast mode
[  240.228714][T13703] bond4: left promiscuous mode
[  240.398585][T12419] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  240.420815][T12419] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  240.506905][T13722] netlink: 'syz.1.2376': attribute type 1 has an invalid length.
[  240.536456][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2375'.
[  240.893121][T13760] netlink: 'syz.1.2388': attribute type 1 has an invalid length.
[  240.928454][T13760] 8021q: adding VLAN 0 to HW filter on device bond8
[  241.522881][T13787] netlink: 'syz.2.2394': attribute type 3 has an invalid length.
[  241.670654][T13792] ipt_rpfilter: unknown options
[  242.029012][T13802] ipt_rpfilter: unknown options
[  242.090238][T13807] netlink: 'syz.0.2402': attribute type 61 has an invalid length.
[  242.524853][T13839] ipt_rpfilter: unknown options
[  242.531361][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.539236][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.638369][T13852] xt_cgroup: xt_cgroup: no path or classid specified
[  242.757782][T13858] netlink: 'syz.0.2418': attribute type 4 has an invalid length.
[  242.781337][T13858] netlink: 'syz.0.2418': attribute type 4 has an invalid length.
[  243.241362][T13883] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  243.428097][T13894] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  243.435741][T13894] CPU: 1 UID: 0 PID: 13894 Comm: syz.0.2430 Not tainted syzkaller #0 PREEMPT(full) 
[  243.435762][T13894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.435772][T13894] Call Trace:
[  243.435779][T13894]  <TASK>
[  243.435785][T13894]  dump_stack_lvl+0xe8/0x150
[  243.435806][T13894]  sysfs_warn_dup+0x8e/0xa0
[  243.435818][T13894]  sysfs_do_create_link_sd+0xc0/0x110
[  243.435830][T13894]  device_add_class_symlinks+0x1cf/0x240
[  243.435843][T13894]  device_add+0x475/0xbb0
[  243.435854][T13894]  wiphy_register+0x1dc5/0x2dc0
[  243.435876][T13894]  ? __pfx_wiphy_register+0x10/0x10
[  243.435888][T13894]  ? __pfx_netdev_run_todo+0x10/0x10
[  243.435902][T13894]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  243.435914][T13894]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  243.435928][T13894]  ieee80211_register_hw+0x3d82/0x4a70
[  243.435948][T13894]  ? ieee80211_register_hw+0x1901/0x4a70
[  243.435970][T13894]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  243.435984][T13894]  ? __asan_memset+0x22/0x50
[  243.435994][T13894]  ? __hrtimer_setup+0x1b7/0x260
[  243.436005][T13894]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  243.436017][T13894]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  243.436040][T13894]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  243.436049][T13894]  ? kstrndup+0xbf/0x160
[  243.436061][T13894]  hwsim_new_radio_nl+0xf6a/0x1c00
[  243.436081][T13894]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  243.436094][T13894]  ? rcu_is_watching+0x15/0xb0
[  243.436104][T13894]  ? trace_kmalloc+0x2a/0xf0
[  243.436181][T13894]  ? __nla_parse+0x40/0x60
[  243.436196][T13894]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  243.436206][T13894]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  243.436219][T13894]  genl_family_rcv_msg_doit+0x22a/0x330
[  243.436232][T13894]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  243.436246][T13894]  ? bpf_lsm_capable+0x9/0x20
[  243.436255][T13894]  ? security_capable+0x7e/0x2c0
[  243.436268][T13894]  genl_rcv_msg+0x61c/0x7a0
[  243.436279][T13894]  ? __pfx_genl_rcv_msg+0x10/0x10
[  243.436287][T13894]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  243.436303][T13894]  netlink_rcv_skb+0x232/0x4b0
[  243.436315][T13894]  ? __pfx_genl_rcv_msg+0x10/0x10
[  243.436324][T13894]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  243.436342][T13894]  ? down_read+0x270/0x2e0
[  243.436349][T13894]  ? genl_rcv+0xd/0x40
[  243.436357][T13894]  genl_rcv+0x28/0x40
[  243.436364][T13894]  netlink_unicast+0x75c/0x8e0
[  243.436379][T13894]  netlink_sendmsg+0x813/0xb40
[  243.436394][T13894]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.436407][T13894]  ? aa_sock_msg_perm+0xf1/0x1b0
[  243.436418][T13894]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  243.436431][T13894]  ____sys_sendmsg+0x972/0x9f0
[  243.436443][T13894]  ? __might_fault+0xaf/0x130
[  243.436457][T13894]  ? __pfx_____sys_sendmsg+0x10/0x10
[  243.436472][T13894]  ? import_iovec+0x73/0xa0
[  243.436485][T13894]  ___sys_sendmsg+0x2a5/0x360
[  243.436495][T13894]  ? __lock_acquire+0x6b5/0x2cf0
[  243.436506][T13894]  ? __pfx____sys_sendmsg+0x10/0x10
[  243.436520][T13894]  ? futex_wait+0x2a2/0x390
[  243.436544][T13894]  ? __fget_files+0x2a/0x420
[  243.436554][T13894]  ? __fget_files+0x3a0/0x420
[  243.436568][T13894]  __x64_sys_sendmsg+0x1bd/0x2a0
[  243.436580][T13894]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  243.436596][T13894]  ? fput+0xa0/0xd0
[  243.436608][T13894]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.436617][T13894]  do_syscall_64+0x15f/0xf80
[  243.436630][T13894]  ? trace_irq_disable+0x3b/0x140
[  243.436646][T13894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.436661][T13894] RIP: 0033:0x7f9da839cdd9
[  243.436671][T13894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.436679][T13894] RSP: 002b:00007f9da92dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.436691][T13894] RAX: ffffffffffffffda RBX: 00007f9da8615fa0 RCX: 00007f9da839cdd9
[  243.436697][T13894] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  243.436702][T13894] RBP: 00007f9da8432d69 R08: 0000000000000000 R09: 0000000000000000
[  243.436708][T13894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.436713][T13894] R13: 00007f9da8616038 R14: 00007f9da8615fa0 R15: 00007fff74e5ec68
[  243.436727][T13894]  </TASK>
[  243.690975][T13896] netlink: 'syz.1.2431': attribute type 21 has an invalid length.
[  243.694795][T13896] __nla_validate_parse: 14 callbacks suppressed
[  243.694812][T13896] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2431'.
[  243.820453][T13907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2434'.
[  243.829536][T13907] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2434'.
[  243.834548][T13907] openvswitch: netlink: EtherType 0 is less than min 600
[  243.843815][T13908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2435'.
[  244.030982][T13925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2439'.
[  244.093629][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  244.402106][T13953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2446'.
[  244.404682][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2445'.
[  244.470486][T13962] xfrm0: entered allmulticast mode
[  244.488225][T13962] sctp: [Deprecated]: syz.2.2449 (pid 13962) Use of struct sctp_assoc_value in delayed_ack socket option.
[  244.488225][T13962] Use struct sctp_sack_info instead
[  244.499829][T13962] sctp: [Deprecated]: syz.2.2449 (pid 13962) Use of struct sctp_assoc_value in delayed_ack socket option.
[  244.499829][T13962] Use struct sctp_sack_info instead
[  244.586976][T13966] syzkaller0: entered promiscuous mode
[  244.589187][T13966] syzkaller0: entered allmulticast mode
[  244.813417][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  244.861468][T13973] xt_cgroup: invalid path, errno=-2
[  246.379457][T13977] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  246.482435][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2457'.
[  246.550596][T13991] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2459'.
[  246.693802][T14006] macsec2: entered promiscuous mode
[  246.715169][T14010] ipt_rpfilter: unknown options
[  246.728977][T14012] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2466'.
[  246.859435][T14026] ipt_rpfilter: unknown options
[  246.862783][T14025] ipt_rpfilter: unknown options
[  246.866431][T14023] syzkaller0: entered promiscuous mode
[  246.870479][T14023] syzkaller0: entered allmulticast mode
[  247.098530][T14036] x_tables: duplicate underflow at hook 1
[  247.110596][T14044] netlink: 'syz.0.2479': attribute type 12 has an invalid length.
[  247.281868][T14068] netlink: 'syz.1.2485': attribute type 13 has an invalid length.
[  247.762870][T14121] netlink: 'syz.1.2501': attribute type 1 has an invalid length.
[  247.787515][T14121] 8021q: adding VLAN 0 to HW filter on device bond9
[  247.804606][T14121] vlan0: entered promiscuous mode
[  247.806677][T14121] bond9: entered promiscuous mode
[  247.808834][T14121] vlan0: entered allmulticast mode
[  247.810872][T14121] bond9: entered allmulticast mode
[  247.821476][T14121] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.827546][T14121] bond9: (slave batadv0): making interface the new active one
[  247.830003][T14121] batadv0: entered promiscuous mode
[  247.832413][T14121] batadv0: entered allmulticast mode
[  247.836190][T14121] bond9: (slave batadv0): Enslaving as an active interface with an up link
[  248.749653][T14166] xt_hashlimit: overflow, try lower: 18446744073709551615/32
[  248.769375][T14166] __nla_validate_parse: 10 callbacks suppressed
[  248.769392][T14166] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2513'.
[  248.777433][T14166] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2513'.
[  248.792878][T14169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2514'.
[  248.836052][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2512'.
[  248.911163][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2516'.
[  248.992593][T14183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.995312][T14183] syzkaller0: entered promiscuous mode
[  248.997158][T14183] syzkaller0: entered allmulticast mode
[  249.065339][T14181] tipc: Resetting bearer <eth:syzkaller0>
[  249.083636][T14181] tipc: Disabling bearer <eth:syzkaller0>
[  249.107928][T14198] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2524'.
[  249.282365][T14204] ipt_rpfilter: unknown options
[  249.385461][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2528'.
[  249.757260][T14250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2541'.
[  249.781085][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2540'.
[  249.907800][T14257] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  249.920634][T14257] dvmrp0: entered allmulticast mode
[  250.004959][T14271] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  250.010863][T14271] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  250.021318][T14271] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  250.029768][T14275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2547'.
[  250.040017][T14271] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  250.051495][T14271] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  250.380658][T14305] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  250.612902][T14318] netlink: 'syz.0.2563': attribute type 10 has an invalid length.
[  250.613672][T14317] netlink: 'syz.0.2563': attribute type 10 has an invalid length.
[  250.620024][T14318] syz_tun: entered promiscuous mode
[  250.631049][T14318] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  250.636258][ T7736] syz1: Port: 1 Link DOWN
[  251.266101][T14367] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  251.457989][T14380] netlink: 'syz.1.2581': attribute type 26 has an invalid length.
[  251.461203][T14380] netlink: 'syz.1.2581': attribute type 26 has an invalid length.
[  251.533530][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  251.760057][   T33] audit: type=1800 audit(1778535210.499:4): pid=14387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2584" name="memory.events" dev="tmpfs" ino=4517 res=0 errno=0
[  254.093728][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  254.137204][T14354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  254.230503][T14426] syzkaller0: entered promiscuous mode
[  254.232279][T14426] syzkaller0: entered allmulticast mode
[  255.235894][T14406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  256.035322][T14441] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  256.078275][T14445] bond5: option updelay: invalid value (18446744073709518847)
[  256.080684][T14445] bond5: option updelay: allowed values 0 - 2147483647
[  256.086670][T14445] bond5 (unregistering): Released all slaves
[  256.106095][T14450] __nla_validate_parse: 9 callbacks suppressed
[  256.106110][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2599'.
[  256.120619][T14448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2598'.
[  256.127416][T14448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2598'.
[  256.268480][T14455] bridge0: port 1(erspan0) entered disabled state
[  256.287822][T14465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2604'.
[  256.896047][T14455] bridge2: port 1(veth3) entered disabled state
[  257.245999][ T7764] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  257.249405][ T7764] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 39759 - 0
[  257.252787][ T7764] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  257.258117][ T7764] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  257.261556][ T7764] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 39759 - 0
[  257.272642][ T7764] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  257.279293][ T7764] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  257.286379][ T7764] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 39759 - 0
[  257.298099][ T7764] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  257.305054][ T7764] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  257.318542][ T7764] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 39759 - 0
[  257.325630][ T7764] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  257.342682][T14485] ipt_rpfilter: unknown options
[  257.363244][T14483] lo: Caught tx_queue_len zero misconfig
[  257.420446][T14499] netlink: 'syz.2.2611': attribute type 1 has an invalid length.
[  257.455791][T14505] netlink: 'syz.2.2613': attribute type 2 has an invalid length.
[  257.458316][T14505] netlink: 'syz.2.2613': attribute type 8 has an invalid length.
[  257.460656][T14505] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2613'.
[  257.525659][T14512] ipt_rpfilter: unknown options
[  257.801067][T14543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2625'.
[  257.834125][T14550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2627'.
[  257.998716][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'.
[  258.010361][T14559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2630'.
[  258.025106][ T5620] Bluetooth: hci1: command 0x0406 tx timeout
[  258.068187][T14562] vlan0: entered allmulticast mode
[  258.070406][T14562] bond0: entered allmulticast mode
[  258.159967][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2633'.
[  258.682097][T14595] netlink: 'syz.1.2638': attribute type 1 has an invalid length.
[  259.224815][T14642] lo speed is unknown, defaulting to 1000
[  259.225505][T14641] netlink: 'syz.1.2651': attribute type 1 has an invalid length.
[  259.226970][T14642] lo speed is unknown, defaulting to 1000
[  259.229342][T14641] netlink: 'syz.1.2651': attribute type 1 has an invalid length.
[  259.231876][T14642] lo speed is unknown, defaulting to 1000
[  259.238242][T14642] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  259.245242][T14642] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  259.250594][T14642] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  259.264109][T14642] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98
[  259.282991][T14643] : renamed from lo (while UP)
[  259.290743][T14642]  speed is unknown, defaulting to 1000
[  259.304793][T14642]  speed is unknown, defaulting to 1000
[  259.311747][T14642]  speed is unknown, defaulting to 1000
[  259.790826][T14684] netlink: 'syz.0.2665': attribute type 2 has an invalid length.
[  259.853920][    C1] bridge0: port 1(syz_tun) entered forwarding state
[  259.856628][    C1] bridge0: topology change detected, propagating
[  259.945073][T14690] netlink: 'syz.1.2667': attribute type 1 has an invalid length.
[  259.963632][T14690] 8021q: adding VLAN 0 to HW filter on device bond10
[  260.117792][T14703] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  260.526332][T14720] Bluetooth: MGMT ver 1.23
[  261.075472][   T54] Bluetooth: hci2: link tx timeout
[  261.078556][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  261.139495][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  261.208590][T14742] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  261.285324][T14751] ipt_rpfilter: unknown options
[  261.455842][T14757] netlink: 'syz.0.2688': attribute type 5 has an invalid length.
[  261.875490][T14792] __nla_validate_parse: 20 callbacks suppressed
[  261.875506][T14792] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2697'.
[  261.886278][T14792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2697'.
[  261.900294][T14792] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  261.907283][T14794] syzkaller0: entered promiscuous mode
[  261.910270][T14794] syzkaller0: entered allmulticast mode
[  261.929451][T14799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2700'.
[  261.938937][T14799] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2700'.
[  262.044331][T14810] netlink: 'syz.0.2701': attribute type 19 has an invalid length.
[  262.049039][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'.
[  262.068470][T12419] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  262.072062][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'.
[  262.078910][T12419] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  262.085407][T12419] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  262.093695][T12419] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  262.095981][T14816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2705'.
[  262.228635][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2708'.
[  262.251598][T14824] bond8: option broadcast_neighbor: invalid value (30)
[  262.255192][T14824] bond8 (unregistering): Released all slaves
[  262.585946][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  262.590266][ T5620] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  262.619722][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'.
[  262.667832][T14844] xt_TCPMSS: Only works on TCP SYN packets
[  262.841847][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'.
[  262.858612][T14847] bond5: option broadcast_neighbor: invalid value (30)
[  262.861981][T14847] bond5 (unregistering): Released all slaves
[  263.117571][T14872] ipt_rpfilter: unknown options
[  263.135465][T14869] bond11: option broadcast_neighbor: invalid value (30)
[  263.139943][T14869] bond11 (unregistering): Released all slaves
[  263.227541][T14877] validate_nla: 1 callbacks suppressed
[  263.227554][T14877] netlink: 'syz.1.2726': attribute type 1 has an invalid length.
[  263.231908][T14877] netlink: 'syz.1.2726': attribute type 1 has an invalid length.
[  263.362777][T14889] netlink: 'syz.1.2729': attribute type 8 has an invalid length.
[  263.370046][T14889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.410531][T14893] netlink: 'syz.1.2730': attribute type 1 has an invalid length.
[  263.546527][T14900] bond11: option broadcast_neighbor: invalid value (30)
[  263.550105][T14900] bond11 (unregistering): Released all slaves
[  263.730884][T14913] netlink: 'syz.2.2735': attribute type 1 has an invalid length.
[  263.734458][T14913] netlink: 'syz.2.2735': attribute type 2 has an invalid length.
[  263.911161][T14929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  264.016377][T14934] netlink: 'syz.1.2742': attribute type 8 has an invalid length.
[  264.386303][T14963] netlink: 'syz.0.2752': attribute type 21 has an invalid length.
[  264.508280][T14977] netlink: 'syz.1.2756': attribute type 1 has an invalid length.
[  264.571749][T14983] ipt_rpfilter: unknown options
[  264.631329][T14989] netlink: 'syz.1.2760': attribute type 15 has an invalid length.
[  264.636388][T14989] IPv6: NLM_F_CREATE should be specified when creating new route
[  264.654870][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  264.661032][T14991] wg2: entered allmulticast mode
[  264.726034][T14997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.734478][T14997] xt_addrtype: ipv6 does not support BROADCAST matching
[  264.741860][T14997] openvswitch: netlink: Key type 142 is out of range max 32
[  264.973403][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  267.938539][T15027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  268.083046][T15046] 8021q: adding VLAN 0 to HW filter on device bond8
[  268.107116][T15046] bond8: (slave veth15): Enslaving as an active interface with a down link
[  268.125501][T15046] 8021q: adding VLAN 0 to HW filter on device batadv2
[  268.129756][T15046] bond8: (slave batadv2): making interface the new active one
[  268.133217][T15046] batadv2: entered promiscuous mode
[  268.136222][T15046] bond8: (slave batadv2): Enslaving as an active interface with an up link
[  268.159681][T15046] bond8 (unregistering): (slave veth15): Releasing active interface
[  268.167802][T15046] bond8 (unregistering): (slave batadv2): Releasing active interface
[  268.175533][T15046] bond8 (unregistering): Released all slaves
[  268.284682][T15059] __nla_validate_parse: 17 callbacks suppressed
[  268.284693][T15059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2780'.
[  268.290149][T15059] validate_nla: 2 callbacks suppressed
[  268.290158][T15059] netlink: 'syz.2.2780': attribute type 7 has an invalid length.
[  268.294832][T15059] netlink: 'syz.2.2780': attribute type 8 has an invalid length.
[  268.297247][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2780'.
[  268.309376][T15063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2781'.
[  268.355747][T15070] ipt_rpfilter: unknown options
[  268.435868][T15075] ieee802154 phy1 wpan1: encryption failed: -22
[  268.442378][T15075] ieee802154 phy1 wpan1: encryption failed: -22
[  268.482067][T15080] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2786'.
[  268.585333][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2788'.
[  268.631943][T15086] syzkaller0: entered promiscuous mode
[  268.634834][T15086] syzkaller0: entered allmulticast mode
[  268.814340][T15093] ipt_rpfilter: unknown options
[  268.939430][T15104] netlink: 'syz.1.2795': attribute type 1 has an invalid length.
[  268.941883][T15104] nbd: illegal input index 65545
[  268.989294][T15108] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2797'.
[  269.099832][T15117] syzkaller1: entered promiscuous mode
[  269.103983][T15117] syzkaller1: entered allmulticast mode
[  269.179473][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2803'.
[  269.333113][T15144] netlink: 'syz.0.2809': attribute type 5 has an invalid length.
[  269.367386][T15152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2812'.
[  269.414226][T15158] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2814'.
[  269.479200][T15169] netlink: 'syz.2.2817': attribute type 1 has an invalid length.
[  269.486849][T15171] netlink: 'syz.2.2817': attribute type 1 has an invalid length.
[  269.519064][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2819'.
[  269.522344][T15176] netlink: 'syz.0.2818': attribute type 1 has an invalid length.
[  269.538161][T15175] netlink: 'syz.0.2818': attribute type 1 has an invalid length.
[  269.854226][T15222] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  269.860107][T15222] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  269.862711][T15222] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  270.710311][T15239] syzkaller0: entered promiscuous mode
[  270.712153][T15239] syzkaller0: entered allmulticast mode
[  272.653543][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  273.874677][T15250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  274.000216][T15294] __nla_validate_parse: 3 callbacks suppressed
[  274.000231][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2850'.
[  274.040097][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'.
[  274.064190][T15302] netlink: 'syz.2.2853': attribute type 15 has an invalid length.
[  274.066718][T15302] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2853'.
[  274.069611][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2852'.
[  274.101161][T15309] gre0: Master is either lo or non-ether device
[  274.119108][T15313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2855'.
[  274.124947][T15313] raw_sendmsg: syz.0.2855 forgot to set AF_INET. Fix it!
[  274.129658][T15313] SET target dimension over the limit!
[  274.135616][T15315] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2856'.
[  274.265455][T15328] tipc: New replicast peer: 255.255.255.255
[  274.269408][T15328] tipc: Enabled bearer <udp:syz2>, priority 10
[  274.272246][T15329] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  274.279645][T15328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2861'.
[  274.285053][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2861'.
[  275.180623][T15345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2865'.
[  275.302083][T15363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2870'.
[  275.341491][T15369] ipt_rpfilter: unknown options
[  275.392869][T15372] ipt_REJECT: TCP_RESET invalid for non-tcp
[  275.431295][T15379] syzkaller0: entered promiscuous mode
[  275.433105][T15379] syzkaller0: entered allmulticast mode
[  275.494776][T15381] syzkaller0: entered promiscuous mode
[  275.496839][T15381] syzkaller0: entered allmulticast mode
[  275.696482][T15391] ipt_rpfilter: unknown options
[  276.380484][T15432] netlink: 'syz.0.2894': attribute type 7 has an invalid length.
[  276.384837][T15432] netlink: 'syz.0.2894': attribute type 8 has an invalid length.
[  276.388372][T15432] netlink: 'syz.0.2894': attribute type 8 has an invalid length.
[  276.391621][T15432] netlink: 'syz.0.2894': attribute type 4 has an invalid length.
[  276.394463][T15432] netlink: 'syz.0.2894': attribute type 7 has an invalid length.
[  276.547423][T15448] ipt_rpfilter: unknown options
[  277.264247][T15488] block nbd1: server does not support multiple connections per device.
[  277.271301][T15488] block nbd1: shutting down sockets
[  277.294507][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  277.691928][T15533] netlink: 'syz.1.2923': attribute type 3 has an invalid length.
[  278.139105][T15582] ipt_rpfilter: unknown options
[  278.323166][T15611] ipt_rpfilter: unknown options
[  278.323384][T15612] ipt_rpfilter: unknown options
[  278.416160][T15616] netlink: 'syz.2.2949': attribute type 32 has an invalid length.
[  278.440995][T15616] bond8: option coupled_control: invalid value (12)
[  278.446583][T15616] bond8 (unregistering): Released all slaves
[  278.916032][T15637] IPVS: length: 15 != 8
[  278.978858][T15639] pim6reg1: entered allmulticast mode
[  279.181964][T15647] __nla_validate_parse: 24 callbacks suppressed
[  279.181985][T15647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2961'.
[  279.594325][T15659] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2963'.
[  279.598323][T15655] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2963'.
[  279.710948][T15661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2964'.
[  280.493533][T15611] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  280.493789][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  280.496502][T15611] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  280.894266][T15672] nbd1: detected capacity change from 0 to 63
[  280.906339][   T55] block nbd1: Receive control failed (result -32)
[  280.908178][T12883] block nbd1: Receive control failed (result -32)
[  280.916583][T15442] block nbd1: Dead connection, failed to find a fallback
[  280.920385][T15442] block nbd1: shutting down sockets
[  280.925448][T15442] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.929815][T15442] Buffer I/O error on dev nbd1, logical block 0, async page read
[  280.934598][T15678] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2968'.
[  280.934700][T15442] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.942711][T15442] Buffer I/O error on dev nbd1, logical block 1, async page read
[  280.947222][T15442] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.950172][T15442] Buffer I/O error on dev nbd1, logical block 2, async page read
[  280.957222][T15442] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.960373][T15442] Buffer I/O error on dev nbd1, logical block 3, async page read
[  280.964158][T15442] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.967396][T15442] Buffer I/O error on dev nbd1, logical block 0, async page read
[  280.977095][T15442] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.982210][T15442] Buffer I/O error on dev nbd1, logical block 1, async page read
[  280.985957][T15442] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.989493][T15442] Buffer I/O error on dev nbd1, logical block 2, async page read
[  280.992310][T15442] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.997809][T15442] Buffer I/O error on dev nbd1, logical block 3, async page read
[  281.001670][T15442] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.005385][T15442] Buffer I/O error on dev nbd1, logical block 0, async page read
[  281.008624][T15442] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.011740][T15442] Buffer I/O error on dev nbd1, logical block 1, async page read
[  281.018831][T15442] ldm_validate_partition_table(): Disk read failed.
[  281.023655][T15442] Dev nbd1: unable to read RDB block 0
[  281.028566][T15442]  nbd1: unable to read partition table
[  281.042322][T15442] ldm_validate_partition_table(): Disk read failed.
[  281.047936][T15442] Dev nbd1: unable to read RDB block 0
[  281.055541][T15442]  nbd1: unable to read partition table
[  281.124867][T15686] bond8: option arp_all_targets: invalid value (129)
[  281.128530][T15686] bond8 (unregistering): Released all slaves
[  281.208179][T15691] netlink: 'syz.2.2972': attribute type 3 has an invalid length.
[  281.312481][T15693] ipt_rpfilter: unknown options
[  281.313552][T15611] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  281.318944][T15611] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  281.340268][T15611] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  281.343055][T15611] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  281.479681][T15698] 
[  281.480546][T15698] ======================================================
[  281.482678][T15698] WARNING: possible circular locking dependency detected
[  281.484841][T15698] syzkaller #0 Not tainted
[  281.486365][T15698] ------------------------------------------------------
[  281.488538][T15698] syz.2.2975/15698 is trying to acquire lock:
[  281.490467][T15698] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  281.493383][T15698] 
[  281.493383][T15698] but task is already holding lock:
[  281.495685][T15698] ffff8881112d0260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50
[  281.498463][T15698] 
[  281.498463][T15698] which lock already depends on the new lock.
[  281.498463][T15698] 
[  281.501709][T15698] 
[  281.501709][T15698] the existing dependency chain (in reverse order) is:
[  281.504706][T15698] 
[  281.504706][T15698] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  281.507136][T15698]        lock_sock_nested+0x41/0x100
[  281.508823][T15698]        __inet6_bind+0x30c/0xf60
[  281.510561][T15698]        mptcp_bind+0x110/0x1d0
[  281.512118][T15698]        __sys_bind+0x2e3/0x410
[  281.513610][T15698]        __x64_sys_bind+0x7a/0x90
[  281.515269][T15698]        do_syscall_64+0x15f/0xf80
[  281.516865][T15698]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.518900][T15698] 
[  281.518900][T15698] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  281.521304][T15698]        lock_sock_nested+0x41/0x100
[  281.522927][T15698]        inet_shutdown+0x6a/0x390
[  281.524471][T15698]        nbd_mark_nsock_dead+0x2e9/0x560
[  281.526410][T15698]        sock_shutdown+0x15e/0x260
[  281.527969][T15698]        nbd_clear_sock+0x24/0x170
[  281.529600][T15698]        nbd_config_put+0x2dd/0x580
[  281.531210][T15698]        nbd_genl_connect+0x19d5/0x1cf0
[  281.532896][T15698]        genl_family_rcv_msg_doit+0x22a/0x330
[  281.534747][T15698]        genl_rcv_msg+0x61c/0x7a0
[  281.536365][T15698]        netlink_rcv_skb+0x232/0x4b0
[  281.538002][T15698]        genl_rcv+0x28/0x40
[  281.539438][T15698]        netlink_unicast+0x75c/0x8e0
[  281.541142][T15698]        netlink_sendmsg+0x813/0xb40
[  281.542782][T15698]        ____sys_sendmsg+0x972/0x9f0
[  281.544479][T15698]        ___sys_sendmsg+0x2a5/0x360
[  281.546146][T15698]        __x64_sys_sendmsg+0x1bd/0x2a0
[  281.547863][T15698]        do_syscall_64+0x15f/0xf80
[  281.549484][T15698]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.551487][T15698] 
[  281.551487][T15698] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  281.553784][T15698]        __mutex_lock+0x1a3/0x1550
[  281.555391][T15698]        nbd_queue_rq+0x37b/0x1100
[  281.556968][T15698]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  281.559087][T15698]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  281.561389][T15698]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  281.563362][T15698]        blk_mq_run_hw_queue+0x348/0x4f0
[  281.565056][T15698]        blk_mq_dispatch_list+0xd16/0xe10
[  281.566959][T15698]        blk_mq_flush_plug_list+0x48d/0x570
[  281.569235][T15698]        __blk_flush_plug+0x3ed/0x4d0
[  281.570881][T15698]        __submit_bio+0x28d/0x580
[  281.572439][T15698]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  281.574289][T15698]        block_read_full_folio+0x599/0x830
[  281.576038][T15698]        filemap_read_folio+0x137/0x3b0
[  281.577697][T15698]        do_read_cache_folio+0x358/0x590
[  281.579404][T15698]        read_part_sector+0xb6/0x2b0
[  281.581004][T15698]        adfspart_check_ICS+0xb1/0x960
[  281.582638][T15698]        bdev_disk_changed+0x817/0x1770
[  281.584308][T15698]        blkdev_get_whole+0x380/0x510
[  281.585913][T15698]        bdev_open+0x31e/0xd30
[  281.587362][T15698]        blkdev_open+0x470/0x610
[  281.588883][T15698]        do_dentry_open+0x785/0x14e0
[  281.590472][T15698]        vfs_open+0x3b/0x340
[  281.592076][T15698]        path_openat+0x2e08/0x3860
[  281.593883][T15698]        do_file_open+0x23e/0x4a0
[  281.595701][T15698]        do_sys_openat2+0x113/0x200
[  281.597403][T15698]        __x64_sys_openat+0x138/0x170
[  281.598973][T15698]        do_syscall_64+0x15f/0xf80
[  281.600508][T15698]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.602411][T15698] 
[  281.602411][T15698] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  281.604552][T15698]        __mutex_lock+0x1a3/0x1550
[  281.606112][T15698]        nbd_queue_rq+0xc6/0x1100
[  281.607725][T15698]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  281.609548][T15698]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  281.611578][T15698]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  281.613506][T15698]        blk_mq_run_hw_queue+0x348/0x4f0
[  281.615183][T15698]        blk_mq_dispatch_list+0xd16/0xe10
[  281.616880][T15698]        blk_mq_flush_plug_list+0x48d/0x570
[  281.618635][T15698]        __blk_flush_plug+0x3ed/0x4d0
[  281.620263][T15698]        __submit_bio+0x28d/0x580
[  281.621787][T15698]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  281.623625][T15698]        block_read_full_folio+0x599/0x830
[  281.625371][T15698]        filemap_read_folio+0x137/0x3b0
[  281.627042][T15698]        do_read_cache_folio+0x358/0x590
[  281.628723][T15698]        read_part_sector+0xb6/0x2b0
[  281.630267][T15698]        adfspart_check_ICS+0xb1/0x960
[  281.631905][T15698]        bdev_disk_changed+0x817/0x1770
[  281.633506][T15698]        blkdev_get_whole+0x380/0x510
[  281.635145][T15698]        bdev_open+0x31e/0xd30
[  281.636573][T15698]        blkdev_open+0x470/0x610
[  281.638071][T15698]        do_dentry_open+0x785/0x14e0
[  281.639655][T15698]        vfs_open+0x3b/0x340
[  281.641111][T15698]        path_openat+0x2e08/0x3860
[  281.642634][T15698]        do_file_open+0x23e/0x4a0
[  281.644166][T15698]        do_sys_openat2+0x113/0x200
[  281.645722][T15698]        __x64_sys_openat+0x138/0x170
[  281.647407][T15698]        do_syscall_64+0x15f/0xf80
[  281.649100][T15698]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.651133][T15698] 
[  281.651133][T15698] -> #3 (set->srcu){.+.+}-{0:0}:
[  281.653341][T15698]        __synchronize_srcu+0xca/0x300
[  281.655084][T15698]        elevator_switch+0x1e8/0x7a0
[  281.656715][T15698]        elevator_change+0x2cc/0x450
[  281.658408][T15698]        elevator_set_default+0x36c/0x430
[  281.660224][T15698]        blk_register_queue+0x3e9/0x4e0
[  281.661958][T15698]        __add_disk+0x677/0xd50
[  281.663506][T15698]        add_disk_fwnode+0xfb/0x480
[  281.665123][T15698]        nbd_dev_add+0x72c/0xb50
[  281.666711][T15698]        nbd_init+0x168/0x1f0
[  281.668239][T15698]        do_one_initcall+0x250/0x870
[  281.669916][T15698]        do_initcall_level+0x104/0x190
[  281.671596][T15698]        do_initcalls+0x59/0xa0
[  281.673064][T15698]        kernel_init_freeable+0x2a6/0x3e0
[  281.674706][T15698]        kernel_init+0x1d/0x1d0
[  281.676176][T15698]        ret_from_fork+0x514/0xb70
[  281.677775][T15698]        ret_from_fork_asm+0x1a/0x30
[  281.679411][T15698] 
[  281.679411][T15698] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  281.681694][T15698]        __mutex_lock+0x1a3/0x1550
[  281.683227][T15698]        elevator_change+0x1b3/0x450
[  281.684809][T15698]        elevator_set_none+0xb5/0x140
[  281.686450][T15698]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  281.688471][T15698]        nbd_start_device+0x17f/0xb10
[  281.690205][T15698]        nbd_genl_connect+0x165b/0x1cf0
[  281.691900][T15698]        genl_family_rcv_msg_doit+0x22a/0x330
[  281.693721][T15698]        genl_rcv_msg+0x61c/0x7a0
[  281.695230][T15698]        netlink_rcv_skb+0x232/0x4b0
[  281.696796][T15698]        genl_rcv+0x28/0x40
[  281.698235][T15698]        netlink_unicast+0x75c/0x8e0
[  281.699954][T15698]        netlink_sendmsg+0x813/0xb40
[  281.701678][T15698]        ____sys_sendmsg+0x972/0x9f0
[  281.703300][T15698]        ___sys_sendmsg+0x2a5/0x360
[  281.704832][T15698]        __x64_sys_sendmsg+0x1bd/0x2a0
[  281.706448][T15698]        do_syscall_64+0x15f/0xf80
[  281.707992][T15698]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.710038][T15698] 
[  281.710038][T15698] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  281.712728][T15698]        blk_alloc_queue+0x546/0x680
[  281.714376][T15698]        __blk_mq_alloc_disk+0x197/0x390
[  281.716142][T15698]        nbd_dev_add+0x499/0xb50
[  281.717663][T15698]        nbd_init+0x168/0x1f0
[  281.719178][T15698]        do_one_initcall+0x250/0x870
[  281.720849][T15698]        do_initcall_level+0x104/0x190
[  281.722543][T15698]        do_initcalls+0x59/0xa0
[  281.724107][T15698]        kernel_init_freeable+0x2a6/0x3e0
[  281.725860][T15698]        kernel_init+0x1d/0x1d0
[  281.727463][T15698]        ret_from_fork+0x514/0xb70
[  281.729183][T15698]        ret_from_fork_asm+0x1a/0x30
[  281.730857][T15698] 
[  281.730857][T15698] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  281.733010][T15698]        __lock_acquire+0x15a5/0x2cf0
[  281.734715][T15698]        lock_acquire+0x106/0x350
[  281.736278][T15698]        fs_reclaim_acquire+0x71/0x100
[  281.737998][T15698]        __kmalloc_cache_noprof+0x40/0x660
[  281.739790][T15698]        tcp_sendmsg_fastopen+0x1de/0x5e0
[  281.741552][T15698]        tcp_sendmsg_locked+0x4a88/0x5360
[  281.743265][T15698]        tcp_sendmsg+0x2f/0x50
[  281.744748][T15698]        ____sys_sendmsg+0x5c7/0x9f0
[  281.746388][T15698]        ___sys_sendmsg+0x2a5/0x360
[  281.748037][T15698]        __x64_sys_sendmsg+0x1bd/0x2a0
[  281.749836][T15698]        do_syscall_64+0x15f/0xf80
[  281.751309][T15698]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.753145][T15698] 
[  281.753145][T15698] other info that might help us debug this:
[  281.753145][T15698] 
[  281.756235][T15698] Chain exists of:
[  281.756235][T15698]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  281.756235][T15698] 
[  281.760118][T15698]  Possible unsafe locking scenario:
[  281.760118][T15698] 
[  281.762342][T15698]        CPU0                    CPU1
[  281.763947][T15698]        ----                    ----
[  281.765626][T15698]   lock(k-sk_lock-AF_INET6);
[  281.767080][T15698]                                lock(sk_lock-AF_INET6);
[  281.769175][T15698]                                lock(k-sk_lock-AF_INET6);
[  281.771524][T15698]   lock(fs_reclaim);
[  281.772923][T15698] 
[  281.772923][T15698]  *** DEADLOCK ***
[  281.772923][T15698] 
[  281.775651][T15698] 1 lock held by syz.2.2975/15698:
[  281.777302][T15698]  #0: ffff8881112d0260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50
[  281.780283][T15698] 
[  281.780283][T15698] stack backtrace:
[  281.782128][T15698] CPU: 0 UID: 0 PID: 15698 Comm: syz.2.2975 Not tainted syzkaller #0 PREEMPT(full) 
[  281.782141][T15698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.782149][T15698] Call Trace:
[  281.782156][T15698]  <TASK>
[  281.782162][T15698]  dump_stack_lvl+0xe8/0x150
[  281.782181][T15698]  print_circular_bug+0x2e1/0x300
[  281.782196][T15698]  check_noncircular+0x12e/0x150
[  281.782209][T15698]  __lock_acquire+0x15a5/0x2cf0
[  281.782222][T15698]  ? __lock_acquire+0x6b5/0x2cf0
[  281.782232][T15698]  ? __lock_acquire+0x6b5/0x2cf0
[  281.782241][T15698]  ? __kmalloc_cache_noprof+0x40/0x660
[  281.782253][T15698]  lock_acquire+0x106/0x350
[  281.782261][T15698]  ? __kmalloc_cache_noprof+0x40/0x660
[  281.782274][T15698]  fs_reclaim_acquire+0x71/0x100
[  281.782285][T15698]  ? __kmalloc_cache_noprof+0x40/0x660
[  281.782295][T15698]  __kmalloc_cache_noprof+0x40/0x660
[  281.782307][T15698]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  281.782317][T15698]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  281.782329][T15698]  tcp_sendmsg_fastopen+0x1de/0x5e0
[  281.782341][T15698]  tcp_sendmsg_locked+0x4a88/0x5360
[  281.782351][T15698]  ? tcp_sendmsg_locked+0x331/0x5360
[  281.782361][T15698]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  281.782373][T15698]  ? finish_task_switch+0x41f/0xbe0
[  281.782381][T15698]  ? lockdep_hardirqs_on+0x7a/0x110
[  281.782393][T15698]  ? __lock_acquire+0x6b5/0x2cf0
[  281.782406][T15698]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  281.782416][T15698]  ? tcp_sendmsg+0x21/0x50
[  281.782424][T15698]  ? __local_bh_enable_ip+0xd0/0x130
[  281.782434][T15698]  tcp_sendmsg+0x2f/0x50
[  281.782443][T15698]  ____sys_sendmsg+0x5c7/0x9f0
[  281.782456][T15698]  ? __might_fault+0xaf/0x130
[  281.782467][T15698]  ? __pfx_____sys_sendmsg+0x10/0x10
[  281.782478][T15698]  ? import_iovec+0x73/0xa0
[  281.782491][T15698]  ___sys_sendmsg+0x2a5/0x360
[  281.782501][T15698]  ? __lock_acquire+0x6b5/0x2cf0
[  281.782509][T15698]  ? __pfx____sys_sendmsg+0x10/0x10
[  281.782521][T15698]  ? futex_wait+0x2a2/0x390
[  281.782536][T15698]  ? __fget_files+0x2a/0x420
[  281.782546][T15698]  ? __fget_files+0x3a0/0x420
[  281.782556][T15698]  __x64_sys_sendmsg+0x1bd/0x2a0
[  281.782567][T15698]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  281.782579][T15698]  ? rcu_is_watching+0x15/0xb0
[  281.782590][T15698]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.782598][T15698]  do_syscall_64+0x15f/0xf80
[  281.782609][T15698]  ? trace_irq_disable+0x3b/0x140
[  281.782624][T15698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.782634][T15698] RIP: 0033:0x7f01b719cdd9
[  281.782645][T15698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.782652][T15698] RSP: 002b:00007f01b7f87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  281.782668][T15698] RAX: ffffffffffffffda RBX: 00007f01b7415fa0 RCX: 00007f01b719cdd9
[  281.782676][T15698] RDX: 0000000020040814 RSI: 00002000000000c0 RDI: 0000000000000005
[  281.782682][T15698] RBP: 00007f01b7232d69 R08: 0000000000000000 R09: 0000000000000000
[  281.782687][T15698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  281.782693][T15698] R13: 00007f01b7416038 R14: 00007f01b7415fa0 R15: 00007fff18ac27e8
[  281.782703][T15698]  </TASK>
